Summer Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: ecus65

Oracle 1z0-1067-24 - Oracle Cloud Infrastructure 2024 Cloud Operations Professional

Page: 1 / 2
Total 93 questions

You have been brought In to help secure an existing application that leverages Object Storage buckets to distribute content. The data is currently being shared from public buckets and the security team Is not satisfied with this approach. They have stated that all data must be stored In storage buckets. Your application should be able to provide secure access to the data. The URL that is provided for access to the data must be rotated every 30 days. Which design option will meet these requirements?

A.

Use Pre-Authenticated request, even though there will be multiple URLs this will pro-vide better security.

B.

Create a private bucket only to share the data.

C.

Create multiple bucket and classify them as Public and Private. Use public bucket for non-sensitive data and private bucket for sensitive data.

D.

Create a new group and map users to this group, create a IAM policy providing access to Object Storage service only to this group. Users can then simply login to OCI console and retrieve needed flies.

Which statement about the Oracle Cloud Infrastructure (OCI) instance console connection is TRUE?

A.

It does not let you edit the configuration files needed to recover the instance

B.

It does not let you execute the sized-limit script.

C.

It does not let you use the boot menu during the reboot process

D.

It does not let you reset the SSH key

To upload a file from a compute instance into Object Storage, you SSH into the compute instance and run the following OCI CLI command: oci os object put -ns mynamespace -bn mybucket --name myfile.txt --file /Users/me/myfile.txt --auth instance_principal Which statement must be true for this command to succeed?

A.

The bucket has a pre-authenticated request (PAR) that specifies the compute instance that will upload to it.

B.

Your OCI user has the permission to upload to the bucket.

C.

The instance matches a matching rule for a dynamic group with the permission to up-load to the bucket.

D.

Your OCI API key has been placed on the compute instance.

Which option contains the essential components of the Oracle Cloud Infrastructure Notifications service? (Choose the best answer.)

A.

An ALARM with a name unique across the tenancy, a SUBSCRIPTION, and a MET-RIC with the measurement of interest.

B.

A TOPIC with a name unique across the compartment, a SUBSCRIPTION, and a MESSAGE where content is published.

C.

An ALARM with a name unique across the compartment, a SUBSCRIPTION, and a METRIC with the measurement of interest.

D.

A TOPIC with a name unique across the tenancy, a SUBSCRIPTION, and a MES-SAGE where content is published.

You have recently joined a startup company and quickly find that nobody is tracking the amount of money spent on Oracle Cloud Infrastructure (OCI). Seeing an opportunity to help save money you begin creating a solution to better track the cost of resources provisioned by each individual on the team. Which option allows you to identify excessive spend across all re-sources in your tenancy? (Choose the best answer.)

A.

Create a tag namespace named BILLING with a Tag Key named CostCenter. Tag each of your resources with this Tag Key and the correct value.

B.

Use the Python SDK to write a custom application that will monitor the Audit log. Look for CREATE events and configure the application to send you an email each time a new resource is created.

C.

Use the Events Service and create rules that will act when a new Object Storage bucket or Compute Instance has been created. Have the rule email you each time one of these events occurs.

D.

Create a budget for each compartment that will send a notification when monthly spend reaches a pre-defined amount.

You have been contracted by a local e-commerce company to assist with enhancing their online shopping application. The application is currently deployed in a single Oracle Cloud Infrastructure (OCI) region. The application utilizes a public load balancer, application servers in a private subnet, and a database in a separate, private subnet. The company would like to deploy another set of similar infrastructure in a different OCI region that will act as standby site. In the event of a failure at the primary site, all customers should be routed to the failover site automatically. After deploying the additional infrastructure within the second region, how should you configure automated failover requirements? (Choose the best answer.)

A.

Create a new A record in DNS that points to the public load balancer at the secondary site. Create a CNAME for the sub-domain failover that will resolve to the new A rec-ord. Inform customers to prepend the website URL with failover if the primary site is unavailable.

B.

Create a load balancer policy in the Traffic Management service. Configure one answer for each site. Set the answer for the primary site with a weight of 10 and the answer for the secondary site with a weight of 100.

C.

Deploy a new load balancer in the primary region. Create one backend set for the primary application servers and a second backend set for the standby application servers. Create a listener for the primary backend set with a timeout of 3 minutes. Create a listener for the secondary backend set with a timeout of 10 minutes.

D.

Create a failover policy in the Traffic Management service. Set the IP address of the public load balancer for the primary site in answer pool 1. Set the IP address of the public load balancer for the secondary site in answer pool 2. Define a health check to monitor both sites.

A developer has created a file system in the Oracle Cloud Infrastructure (OCI) File Storage service. She then launches an Oracle Linux compute instance and mounts the file system successfully on this instance. The next day, she tries writing to the file system from the compute instance using the following command: touch /mnt/yourmountpoint/helloworld.txt But receives an error message: touch: cannot touch '/mnt/yourmountpoint/helloworld.txt': Permission denied What might be the reason for this error?

A.

Service limits or quota for file system writes have been breached.

B.

User is connecting as the default Oracle Linux user opc instead of the root user.

C.

User is not part of any OCI Identity and Access Management (IAM) group with write permissions to the File Storage service.

D.

The touch command is not available in Oracle Linux, by default.

Which option is NOT a possible return value for an OCI health check?

A.

REGEX_MISMATCH

B.

UNKNOWN

C.

UNREACHABLE

D.

INVALID_STATUS_CODE

E.

TIMED_OUT

You have a Terraform configuration that includes a VCN and three compute instances in the VCN. The configuration also includes a cloud-init script for each compute instance. You upload the configuration to OCI Resource Manager and run an apply job. Which option correctly describes the order of execution, assuming the configuration does not model explicit dependencies?

A.

Resource Manager provisions the VCN, then the compute instances one at a time. Terraform does not wait for the cloud-init script of each instance to complete before proceeding to the next instance.

B.

Resource Manager provisions the VCN, then all compute instances in parallel.

C.

Resource Manager provisions the VCN, then the compute instances one at a time. Terraform waits for the cloud-init script of each instance to complete before proceeding to the next instance.

D.

Resource Manager provisions the resources from top to bottom in the configuration file.

You are using a load balancer to distribute traffic to an autoscaling instance pool running an HTTP application. You want to periodically check if all compute instances in the pool, including the new instances provisioned by autoscaling. are responding on TCP port 80.

How can you achieve this?

A.

Create an HTTP monitor on port 80 in the OCI Health Checks service.

B.

Create an alarm in the OCI Monitoring service.

C.

Deploy Management Agents via the Oracle Cloud Agent to monitor HTTP on port 80

D.

Create a load balancer health check for HTTP on port 80.