Pass 1z0-1072-23 Brain Dump Updated Certification Sample Questions
Online 1z0-1072-23 Test Brain Dump Question and Test Engine
NEW QUESTION # 20
You plan to launch a VM instance with the VM.Standard2.24 shape and Oracle Linux 8 platform image. You want to protect your VM instance from low-level threats, such as rootkits and bootkits that can infect the firmware and operating system and are difficult to detect.
What should you do?
- A. Create a burstable instance.
- B. Use in-transit encryption.
- C. Use Vulnerability Scanning Service.
- D. Create a shielded instance.
Answer: D
Explanation:
The explanation is that shielded instances are VM instances that have additional security features to protect them from low-level threats, such as rootkits and bootkits that can infect the firmware and operating system and are difficult to detect. Shielded instances use verified boot, which ensures that only trusted software components are executed during the boot process. Shielded instances also use virtual trusted platform module (vTPM), which provides a secure storage for encryption keys and certificates. Shielded instances are available for Oracle Linux 8 platform images with VM.Standard2.* shapes.
NEW QUESTION # 21
Which statement is NOT correct regarding the Oracle Cloud Infrastructure (OI) File System snapshots?
- A. Snapshots are accessible under the root directory of the file system at .snapshot/name.
- B. Even if nothing has changed within the file system since the last snapshot was taken, a new snapshot consumes more storage.
- C. Snapshots are a consistent, point-in-time view of your file systems.
- D. Before you can clone a file system, at least one snapshot must exist for the file system.
Answer: B
Explanation:
Even if nothing has changed within the file system since the last snapshot was taken, a new snapshot does not consume more storage. This is because snapshots are incremental and only store the changes made to the file system since the previous snapshot. The other statements are correct regarding the OCI File System snapshots. Reference: [Snapshots and Storage Consumption]
NEW QUESTION # 22
You want a full-featured Identity-as-a-Service (IDaaS) solution that helps you manage workforce authenticationand access to all of your Oracle and non-Oracle applications, whether they are SaaS apps, on-premises enterpriseapps, or apps that are hosted in the cloud. Which IAM Identity Domain type should you create?
- A. Free
- B. External User
- C. Oracle Apps Premium
- D. Premium
Answer: D
Explanation:
Explanation
Premium is the IAM Identity Domain type that you should create if you want a full-featured IDaaS solution that helps you manage workforce authentication and access to all of your Oracle and non-Oracle applications.
Premium Identity Domain provides users with access to Oracle Identity Cloud Service, which is an IDaaS solution that offers identity management, single sign-on, multifactor authentication, identity governance, and integration with third-party applications. The other options are not IAM Identity Domain types that provide a full-featured IDaaS solution. References: [Identity Domains], [Oracle Identity Cloud Service]
NEW QUESTION # 23
Which Oracle Cloud Infrastructure (OCI) Identity and Access Management (IAM) policy is invalid?
- A. Allow any-user to inspect users in tenancy
- B. Allow dynamic-group FrontEnd to manage instance-family in compartment Project-A
- C. Allow group A-Developers to create volumes in compartment Project-A
- D. Allow group A-Admins to manage all-resources in compartment Project-A
Answer: C
Explanation:
Allow group A-Developers to create volumes in compartment Project-A is an invalid IAM policy. This is because create is not a valid verb for volumes. The correct verb for creating volumes is attach. The other options are valid IAM policies that use correct verbs and syntax. Reference: [IAM Policies], [Verbs]
NEW QUESTION # 24
You are a system administrator of your company and you are managing a complex environment consisting of compute instances running Oracle Linux on Oracle Cloud Infrastructure (OCI). It's your task to apply all the latest kernel security updates to all instances.
Which OCI service will allow you to complete this task?
- A. OCI Security Zones to achieve automatic security updates
- B. OCI Cloud Guard to monitor and install the security updates
- C. OCI Streaming service
- D. OCI Registry
- E. OS Management service
Answer: E
Explanation:
OS Management service is the OCI service that will allow you to complete this task. OS Management service is a service that helps users automate patching and package management for Oracle Linux and Windows instances in OCI. It can also help users monitor and manage system configuration and compliance across their instances. The other options are not suitable for this task, as they do not provide the functionality of OS Management service. Reference: [OS Management Service]
NEW QUESTION # 25
Which THREE protocols are supported by the Oracle Cloud Infrastructure (OCI) Network Load Balancer?
- A. TCP
- B. UDP
- C. ICMP
- D. iSCSI
- E. HTTP
- F. BGP
Answer: A,B,C
Explanation:
The explanation is that the OCI Network Load Balancer supports three protocols: UDP, TCP, and ICMP. These protocols are used to distribute traffic across multiple backend servers based on different criteria, such as source and destination IP addresses, ports, and ICMP types and codes.
NEW QUESTION # 26
Which TWO statements are NOTcorrect regarding the Oracle Cloud Infrastructure (OCI) burstable instances?
- A. If the instance's average CPU utilization over the past 24 hours is below thebaseline, the system allows itto burst above the baseline.
- B. Baseline utilization is a fraction of each CPU core, either 25% or 75%.
- C. Burstable instances cost less than regular instances with the same total OCPU count.
- D. Burstable instances are charged according to the baseline OCPU.
- E. Burstable instances are designed for scenarios where an instance is not typically idle and has high CPUutilization.
Answer: B,E
Explanation:
Explanation
The explanation is that burstable instances are VM instances that have a baseline utilization of either 12% or 50% of each CPU core, not 25% or 75%. Burstable instances are designed for scenarios where an instance is typically idle or has low CPU utilization but occasionally needs to burst above the baseline to handle spikes in demand. Burstable instances cost less than regular instances with the same total OCPU count but charge extra for bursting above the baseline OCPU.
NEW QUESTION # 27
Which statement accurately describes the key features and benefits of OCI Confidential Computing?
- A. It provides automatic scalability and load balancing capabilities, which allow seamless integration with other cloud providers.
- B. It enables users to securely store and retrieve data by using distributed file systems, ensuring high availability and fault tolerance.
- C. It encrypts and isolates in-use data and the applications processing that data, thereby preventing unauthorized access or modification.
- D. It optimizes network performance and reduces latency through advanced routing algorithms and caching mechanisms.
Answer: C
Explanation:
It encrypts and isolates in-use data and the applications processing that data, thereby preventing unauthorized access or modification is an accurate description of the key features and benefits of OCI Confidential Computing. Confidential Computing is a feature that leverages hardware-based Trusted Execution Environments (TEEs) to protect data and applications from unauthorized access or modification while they are in use by the CPU or memory. This adds an extra layer of security to cloud computing, as it protects data not only at rest and in transit, but also in use. The other options are not accurate descriptions of the key features and benefits of OCI Confidential Computing. Reference: [Confidential Computing]
NEW QUESTION # 28
In which TWO ways does Cloud Guard help improve the overall security posture for your tenancy?
- A. Prevents you from creating misconfigurations on your resources in Oracle Cloud Infrastructure (OCI).
- B. Masks sensitive data and monitors security controls on your Oracle databases.
- C. Helps detect misconfigured resources, such as publicly accessible Object Storage buckets, instances, and restricted ports on security lists.
- D. Monitors unauthorized or suspicious user activity.
- E. Allows you to centrally manage encryption keys.
Answer: A,C,D
Explanation:
Explanation
Monitors unauthorized or suspicious user activity, prevents you from creating misconfigurations on your resources in OCI, and helps detect misconfigured resources, such as publicly accessible Object Storage buckets, instances, and restricted ports on security lists. The explanation is that Cloud Guard is a service that helps you improve the security posture of your tenancy by providing visibility into your cloud resources, identifying security misconfigurations and threats, and taking corrective actions to remediate them. Cloud Guard monitors user activity and resource configurations using data collectors and detectors, evaluates them against predefined or custom rules, generates problems and recommendations based on severity levels, and executes responders to fix the issues automatically or manually.
NEW QUESTION # 29
Oracle Cloud Agent is a lightweight process that manages plugins running on compute instances.
Which is NOT a valid Oracle Cloud Agent plugin name?
- A. Compute Instance Run Command
- B. Bastion
- C. OS Management Service Agent
- D. Live Migration Agent
Answer: D
Explanation:
Bastion is not a valid Oracle Cloud Agent plugin name. Bastion is a service that enables secure and controlled access to compute instances in OCI. The other options are valid plugin names that provide different functionalities for the instances. Reference: [Bastion], [Cloud Agent Plugins]
NEW QUESTION # 30
You are responsible for creating and maintaining an enterprise application that consists of multiple storage volumes across multiple compute instances in Oracle Cloud Infrastructure (OCI).
The storage volumes include boot volumes and block volumes for your data storage. You need to create a backupfor the boot volumes that will be done daily and a backup for the block volumes that will be done every six hours.
How can you meet this requirement?
- A. Group multiple storage volumes in a volume group and create volume group backups.
- B. Group the boot volumes into a volume group and create a custom backup policy. Group the block volumesand create a custom backup policy.
- C. Create on-demand full backups of block volumes, and create custom images from the boot volumes. Use afunction to run at a specific time to start the backup process.
- D. Create clones of all boot volumes and block volumes one at a time.
Answer: B
Explanation:
Explanation
Group the boot volumes into a volume group and create a custom backup policy. Group the block volumes and create a custom backup policy. The explanation is that volume groups are logical collections of block volumes and boot volumes that can be backed up together as a consistent point-in-time snapshot. You can create a custom backup policy for each volume group and specify the frequency and retention period of the backups.
This way, you can meet different backup requirements for different types of volumes.
NEW QUESTION # 31
You have objects stored in an OCI Object Storage bucket that you want to share with a partner company. You decide to use pre-authenticated requests to grant access to the objects. Which statement is true about preauthenticated requests?
- A. Pre-authenticated requests can be used to delete buckets or objects.
- B. You cannot edit a pre-authenticated request.
- C. Deleting a pre-authenticated request does not revoke user access to the associated bucket or object.
- D. You need to provide your OCI credentials to the partner company.
Answer: B
Explanation:
Explanation
You cannot edit a pre-authenticated request is a true statement about pre-authenticated requests.
Pre-authenticated requests are URLs that allow users to access objects or buckets in OCI Object Storage without requiring additional authentication or authorization. Pre-authenticated requests can be created with an expiration date and time, and can be used for read or write operations. However, once created, pre-authenticated requests cannot be edited, but can only be deleted or extended. The other statements are false about pre-authenticated requests. References: [Pre-Authenticated Requests]
NEW QUESTION # 32
Which statement is true about File System Replication in Oracle Cloud Infrastructure (OCI)?
- A. You cannot specify a replication interval when you create the replication resource.
- B. You can replicate the data in one file system to another file system in the same region or a different region.
- C. Only a file system that has been exported can be used as a target file system.
- D. You can replicate the data in one file system to another file system only in the same region.
Answer: B
Explanation:
You can replicate the data in one file system to another file system in the same region or a different region is a true statement about File System Replication in OCI. File System Replication is a feature that allows users to create a copy of a file system in another file system, either within the same region or across regions. This can be useful for disaster recovery, data migration, or data distribution purposes. The other statements are false about File System Replication in OCI. Reference: [File System Replication]
NEW QUESTION # 33
You are using the Oracle Cloud Infrastructure (OCI) Vault service to create and manage Secrets. For your database password, you have created a secret and rotated the secret one time. The secret versions are as follows:
-----------------------------------------
2 (latest) | Current
1 | Previous
You later realize that you have made a mistake in updating the secret content for version 2 and want to rollback to version 1.
What should you do to rollback to version 1?
- A. Deprecate version 2 (latest). Create new Secret version 3. Create soft link from version 3 to version 1.
- B. From the version 1 menu on the OCI console, select "Promote to Current".
- C. From the version 2 (latest) menu, select "Rollback" and select version 1 when given the option.
- D. Create a new secret version 3 and set to Pending. Copy the content of version 1 into version 3.
Answer: B
Explanation:
From the version 1 menu on the OCI console, select "Promote to Current". The explanation is that when you promote a secret version to current, it becomes the latest version of the secret and is used by default when you access the secret. This way, you can rollback to a previous version of the secret without creating a new version.
NEW QUESTION # 34
Your DevOps team needs to interconnect the on-premises network to the Oracle Cloud Infrastructure(OCI)resources, such as a managed database that resides in a private subnet. Theyindicate that they have a lowbudget and their bandwidth requirements are minimal, so you decide that a site-to-site VPN is the best option.
They provide you with their router public IP address. You need to create an object in OCI that represents thisrouter. Which object would you create?
- A. Dynamic Routing Gateway (DRG)
- B. Bastion Host
- C. Customer Premises Equipment (CPE)
- D. Virtual Network Interface Card (vNIC)
- E. Internet Gateway
- F. IPSec Tunnel
Answer: C
Explanation:
Explanation
Customer Premises Equipment (CPE). The explanation is that CPE is an object in OCI that represents your on-premises router or VPN device that connects to your VCN via a site-to-site VPN. A site-to-site VPN is a secure and encrypted connection between your on-premises network and your VCN over the public internet.
To set up a site-to-site VPN, you need to create a CPE object with your router's public IP address and other information, such as vendor and platform. You also need to create a Dynamic Routing Gateway (DRG) object in your VCN andattach it to your VCN. Then, you need to create an IPSec connection between your CPE and DRG, which will create two redundant VPN tunnels for high availability.
NEW QUESTION # 35
Which THREE capabilities are available with the Oracle Cloud Infrastructure (OCI) DNS service?
- A. Creating and managing security lists
- B. Creating and managing zones
- C. Creating and managing Identity Access Management (IAM) policies
- D. Creating and managing records
- E. Creating and managing WAF rules
- F. Viewing all zones
Answer: B,D,F
Explanation:
Creating and managing records, creating and managing zones, and viewing all zones are three capabilities that are available with the OCI DNS service. Records are data elements that map domain names to IP addresses or other information. Zones are collections of records that correspond to a domain name or a subdomain name. The OCI DNS service allows users to create and manage records and zones for their domains or subdomains, as well as view all zones in their tenancy. The other options are not capabilities of the OCI DNS service, but of other OCI services such as WAF, IAM, and Networking. Reference: [DNS Service], [Records], [Zones]
NEW QUESTION # 36
Which is NOT a valid option for an Oracle Cloud Infrastructure (OCI) compute shape?
- A. Bare Metal
- B. Virtual Machine
- C. Dedicated Virtual Machine Host
- D. Exadata Virtual Machine
Answer: D
Explanation:
Exadata Virtual Machine is not a valid option for an OCI compute shape. Exadata Virtual Machine is a deployment option for Exadata Cloud Service or Exadata Cloud@Customer, which are services that provide dedicated Exadata infrastructure for running Oracle databases in OCI. Exadata Virtual Machine allows you to create multiple virtual machines on each Exadata compute node and isolate them from each other using Oracle VM technology. The valid options for OCI compute shapes are:
Bare Metal: A bare metal instance is a physical server that gives you direct access to the underlying hardware and full isolation from other tenants.
Dedicated Virtual Machine Host: A dedicated virtual machine host is a physical server that hosts only your virtual machine instances and no other tenant's instances.
Virtual Machine: A virtual machine instance is a virtual server that runs on a shared physical server with other tenants' instances.
Burstable: A burstable instance is a virtual machine instance that has a baseline utilization of either 12% or 50% of each CPU core and can burst above the baseline when needed.
NEW QUESTION # 37
In which TWO ways does Cloud Guard help improve the overall security posture for your tenancy?
- A. Prevents you from creating misconfigurations on your resources in Oracle Cloud Infrastructure (OCI).
- B. Masks sensitive data and monitors security controls on your Oracle databases.
- C. Helps detect misconfigured resources, such as publicly accessible Object Storage buckets, instances, and restricted ports on security lists.
- D. Monitors unauthorized or suspicious user activity.
- E. Allows you to centrally manage encryption keys.
Answer: C,D
Explanation:
Monitors unauthorized or suspicious user activity, prevents you from creating misconfigurations on your resources in OCI, and helps detect misconfigured resources, such as publicly accessible Object Storage buckets, instances, and restricted ports on security lists. The explanation is that Cloud Guard is a service that helps you improve the security posture of your tenancy by providing visibility into your cloud resources, identifying security misconfigurations and threats, and taking corrective actions to remediate them. Cloud Guard monitors user activity and resource configurations using data collectors and detectors, evaluates them against predefined or custom rules, generates problems and recommendations based on severity levels, and executes responders to fix the issues automatically or manually.
NEW QUESTION # 38
You are responsible for deploying an application on Oracle Cloud Infrastructure (OCI). The application is memoryintensive and performs poorly if enough memory is not available. You have created an instance pool of Linuxcompute instances in OCI to host the application and defined Autoscaling Configuration for the instance pool.
What should you do to ensure that the instance pool autoscales to prevent poor application performance?
- A. Install the monitoring agent on all compute instances, which triggers the autoscaling group.
- B. Configure the autoscaling policy to monitor CPU usage and scale up the number of instances when it meets the threshold
- C. Configure the autoscaling policy to monitor memory usage and scale up the number of instances when itmeets the threshold.
- D. Install OCI SDK on all compute instances and create a script that triggers theautoscaling event if there ishigh memory usage.
Answer: C
NEW QUESTION # 39
Which of the following statements is true about cloning a volume in the Oracle Cloud Infrastructure (OCI) BlockVolume service?
- A. You need to detach a volume before cloning it.
- B. Creating a clone takes longer than creating a backup of a volume.
- C. You can change the block volume size when cloning a volume.
- D. You can clone a volume to another region.
Answer: C
Explanation:
Explanation
You can change the block volume size when cloning a volume. The explanation is that cloning a volume is a way of creating an exact copy of an existing volume without creating a backup first. Cloning a volume is faster and cheaper than creating a backup and restoring it to a new volume. When you clone a volume, you can change the block volume size, performance, encryption settings, and tags of the new volume. You do not need to detach a volume before cloning it, as cloning does not affect the source volume or its attachments. You cannot clone a volume to another region, as cloning only works within the same region and availability domain. Creating a clone usually takes less time than creating a backup of a volume, as cloning does not involve transferring data to Object Storage.
NEW QUESTION # 40
You are backing up your on-premises data to the Oracle Cloud Infrastructure (OCI) Object Storage Service.
Your requirements are:
1. Backups need to be retained for at least full 31 days.
2. Data should be accessible immediately if and when needed after the backup.
Which OCI Object Storage tier is suitable for storing the backup to minimize cost?
- A. Archive tier
- B. Auto-Tiering tier
- C. Infrequent Access tier
- D. Standard tier
Answer: C
Explanation:
Explanation
The explanation is that the Infrequent Access tier is suitable for storing data that is accessed less frequently but requires immediate access when needed. The Infrequent Access tier has lower storage costs than the Standard tier, but higher retrieval costs. The Infrequent Access tier also has a minimum storage duration of 30 days, which means that you will be charged for at least 30 days of storage even if you delete or move the data before that period.
NEW QUESTION # 41
You are a system administrator of your company and you are managing a complex environment consisting of compute instances running Oracle Linux on Oracle Cloud Infrastructure (OCI). It's your task to apply all the latestkernel security updates to all instances.
Which OCI service will allow you to complete this task?
- A. OCI Security Zones to achieve automatic security updates
- B. OCI Cloud Guard to monitor and install the security updates
- C. OCI Streaming service
- D. OCI Registry
- E. OS Management service
Answer: E
Explanation:
Explanation
OS Management service is the OCI service that will allow you to complete this task. OS Management service is a service that helps users automate patching and package management for Oracle Linux and Windows instances in OCI. It can also help users monitor and manage system configuration and compliance across their instances. The other options are not suitable for this task, as they do not provide the functionality of OS Management service. References: [OS Management Service]
NEW QUESTION # 42
Which of the following statements is true about cloning a volume in the Oracle Cloud Infrastructure (OCI) Block Volume service?
- A. You need to detach a volume before cloning it.
- B. Creating a clone takes longer than creating a backup of a volume.
- C. You can change the block volume size when cloning a volume.
- D. You can clone a volume to another region.
Answer: C
Explanation:
You can change the block volume size when cloning a volume. The explanation is that cloning a volume is a way of creating an exact copy of an existing volume without creating a backup first. Cloning a volume is faster and cheaper than creating a backup and restoring it to a new volume. When you clone a volume, you can change the block volume size, performance, encryption settings, and tags of the new volume. You do not need to detach a volume before cloning it, as cloning does not affect the source volume or its attachments. You cannot clone a volume to another region, as cloning only works within the same region and availability domain. Creating a clone usually takes less time than creating a backup of a volume, as cloning does not involve transferring data to Object Storage.
NEW QUESTION # 43
When defining a query for metric data in Monitoring, which field provides the time window for aggregating metric data points plotted on the metric chart?
- A. Namespace
- B. Dimension
- C. Statistic
- D. Interval
Answer: D
Explanation:
Interval is the field that provides the time window for aggregating metric data points plotted on the metric chart. Interval is a parameter that specifies how often metric data points are collected and aggregated by the Monitoring service. For example, an interval of 5 minutes means that metric data points are aggregated every 5 minutes and displayed on the chart. The other options are not fields that provide the time window for aggregating metric data points, but rather other parameters that define the metric query. Reference: [Interval]
NEW QUESTION # 44
You are part of a team that manages a set of workload instances running in an on-premises environment.
TheArchitect team is tasked with designing and configuring Oracle Cloud Infrastructure (OCI) Logging service tocollect logs from these instances. There is a requirement to archive Info-level logging data of these instances intothe OCI Object Storage.
Which TWO features of OCI can help you achieve this?
- A. Service Connectors
- B. Cloud Agent Plugin
- C. Grouping Function
- D. Agent Configuration
- E. ObjectCollectionRule
Answer: A,B
Explanation:
Explanation
Cloud Agent Plugin and Service Connectors are two features of OCI that can help collect logs from on-premises instances and archive them into OCI Object Storage. Cloud Agent Plugin is a component of the OCI Logging service that can be installed on any Linux or Windows instance to collect logs and send them to OCI. Service Connectors are components of the OCI Service Connector Hub that can transfer data between different OCI services, such as Logging and Object Storage. The other options are not relevant for this requirement. References: [Cloud Agent Plugin], [Service Connectors]
NEW QUESTION # 45
......
Real Oracle 1z0-1072-23 Exam Dumps with Correct 57 Questions and Answers: https://www.passreview.com/1z0-1072-23_exam-braindumps.html
Oracle 1z0-1072-23 Certification Real 2024 Mock Exam: https://drive.google.com/open?id=1ESgKqahKwit-xVwb-OyNTO_4wLA7l6Kv