Oracle 1z0-1072-22 Exam Dumps

Oracle Cloud Infrastructure 2022 Architect Associate

Oracle 1z0-1072-22 Sample Questions

Question # 1

You have been notified of an application failure indicating that one or more of the Oracle Cloud Infrastructure (OCI) resources have become unavailable. After scanning the Compute and Database consoles, you notice that one of the DB Systems is missing. What would you do to identify the reason for this missing resource?

A. Navigate to the Auditconsole and search the previous 24 hours for allDELETErequest actions to get a list of any resource that was deleted in the past 24 hours. 
B. Navigate to the Audit console and search the previous 24 hours for all theGETrequest actions to get a list ofevery event that occurred in the past 24 hours. 
C. View the service limits associated with your account to ensure that you have not exceeded the allowable number of DB Systems in your tenancy. 
D. Create a serial console connection to the DB System that does not appear in the management console. Connect to the serial console connection, and then review the system logs  under/var/log/messages. 

Answer: A

Show Answer

Question # 2

A customer has launched a compute Instance in the Virtual Cloud Network (VCN), which hasan Internet gateway, a service gateway, a default security lists and a default route table.Customer has opened up Port 22 in the security lists attached to the compute instance subnet, however is still unable to connect to compute instances using ssh. Which option would remedy this situation?

A. Modify the route table associated with the VCN subnet in which the instance resides. Add a following route to the route table. Destination CIDR: 0.0.0.0/0 Target: Internet Gateway (IGW) 
B. Modify the security list associated with the VCN subnet in which the instance resides. Add a stateful egress rule to allow icmp traffic in addition to the port 22. 
C. Modify the route table associated with the VCN subnet in which the instance resides. Add a following route to the route table. Destination CIDR: 0.0.0.0/0 Target: Dynamic Routing Gateway (DRG) 
D. Modify the route table associated with the VCN subnet in which the instance resides. Add a following route to the route table. Destination CIDR: 0.0.0.0/0 Target: Service Gateway (SGW) 

Answer: A

Show Answer

Question # 3

D18912E1457D5D1DDCBD40AB3BF70D5D You are a system administrator of your company and you are asked to manage updates and patches across all your compute instances running Oracle Linux in Oracle CloudInfrastructure (OCI). As part of your task, you need to apply all the latest kernel security updates to all instances. Which OCI service will allow you to complete this task?

A. Resource Manager 
B. OS Management 
C. Storage Gateway 
D. Streaming 
E. Registry 

Answer: B

Show Answer

Question # 4

You are deploying a highly available web application InOracle Cloud Infrastructure and have decided to use a public load balancer. The back-end web servers will be distributedacross all three availability domains (ADs). How many subnets should you create to deliver a secure, highly available application?

A. two subnets in total; one regional private subnet to host your back-end web servers and one regional public subnet to host your public load load balancer. 
B. two subnets in total; one regional public subnet to host your back-end web servers and one regional private subnet to host your public load load balancer. 
C. three subnets in total; one regional public subnet to host your back-end web servers and two AD specific private subnets to host your private load load balancer. 
D. one subnet in total; one regional private subnet to host your back-end web servers and your public load balancer. 

Answer: A

Show Answer

Question # 5

You are about to upload log file (5 TiB size) to Oracle Cloud Infrastructure object storage and have decided to use multipart upload capability for a more efficient and resilientupload.Which two statements are true about multipart upload? (Choose two.)

A. Individual object parts can be as small as 10 MiB or as large as 50 GiB 
B. While a multipart upload is still active, you cannot add parts even if the total number of parts is less than 10,000 
C. The maximum size for an uploaded object is 10 TiB 
D. You do not have to commit the upload after you have uploaded all the object parts 

Answer: A,C

Show Answer

Question # 6

Which ofthe following statements is true about the Oracle Cloud Infrastructure (OCI) Object Storage serverside encryption?

A. Encryption of data encryption keys with a master encryption key is optional. 
B. Customer-provided encryption keys are always stored inOCI Vault service. 
C. Encryption is enabled by default and cannot be turned off. 
D. Each object in a bucket is always encrypted with the same data encryption key. 

Answer: B

Show Answer

Question # 7

Which two statements are true about restoring a volume from a block volume backup in Oracle Cloud Infrastructure Block Volume service?

A. You can restore a volumefrom any full volume backup but not from an Incremental backup. 
B. You can only restore a volume to the same availability domain in which the original block volume resides. 
C. You can restore a block volume backup to a larger volume size. 
D. You can restore a volume to any availability domain within the same region where the backup is stored. 
E. You can restore only one volume from a manual block volume backup. 

Answer: C,D

Show Answer

Question # 8

You developed a microservices based application that runs on Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE). You want to provide access to this clustertoother team members. What should you do to provide access to this cluster using as fewest steps as possible?

A. Create a group in OCI Infrastructure Access Management (IAM). Create a policy to grant access to the OKE cluster. Other team members shoulduse OCI Cloud Shell to generate the kubeconfig into their own cloud shell environment and access the cluster using kubectl from cloud shell. 
B. Create a group in OCI Infrastructure Access Management (IAM). Create a policy to grant access to the OKEcluster. Create individual users and access token for each team member. Other team members should use OCI Cloud Shell to generate the kubeconfig into their own cloud shell environment and access the cluster using kubectl from cloud shell. 
C. Create a groupin OCI Infrastructure Access Management (IAM). Create a policy to grant access to the OKE cluster. Create a cluster role and cluster role binding to provide accessto the cluster for each team member. Other team members should install oci cli and kubectllocally on their laptop. Use the oci cli to generate the kubeconfig and use kubectl to access the cluster. 
D. Create a group in OCI Infrastructure Access Management (IAM). Create a policy to grant access to the OKE cluster. Other team members should install oci cli and kubectl locally on their laptop. Use the oci cli to generate the kubeconfig and use kubectl to access the cluster. 

Answer: B

Show Answer

Question # 9

Your company decided to move a few applications to Oracle Cloud Infrastructure (OCI)in the US West (us-phoenix-1) region. You need to design a cloud-based disaster recovery (DR) solution with a requirement to deploy the DR resources in the US East (us-ashburn-1) region to minimize network latency. What is the recommended deployment?

A. Deploy production and DR applications in two separate virtual cloud networks (VCNs), each in different regions, and then use VCN local peering gateways for connectivity. 
B. Deploy production and DR applications in two separate VCNs, each in different regions. Connect them using a VCN remote peering connection. 
C. Deploy production and DR applications in the same VCN. Create production subnets in one AD, and DR subnets in another AD (assume a multi-AD region). 
D. Deploy production and DR applications in twoseparate VCNs in different availability domains (ADs) within the primary region, and then use a VCN remote peering connection for connectivity. 

Answer: A

Show Answer

Question # 10

You have created a virtual cloudnetwork (VCN) with three private subnets. Two of the subnets contain application servers and the third subnet contains a DB System. The application requires a shared file system so you have provisioned one using the file storage service (FSS). You also created the corresponding mount target in one of the application subnets. The VCN security lists are properly configured so that both application servers and the DB System can access the file system. The security team determines that the DB System should haveread-only access to the file system. What change would you make to satisfy this requirement?

A. Create an NFS export option that allows READ_ONLY access where the source is the CIDR range of the DB System subnet. 
B. Connect via SSH to one of the application servers where the file system has been mounted. Use the Unix command chmod to change permissions on the file system directory, allowing the database user read only access. 
C. Modify the security list associated with the subnet where the mount target resides. Change the ingress rules corresponding to the DB System subnet to be stateless. 
D. Create an instance principal for the DB System. Write an Identity and Access Management (IAM) policy that allows the instance principal read-only access to the filestorage service. 

Answer: A

Show Answer

Question # 11

You have an Oracle Cloud Infrastructure (OCI) load balancerdistributing traffic via an evenly-weighted round robin policy to your back-end web servers. You notice that one ofyour web servers is receiving more traffic than other web servers. How can you resolve this to make sure traffic is evenly distributed across all back-end webservers?

A. Disable cookie-based session persistence on your backend set. 
B. Change keep-alive setting between the load balancer and backend server. 
C. Disable SSL configuration associated with your backend set. 
D. Create separatelisteners for each backend web server. 

Answer: D

Show Answer

Question # 12

You are managing a tier-1 OLTP application on an Autonomous Transaction Processing (ATP) database. Your business needs to run hourly batch processes on this ATP database that may consume more CPUs than what isavailable on the server. How can you limit these batch processes to not interfere with the OLTP transactions?

A. Configure ATP resource management rules to change CPU/IO shares for the consumer group of batch processes. 
B. Copy OLTP data into new tablesin a new table space and run batch processes against these new tables. 
C. Disable automated backup during the batch process operations. 
D. ATP is designed for OLTP workload only, you cannot run batch processes on ATP. 

Answer: A

Show Answer

Question # 13

Your company has been running several small applications in Oracle Cloud Infrastructure and is planning a proof-of-concept (POC) to deploy PeopleSoft. If your existing resources are being maintained in the root compartment, what is therecommended approach for defining security for the upcoming POC?

A. Create a new compartment for the POC and grant appropriate permissions to create and manage resources within the compartment. 
B. Provision all new resources into the root compartment. Grant permissions that only allow for creation and management of resources specific to the POC. 
C. Provision all new resources into the root compartment. Use defined tags to separate resources that belong to different applications. 
D. Create a new tenancy for the POC. Provision all new resources into the root compartment. Grant appropriate permissions to create and manage resources within the root compartment. 

Answer: A

Show Answer