Sign In
Home/Oracle/1z0-1067-21/Free questions

1z0-1067-21 — Free Practice Questions

10 free sample questions from a bank of 78, with the correct answers and explanations. No signup required — start practising right now.

1You have been asked to ensure that in-transit communication between an Oracle Cloud Infrastructure (OCI) compute instance and an on-premises server (192.168.10.10/32) is encrypted. The instances communicate using HTTP. The OCI Virtual Cloud Network (VCN) is connected to the on-premises network by two separate connections: a Dynamic IPsec VPN tunnel and a FastConnect virtual circuit. No static configuration has been added. What solution should you recommend? (Choose the best answer.)
  • The instances will communicate by default over IPsec VPN, which ensures data is encrypted in-transit.
  • Advertise a 192.168.10.10/32 route over the VPN.
  • Advertise a 192.168.10.10/32 router over the FastConnect.
  • The instances will communicate by default over the FastConnect private virtual circuit, which ensures data is encrypted in-transit.
Answer: B
2Which two statements about the Oracle Cloud Infrastructure (OCI) Command Line Interface (CLI) are TRUE? (Choose two.)
  • You can run CLI commands from inside OCI Regions only.
  • You can filter CLI output using the JMESPath query option for JSON.
  • The CLI provides an automatic way to connect with instances provisioned on OCI.
  • The CLI allows you to use the Python language to interact with OCI APIs.
  • The CLI provides the same core functionality as the Console, plus additional commands.
Answer:
3You have a Linux compute instance located in a public subnet in a VCN which hosts a web application. The security list attached to subnet containing the compute instance has the following stateful ingress rule. The Route table attached to the Public subnet is shown below. You can establish an SSH connection into the compute instance from the internet. However, you are not able to connect to the web server using your web browser. Which step will resolve the issue? (Choose the best answer.)
1z0-1067-21 question 31z0-1067-21 question 3
  • In the route table, add a rule for your default traffic to be routed to NAT gateway.
  • In the security list, add an ingress rule for port 80 (http).
  • In the security list, remove the ssh rule.
  • In the route table, add a rule for your default traffic to be routed to service gateway.
Answer: B
4Your company recently adopted a hybrid cloud architecture which requires them to migrate some of their on-premises web applications to Oracle Cloud Infrastructure (OCI). You created a Terraform template which automatically provisions OCI resources such as compute instances, load balancer, and a database instance. After running the stack using the terraform apply command, it successfully launched the compute instances and the load balancer, but it failed to create a new database instance with the following error: Service error: NotAuthorizedOrNotFound. shape VM.Standard2.4 not found. http status code: 404 You discovered that the resource quotas assigned to your compartment prevent you from using VM.Standard2.4 instance shapes available in your tenancy. You edit the Terraform script and replace the shape with VM.Standard2.2 Which option would you recommend to re-run the terraform command to have required OCI resources provisioned with the least effort? (Choose the best answer.)
  • terraform plan ג€"target=oci_database_db_system.db_system
  • terraform apply ג€"auto-approve
  • terraform refresh ג€"target=oci_database_db_system.db_system
  • terraform apply ג€"target=oci_database_db_system.db_system
Answer: D
5You have been monitoring your company's applications running in Oracle Cloud Infrastructure (OCI) and notice that the application is using OCI Traffic Management service. This service uses a traffic steering policy to distribute the DNS traffic based on subnet addresses in a rule set. Which steering policy is in use in this particular case? (Choose the best answer.)
  • Load Balancing policy
  • Geolocation steering
  • ASN steering policy
  • IP Prefix steering
Answer: D
6You have the following compartment structure within your company's Oracle Cloud Infrastructure (OCI) tenancy: You want to create a policy in the root compartment to allow SystemAdmins to manage VCNs only in CompartmentC. Which policy is correct? (Choose the best answer.)
1z0-1067-21 question 6
  • Allow group SystemAdmins to manage virtual-network-family in compartment CompartmentB:CompartmentC
  • Allow group SystemAdmins to manage virtual-network-family in compartment Root
  • Allow group SystemAdmins to manage virtual-network-family in compartment CompartmentA:CompartmentB:CompartmentC
  • Allow group SystemAdmins to manage virtual-network-family in compartment CompartmentC
Answer: C
7Which option contains the essential components of the Oracle Cloud Infrastructure Notifications service? (Choose the best answer.)
  • An ALARM with a name unique across the tenancy, a SUBSCRIPTION, and a METRIC with the measurement of interest.
  • A TOPIC with a name unique across the tenancy, a SUBSCRIPTION, and a MESSAGE where content is published.
  • A TOPIC with a name unique across the compartment, a SUBSCRIPTION, and a MESSAGE where content is published.
  • An ALARM with a name unique across the compartment, a SUBSCRIPTION, and a METRIC with the measurement of interest.
Answer: B
8You run a large global application with 90% of customers based in the US and Canada. You want to be able to test a new feature and allow a small percentage of users to access the new version of your application. What Oracle Cloud Infrastructure Traffic Management steering policy should you utilize? (Choose the best answer.)
  • Load Balancer
  • IP Prefix steering
  • ASN steering
  • Geolocation steering
Answer: D
9Which two statements are TRUE about Object Storage data security and encryption in Oracle Cloud Infrastructure (OCI)? (Choose two.)
  • Client-side encryption is managed by the customer.
  • Data needs to be decrypted on the client side before retrieving it.
  • OCI Vault Management is used by default to provide data security.
  • All traffic to and from Object Storage service is encrypted using TLS.
  • A VPN connection to OCI is required to ensure secure data transfer to an object storage bucket.
Answer:
10You are using Oracle Cloud Infrastructure (OCI) console to set up an alarm on a budget to track your OCI spending. Which two are valid targets for creating a budget in OCI? (Choose two.)
  • Select group as the type of target for your budget.
  • Select Tenancy as the type of target for your budget.
  • Select user as the type of target for your budget.
  • Select Cost-Tracking Tags as the type of target for your budget.
  • Select Compartment as the type of target for your budget.
Answer:
Unlock all 78 questions · $9.99Practice these interactively

Want the full bank of 78 questions for 1z0-1067-21? See all practice exams.