Worksheets1072_2
Total questions: 40
Worksheet time: 24mins
You create an autoscaling configuration of Linux compute instances in Oracle Cloud Infrastructure (OCI). You noticed that your application is running slow.
After checking your compute instances, you noticed that autoscaling is not launching additional instances, even though the existing compute instances already have high memory usage. How can you resolve this issue?
Modify the scaling policy to monitor memory usage and scale up the number of instances when it meets the threshold.
Modify the scaling policy to monitor CPU usage and scale up the number of instances when it meets the threshold.
Install the monitoring agent to all compute instances which will trigger the autoscaling group.
Install OCI SDK in all compute instances and create a script that will trigger the autoscaling event if there is high memory usage
You developed a microservices based application that runs on Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE). You want to provide access to this cluster to other team members.
What should you do to provide access to this cluster using as fewest steps as possible?
Create a group in OCI Infrastructure Access Management (IAM). Create a policy to grant access to the OKE cluster. Other team members should use OCI Cloud Shell to generate the kubeconfig into their own cloud shell environment and access the cluster using kubectl from cloud shell.
Create a group in OCI Infrastructure Access Management (IAM). Create a policy to grant access to the OKE cluster. Create individual users and access token for each team member. Other team members should use OCI Cloud Shell to generate the kubeconfig into their own cloud shell environment and access the cluster using kubectl from cloud shell
Create a group in OCI Infrastructure Access Management (IAM). Create a policy to grant access to the OKE cluster. Create a cluster role and cluster role binding to provide access to the cluster for each team member. Other team members should install oci cli and kubectl locally on their laptop. Use the oci cli to generate the kubeconfig and use kubectl to access the cluster.
Create a group in OCI Infrastructure Access Management (IAM). Create a policy to grant access to the OKE cluster. Other team members should install oci cli and kubectl locally on their laptop. Use the oci cli to generate the kubeconfig and use kubectl to access the cluster
You have been notified of an application failure indicating that one or more of the Oracle Cloud Infrastructure (OCI) resources have become unavailable. After scanning the Compute and Database consoles, you notice that one of the DB Systems is missing.
What would you do to identify the reason for this missing resource?
Navigate to the Audit console and search the previous 24 hours for all DELETE request actions to get a list of any resource that was deleted in the past 24 hours.
Navigate to the Audit console and search the previous 24 hours for all the GET request actions to get a list of every event that occurred in the past 24 hours.
View the service limits associated with your account to ensure that you have not exceeded the allowable number of DB Systems in your tenancy
Create a serial console connection to the DB System that does not appear in the management console. Connect to the serial console connection, and then review the system logs under /var/log/messages.
Which two statements are true when Oracle Data Guard is configured (using the Console) between two Virtual Machine DB Systems deployed in Oracle Cloud Infrastructure? (Choose two.)
Primary is a 1-node RAC DB system and Standby is a 2-node RAC DB system.
Primary is a 2-node RAC DB system and Standby is a 2-node RAC DB system.
Primary is a 1-node RAC DB system and Standby is a 1-node RAC DB system.
Primary is a 2-node RAC DB system and Standby is a 1-node RAC DB system.
Primary is a Bare Metal DB system and Standby is a 1-node RAC DB system.
You are deploying a highly available web application In Oracle Cloud Infrastructure and have decided to use a public load balancer. The back-end web servers will be distributed across all three availability domains (ADs).
How many subnets should you create to deliver a secure, highly available application?
two subnets in total; one regional private subnet to host your back-end web servers and one regional public subnet to host your public load load balancer
two subnets in total; one regional public subnet to host your back-end web servers and one regional private subnet to host your public load load balancer
three subnets in total; one regional public subnet to host your back-end web servers and two AD specific private subnets to host your private load load balancer.
one subnet in total; one regional private subnet to host your back-end web servers and your public load balancer
You have hired a new employee to run reports from the Autonomous Data Warehouse (ADW) and are not confident in their SQL writing ability. Into which consumer group will you assign this individual to minimize the impact of their code?
Lowest
Medium
Highest
High
Low
You are managing a tier-1 OLTP application on an Autonomous Transaction Processing (ATP) database. Your business needs to run hourly batch processes on this ATP database that may consume more CPUs than what is available on the server.
How can you limit these batch processes to not interfere with the OLTP transactions?
Configure ATP resource management rules to change CPU/IO shares for the consumer group of batch processes
Copy OLTP data into new tables in a new table space and run batch processes against these new tables.
Disable automated backup during the batch process operations.
ATP is designed for OLTP workload only, you cannot run batch processes on ATP
Which two tagging related items are valid attributes that may be included in payload of an audit log event? (Choose two.)
Predefined values // Tag variables
Free-form tags
Defined tags
Cost-tracking tags
Default tags
You are a network architect and have designed the network infrastructure of a three-tier application on Oracle Cloud Infrastructure (OCI). In the architecture, back-end DB servers are in a private subnet. One of your DB administrators requests to have access to OCI object storage service. How can you meet this requirement?
Add a new route rule to the private subnet route table to route default traffic to the internet gateway.
Attach a public IP address to the instances in the private subnet, and then add a new route rule to the private subnet route table to route default traffic to the internet gateway.
Create a dynamic routing gateway (DRG) and attach it to your virtual cloud network (VCN). Add a default route rule to the private subnets route table and set the target as DRG.
Create a service gateway, add a new route rule to the private subnet route table that uses object storage as target type.
A customer has launched a compute Instance in the Virtual Cloud Network (VCN), which has an Internet gateway, a service gateway, a default security lists and a default route table. Customer has opened up Port 22 in the security lists attached to the compute instance subnet, however is still unable to connect to compute instances using ssh.
Which option would remedy this situation?
Modify the route table associated with the VCN subnet in which the instance resides. Add a following route to the route table.
Destination CIDR: 0.0.0.0/0
Target: Internet Gateway (IGW)
Modify the security list associated with the VCN subnet in which the instance resides. Add a stateful egress rule to allow icmp traffic in addition to the port 22.
Modify the route table associated with the VCN subnet in which the instance resides. Add a following route to the route table. Destination CIDR: 0.0.0.0/0
Target: Dynamic Routing Gateway (DRG)
Modify the route table associated with the VCN subnet in which the instance resides. Add a following route to the route table. Destination CIDR: 0.0.0.0/0
Target: Service Gateway (SGW)
Your customer is using an Oracle Cloud Infrastructure (OCI) compartment named Production that hosts several resources such as compute instances, DB Systems and File Systems. Each resource in the Production compartment is tagged.
The customer's security team wants to restrict access to DB Systems to only the authorized group of DBAs.
Which OCI Tagging capability can be used to meet this requirement?
Tags Defaults with predefined values
Tag Defaults
Cost-Tracking Tags
Tag-based Access Control
You have multiple applications installed on a compute instance and these applications generate a large amount of log files. These log files must reside on the boot volume for a minimum of 15 days and must be retained for at least 60 days. The 60-day retention requirement is causing an issue with available disk space.
What are the two recommended methods to provide additional boot volume space for this compute instance? (Choose two.)
Terminate the instance while preserving the boot volume. Create a new instance from the boot volume and select a DenseIO shape to take advantage of local NVMe storage
Create an object storage bucket and use a script that runs daily to move log files older than 15 days to the bucket.
Create and attach a block volume to the compute instance and copy the log files.
Create a custom image and launch a new compute instance with a larger boot volume size
Write a custom script to remove the log files on a daily basis and free up the space on the boot volume.
You have an application server running in a public subnet on a compute instance in US West (usphoenix-1) region of Oracle Cloud Infrastructure (OCI). The data sitting on this instance needs to be copied to OCI Object storage bucket available in the same region without traversing over the internet. To enable the connectivity between the instance and Object Storage, you created a service gateway with service CIDR of all Object Storage in us-phoenix-1 enabled. You also modified the security rules to allow the desired traffic.
However, when you tried sending the data to the Object Storage bucket, you notice that the data is going over the internet and not via the service gateway.
What could be the possible reason for this behavior?
The route table associated with the subnet has no route rule where the destination is object storage service
The service gateway created in the VCN resides in a different availability domain
The security list associated with the subnet has an egress rule that allows all traffic to be forwarded to a destination CIDR 0.0.0.0/0
Identity and Access Management (IAM) policies restrict the access to the object storage bucket
Which two choices are true for Oracle Autonomous Database with Shared Exadata Infrastructure?
Billing for storage usage continues when autonomous database is stopped.
Billing stops for both CPU and storage usage when autonomous database is stopped.
Billing for compute usage stops when autonomous database is stopped.
Autonomous database does not support per-second billing.
Billing does not stop when autonomous database is terminated.
You are responsible for creating and maintaining an enterprise application that consists of multiple storage volumes across multiple compute instances in Oracle Cloud Infrastructure (OCI).
The storage volumes include boot volumes and block volumes for your data storage. You need to create backups of these storage volumes in the most time-efficient manner.
How can you meet this requirement?
Create clones of all boot volumes and block volumes one at a time.
Create on-demand full backups of boot volumes, and copy data in block volumes to Object Storage using OCI CLI.
Create on-demand full backups of block volumes, and create custom images from the boot volumes.
Group together multiple storage volumes in a volume group and create volume group backups
As an Oracle Cloud Infrastructure tenancy administrator, you created predefined lists of values and associated them with tag key definitions. One of the users in your tenancy complains that she cannot see these predefined values.
What is causing this issue?
The user is trying to use free-form tags.
Some of the predefined values are null.
The user is not part of an Identity and Access Management group that gives access to tagging.
The user has breached either the quota or service limit for using tags.
You have compartments C and D under the root compartment in your Oracle Cloud Infrastructure (OCI) tenancy; compartment C contains a sub-compartment also named D. You are trying to move this sub-compartment D to the parent compartment D like shown in the picture, but the move fails.
What is the reason for this error?
You need to move all the compartments in the hierarchy to the new parent compartment.
You cannot move a subcompartment to another parent compartment.
Both parent and child compartments cannot have the same name.
Sub-compartment D needs to be empty before it can be moved
You are working for a financial institution that is currently running two web applications in Oracle Cloud Infrastructure (OCI). All resources were created in the root compartment. Your manager asked you to deploy new resources to support a proof-of-concept (PoC) for Oracle FlexCube.
You must ensure that the FlexCube resources are secured and cannot be affected by the team that manages the two web applications.
Which two tasks should you complete to ensure the required security of your resources? (Choose two.)
Create a new compartment for the two web applications and move the existing resources into the compartment. Deploy the FlexCube application into the root compartment. Create a new policy in the root compartment that gives the FlexCube project team the ability to manage all resources in the tenancy.
Create a new policy in the root compartment for the FlexCube project team. Assign a policy statement that grants the FlexCube project team the ability to manage all resources in the tenancy, where a specific tag key and tag value are present.
Create a Tag Default within the root compartment with a default value of ${iam.principle.name} so that each new resource created is tagged with the name of the person who created it. Create a new IAM policy that allows users to only modify resources they created.
Create a new compartment for the two web applications and move the existing resources into this compartment. Modify the existing policy for the team that manages these applications so that the scope of access is defined as this new compartment.
Create a new compartment for the FlexCube application deployment. Create a policy in this compartment for the project team that gives them the ability to manage all resources within the scope of this compartment.
Which two parameters are required in a back end set’s HTTP health check? (Choose two.)
response body
URL path
timeout
port
status code
Which two are true for achieving High Availability on Oracle Cloud Infrastructure? (Choose two.)
Store your database across multiple regions so that half of the data resides in one region and the other half resides in another region
Attach your block volume form Availability Domain 1 to a compute instance in Availability Domain 2 (and vice versa) so that they are highly available
Configure your database to have Data Guard in another Availability Domain in Sync mode within a region
Store your database files on Object Storage so that they are available in all Availability Domains in all regions
Distribute your application servers across all Availability Domains within a region
Which two configuration formats does Terraform support? (Choose two.)
YAML
JSON
HCL
XML
At the end of a terraform apply operation, what is the default output?
nothing by default
statistics about what was added, changed, and destroyed
the entire state file
statistics about what was added, changed, and destroyed, and the values of outputs
You want an instance in your compartment to make API calls to other services within Oracle Cloud Infrastructure without storing credentials in a configuration file.
What do you need to do?
No action is required. By default, all VM instances are created with an Instance Principal.
Instances cannot access services outside their compartment
VM instances are treated as users. Create a user and assign the user to that VM instance.
Create appropriate matching rules in the Dynamic Group to create an Instance Principal.
Which three must be configured for a load balancer to accept incoming traffic? (Choose two.)
a listener
a back-end serve
a back end set
a security list that is open on a listener port
a certificate
Which two statements are true about Oracle Cloud Infrastructure Compute Service? (Choose two.)
You can launch a virtual or bare metal instance by using the same LaunchInstance API
You cannot launch a bare metal server in Oracle Cloud Infrastructure Compute Service.
You can attach a block volume in an Availability Domain other than your compute instance.
You can share custom images across tenancies and regions.
Which five are the required parameters to launch an instance in Oracle Cloud Infrastructure? (Choose five.)
subnet // Availability Domain
Virtual Cloud Network
host name
instance shape // image operating system
private IP address
Which DNS resource record type is used to point a host name to an IPv4 address?
ALIAS
A
CNAME
AAAA
Which three can you achieve by using Terraform? (Choose three.)
Create resources in the right order without regard to the order in the terraform plan file.
Automatically re-provision the resources that are tainted or whose configuration has changed.
Automatically translate a deployed infrastructure and create a plan.
Automatically destroy all the resources that are in tenancy.
Continuously maintain the configuration files in an instance
Your application front end consists of several Oracle Cloud Infrastructure compute instances behind a public load balancer. You have configured the load balancer to perform health checks on these instances.
What will happen if an instance fails to pass the configured health checks?
The instance is replaced automatically by the load balancer.
The instance is terminated automatically by the load balancer.
The instance is taken out of the back end set by the load balancer
The load balancer stops sending traffic to that instance.
Which statement is true about cloning a volume?
You need to detach a volume before cloning from it.
A cloned volume is the same as a snapshot that has a dependency on the source volume.
You can change the block volume size when cloning a volume.
You can create a clone for a volume across regions.
Which scaling option does Database Cloud Service (DBCS) on Bare Metal Shape offer?
network bandwidth
CPU
storage
memory
Which statement is true about Oracle Cloud Identifiers (OCID)?
mytenancy.oc.ocid is a valid OCID.
If you delete a user, and them create a new user with the same name, the user will be considered a different user because of different OCIDs.
Users can customize OCIDs for all the resources in their compartments.
If you delete a user, and then create a new user with the same name, the new user will be assigned the exact same OCIDs as the system remembers.
Which three types of credentials are used to manage Oracle Cloud Infrastructure Identity and Access Management (IAM)? (Choose three.)
Windows Password
API Signing Key
Swift Password
SSH Key
Console Password
Which two are true for Oracle Cloud Infrastructure DNS? (Choose two.)
It can function only as a primary DNS.
It supports other cloud providers such as AWS and Azure.
It supports segregation of traffic by using the private pool.
It does not provide DDoS protection.
Which service is NOT supported by Oracle Cloud Infrastructure CLI?
load balancer
compute
database
block volumes
In which language are Terraform and Terraform providers written?
Python
Go
C
Ruby
Given: When creating multiple subnets within a Virtual Cloud Network (VCN), security lists are often made to group common services, for example, SSH and RDP (remote access), 80 and 443 (HTTP), and so on.
By default, what is the maximum number of security lists that can be associated with a subnet upon creation?
4
2
5
3
Why are two subnets required to create a public load balancer when additional subnets are often used for back-end servers? (Choose two.)
Routing is simpler when the load balancer is not in the same subnet as the back-end server
Performance is higher when more subnets are used.
Additional subnets for back-end servers allow for separate route tables for these servers.
Additional subnets for back-end servers allow for separate security lists for these servers.
Which certificate format is used with the load balancer?
PFX
PEM
PKCS12
CRT
A new employee has just started working for your company. You create an Oracle Cloud Infrastructure user account for this employee, following which they are able to log in, but still cannot create any resources.
What should you do to resolve this?
Send the employee API Signing Keys to log in.
Delete the account and create another one.
Make sure that the employee is logging in to the Oracle Cloud Infrastructure account from your corporate network only.
Add the employee to a group with policies to grant access to relevant resources
