[2022年03月08日] 最新Oracle Cloud 1Z0-1067-21実際の無料試験解答
Oracle Cloud 1Z0-1067-21問題集最新の練習テスト56独特な解答
Oracle 1Z0-1067-21 認定試験の出題範囲：
| トピック | 出題範囲 |
|---|---|
| トピック 1 |
|
| トピック 2 |
|
| トピック 3 |
|
| トピック 4 |
|
| トピック 5 |
|
| トピック 6 |
|
| トピック 7 |
|
質問 23
You have been contracted by a local e-commerce company to assist with enhancing their online shopping application. The application is currently deployed in a single Oracle Cloud Infrastructure (OCI) region. The application utilizes a public load balancer, application servers in a private subnet, and a database in a separate, private subnet.
The company would like to deploy another set of similar infrastructure in a different OCI region that will act as standby site. In the event of a failure at the primary site, all customers should be routed to the failover site automatically.
After deploying the additional infrastructure within the second region, how should you configure automated failover requirements? (Choose the best answer.)
- A. Create a load balancer policy in the Traffic Management service. Configure one answer for each site. Set the answer for the primary site with a weight of 10 and the answer for the secondary site with a weight of 100.
- B. Deploy a new load balancer in the primary region. Create one backend set for the primary application servers and a second backend set for the standby application servers. Create a listener for the primary backend set with a timeout of 3 minutes. Create a listener for the secondary backend set with a timeout of 10 minutes.
- C. Create a failover policy in the Traffic Management service. Set the IP address of the public load balancer for the primary site in answer pool 1. Set the IP address of the public load balancer for the secondary site in answer pool 2. Define a health check to monitor both sites.
- D. Create a new A record in DNS that points to the public load balancer at the secondary site. Create a CNAME for the sub-domain failover that will resolve to the new A record. Inform customers to prepend the website URL with failover if the primary site is unavailable.
正解: C
質問 24
You launched a Linux compute instance to host the new version of your company website via Apache Httpd server on HTTPS (port 443). The instance is created in a public subnet along with other instances. The default security list associated to the subnet is:
You want to allow access to the company website from public internet without exposing websites eventually hosted on the other instances in the public subnet.
Which action would you take to accomplish the task? (Choose the best answer.)
- A. Create a network security group, add a stateful rule to allow ingress access on port 443 and associate it to the instance that hosts the company website.
- B. In default security list, add a stateful rule to allow ingress access on port 443.
- C. Create a new security list with a stateful rule to allow ingress access on port 443 and associate it to the public subnet.
- D. Create a network security group, add a stateful rule to allow ingress access on port 443 and associate it to the public subnet that hosts the company website.
正解: A
質問 25
The boot volume on your Oracle Linux instance has run out of space. Your application has crashed due to a lack of swap space, forcing you to increase the size of the boot volume.
Which step should NOT be included in the process used to solve the issue? (Choose the best answer.)
- A. Create a RAID 0 configuration to extend the boot volume file system onto another block volume.
- B. Reattach the boot volume and restart the instance.
- C. Stop the instance and detach the boot volume.
- D. Resize the boot volume by specifying a larger value than the boot volume's current size.
- E. Attach the resized boot volume to a second instance as a data volume; extend the partition and grow the file system in the resized boot volume.
正解: E
質問 26
Your customer is running a set of compute instances inside a private subnet to manage their workloads on Oracle Cloud Infrastructure (OCI) tenancy. You have set up auto scaling feature to provide consistent performance to their end users during period of high demand.
Which step should be met for auto scaling to work? (Choose the best answer.)
- A. Monitoring for the instances should not be enabled.
- B. Service gateway should be setup to allow instances to send metrics to monitoring service.
- C. Audit logs for the instances should be enabled.
- D. OS Management Service agent (osms) must be installed on the instances.
正解: C
質問 27
You have created a group for several auditors. You assign the following policies to the group:
What actions are the auditors allowed to perform within your tenancy? (Choose the best answer.)
- A. Auditors are able to view all resources in the compartment.
- B. The Auditors are able to delete resource in the tenancy.
- C. The Auditors can view resources in the tenancy.
- D. Auditors are able to create new instances in the tenancy.
正解: C
解説:
https://docs.oracle.com/en-us/iaas/Content/Identity/Concepts/policies.htm#Verbs
質問 28
You have created a group for several auditors. You assign the following policies to the group:
What actions are the auditors allowed to perform within your tenancy? (Choose the best answer.)
- A. The Auditors are able to delete resource in the tenancy.
- B. The Auditors can view resources in the tenancy.
- C. Auditors are able to view all resources in the compartment.
- D. Auditors are able to create new instances in the tenancy.
正解: C
質問 29
You have a web application running on Oracle Cloud Infrastructure (OCI) that lets users log in with a username and password. You notice that an attacker has tried to use SQL comment "--" to alter the database query, remove the password check and log in as a user. You decide to prevent any future attacks.
Which of the following OCI services or features would you choose to safeguard your application? (Choose the best answer.)
- A. Data Safe
- B. Vault
- C. Web Application Framework (WAF)
- D. Network Security Group
正解: B
質問 30
You have recently been asked to take over management of your company's infrastructure provisioning efforts, utilizing Terraform v0.12 to provision and manage infrastructure resources in Oracle Cloud Infrastructure (OCI). For the past few days the development environments have been failing to provision. Terraform returns the following error:
You locate the related code block in the Terraform config and find the following:
Which correction should you make to solve this issue? (Choose the best answer.)
- A. Modify line 15 to be the following:
tcp_options { min = "22"
max = "22"
} - B. Modify line 15 to be the following:
tcp_options = {min = "22", max = "22") - C. Replace the curly braces '{ }' in lines 11 and 16 with square braces '[ ]'
- D. Place a command at the end of line 16
正解: A
質問 31
You are working with Terraform on your laptop and have been tasked with spinning up multiple compute instances in Oracle Cloud Infrastructure (OCI) for a project. In addition, you are also required to collect IP addresses of provisioned instances and write them to a file and save it in your laptop.
Which specific Terraform functionality can help accomplish this task? (Choose the best answer.)
- A. Terraform modules
- B. Terraform local-exec
- C. Terraform remote state
- D. Terraform remote-exec
正解: D
解説:
https://www.terraform.io/docs/language/resources/provisioners/remote-exec.html
質問 32
You are using Oracle Cloud Infrastructure (OCI) console to set up an alarm on a budget to track your OCI spending.
Which two are valid targets for creating a budget in OCI? (Choose two.)
- A. Select Compartment as the type of target for your budget.
- B. Select Tenancy as the type of target for your budget.
- C. Select Cost-Tracking Tags as the type of target for your budget.
- D. Select group as the type of target for your budget.
- E. Select user as the type of target for your budget.
正解: A,C
質問 33
One of the compute instances that you have deployed on Oracle Cloud Infrastructure (OCI) is malfunctioning.
You have created a console connection to remotely troubleshoot it.
Which two statements about console connections are TRUE? (Choose two.)
- A. It is not possible to use VNC console connections to connect to Bare Metal Instances.
- B. It is not possible to connect to the serial console to an instance running Microsoft Windows, however VNC console connection can be used.
- C. VNC console connection uses SSH port forwarding to create a secure connection from your local system to the VNC server attached to your instance's console.
- D. If you do not disconnect from the session, your serial console connection will automatically be terminated after 24 hours.
- E. For security purpose, the console connection will not let you edit system configuration files.
正解: C,D
質問 34
You have set an alarm to be generated when the CPU usage of a specified instance is greater than 10%. In the alarm behavior view below you notice that the critical condition happened around 23:30. You were expecting a notification after 1 minute, however, the alarm firing state did not begin until 23:33.
What should you change to fix it? (Choose the best answer.)
- A. Change the alarm's trigger delay minutes value to 1.
- B. Change the alarm condition to be grater than 3%.
- C. Change the notification topic that you previously associated with the alarm.
- D. Change the alarm's metric interval to 1.
正解: A
質問 35
You have been asked to set up connectivity between a client's on-premises network and Oracle Cloud Infrastructure (OCI). The requirements are:
Low latency: The applications are financial and require low latency connectivity into OCI. Consistency: The application isn't tolerant of performance variation.
Performance: The communications link needs to support up to 1.25 Gbps.
Encryption: The communications link needs to encrypt any data in transit between the on-premises network and OCI Virtual Cloud Network (VCN).
The client wants to implement the above with as low a cost as possible, while meeting all of the requirements. What should you suggest? (Choose the best answer.)
- A. Provision FastConnect with a single private virtual circuit.
- B. Provision FastConnect with a single public virtual circuit, and run an IPsec VPN tunnel over the top of this
- C. Provision FastConnect with a single private virtual circuit, and run an IPsec VPN tunnel over the top of this virtual circuit.
- D. Provision a site-to-site IPsec VPN between your on-premises network and your virtual cloud network (VCN) using VPN Connect.
- E. Provision FastConnect with a single public virtual circuit.
正解: A
解説:
virtual circuit.
質問 36
You have been asked to update the lifecycle policy for object storage using the Oracle Cloud Infrastructure (OCI) Command Line Interface (CLI).
Which command can successfully update the policy? (Choose the best answer.)
- A. oci os object-lifecycle-policy put -ns <object_storage_namespace> -bn <bucket_name>
- B. oci os object-lifecycle-policy put -ns <object_storage_namespace> -bn <bucket_name> - -items
<json_formatted_lifecycle_policy> - C. oci os object-lifecycle-policy get -ns <object_storage_namespace> -bn <bucket_name>
- D. oci os object-lifecycle-policy delete -ns <object_storage_namespace> -bn <bucket_name>
正解: B
解説:
https://docs.oracle.com/en-us/iaas/Content/Object/Tasks/usinglifecyclepolicies.htm#cli
https://docs.oracle.com/en-us/iaas/tools/oci-cli/2.17.0/oci_cli_docs/cmdref/os/object-lifecycle-policy/put.html
質問 37
You created an Oracle Linux compute instance through the Oracle Cloud Infrastructure (OCI) management console then immediately realize you forgot to add an SSH key file. You notice that OCI compute service provides instance console connections that supports adding SSH keys for a running instance. Hence, you created the console connection for your Linux server and activated it using the connection string provided. However, now you get prompted for a username and password to login.
What option should you recommend to add the SSH key to your running instance, while minimizing the administrative overhead? (Choose the best answer.)
- A. You need to configure the boot loader to use ttyS0 as a console terminal on the VM.
- B. You need to modify the serial console connection string to include the identity file flag, -i to specify the SSH key to use.
- C. You need to reboot the instance from the console, boot into the bash shell in maintenance mode, and add SSH keys for the opc user.
- D. You need to terminate the running instance and recreate it by providing the SSH key file.
正解: C
解説:
If you created an instance without an SSH key, you can use the serial console to boot into maintenance mode and add or reset the SSH key for the opc user or reset the password for the opc user. Alternately, you can stop the instance, attach the boot volume to a new instance, and configure SSH on the new instance.
https://docs.oracle.com/en-us/iaas/Content/Compute/Tasks/accessinginstance.htm
質問 38
What is a key benefit of using Oracle Cloud Infrastructure's Resource Manager for your Terraform provisioning and management activities? (Choose the best answer.)
- A. Resource Manager has administrative privileges by design. Even if your IAM user does not have access, you can leverage Resource Manager to provision new resources to any compartment in the Tenancy.
- B. You can use Resource Manager to apply patches to all existing Oracle Linux interfaces in a specified compartment.
- C. Resource Manager manages to Terraform state file for your infrastructure and locks the file so that only one job at a time can run on a given stack.
- D. You can use Resource Manager to identify and maintain an inventory of all Compute and Database instances across your tenancy.
正解: C
質問 39
You are using Oracle Cloud Infrastructure (OCI) services across several regions: us-phoenix-1, us-ashburn-1, uk-london-1 and ap-tokyo-1. You have creates a separate administrator group for each region: PHX-Admins, ASH-Admins, LHR-Admins and NRT-Admins, respectively.
You want to restrict admin access to a specific region. E.g., PHX-Admins should be able to manage all resources in the us-phoenix-1 region only and not any other OCI regions.
What IAM policy syntax is required to restrict PHX-Admins to manage OCI resources in the us-phoenix-1 region only? (Choose the best answer.) Allow group PHX-Admins to manage all-resources in tenancy where
- A. request.permission= 'phx'
Allow group PHX-Admins to manage all-resources in tenancy where - B. request.target= 'phx'
Allow group PHX-Admins to manage all-resources in tenancy where - C. request.location= 'phx'
- D. request.region= 'phx'
Allow group PHX-Admins to manage all-resources in tenancy where
正解: D
質問 40
You have been asked to ensure that in-transit communication between an Oracle Cloud Infrastructure (OCI) compute instance and an on-premises server (192.168.10.10/32) is encrypted. The instances communicate using HTTP. The OCI Virtual Cloud Network (VCN) is connected to the on-premises network by two separate connections: a Dynamic IPsec VPN tunnel and a FastConnect virtual circuit. No static configuration has been added.
What solution should you recommend? (Choose the best answer.)
- A. The instances will communicate by default over IPsec VPN, which ensures data is encrypted in-transit.
- B. Advertise a 192.168.10.10/32 route over the VPN.
- C. The instances will communicate by default over the FastConnect private virtual circuit, which ensures data is encrypted in-transit.
- D. Advertise a 192.168.10.10/32 router over the FastConnect.
正解: B
解説:
https://www.oracle.com/uk/cloud/networking/fastconnect-faq.html
質問 41
You have recently joined a startup company and quickly find that nobody is tracking the amount of money spent on Oracle Cloud Infrastructure (OCI). Seeing an opportunity to help save money you begin creating a solution to better track the cost of resources provisioned by each individual on the team.
Which option allows you to identify excessive spend across all resources in your tenancy? (Choose the best answer.)
- A. Use the Events Service and create rules that will act when a new Object Storage bucket or Compute Instance has been created. Have the rule email you each time one of these events occurs.
- B. Create a tag namespace named BILLING with a Tag Key named CostCenter. Tag each of your resources with this Tag Key and the correct value.
- C. Use the Python SDK to write a custom application that will monitor the Audit log. Look for CREATE events and configure the application to send you an email each time a new resource is created.
- D. Create a budget for each compartment that will send a notification when monthly spend reaches a pre- defined amount.
正解: B
解説:
https://docs.oracle.com/en-us/iaas/Content/Tagging/Tasks/usingcosttrackingtags.htm
質問 42
You are using the Oracle Cloud Infrastructure Command Line Interface to launch a Linux virtual machine. You enter the following command (with correct values for all parameters):
The command fails.
Which is NOT a valid parameter in this command? (Choose the best answer.)
- A. - -shape "<shape_name>"
- B. -t <tenancy_id>
- C. - -image-id <image_id>
- D. -c <compartment_id>
- E. - -subnet-id <subnet_id>
正解: B
解説:
Tenacy is not in the parameters https://docs.oracle.com/en-us/iaas/tools/oci-cli/3.0.5/oci_cli_docs/cmdref/compute/instance/launch.html
質問 43
A developer has created a file system in Oracle Cloud Infrastructure (OCI) File Storage service. She launches an Oracle Linux compute instance and successfully mounts the file system from the instance.
She then tries writing to the file system from the compute instance using the following command:
touch /mnt/yourmountpoint/helloworld
But gets an error message:
touch: cannot touch '/mnt/yourmountpoint/helloworrld': Permission denied Which is a reason for this error? (Choose the best answer.)
- A. 'touch' command is not available in Oracle Linux by default.
- B. User is connecting as the default Oracle Linux user 'opc' instead of 'root' user.
- C. User is not part of any OCI Identity and Access Management group with write permissions to File Storage service.
- D. Service limits or quota for file system writes have been breached.
正解: C
質問 44
You have created a geolocation steering policy in the Oracle Cloud Infrastructure (OCI) Traffic Management service, with this configuration:
What happens to requests that originate in Africa? (Choose the best answer.)
- A. The traffic will be forwarded at the same time to both Pool 1 and Pool 2.
- B. The traffic will be forwarded to Pool 1. If Pool 1 is not available, then it will be forwarded to Pool 2.
- C. The traffic will be forwarded randomly to any of the pools mentioned in the rules.
- D. The traffic will be dropped.
正解: C
解説:
This policy currently has no global catch-all. No global catch-all means that queries not matching any of the above rules will receive a random answer. Global Catche-all need to set up if the traffic does not meet any condition in the pool and you still want to serve the request. Default is serve randomly.
https://www.oracle.com/a/ocom/docs/cloud/traffic-management-100.pdf
質問 45
......
検証済み1Z0-1067-21問題集と解答100%合格GoShiken：https://www.goshiken.com/Oracle/1Z0-1067-21-mondaishu.html