Infra Quiz

Which statement is true about File System Replication in Oracle Cloud Infrastructure (OCI)?

• Only a filesystem that has been exported can be used as a target filesystem.

• You cannot specify a replication interval when you create the replication resource.

• You can replicate the data in one filesystem to another filesystem only in the same region.

• You can replicate the data in one filesystem to another filesystem in the same region or a different region.

You create a filesystem and then add a 1GB file. You then take a snapshot of the file system. After the hourly update cycle is complete, the total metered Bytes shown by the File Storage service remains at 1 GB. You then overwrite the first 0.5 GB of the file. What would be the total metered Bytes shown by the File Storage service after the hourly update cycle is complete?

• 0.5 GB

• 2.5 GB

• 1 GB

• 1.5 GB

You want to set up a Test compartment for members of the three projects to share. You also need to provide admin access to all three of your existing admin groups. Which policy would you write to accomplish this task?

• Allow any-user to manage all-resources in compartment Test where request.principal.group.tag.EmployeeGroup.Role='Admin'

• Allow all-group to manage all-resources in compartment Test where request.principal.group.tag.EmployeeGroup.Role='Admin'

• Allow dynamic-group to manage all-resources in compartment Test where request.principal.group.tag.EmployeeGroup.Role='Admin'

• Allow group any-group to manage all-resources in compartment Test where request.principal.group.tag.EmployeeGroup.Role='Admin'

You need to set up instance principals so that an application running on an instance can call Oracle Cloud Infrastructure (OCI) public services, without the need to configure user credentials or a configuration file. A developer in your team has already configured the application built using an OCI SDK to authenticate using the instance principals provider. Which is NOT a necessary step to complete this setup?

• Generate Auth Tokens to enable instances in the dynamic group to authenticate with APIs.

• Create a policy granting permissions to the dynamic group to access services in your compartment or tenancy.

• Deploy the application and the SDK to all the instances that belong to the dynamic group.

• Create a dynamic group with matching rules to specify which instances can make API calls against services.

What are the two types of capture filters that can be created for network monitoring?

• Flow log capture filters and VTAP capture filters

• VTAP capture filters and network capture filters

• Flow log capture filters and packet capture filters

• Flow control capture filters and traffic capture filters

Which Oracle Cloud Infrastructure (OCI) Identity and Access Management (IAM) policy is invalid?

• Allow group 'Default'/'A-Developers' to create volumes in compartment Project-A

• Allow any-user to inspect users in tenancy

• Allow group 'Default'/'A-Admins' to manage all-resources in compartment Project-A

• Allow dynamic-group 'Default'/'FrontEnd' to manage instance-family in compartment Project-A

By default, OCI IAM policies follow the principle of least privilege. What does this principle mean in the context of policy creation?

• Policies should be identical for all users within a tenancy.

• Policies should grant all possible permissions to simplify access control.

• Policies should be written in a complex and technical manner to enhance security.

• Policies should provide only the minimum set of permissions required for users to perform their tasks effectively.

Which TWO statements about the Oracle Cloud Infrastructure (OCI) File Storage Service are accurate?

• Customer can encrypt data in their filesystem using their own Vault encryption key.

• Communication with filesystems in a mount target is encrypted via HTTPS.

• Customer can encrypt the communication to a mount target via export options.

• Filesystems use Oracle-managed keys by default.

• Mount targets use Oracle-managed keys by default.

You have an instance running in Oracle Cloud Infrastructure (OCI) that cannot be live-migrated during an infrastructure maintenance event. OCI schedules a maintenance due date within 14 to 16 days and sends you a notification. What would happen if you choose not to proactively reboot the instance before the scheduled maintenance due date?

• The instance will get terminated.

• The instance is either reboot-migrated or rebuilt in place for you.

• You will receive another notification to reboot within the next 14 days.

• You will receive another notification to reboot within the next 7 days.

You are managing Oracle Cloud Infrastructure (OCI) with several instances and attached block volumes. To optimize performance and cost-efficiency, you consider enabling the detached volume performance autotuning feature in the Block Volume service. What happens to the performance level of a volume when it is detached from an instance?

• The performance level is adjusted to Higher Performance.

• The performance level is adjusted to Lower Cost (0 VPUs/GB).

• The performance level remains unchanged.

• The performance level is adjusted to Balanced.