Which THREE capabilities are available with the Oracle Cloud Infrastructure (OCI) DNS service?

Creating and managing WAF rules

Creating and managing Identity Access Management (IAM) policies

Which Oracle Cloud Infrastructure (OCI) Identity and Access Management (IAM) policy is invalid?

Allow any-group A-Developers to create volumes in compartment Project-A

Allow dynamic-group FrontEnd to manage instance-family in compartment Project-A

Allow any-user to inspect users in tenancy

Allow group A-Admins to manage all-resources in compartment Project-A

As a solution architect, you are showcasing the Oracle Cloud Infrastructure (OCI) Object Storage feature about Object Versioning to a customer. Which statement is true regarding OCI Object Storage Versioning?

Object Versioning is disabled on a bucket by default.

Objects are physically deleted from a bucket when versioning is enabled.

A bucket that is versioning-enabled can and will always have the latest version of the object in the bucket.

Object Versioning does not provide data protection against accidental or malicious object update, overwrite, or deletion.

You have three compartments: ProjectA, ProjectB, and ProjectC. For each compartment, there is an admin group set up: A-Admins, B-Admins, and C-Admins. Each admin group has full access over their respective compartments as shown in the graphic below. Your organization has set up a tag namespace, EmployeeGroup.Role and all your admin groups are tagged with a value of 'Admin'. You want to set up a Test compartment for members of the three projects to share. You also need to provide admin access to all three of your existing admin groups. Which policy would you write to accomplish this task?

Allow any-user to manage all-resources in compartment Test where request.principal.group .tag.EmployeeGroup.Role='Admin'

Allow all-group to manage all-resources in compartment Test where request.principal.group .tag.EmployeeGroup.Role='Admin'

Allow dynamic-group to manage all-resources in compartment Test where request.principal.group .tag.EmployeeGroup.Role='Admin'

Allow group any-group to manage all-resources in compartment Test where request.principal.group .tag.EmployeeGroup.Role='Admin'

Which TWO predefined service names can you use when connecting to an Oracle Cloud Infrastructure (OCI) Autonomous Data Warehouse?

High for the highest level of resources to process each SQL statement.

Medium for a lower level of resources to process each SQL statement.

TP for a connection service when you do not want to run with parallelism.

TPUrgent for a connection service when you do want to run with parallelism.

You want to create a policy to allow the NetworkAdmins group to manage Virtual Cloud Network (VCN) in compartment C. You want to attach this policy to the tenancy. The compartment hierarchy is shown below. Which policy statement can be used to accomplish this task?

Allow group NetworkAdmins to manage virtual-network-family in compartment A:B:C

Allow group NetworkAdmins to manage virtual-network-family in compartment B:C

Allow group NetworkAdmins to manage virtual-network-family in compartment C

Allow group NetworkAdmins to manage virtual-network-family in tenancy

You are in the process of migrating several legacy applications from on-premises to Oracle Cloud Infrastructure (OCI). The current servers are already virtualized. However, you notice that the version of CentOS currently running does not align with any of the Oracle-provided compute images. How would you migrate your existing virtual server images to OCI?

Export your current image in the QCOW2 format and copy to an Object Storage bucket. Import it as a custom image. Select emulated mode to ensure compatibility with legacy drivers.

Export your current image in the VMDK format and copy to an Object Storage bucket. Import it as a custom image. Select native mode to ensure the best possible performance.

Export your current image in the VDI format and copy to an Object Storage bucket. Import it as a custom image. Select native modeto ensure the best possible performance.

Export your current image in the QED format and copy to an Object Storage bucket. Import it as a custom image. Select emulated modeto ensure compatibility with legacy drivers.

Your DevOps team needs to interconnect the on-premises network to the Oracle Cloud Infrastructure (OCI) resources, such as a managed database that resides in a private subnet. They indicate that they have a low budget and their bandwidth requirements are minimal, so you decide that a site-to-site VPN is the best option. They provide you with their router public IP address. You need to create an object in OCI that represents this router. Which object would you create?

Customer Premises Equipment (CPE)

Virtual Network Interface Card (vNIC)

Which statement is TRUE about delegating an existing domain to the Oracle Cloud Infrastructure (OCI) DNS service?

Domains can be delegated to OCI DNS from the Domain Registrar’s self-service portal.

Domains can be delegated to OCI DNS via FastConnect partners.

Domains can be delegated to OCI DNS from the OCI Marketplace.

Domains can be self-delegated to OCI DNS from its own service portal.

All domains can be retrieved to OCI DNS via DYN.

As a network architect you have deployed a public subnet on your Virtual Cloud Network (VCN) with this security list: Attached Picture You have also created a network security group (NSG) as shown in the table here, and assigned it to your bastion host: Attached Picture You have confirmed that routing is correct but when you SSH to the VM from your home over the Internet you are unable to connect. What could be the problem?

SSH traffic is not allowed in the security list nor on the NSG from the Internet.

User will be able to SSH to the VM from the Internet as SSH is open on the NSG.

The public subnet does not have a route rule to the Internet Gateway.

Internet traffic should be allowed only on the NSG.

Which statement is true about File System Replication in Oracle Cloud Infrastructure (OCI)?

You can replicate the data in one file system to another file system in the same region or a different region.

You can replicate the data in one file system to another file system only in the same region.

Only a file system that has been exported can be used as a target file system.

You cannot specify a replication interval when you create the replication resource.

You are a system administrator of your company and you are managing a complex environment consisting of compute instances running Oracle Linux on Oracle Cloud Infrastructure (OCI). It's your task to apply all the latest kernel security updates to all instances. Which OCI service will allow you to complete this task?

OCI Security Zones to achieve automatic security updates

OCI Cloud Guard to monitor and install the security updates

You have objects stored in an OCI Object Storage bucket that you want to share with a partner company. You decide to use pre-authenticated requests to grant access to the objects. Which statement is true about pre-authenticated requests?

You cannot edit a pre-authenticated request.

Deleting a pre-authenticated request does not revoke user access to the associated bucket or object.

You need to provide your OCI credentials to the partner company.

Pre-authenticated requests can be used to delete buckets or objects.

Which TWO statements are TRUE about restoring a volume from a block volume backup in the Oracle Cloud Infrastructure (OCI) Block Volume service?

You can restore a volume to any availability domain within the same region where the backup is stored.

You can restore a block volume backup to a larger volume size.

You can restore only one volume from a manual block volume backup.

You can only restore a volume to the same availability domain in which the original block volume resides.

You can restore a volume from any full volume backup but not from an incremental backup.

Which statement accurately describes the key features and benefits of OCI Confidential Computing?

It encrypts and isolates in-use data and the applications processing that data, thereby preventing unauthorized access or modification.

It optimizes network performance and reduces latency through advanced routing algorithms and caching mechanisms.

It enables users to securely store and retrieve data by using distributed file systems, ensuring high availability and fault tolerance.

It provides automatic scalability and load balancing capabilities, which allow seamless integration with other cloud providers.

You created a virtual cloud network (VCN) with three private subnets. Two of the subnets contain application servers and the third subnet contains a DB System. The application requires a shared file system, therefore you have provisioned one using the file storage service (FSS). You have also created the corresponding mount target in one of the application subnets. The VCN security lists are properly configured so that the application servers can access FSS. The security team changed the settings for the DB System to have read-only access to the file system. However when they test it, they are unable to access FSS. How would you allow access to FSS?

Modify the security list associated with the subnet where the mount target resides. Change the ingress rules corresponding to the DB System subnet to be stateful.

Create an NFS export option that allows READ_ONLY access where the source is the CIDR range of the DB System subnet.

Create an instance principal for the DB System. Write an Identity and Access Management (IAM) policy that allows the instance principal read-only access to the file storage service.

Modify the security list associated with the subnet where the mount target resides. Change the ingress rules corresponding to the DB System subnet to be stateless.

Which of the following statements is true about the Oracle Cloud Infrastructure (OCI) Object Storage server-side encryption?

Encryption is enabled by default and cannot be turned off.

Encryption of data encryption keys with a master encryption key is optional.

Each object in a bucket is always encrypted with the same data encryption key.

Customer-provided encryption keys are always stored in the OCI Vault service.

You need to set up instance principals so that an application running on an instance can call Oracle Cloud Infrastructure (OCI) public services, without the need to configure user credentials. A developer in your team has already configured the application built using an OCI SDK to authenticate using the instance principals provider. Which is NOTa necessary step to complete this set up?

Generate Auth Tokens to enable instances in the dynamic group to authenticate with APIs.

Create a dynamic group with matching rules to specify which instances can make API calls against services.

Create a policy granting permissions to the dynamic group to access services in your compartment or tenancy.

Deploy the application and the SDK to all the instances that belong to the dynamic group.

Which statement is TRUE about patching an Oracle Cloud Infrastructure (OCI) DB System?

Once you pre-check the patches for your database, you can decide to apply the patches immediately or schedule a time to apply the patches.

There is no automation with patching. You need to check for patches and manually schedule when to apply the patches.

Once you pre-check the patches for your database, the system automatically applies the patches.

Patching is automatically pre-checked and applied to the database.

You are using a custom application with third-party APIs to manage the application and data hosted in an Oracle Cloud Infrastructure (OCI) tenancy. Although your third-party APIs do not support OCI’s signature-based authentication, you want them to communicate with OCI resources. Which authentication option should you use to ensure this?

SSH Key Pair with 2048-bit algorithm

Which database option in Oracle Cloud Infrastructure (OCI) provides Oracle Active Data Guard?

Enterprise Edition Extreme Performance

Enterprise Edition High Performance

A recently hired network administrator has been given the task of removing SSH permissions from all compute instances in the company’s tenancy. She finds all Virtual Cloud Networks (VCNs) in the tenancy using Tenancy Explorer. She removes port 22 from the Security Lists in all VCNs. After she completes the task, the very first compute instance that she tests SSH against, allows her to still SSH into it. Why is that?

The VNIC of that compute instance is attached to a Network Security Group (NSG) that has a stateful ingress rule for all protocols on source CIDR 0.0.0.0/0.

The VCN where that compute instance resides still has a route rule that allows port 22.

The VCN where that compute instance resides still has an Internet Gateway.

The VNIC of that compute instance is attached to a Cluster Network that has a stateful ingress rule for all protocols on source CIDR 0.0.0.0/0.

You have a high-demand web application running on Oracle Cloud Infrastructure (OCI). Your tenancy administrator has set up a schedule-based autoscaling policy on instance pool with an initial size of 5 instances for the application. Policy 1: Target pool size:10 instances Execution time:8:30 a.m. on every Monday through Friday, in every month, in every year Cron expression:0 30 8 ? MON-FRI Which statement accurately explains the goal of this policy?

Goal: A recurring daily schedule. On weekday mornings at 8.30 a.m., scale out to 10 instances.

Goal: A one-time schedule with only one scaling out event. At 8:30 a.m., on December 31, 2021, scale the instance pool to 10 instances from 5.

Goal: A recurring monthly schedule. On all days of the month, set the initial pool size to 5 instances. At 8.30 a.m., on every day of the month, scale out to 10 instances.

Goal: A recurring weekly schedule. On all days of the week at 8.30 a.m., scale out the pool to 10 instances from the initial size of 5.

In which two ways can Oracle Security Zones assist with the cloud security shared responsibility model?

Encrypt storage resources with a customer-managed key.

Deny public access to Oracle Cloud Infrastructure resources, such as databases and object storage buckets.

Allow access to an unsecured compartment, which is moved from a standard compartment.

Add or move a standard compartment to a highly secured security zone compartment.

Oracle Cloud OCI 2023 Architect Associate 1Z0-1072-23 Part 2

Authored by Verticalnet Crisil

Professional Development

Used 3+ times

Oracle Cloud OCI 2023 Architect Associate 1Z0-1072-23 Part 2

AI Actions

Add similar questions

Adjust reading levels

Convert to real-world scenario

Translate activity

More...

Content View

Student View

40 questions

Show all answers

MULTIPLE CHOICE QUESTION

1 min • 1 pt

Your company sells services to photographers where patrons can preview the photos that they want prints for. To avoid unauthorized copies, the sample photos have lower resolution and are watermarked. The photos are processed after they are uploaded. The process is fast but not immediate. It creates samples and sends them to storage outside of the instances.Which type of instance is ideal for a process like this; short lived and one that keeps the cost low?

Preemptible instances

Spot instances

On-demand instances

Burstable instances

MULTIPLE SELECT QUESTION

1 min • 1 pt

Which TWO statements are TRUE about Public IP addresses in Oracle Cloud Infrastructure (OCI)?

Public IP addresses can be ephemeral or reserved.

You must use OCI provided public IP addresses. You cannot bring your own IP addresses to OCI.

By default, an instance in a public subnet has one primary public IP address.

You can assign a given instance multiple public IPs across one or more VNICs.

MULTIPLE SELECT QUESTION

1 min • 1 pt

Your IT team has asked you to provision an Autonomous Database in Oracle Cloud Infrastructure (OCI), but they want it to operate similar to what you have currently on-premises. What are the TWO prerequisites for successfully deploying an Autonomous Dedicated Database in OCI?

Autonomous Container Database

Object Storage

Exadata Infrastructure

Identity and Access Management (IAM) Policies

MULTIPLE CHOICE QUESTION

1 min • 1 pt

Which of the following statements is true about cloning a volume in the Oracle Cloud Infrastructure (OCI) Block Volume service?

You need to detach a volume before cloning it.

Creating a clone takes longer than creating a backup of a volume.

You can clone a volume to another region.

You can change the block volume size when cloning a volume.

MULTIPLE CHOICE QUESTION

1 min • 1 pt

You just got a last minute request to create a set of instances in Oracle Cloud Infrastructure (OCI). The configuration and installed software are identical for every instance, and you already have a running instance in your OCI tenancy.Which image option allows you to achieve this task with the least amount of effort?

Bring your own image and use it as a template for the new instances.

Select an image from the OCI Marketplace.

Use Oracle-provided images and customize the installation using a third-party tool.

Create a custom image and use it as a template for the new instances.

MULTIPLE CHOICE QUESTION

1 min • 1 pt

Which is NOT a valid action within the Oracle Cloud Infrastructure (OCI) Block Volume service?

Expanding an existing volume in place with offline resizing.

Restoring from a volume backup to a larger volume.

Attaching a block volume to an instance in a different availability domain.

Cloning an existing volume to a new, larger volume.

MULTIPLE SELECT QUESTION

1 min • 1 pt

When creating an Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN) with the VCN wizard, which THREE gateways are created automatically?

Internet Gateway

Local Peering Gateway

NAT Gateway

Bastion Host

Service Gateway

Access all questions and much more by creating a free account

Create resources

Host any resource

Get auto-graded reports

Continue with Google

Continue with Email

Continue with Classlink

Continue with Clever

or continue with

Microsoft

Apple

Others

Already have an account?

Similar Resources on Wayground

45 questions

NISEC - 2025 Screening Exam

Quiz

•

Professional Development

40 questions

ITIL4_Bigtest#7

Quiz

•

Professional Development

40 questions

C&SE PRE-KNOWLEDGE SURVEY (A+ 1102-CORE 2)

Quiz

•

University - Professi...

35 questions

Philippine Electrical Code (PEC-1A)

Quiz

•

Professional Development

40 questions

Java Quiz

Quiz

•

Professional Development

40 questions

M20 2023-01

Quiz

•

Professional Development

45 questions

SAFe 6.0 Agility - Practice Test

Quiz

•

Professional Development

40 questions

OS Quiz to Win

Quiz

•

Professional Development

Popular Resources on Wayground

20 questions

"What is the question asking??" Grades 3-5

Quiz

•

1st - 5th Grade

20 questions

“What is the question asking??” Grades 6-8

Quiz

•

6th - 8th Grade

10 questions

Fire Safety Quiz

Quiz

•

12th Grade

20 questions

Equivalent Fractions

Quiz

•

3rd Grade

34 questions

STAAR Review 6th - 8th grade Reading Part 1

Quiz

•

6th - 8th Grade

20 questions

“What is the question asking??” English I-II

Quiz

•

9th - 12th Grade

20 questions

Main Idea and Details

Quiz

•

5th Grade

47 questions

8th Grade Reading STAAR Ultimate Review!

Quiz

•

8th Grade

Discover more resources for Professional Development

16 questions

Parallel, Perpendicular, and Intersecting Lines

Quiz

•

KG - Professional Dev...

20 questions

Block Buster Movies

Quiz

•

10th Grade - Professi...

21 questions

Illinois Science Assessment Practice

Quiz

•

Professional Development