合格させちゃうOracle Cloud 1Z0-1067-21試験簡単かつ正確なPDF問題 [2022年02月24日]
1Z0-1067-21認証試験問題集解答を提供しています
質問 19
You have created a group for several auditors. You assign the following policies to the group:
What actions are the auditors allowed to perform within your tenancy? (Choose the best answer.)
- A. The Auditors are able to delete resource in the tenancy.
- B. The Auditors can view resources in the tenancy.
- C. Auditors are able to view all resources in the compartment.
- D. Auditors are able to create new instances in the tenancy.
正解: C
質問 20
You have a 750 MIB file in an Oracle Cloud Infrastructure (OCI) Object Storage bucket. You want to download the file in multiple parts to speed up the download using the OCI CLI. You also want to configure each part size to be 128 MIB.
Which is the correct OCI CLI command for this operation? (Choose the best answer.) oci os object get -ns my-namespace -bn my-bucket --name my-large-object --
- A. --resume-put --multipart-download-threshold 500 --part-size 128
oci os object get -ns my-namespace -bn my-bucket --name my-large-object -- - B. multipart-download-threshold 750 --parallel-download-count 128
oci os object download -ns my-namespace -bn my-bucket --name my-large-object - C. multipart-download-threshold 500 --part-size 128
- D. --multipart-download-threshold 750 --parallel-download-count 128
oci os object download -ns my-namespace -bn my-bucket --name my-large-object
正解: C
解説:
Explanation/Reference: https://docs.oracle.com/en-us/iaas/Content/API/SDKDocs/cliusing.htm
質問 21
Here is a partial code from a Terraform template written for Oracle Cloud Infrastructure (OCI):
What operation(s) does it perform? (Choose the best answer.)
- A. Creates a URL to provide access to an OCI Object Storage bucket for managing objects.
- B. Creates a pre-authenticated request for objects in an OCI Object Storage bucket.
- C. Creates a lifecycle policy for an OCI Object Storage bucket for moving data to Archival storage at a specified time.
- D. Provides object read and write access for an OCI Object Storage bucket.
正解: D
質問 22
You are using the Oracle Cloud Infrastructure Command Line Interface to launch a Linux virtual machine. You enter the following command (with correct values for all parameters):
The command fails.
Which is NOT a valid parameter in this command? (Choose the best answer.)
- A. - -shape "<shape_name>"
- B. -t <tenancy_id>
- C. - -image-id <image_id>
- D. -c <compartment_id>
- E. - -subnet-id <subnet_id>
正解: B
解説:
Tenacy is not in the parameters https://docs.oracle.com/en-us/iaas/tools/oci-cli/3.0.5/oci_cli_docs/cmdref/compute/instance/launch.html
質問 23
Your company recently adopted a hybrid cloud architecture which requires them to migrate some of their on- premises web applications to Oracle Cloud Infrastructure (OCI). You created a Terraform template which automatically provisions OCI resources such as compute instances, load balancer, and a database instance. After running the stack using the terraform apply command, it successfully launched the compute instances and the load balancer, but it failed to create a new database instance with the following error:
Service error: NotAuthorizedOrNotFound. shape VM.Standard2.4 not found. http status code: 404 You discovered that the resource quotas assigned to your compartment prevent you from using VM.Standard2.4 instance shapes available in your tenancy. You edit the Terraform script and replace the shape with VM.Standard2.2 Which option would you recommend to re-run the terraform command to have required OCI resources provisioned with the least effort? (Choose the best answer.)
- A. terraform apply -target=oci_database_db_system.db_system
- B. terraform refresh -target=oci_database_db_system.db_system
- C. terraform apply -auto-approve
- D. terraform plan -target=oci_database_db_system.db_system
正解: A
質問 24
You are asked to implement the disaster recovery (DR) and business continuity requirements for Oracle Cloud Infrastructure (OCI) Block Volumes. Two OCI regions being used: a primary/source region and a DR/ destination region. The requirements are:
* There should be a copy of data in the destination region to use if a region-wide disaster occurs in the source region
* Minimize costs
Which design will help you meet these requirements? (Choose the best answer.)
- A. Back up block volumes. Use Object Storage lifecycle management to automatically move backup objects to Archive Storage. Copy Archive Storage buckets from source region to destination at regular intervals.
- B. Clone block volumes. Use Object Storage lifecycle management to automatically move clone objects to Archive Storage. Copy Archive Storage buckets from source region to destination at regular intervals.
- C. Clone block volumes. Copy block volume clones from source region to destination region at regular intervals.
- D. Back up block volumes. Copy block volume backups from source region to destination region at regular intervals.
正解: A
質問 25
Security Testing Policy describes when and how you may conduct certain types of security testing of Oracle Cloud Services, including vulnerability and penetration tests, as well as tests involving data scraping tools.
What does Oracle allow as part of this testing? (Choose the best answer.)
- A. Customers can simulate DoS attack scenarios as long as it's restricted to the customer's own environment.
- B. Customers can validate that their network resources are isolated from other customer resources.
- C. Customers are allowed to test Oracle Cloud Infrastructure (OCI) hardware related to resources in their tenancy.
- D. Customers are allowed to use their own testing and monitoring tools.
正解: C
質問 26
One of the compute instances that you have deployed on Oracle Cloud Infrastructure (OCI) is malfunctioning.
You have created a console connection to remotely troubleshoot it.
Which two statements about console connections are TRUE? (Choose two.)
- A. It is not possible to use VNC console connections to connect to Bare Metal Instances.
- B. It is not possible to connect to the serial console to an instance running Microsoft Windows, however VNC console connection can be used.
- C. VNC console connection uses SSH port forwarding to create a secure connection from your local system to the VNC server attached to your instance's console.
- D. If you do not disconnect from the session, your serial console connection will automatically be terminated after 24 hours.
- E. For security purpose, the console connection will not let you edit system configuration files.
正解: C,D
質問 27
You are using Oracle Cloud Infrastructure (OCI) services across several regions: us-phoenix-1, us-ashburn-1, uk-london-1 and ap-tokyo-1. You have creates a separate administrator group for each region: PHX-Admins, ASH-Admins, LHR-Admins and NRT-Admins, respectively.
You want to restrict admin access to a specific region. E.g., PHX-Admins should be able to manage all resources in the us-phoenix-1 region only and not any other OCI regions.
What IAM policy syntax is required to restrict PHX-Admins to manage OCI resources in the us-phoenix-1 region only? (Choose the best answer.) Allow group PHX-Admins to manage all-resources in tenancy where
- A. request.permission= 'phx'
Allow group PHX-Admins to manage all-resources in tenancy where - B. request.target= 'phx'
Allow group PHX-Admins to manage all-resources in tenancy where - C. request.location= 'phx'
- D. request.region= 'phx'
Allow group PHX-Admins to manage all-resources in tenancy where
正解: D
質問 28
Your team implemented a SaaS application that requires a whole system deployment for each new customer. The infrastructure provisioning is already automated via Terraform, and now you have been asked to develop an Ansible playbook to centralize configuration file management and deployment.
What is the most effective way to ensure your playbooks are utilizing up-to-date and accurate inventory? (Choose the best answer.)
- A. Download the dynamic inventory script provided by Oracle Cloud Infrastructure and include it in the playbook invocation command.
- B. Implement a Command Line Interface script to list all the resources and run it within Ansible to generate a dynamic inventory list.
- C. Export an inventory list using Terraform apply command.
- D. Export an inventory list from the Oracle Cloud Infrastructure Web console.
正解: A
解説:
https://docs.oracle.com/en-us/iaas/Content/API/SDKDocs/ansibleinventoryscript.htm
質問 29
One of your development teams has asked for your help to standardize the creation of several compute instances that must be provisioned each day of the week. You initially write several Command Line Interface (CLI) commands with all appropriate configuration parameters to achieve this task later determining this method lacks flexibility.
Which command generates a JSON-based template that Oracle Cloud Infrastructure (OCI) CLI can use to provision these instances on a regular basis? (Choose the best answer.)
- A. oci compute instance launch - -generate-full-command-json-input
- B. oci compute instance create - -generate-cli-skeleton
- C. oci compute instance launch - -generate-cli-skeleton
- D. oci compute provision-instance - -generate-full-command-json-input
正解: A
解説:
https://docs.oracle.com/en-us/iaas/tools/oci-cli/3.0.5/oci_cli_docs/oci.html#cmdoption-generate-full-command-json-input
質問 30
You have recently joined a startup company and quickly find that nobody is tracking the amount of money spent on Oracle Cloud Infrastructure (OCI). Seeing an opportunity to help save money you begin creating a solution to better track the cost of resources provisioned by each individual on the team.
Which option allows you to identify excessive spend across all resources in your tenancy? (Choose the best answer.)
- A. Use the Events Service and create rules that will act when a new Object Storage bucket or Compute Instance has been created. Have the rule email you each time one of these events occurs.
- B. Use the Python SDK to write a custom application that will monitor the Audit log. Look for CREATEevents and configure the application to send you an email each time a new resource is created.
- C. Create a tag namespace named BILLINGwith a Tag Key named CostCenter. Tag each of your resources with this Tag Key and the correct value.
- D. Create a budget for each compartment that will send a notification when monthly spend reaches a pre- defined amount.
正解: D
解説:
Explanation/Reference: https://blogs.oracle.com/cloud-infrastructure/how-to-get-control-of-your-spending-in-oracle-cloud- infrastructure
質問 31
You have set an alarm to be generated when the CPU usage of a specified instance is greater than 10%. In the alarm behavior view below you notice that the critical condition happened around 23:30. You were expecting a notification after 1 minute, however, the alarm firing state did not begin until 23:33.
What should you change to fix it? (Choose the best answer.)
- A. Change the alarm's trigger delay minutes value to 1.
- B. Change the alarm condition to be grater than 3%.
- C. Change the notification topic that you previously associated with the alarm.
- D. Change the alarm's metric interval to 1.
正解: A
質問 32
You are asked to deploy a new application that has been designed to scale horizontally. The business stakeholders have asked that the application be deployed in us-phoenix-1.
Normal usage requires 2 OCPUs. You expect to have few spikes during the week, that will require up to 4 OCPUs, and a major usage uptick at the end of each month that will require 8 OCPUs.
What is the most cost-effective approach to implement a highly available and scalable solution? (Choose the best answer.)
- A. Create an instance with 1 OCPU shape. Use the Resize Instance action to scale up to a larger shape when more resources are needed.
- B. Create an instance with 1 OCPU shape. Use a CLI script to clone it when more resources are needed.
- C. Create an instance pool with a VM.Standard2.2 shape instance configuration. Setup the autoscaling configuration to use 2 availability domains and have a minimum of 2 instances, to handle the weekly spikes, and a maximum of 4 instances.
- D. Create an instance pool with a VM.Standard2.1 shape instance configuration. Setup the autoscaling configuration to use 2 availability domains and have a minimum of 2 instances and a maximum of 8 instances.
正解: D
解説:
https://docs.oracle.com/en-us/iaas/Content/Compute/References/computeshapes.htm#baremetalshapes__bm-standard
質問 33
You set up a bastion host in your VCN to only allow your IP address (140.19.2.140) to establish SSH connections to your Compute Instances that are deployed in a private subnet. The Compute Instances have an attached Network Security Group with a Source Type: Network Security Group (NSG), Source NSG: NSG-050504. To secure the bastion host, you added the following ingress rules to its Network Security Group:
However, after checking the bastion host logs, you discovered that there are IP addresses other than your own that can access your bastion host.
What is the root cause of this issue? (Choose the best answer.)
- A. The Security List allows access to all IP address which overrides the Network Security Group ingress rules.
- B. A netmask of /32 allows all IP address in the 140.19.2.0 network, other than your IP 140.19.2.140
- C. All compute instances associated with NSG-050504 are also able to connect to the bastion host.
- D. The port 22 provides unrestricted access to 140.19.2.140 and to other IP address.
正解: C
質問 34
You set up a bastion host in your VCN to only allow your IP address (140.19.2.140) to establish SSH connections to your Compute Instances that are deployed in a private subnet. The Compute Instances have an attached Network Security Group with a Source Type: Network Security Group (NSG), Source NSG: NSG-050504. To secure the bastion host, you added the following ingress rules to its Network Security Group:
However, after checking the bastion host logs, you discovered that there are IP addresses other than your own that can access your bastion host.
What is the root cause of this issue? (Choose the best answer.)
- A. The Security List allows access to all IP address which overrides the Network Security Group ingress rules.
- B. A netmask of /32 allows all IP address in the 140.19.2.0 network, other than your IP 140.19.2.140
- C. All compute instances associated with NSG-050504 are also able to connect to the bastion host.
- D. The port 22 provides unrestricted access to 140.19.2.140 and to other IP address.
正解: C
質問 35
Which two statements are TRUE about Object Storage data security and encryption in Oracle Cloud Infrastructure (OCI)? (Choose two.)
- A. Client-side encryption is managed by the customer.
- B. All traffic to and from Object Storage service is encrypted using TLS.
- C. A VPN connection to OCI is required to ensure secure data transfer to an object storage bucket.
- D. OCI Vault Management is used by default to provide data security.
- E. Data needs to be decrypted on the client side before retrieving it.
正解: A,B
質問 36
......
Oracle 1Z0-1067-21 認定試験の出題範囲：
| トピック | 出題範囲 |
|---|---|
| トピック 1 |
|
| トピック 2 |
|
| トピック 3 |
|
| トピック 4 |
|
| トピック 5 |
|
更新された1Z0-1067-21試験練習テスト問題：https://www.goshiken.com/Oracle/1Z0-1067-21-mondaishu.html