1Z0-1067-20無料問題集「Oracle Cloud Infrastructure 2020 Cloud Operations Associate」

質問 1

You have the following compartment structure within your company's Oracle Cloud Infrastructure (OCI) tenancy:

You want to create a policy in the root compartment to allow SystemAdmins to manage VCNs only In CompartmentC.
Which policy is correct?

（A）Allow group SystemAdmins to manage virtual-network-family in compartment CompartmentA:CompartmentB:CompartmentC

（B）Allow group SystemAdmins to manage virtual-network-family in compartment CompartmentC

（C）Allow group SystemAdmins to manage virtual-network-family in compartment Root

（D）Allow group SystemAdmins to manage virtual-network-family in compartment CompartmentB:CompartmentC

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

An Insurance company has contracted you to help automate their application business continuity plan. They have the application running in eu-frankfurt-1 as the primary site and uk-london-1 as a disaster recovery site.
Normally they have a DNS A record associated with the IP address of the primary endpoint In eu-frankfurt-1.
In the event of a disaster, they use OCI DNS Zone Management to update the A record and replace it with the IP address of the endpoint In uk-london-1.
How can you automate the failover process?

（A）Provision a Load Balancer in Frankfurt and associate it with the A record in DNS. Create a backend set with backend servers from both eu-frankfurt-1 and uk-london-1 regions.

（B）Create a Health Check that evaluates both regional endpoints. Create a Traffic Management Steering policy with Failover type and associate it with the Health Check.

（C）Create a Traffic Management Steering policy and attach it to a backend set with the backend servers from both eu-frankfurt-1 and uk-london-1 regions.

（D）Create a Traffic Management Steering policy with Load Balancer type and add both eu-frankfurt-1 and uk-london-1 endpoints. Attach the Traffic Management Steering policy to the A record.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

At the end of a terraform apply operation, what is the default output?

（A）statistics about what was added, changed, and destroyed, and the values of outputs

（B）statistics about what was added, changed, and destroyed

（C）the entire state file

（D）nothing by default

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

You created an Oracle Linux compute Instance through the Oracle Cloud Infrastructure (OCI) management console then immediately realize you add an SSH key file. You notice that OCI compute service provides instance console connections that supports adding SSH keys for a running Instance. Hence, you created the console connection for your Linux server and activated it using the connection string provided. However, now you get' prompted for a username and password to login.
What option should you recommend to add the SSH key to your running Instance, while minimizing the administrative overhead?

（A）You need to modify the serial console connection string to include the identity file flag, -i to specify the SSH key to use.

（B）You need to configure the boot loader to use ttyS0 as a console terminal on the VM.

（C）You need to reboot the instance from the console, boot into the bash shell In maintenance mode, and add SSH keys for the open user.

（D）You need to terminate the running instance and recreate it by providing the SSH key file.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

You have been asked to provision a new production environment on Oracle Cloud Infrastructure (OCI). After working with the solution architect you dockte that you are going to automate this process.
Which OCI service can help automate the provisioning of this new environment?

（A）OCI Streaming Service

（B）Oracle Container Engine for Kubernetes

（C）Oracle Functions

（D）OCI Resource Manager

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

You have been asked to investigate a potential security risk on your company's Oracle Cloud Infrastructure (OCI) tenancy. You decide to start by looking through the audit logs for suspicious activity.
How can you retrieve the audit logs using the OCI Command Line Interface (CLI)?

（A）oci audit event list --end-time $end-time --compartment-id $compartment-id

（B）oci audit event list --start-time $start-time --end-time $end-time --tenancy-id $tenancy-id

（C）oci audit event list --start-time $start-time --end-time $end-time --compartment-id
$compartment-id

（D）oci audit event list --start-time $start-time --compartment-id $compartment-id

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

Several development teams in your company have each been provided with a budget and a dedicated compartment to be used for testing purpose u are asked to help them to control the costs and avoid any overspending.
What should you do?

（A）Configure a Quota for each compartment to prevent provisioning of any bare metal instances.

（B）Contact Oracle support and ask them to associate the monthly budget with the Service Limits In every region for which your tenancy is subscribed. The tenancy administrator will receive an alert email from Oracle when the limit Is reached.

（C）Associate a Budget Tag to each resource with monthly budget amount and use that Information to prepare a weekly report to send to each team.

（D）Associate a Budget Tag to each compartment with the monthly budget amount and set an alert rule to notify the developers' teams when they reached a specific percentage of the budget

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 8

You set up a bastion host in your VCN to only allow your IP address (140.19.2.140) to establish SSH connections to your Compute instances that are deployed private subnet. The Compute instances have an attached Network Security Group with a Source Type: Network security Group (NSG) , Source NSG:
-050504. To secure the bastion host, you added the following ingress rules to its Network Security Group:

However, after checking the bastion host logs, you discovered that there are IP addresses other than your own that can access your bastion host.
What is the root cause of this issue?

（A）The port 22 provides unrestricted access to 140.19.2.140 and to other IP address

（B）A netmask of /32 allows all IP address in the 140.19.2.0 network, other than your IP 110.19.2.140

（C）The Security List allows access to all IP address which overrides the Network Security Group ingress rules.

（D）All compute instances associated with NSG-050504 are also able to connect to the bastion host.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

1Z0-1067-20 無料問題集「Oracle Cloud Infrastructure 2020 Cloud Operations Associate」

弊社を連絡する

関連リンク

トップ試験