Oracle 1z0-1067-24 Exam Prep Guide: Prep guide for the 1z0-1067-24 Exam
2025 New Preparation Guide of Oracle 1z0-1067-24 Exam
Oracle 1z0-1067-24 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
NEW QUESTION # 37
Which default authentication is used by Ansible modules for Oracle Cloud Infrastructure (OCO for making API requests?
- A. API Key Authentication
- B. Resource Principal Authentication
- C. OAuth Authentication
- D. Instance principal authentication
Answer: D
NEW QUESTION # 38
You have been contracted by a local e-commerce company to assist with enhancing their online shopping application. The application is currently deployed in a single Oracle Cloud Infrastructure (OCI) region. The application utilizes a public load balancer, application servers in a private subnet, and a database in a separate, private subnet. The company would like to deploy another set of similar infrastructure in a different OCI region that will act as standby site. In the event of a failure at the primary site, all customers should be routed to the failover site automatically. After deploying the additional infrastructure within the second region, how should you configure automated failover requirements? (Choose the best answer.)
- A. Deploy a new load balancer in the primary region. Create one backend set for the primary application servers and a second backend set for the standby application servers. Create a listener for the primary backend set with a timeout of 3 minutes. Create a listener for the secondary backend set with a timeout of 10 minutes.
- B. Create a failover policy in the Traffic Management service. Set the IP address of the public load balancer for the primary site in answer pool 1. Set the IP address of the public load balancer for the secondary site in answer pool 2. Define a health check to monitor both sites.
- C. Create a load balancer policy in the Traffic Management service. Configure one answer for each site. Set the answer for the primary site with a weight of 10 and the answer for the secondary site with a weight of 100.
- D. Create a new A record in DNS that points to the public load balancer at the secondary site. Create a CNAME for the sub-domain failover that will resolve to the new A rec-ord. Inform customers to prepend the website URL with failover if the primary site is unavailable.
Answer: B
NEW QUESTION # 39
You set up a bastion host in your VCN to only allow your IP address (140.19.2.140) to establish SSH connections to your Compute Instances that are deployed in a private subnet. The Compute Instances have an attached Network Security Group with a Source Type: Network Security Group (NSG), Source NSG: NSG-050504. To secure the bastion host, you added the following ingress rules to its Network Security Group:
However, after checking the bastion host logs, you discovered that there are IP addresses other than your own that can access your bastion host. What is the root cause of this issue? (Choose the best answer.)
- A. A netmask of /32 allows all IP address in the 140.19.2.0 network, other than your IP 140.19.2.140
- B. The port 22 provides unrestricted access to 140.19.2.140 and to other IP address.
- C. All compute instances associated with NSG-050504 are also able to connect to the bastion host.
- D. The Security List allows access to all IP address which overrides the Network Security Group ingress rules.
Answer: C
NEW QUESTION # 40
You have been brought In to help secure an existing application that leverages Object Storage buckets to distribute content. The data is currently being shared from public buckets and the security team Is not satisfied with this approach. They have stated that all data must be stored In storage buckets. Your application should be able to provide secure access to the data. The URL that is provided for access to the data must be rotated every 30 days. Which design option will meet these requirements?
- A. Create a private bucket only to share the data.
- B. Use Pre-Authenticated request, even though there will be multiple URLs this will pro-vide better security.
- C. Create multiple bucket and classify them as Public and Private. Use public bucket for non-sensitive data and private bucket for sensitive data.
- D. Create a new group and map users to this group, create a IAM policy providing access to Object Storage service only to this group. Users can then simply login to OCI console and retrieve needed flies.
Answer: B
NEW QUESTION # 41
Your application is using an Object Storage bucket named app-data in the namespace vision, to store both persistent and temporary data. Every week all the temporary data should be deleted to limit the storage consumption. Currently you need to navigate to the Object Storage page using the web console, select the appropriate bucket to view all the objects and delete the temporary ones. To simplify the task you have configured the application to save all the temporary data with /temp prefix. You have also decided to use the Command Line Interface (CLI) to perform this operation. What is the command you should use to speed up the data cleanup? (Choose the best answer.)
- A. oci objectstorage bulk-delete -ns vision -bn app-data --prefix /temp -force
- B. oci os object bulk-delete -ns vision -bn app-data --prefix /temp --force
- C. oci os object delete app-data in vision where prefix = /temp
- D. oci os object delete -ns vision -bn app-data --prefix /temp
Answer: B
NEW QUESTION # 42
You have created several block volumes in the us-phoenix-1 region in a specific compart-ment. The compartment can be identified by the following Oracle Cloud Infrastructure (OCI) unique identifier, or ocid1.
compartment.oc1.phx..exampleuniquelD Your manager has asked you to leverage the OCI monitoring service and write a metric query showing all read IOPS at a one-minute interval, filtered to this compartment and aggregated for the maximum. Which metric query will you create?
- A. IopsRead[lm]{compartmentId='ocldl.compartment.ocl.phx..exampleuniquelD'}.max()
- B. Iop-sRead[lm{compartmentId='ocidl.compartment.ocl.phx..exampleuniquelD'}.grouplng().max()
- C. IopsRead[lm]{compartmentId = 'odd1.compartment.ocl.phx..exampleuniquelD'}.grouping().mean()
- D. Iop-sWrite[lm]{compartmentId=Hocidl.compartment.ocl.phx..exampleuniquelD'}.mean()
Answer: B
NEW QUESTION # 43
You created an Oracle Linux compute instance through the Oracle Cloud Infrastructure (OCI) management console then immediately realize you forgot to add an SSH key file. You notice that OCI compute service provides instance console connections that supports adding SSH keys for a running instance. Hence, you created the console connection for your Linux server and activated it using the connection string provided. However, now you get prompted for a username and password to login. What option should you recommend to add the SSH key to your running instance, while minimizing the administrative overhead? (Choose the best answer.)
- A. You need to configure the boot loader to use ttyS0 as a console terminal on the VM.
- B. You need to terminate the running instance and recreate it by providing the SSH key file.
- C. You need to reboot the instance from the console, boot into the bash shell in maintenance mode, and add SSH keys for the OPC user.
- D. You need to modify the serial console connection string to include the identity file flag, to specify the SSH key to use.
Answer: C
NEW QUESTION # 44
As a cloud operations engineer responsible for a Rails application on multiple compute instances in an OCI subnet your database team recently provided you with a new config/database. yml file to direct Rails to use a new database back end. You need to update this file on each compute instance and restart Rails in a rolling fashion.
Which tool is best suited for this task?
- A. OCI CLI
- B. Ansible
- C. Oracle Cloud Agent
- D. Terraform
Answer: B
NEW QUESTION # 45
You have created several block volumes in the us-phoenix-1 region in a specific compart-ment. The compartment can be identified by the following Oracle Cloud Infrastructure (OCI) unique identifier, or ocid1.compartment.oc1.phx..exampleuniquelD Your manager has asked you to leverage the OCI monitoring service and write a metric query showing all read IOPS at a one-minute interval, filtered to this compartment and aggregated for the maximum. Which metric query will you create?
- A. IopsRead[lm]{compartmentId='ocldl.compartment.ocl.phx..exampleuniquelD'}.max()
- B. Iop-sRead[lm{compartmentId='ocidl.compartment.ocl.phx..exampleuniquelD'}.grouplng().max()
- C. IopsRead[lm]{compartmentId = 'odd1.compartment.ocl.phx..exampleuniquelD'}.grouping().mean()
- D. Iop-sWrite[lm]{compartmentId=Hocidl.compartment.ocl.phx..exampleuniquelD'}.mean()
Answer: B
NEW QUESTION # 46
To upload a file from a compute instance into Object Storage, you SSH into the compute instance and run the following OCI CLI command: oci os object put -ns mynamespace -bn mybucket --name myfile.txt --file
/Users/me/myfile.txt --auth instance_principal Which statement must be true for this command to succeed?
- A. Your OCI API key has been placed on the compute instance.
- B. Your OCI user has the permission to upload to the bucket.
- C. The bucket has a pre-authenticated request (PAR) that specifies the compute instance that will upload to it.
- D. The instance matches a matching rule for a dynamic group with the permission to up-load to the bucket.
Answer: D
NEW QUESTION # 47
Recently, your e-commerce web application has been receiving significantly more traffic than usual. Users are reporting they often encounter a 503 Service Error when trying to access your site. Sometimes the site is very slow. You check your instance pool configuration to con-firm that the maximum numberof instances is configured to allow 20 compute instances. Currently, 14 compute instances have been provisioned by the instance pool. You also confirm that current CPU utilization across all hosts exceeds the scale-out threshold you set in your auto-scaling policy. However, the instance pool is not provisioning any new instances. What can you check to determine why the application is NOT functioning properly? (Choose the best answer.)
- A. Verify that the Quality Assurance team is not currently performing load-testing against production.
- B. Verify that the database is accessible.
- C. Verify that the compute resource quota has not been exceeded.
- D. Verify that the new offer feature code did not introduce any performance bugs.
Answer: C
NEW QUESTION # 48
One of the compute instances that you have deployed on Oracle Cloud Infrastructure (OCI) is malfunctioning.
You have created a console connection to remotely troubleshoot it. Which two statements about console connections are TRUE? (Choose two.)
- A. For security purpose, the console connection will not let you edit system configuration files.
- B. It is not possible to connect to the serial console to an instance running Microsoft Windows, however VNC console connection can be used.
- C. It is not possible to use VNC console connections to connect to Bare Metal Instances.
- D. VNC console connection uses SSH port forwarding to create a secure connection from your local system to the VNC server attached to your instance's console.
- E. If you do not disconnect from the session, your serial console connection will automatically be terminated after 24 hours.
Answer: D,E
NEW QUESTION # 49
You have recently joined a startup company and quickly find that nobody is tracking the amount of money spent on Oracle Cloud Infrastructure (OCI). Seeing an opportunity to help save money you begin creating a solution to better track the cost of resources provisioned by each individual on the team. Which option allows you to identify excessive spend across all re-sources in your tenancy? (Choose the best answer.)
- A. Use the Events Service and create rules that will act when a new Object Storage bucket or Compute Instance has been created. Have the rule email you each time one of these events occurs.
- B. Create a tag namespace named BILLING with a Tag Key named CostCenter. Tag each of your resources with this Tag Key and the correct value.
- C. Create a budget for each compartment that will send a notification when monthly spend reaches a pre- defined amount.
- D. Use the Python SDK to write a custom application that will monitor the Audit log. Look for CREATE events and configure the application to send you an email each time a new resource is created.
Answer: C
NEW QUESTION # 50
You have a group of developers who launch multiple VM.Standard3.Flex compute in-stances every day into the compartment Dev. As a result, your Oracle Cloud Infrastructure (OCI) tenancy quickly hits the service limit for this shape, and other groups can no longer create new instances using the VM.Standard3.Flex shape. Therefore, your company issues a new mandate that the Dev compartment must include a quota that allows the use of only 20 VM.Standard3.Flex OCPUs per availability domain, without affecting any other compartment in the tenancy. Which quota statement would you use to implement this new requirement?
- A. zero compute-core quotas in tenancy set compute-core quota standard3-core-count to 20 in tenancy dev
- B. set compute-core quota standard3-core-count to 20 in compartment dev
- C. set compute-core quota standard3-core-count to 20 in compartment dev where re-quest.region = us-phoenix-1
- D. zero compute-core quotas in tenancy set compute-core quota standard3-core-count to 20 in compartment dev
Answer: B
NEW QUESTION # 51
You have been asked to review a network design for Oracle Cloud Infrastructure (OCI) by a major client. The client IT team needs to provision two Virtual Cloud Networks (VCNs) for a major application. The application uses a large number of virtual machine instances. Additionally, in the future, a VCN peering will be required to allow connectivity between the VCNs. Which of the following are valid IP ranges to consider? (Choose the best answer.)
- A. 10.0.8.0/21 and 10.0.16.0/22
- B. 10.0.0.0/8 and 11.0.0.0/8
- C. 10.0.0.0/30 and 192.168.0.0/30
- D. 10.0.0.0/16 and 10.0.64.0/24
Answer: A
NEW QUESTION # 52
You have a Linux compute instance located in a public subnet in a VCN which hosts a web application. The security list attached to subnet containing the compute instance has the following stateful ingress rule.
The Route table attached to the Public subnet is shown below. You can establish an SSH connection into the compute instance from the internet. However, you are not able to connect to the web server using your web browser.
Which step will resolve the issue? (Choose the best answer.)
- A. In the security list, add an ingress rule for port 80 (http).
- B. In the route table, add a rule for your default traffic to be routed to service gateway.
- C. In the route table, add a rule for your default traffic to be routed to NAT gateway.
- D. In the security list, remove the ssh rule.
Answer: A
NEW QUESTION # 53
As a solution architect of the Oracle Cloud Infrastructure tenancy, you have been asked to provide members of group CloudOps the ability to view and retrieve monitoring metrics, but only for all monitoring-enabled compute instances. Which policy statement will you define to grant this access?
- A. Restricting monitoring access only to compute instances metrics is not possible.
- B. Allow group CloudOps to read metrics in tenancy where tar-get.metrics.namespace=oci_computeagent
- C. Allow group CloudOps to read metrics in tenancy where tar-get.metrics.monitoring='oci_computeagent'
- D. Allow group CloudOps to read compute-metrics in tenancy
Answer: B
NEW QUESTION # 54
What is a key benefit of using Oracle Cloud Infrastructure Resource Manager for your Terraform provisioning and management activities? (Choose the best answer.)
- A. Resource Manager has administrative privileges by design. Even if your IAM user does not have access, you can leverage Resource Manager to provision new resources to any compartment in the Tenancy.
- B. Resource Manager manages to Terraform state file for your infrastructure and locks the file so that only one job at a time can run on a given stack.
- C. You can use Resource Manager to apply patches to all existing Oracle Linux interfaces in a specified compartment.
- D. You can use Resource Manager to identify and maintain an inventory of all Compute and Database instances across your tenancy.
Answer: B
NEW QUESTION # 55
......
Latest Questions 1z0-1067-24 Guide to Prepare Free Practice Tests: https://www.dumpsmaterials.com/1z0-1067-24-real-torrent.html
1z0-1067-24 Practice Exam - 95 Unique Questions: https://drive.google.com/open?id=1_ANGhziXm1GnN6R9QB1u60CWPssU5RD2
