1z0-1067-22試験無料問題集（56題）「Oracle Cloud Infrastructure 2022 Cloud Operations Professional 認定」

出題：1

You are using Oracle Cloud Infrastructure (OCI) services across several regions: us-phoenix-1, us-ashburn-1, uk-london-1 and ap-tokyo-1. You have creates a separateadministrator group for each region: PHX-Admins, ASH-Admins, LHR-Admins and NRT-Admins, respectively.
You want to restrict admin access to a specific region. E.g., PHX-Admins should be able to manage all resources in the us-phoenix-1 region only and not any other OCI regions.
What IAM policy syntax is required to restrict PHX-Admins to manage OCI resources in the us-phoenix-1 region only? (Choose the best answer.)

A. Allow group PHX-Admins to manage all-resources in tenancy where request.location= 'phx'

B. Allow group PHX-Admins to manage all-resources in tenancy where request.region= 'phx'

C. Allow group PHX-Admins to manage all-resources in tenancy where request.target= 'phx'

D. Allow group PHX-Admins to manage all-resources in tenancy where request.permission= 'phx'

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

You set up a bastion host in your VCN to only allow your IP address (140.19.2.140) to establish SSH connections to your Compute Instances that are deployed in a private subnet. The Compute Instances have an attached Network Security Group with a Source Type: Network Security Group (NSG), Source NSG:
NSG-050504. To secure the bastion host, you added the following ingress rules to its Network Security Group:

However, after checking the bastion host logs, you discovered that there areIP addresses other than your own that can access your bastion host.
What is the root cause of this issue? (Choose the best answer.)

A. A netmask of /32 allows all IP address in the 140.19.2.0 network, other thanyour IP 140.19.2.140

B. Allcompute instances associated with NSG-050504 are also able to connect to the bastion host.

C. The port 22 provides unrestricted access to 140.19.2.140 and to other IP address.

D. The Security List allows access to all IP address which overrides the Network Security Group ingress rules.

正解：B 解答を投票する

出題：3

You have created an Autonomous Data Warehouse (ADW) service in your company's Oracle Cloud Infrastructure (OCI) tenancy and you now have to load historical data into it. You have already extracted this historical data from multiple data marts and data warehouses. This data is stored in multiple CSV text files and these files are ranging in size from 25 MB to 20 GB.
Which is the most efficient and error tolerant method for loading data into ADW? (Choose the best answer.)

A. Create Auth token, use it to create an object storage credential by executing DBMS_CLOUD.CREATE_CREDENTIAL, using OCI CLI upload the CSV files to an OCI object storage bucket, create the tables in the ADW database and then execute DBMS_CLOUD.COPY_DATA for each CSV file to copy the contents into the corresponding ADW database table.

B. Create Auth token, useit to create an object storage credential by executing DBMS_CLOUD.CREATE_CREDENTIAL, using OCI CLI upload the CSV files to an OCI object storage bucket, create the tables in the ADW database and then execute Data Pump Import for each CSV file to copy the contents into the corresponding ADW database table.

C. CreateAuth token, use it to create an object storage credential by executing DBMS_CLOUD.CREATE_CREDENTIAL, using the web console upload the CSV files to an OCI object storage bucket, create the tables in the ADW database and then execute DBMS_CLOUD.COPY_DATA foreach CSV file to copy the contents into the corresponding ADW database table.

D. Create the tables in the ADW database and then execute SQL*Loader for each CSV file to load the contents into the corresponding ADW database table.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

You have a 750 MIB file in an Oracle Cloud Infrastructure (OCI)Object Storage bucket. You want to download the file in multiple parts to speed up the download using the OCI CLI. You also want to configure each part size to be 128 MIB.
Which is the correct OCI CLI command for this operation? (Choose the best answer.)

A. oci os object download -ns my-namespace -bn my-bucket --name my-large-object -- resume-put
--multipart-download-threshold 500 --part-size 128

B. oci os object get -ns my-namespace -bn my-bucket --name my-large-object
--multipart-download-threshold 500 --part-size 128

C. oci os object get -ns my-namespace -bn my-bucket --name my-large-object -- multipart-download-threshold 750 --parallel-download-count 128

D. oci os object download -ns my-namespace -bn my-bucket --name my-large-object -- multipart-download-threshold 750 --parallel-download-count 128

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

You have the following compartment structure within your company's Oracle Cloud Infrastructure (OCI) tenancy:

You want to create a policy in the root compartment to allow SystemAdmins to manage VCNs only in CompartmentC.
Which policy is correct? (Choose the best answer.)

A. Allow group SystemAdmins to manage virtual-network-family in compartment CompartmentB:CompartmentC

B. Allow group SystemAdmins to manage virtual-network-family in
compartmentCompartmentA:CompartmentB:CompartmentC

C. Allow group SystemAdmins to manage virtual-network-family in compartment Root

D. Allow group SystemAdmins to manage virtual-network-family in compartment CompartmentC

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

You have a web application running on Oracle Cloud Infrastructure (OCI) that lets users log in with a username and password. You notice that an attacker has tried to use SQL comment "--" to alter the database query, remove the password check and log in as a user. You decide to prevent any future attacks.
Which of the following OCI services or features would you choose tosafeguard your application? (Choose the best answer.)

A. Web Application Framework (WAF)

B. Data Safe

C. Vault

D. Network Security Group

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

1z0-1067-22試験無料問題集「Oracle Cloud Infrastructure 2022 Cloud Operations Professional 認定」