Oracle_1Z0-1072-22_March_2023-v1.1.pdf

Oracle Cloud Infrastructure 2022 Architect Associate
Exam Name: Oracle Cloud Infrastructure 2022 Architect Associate
Exam Code: 1Z0-1072-22
Exam Price: 245 $ (USD)
Duration: 90 minutes
Number of Questions: 55
Passing Score: 65%
Get Latest & Actual Exam's Question and Answers from © Homer CO., LTD. We cover ALL Cisco and Non-Cisco Exam
Dumps. Cisco Written & LAB Dump Comptia, AWS, Azure, Oracle, Huawei, Aruba, Fortinet, F5 101, 201, CEHv1x, Palo
Alto, Check Point, EC Council and many more.
"We make sale ONLY if the dump is stable" Contact us: cciehomer@gmail.com Whatsapp +1-302-440-1843 or
homerwilliams@cciehomer.com
Developed by: Hussain & Evan
Dump Vendor: Homer Co., Ltd.
Website: COMING SOON
Contact us: cciehomer@gmail.com or homerwilliams@cciehomer.com
© 2018 Homer Co., Ltd.
CCIEHOMER We provide Pratice Test's in PDF and VCE format with FREE VCE Player.
Get Latest & Actual Exam's Question and Answers from © Homer CO., LTD. We cover ALL Cisco and Non-Cisco Exam Dumps.
Cisco Written & CCIE LAB Dump, AWS, Microsoft, Azure, Oracle, Huawei, Aruba, Fortinet, F5 101 & F5 201, RedHat Linux, Comptia, CEHv1x, Palo Alto, Check Point, EC Council and many more.
CCIEHOMER "We make sale ONLY if the dump is stable" Contact us: cciehomer@gmail.com OR homerwilliams@cciehomer.com OR Whatsapp +1-302-440-1843

QUESTION 1
You have an Oracle Cloud Infrastructure (OCI) load balancer distributing traffic via an evenly weighted round robin policy to your back-end web servers.
You notice that one of your web servers is receiving more traffic than other web servers.
How can you resolve this to make sure traffic is evenly distributed across all back-end webservers?
A. Disable cookie-based session persistence on your backend set.
B. Change keep-alive setting between the load balancer and backend server.
C. Disable SSL configuration associated with your backend set.
D. Create separate listeners for each backend web server.
Correct Answer: D
QUESTION 2
Which two are Regional resources in Oracle Cloud Infrastructure? (Choose two.)
A. Ephemeral public IPs
B. Compartments
C. Compute images
D. Dynamic groups
E. Block volume backups
Correct Answer: BD
QUESTION 3
An Oracle Cloud Infrastructure tenancy administrator is not able to delete a user in the tenancy.
What can cause this issue?
A. User has multi-factor authenticatio (MFA) enabled.
B. User is member of an Identity and Access Management (IAM) group.
C. Users can be blocked but not deleted.
D. User needs to be deleted from federation Identity Provider (IdP) before deleting from IAM.
Correct Answer: A
QUESTION 4
You are a system administrator of your company and you are asked to manage updates and patches across all your compute instances running Oracle
Linux in Oracle Cloud Infrastructure (OCI). As part of your task, you need to apply all the latest kernel security updates to all instances.
Which OCI service will allow you to complete this task?

A. Resource Manager
B. OS Management
C. Storage Gateway
D. Streaming
E. Registry
Correct Answer: B
QUESTION 5
Which of the following statements is true about the Oracle Cloud Infrastructure (OCI) Object Storage server side encryption?
A. Encryption of data encryption keys with a master encryption key is optional.
B. Customer-provided encryption keys are always stored in OCI Vault service.
C. Encryption is enabled by default and cannot be turned off.
D. Each object in a bucket is always encrypted with the same data encryption key.
Correct Answer: B
QUESTION 6
You need to set up instance principals so that an application running on an instance can call Oracle Cloud Infrastructure (OCI) public services, without
the need to configure user credentials. A developer in your team has already configured the application built using an OCI SDK to authenticate using the
instance principals provider.
Which is NOT a necessary step to complete this set up?
A. Create a dynamic group with matching rules to specify which instances you want to allow to make API calls against services.
B. Generate Auth Tokens to enable instances in the dynamic group to authenticate with APIs.
C. Create a policy granting permissions to the dynamic group to access services in your compartment or tenancy.
D. Deploy the application and the SDK to all the instances that belong to the dynamic group.
Correct Answer: D
QUESTION 7
You have been asked to create an Identity and Access Management (IAM) user that will authenticate to Oracle Cloud Infrastructure (OCI) API endpoints.
This user must not be given credentials that would allow them to log into the OCI console.
Which two authentication options can you use? (Choose two.)
A. SSL certificate
B. API signing key

C. SSH key pair
D. PEM Certificate file
E. Auth token
Correct Answer: BE
QUESTION 8
You work for a health insurance company that stores a large number of patient health records in an Oracle Cloud Infrastructure (OCI) Object Storage
bucket named "HealthRecords". Each record needs to be securely stored for a period of 5 years for regulatory compliance purposes and cannot be
modified, overwritten or deleted during this time period.
What can you do to meet this requirement?
A. Create an OCI Object Storage Lifecycle Policies rule to archive objects in the HealthRecords bucket for five years.
B. Create an OCI Object Storage time-bound Retention Rule on the HealthRecords bucket for five years.
Enable Retention Rule Lock on this bucket.
C. Enable encryption on the HealthRecords bucket using your own vault master encryption keys.
D. Enable versioning on the HealthRecords bucket.
Correct Answer: B
QUESTION 9
Which two components cannot be deleted in your Oracle Cloud Infrast uctur Virtual Cloud Network? (Choose two.)
A. Service gateway
B. Default security list
C. Routing gateway
D. Default route table
E. Default subnet
Correct Answer: BD
QUESTION 10
A financial firm is designing an application architecture for its online trading platform that must have high availability and fault tolerance.
Their solutions architect configured the application to use an Oracle Cloud Infrastructure Object Storage bucket located in the US West(us-phoenix-1)
region to store large amounts of financial data.
The stored financial data in the bucket must not be affected evenif there is an outage in one of the Availability Domains or a complete region.
What should the architect do to avoid any costly service disruptions and ensure data durability?
A. Create a new Object Storage bucket in another region and configure lifecycle policy to move data every 5 days.
B. Create a lifecycle policy to regularly send data from Standard to Archive storage.

C. Copy the Object Storage bucket to a block volume.
D. Create a replication policy to send data to a different bucket in another OCI region.
Correct Answer: A
QUESTION 11
As a solution architect, you are showcasing the Oracle Cloud Infrastructure (OCI) Object Storage feature about Object Versioning to a customer.
Which statement is true in regards to OCI Object Storage Versioning?
A. Object versioning does not provide data protection against accidental or malicious object update, overwrite, or deletion.
B. default, object versioning is disabled on a bucket.
C. A bucket that is versioning-enabled can have only and always will have a latest version of the object in the bucket.
D. Objects are physically deleted from a bucket when versioning is enabled.
Correct Answer: A
QUESTION 12
You created a public subnet and an internet gateway in your virtual cloud network (VCN) of Oracle Cloud Infrastructure. The public subnet has an
associated route table and security list However, after creating several compute instances in the public subnet, none can reach the Internet Which two
are possible reasons for the connectivity issue? (Choose two )
A. The route table has no default route for routing traffic to the internet gateway.
B. There is no stateful egress rule in the security list associated with he public subnet.
C. There is no dynamic routing gateway (DRG) associated with the VCN.
D. There is no stateful ingress rule in the security list associated with the public subnet.
E. A NAT gateway is needed to enable the communication flow to internet.
Correct Answer: AB
QUESTION 13
You are designing a lab exercise for your team that has a large number of graphics with large file sizes. The application becomes unresponsive if the
graphics are embedded in the application. You have uploaded the graphics to Oracle Cloud Infrastructure and only added the URL in the application.
You need to ensure these graphics are accessible without requiring any authentication for an extended period of time.
How can you achieve these requirements?
A. Create pre-authenticated requests (PAR) and specify 00:00:0000 as the expiration time.
B. Make the object storage bucket private and all objects public and use the URL found in the Object "Details"
C. Make the object storage bucket public and use the URL found in the Object "Details"
D. Create PARs and do not specify an expiration date.

Correct Answer: C
QUESTION 14
You have setup your environmental shown below with the Mount Target "MT" successfully mounted on both compute instances CLIENT X and CLIENT-
Y.
For security reasons you want to control the access to the File System A in such a way that CLIENT-X has READ/WRITE and CLIENT-Y has READ only
permission.

What you should do?

A. Update the OS firewall in CLIENT X to allow READ/WRITE access.
B. Update the security list TWO to restrict CLIENT-Y access to read-only.
C. Update the mount target export options o restrict CLIENT-Y access to read-only.
D. Update the security list ONE to restrict CLIENT-Y access to read only.
Correct Answer: D
QUESTION 15
Which two methods are supported for migrating your on-premises Oracle database to an Oracle Autonomous Transaction Processing (ATP) database
in Oracle Cloud Infrastructure? (Choose two.)
A. Load text files into ATP using SQL Developer.
B. Use RMAN duplicate.
C. Use Oracle Data Pump.
D. Transfer the physical database files and re-create the database.
E. Use database backup and restore.
Correct Answer: CD
QUESTION 16
Which statement is NOT true about the Oracle Cloud Infrastructure Object Storage service?
A. Object storage resources can be shared across tenancies.
B. Immutable option for data stored in the Object Storage can be set via retention rules.
C. Object versioning is enabled at namespace level.
D. Object lifecycle rules can be used to either archive or delete objects.
Correct Answer: B
QUESTION 17
You are about to upload log file (5 TBsize) to Oracle Cloud Infrastructure object storage and have decided to use multipart upload capability for a more
efficient and resilient upload. Which two statements are true about multipart upload? (Choose two.)
A. Individual object parts can be as small as 10 MB or as large as 50 GB
B. While a multi-part upload is still active, you cannot add parts even if the total number of parts is less than 10,000
C. The maximum size for an uploaded object is 10 TB
D. You do not have to commit the upload after you have uploaded all the object parts
Correct Answer: AC

QUESTION 18
You are running an online gaming application hosted on a VM.Standard2.1 instance shape in Oracle Cloud Infrastructure. As the game becomes
popular, you identify network throughput as a bottleneck on your instance when uploading user data.
Though you want to resolve the issue, you want to observe the demand for a week before adding new application instances.
Which action is the most efficient way to resolve this issue?
A. Add a secondary virtual network interface card (VNIC).
B. Change shape of the instance to a higher network bandwidth instance.
C. Delete the instance while preserving boot volume and spin up a new higher network bandwidth instance with this boot volume.
D. Change the performance tier of attached block volume to High Performance.
Correct Answer: B
QUESTION 19
You have an AI/ML application running on Oracle Cloud Infrastructure. You identified that the application needs GPU and at least 20Gbps Network
throughput. The application is currently using a VM.Standard2.1 compute without any block storage attached to it.
Which two options allow you to get your required performance for your application? (Choose two.)
A. Terminate the compute instance preserving the boot volume. Create a new compute instance using the BM.GPU2.2shape using the boot volume
preserved, but no block volume attached.
B. Terminate the compute instance preserving the boot volume. Create a new compute instance using the VM.Standard2.2 shape using the boot
volume preserved, but no block volume attached.
C. Terminate the compute instance preserving the boot volume. Create a new compute instance using the VM.GPU3.4 shape using the boot volume
preserved and use the NVMe devices to host your application.
D. Terminate the compute instance preserving the boot volume. Create a new compute instance using the BM.HPC2.36 shape using the boot volume
preserved and use the NVMe devices to host your application.
E. Terminate the compute instance preserving the boot volume. Create a new compute instance using the BM.GPU2.2 shape using the boot volume
preserved and attach a new block volume to host your application.
Correct Answer: DE
QUESTION 20
Which option is NOT a action within the Oracle Cloud Infrastructure (OCI) Block Volume service?
A. Clone an existing volume to a new, larger volume.
B. Restore from a volume backup to a larger volume
C. Shrink an existing volume in place with offline resizing.
D. Expand an existing volume in place with offline resizing.

Correct Answer: C
QUESTION 21
You deployed a database on a Standard Compute instance in Oracle Cloud Infrastructure (OCI) due to cost concerns. The database requires additional
storage with high I/O and you decided to use OCI Block Volume service for it.
With this requirement in mind, which elastic performance option should you choose for the Block Volume?
A. Balanced Performance
B. Higher performance
C. Extreme performance
D. Lower cost
Correct Answer: B
QUESTION 22
You have created a virtual cloud network (VCN) with three private subnets. Two of the subnets contain application servers and the third subnet contains
a DB System. The application requires a shared file system so you have provisioned one using the file storage service (FSS). You also created the
corresponding mount target in one of the application subnets. The VCN security lists are properly configured so that both application servers and the DB
System can access the file system. The security team determines that the DB System should have read-only access to the file system.
What change would you make to satisfy this requirement?
A. Create an NFS export option that allows READ_ONLY access where the source is the CIDR range of the DB System subnet.
B. Connect via SSH to one of the application servers where the file system has been mounted. Use the Unix command chmod to change permissions
on the file system directory, allowing the database user read only access.
C. Modify the security list associated with the subnet where the mount target resides. Change the ingress rules corresponding to the DB System subnet
to be stateless.
D. Create an instance principal for the DB System. Write an Identity and Access Management (IAM) policy that allows the instance principal read-only
access to the file storage service.
Correct Answer: A
QUESTION 23
Your company uses the Oracle Cloud Infrastructure (OCI) Object Storage service to share large data sets with its data science team. The data science
team consists of 20 people who work from offices in Washington,DC , and Tokyo. While working in these offices, employee are assigned an IP address
from the publicIP range 129.146.31.0
Which two steps should you take to ensure that the Object Storage bucket used in this scenario was only accessible from these office locations?
(Choose two )
A. Write an IAM policy that includes the conditional statement where request.networkSource.name =CorpNet
B. Set the bucket visibility to public and only share the URL with the data science team via email
C. Create apre-authenticated request for each dataset and only share with the data science team via email

D. Create a Network Source named CorpNetwork with a CIDR block of 129.146.31.0
E. Create a Network Source named CorpNetwork with a CIDR block of 129.146.0.0
F. Write an IAM policy that includes the conditional statement where request.region= 129.146.31.0
Correct Answer: CE
QUESTION 24
Which statement Is true about Data Guard implementation in Oracle Cloud Infrastructure (OCI) bare metal and virtual machine database systems?
A. Primary and standby databases must be in the same OCI region.
B. Both database systems must be in the same compartment.
C. Database systems need not be the same shape type (e.g, primary database can be a virtual machine, and standby database a bare metal shape,
and vice versa).
D. Primary and standby database versions and editions need not be Identical.
Correct Answer: B
QUESTION 25
Which two resources reside exclusively in a single Oracle Cloud Infrastructure Availability Domain? (Choose two.)
A. Identity and Access Management Groups
B. Object Storage
C. Web Application Firewall policy
D. Block volume
E. Compute instance
Correct Answer: DE
QUESTION 26
Your company has been running several small applications in Oracle Cloud Infrastructure and is planning a proof-of-concept (POC) to deploy
PeopleSoft.
If your existing resources are being maintained in the root compartment, what is the recommended approach for defining security for the upcoming
POC?
A. Create a new compartment for the POC and grant appropriate permissions to create and manage resources within the compartment.
B. Provision all new resources into the root compartment. Grant permissions that only allow for creation and management of resources specific to the
POC.
C. Provision all new resources into the root compartment. Use defined tags to separate resources that belong to different applications
D. Create a new tenancy for the POC. Provision all new resources into the root compartment. Grant appropriate permissions to create and manage

resources within the root compartment.
Correct Answer: A
QUESTION 27
Which two statements about Oracle Cloud Infrastructure File Storage Service are accurate? (Choose two.)
A. Customer can encrypt the communication to a mount target via export options.
B. Mount targets use Oracle-managed keys by default.
C. File systems use Oracle-managed keys by default.
D. Customer can encrypt data in their file system using their own Vault encryption key.
E. Communication with file systems in a mount target is encrypted via HTTPS.
Correct Answer: BD
QUESTION 28
When you try to create an instance on Oracle Cloud Infrastructure (OCI), what are three sources to choose the image from?
A. Dedicated VM Host
B. Object Storage
C. Bare Metal Instance
D. Platform Images
E. Custom Image
F. Partner Images
G. Instance Pools
Correct Answer: DEF
QUESTION 29
Which two statements are true about Oracle Cloud Infrastructure storage services?
A. You can move Object Storage buckets, Block Volumes and File Storage mount targets between compartments.
B. File storage mount target does not provide a private IP address, while the Object Storage bucket provides one.
C. File Storage uses the network file system (NFS) protocol, whereas Block Volume uses ISCSI.
D. Block Volume service scales to Exabytes per Instance, while File Storage service offers unlimited scalability.
E. You can take Incremental snapshots of Block Volumes, File Storage file systems and Object Storage buckets.
Correct Answer: AC

QUESTION 30
With regard to Oracle Cloud Infrastructure Load Balancing service, which two actions will occur when a backend server that is registered with a backend
set is marked to drain connections?
A. All existing connections to this backend sever will be immediately closed.
B. Requests to this backend server are redirected to a user-defined error page.
C. All new connections to this backend server are disallowed.
D. Connections to this backend server will remain open until all in flight requests are completed.
E. All connections to this backend server are forcibly closed after a timeout period.
Correct Answer: CD
QUESTION 31
You deployed an Oracle Cloud Infrastructure (OCI) compute instance (VM.Standard2.16) to runa SQL database. After a few weeks, you need to
increase disk performance by using NVMe disks but keeping the same number of CPUs. As a first step, you terminate the instance and preserve the
boot volume.
What is the next step?
A. Create a new instance using a VM.DenseIO2.16 shape using the preserved boot volume and move the SQL Database data to block volume
B. Create a new instance using a VM.DenseIO2.8 shape using the preserved boot volume and move the SQL Database data to NVMe disks
C. Create a new instance using a VM.Standard1.16 shape using the preserved boot volume and move the SQL Database data to NVMe disks
D. Create a new instance using a VM.DenseIO2.16 shape using the preserved boo volume move the SQL Database data to NVMe disks
Correct Answer: D
QUESTION 32
Your company decided to move a few applications to Oracle Cloud Infrastructure (OCI) in the US West (us- phoenix-1) region.
You need to design a cloud-based disaster recovery (DR) solution with a requirement to deploy the DR resources in the US East (us-ashburn-1) region
to minimize network latency.
What is the recommended deployment?
A. Deploy production and DR applications in two separate virtual cloud networks (VCNs), each in different regions, and then use VCN local peering
gateways for connectivity.
B. Deploy production and DR applications in two separate VCNs, each in different regions. Connect them using a VCN remote peering connection.
C. Deploy production and DR applications in the same VCN. Create production subnets in one AD, and DR subnets in another AD (assume a multi-AD
region).
D. Deploy production and DR applications in two separate VCNs in different availability domains (ADs) within the primary region, and then use a VCN
remote peering connection for connectivity.

Correct Answer: A
QUESTION 33
You are designing a networking infrastructure in multiple Oracle Cloud Infrastructure regions and require connectivity between workloads in each region.
You have created a dynamic routing gateway (DRG) and a remote peering connection. However, your workloads are unable to communicate with each
other.
What are two reasons for this? (Choose two.)
A. The security lists associated with subnets in each virtual cloud network (VCN) do not have the appropriate ingress rules
B. Identity and Access Management (IAM) policies have not been defined to allow connectivity across the two VCNs in different regions
C. A local peering gateway needs to be created in each VCN with a default route rule added in the route table forwarding the traffic to the local peering
gateway
D. An Internet gateway needs to be created in each VCN with a default route rule added in the route table forwarding the traffic to the Internet Gateway
E. The route table associated with subnets in each VCN do not have a route rule defined to forward the traffic to their respective DRGs
Correct Answer: AE
QUESTION 34
Which two statements below are correct with respect to adding secondary Virtual Network Interface Cards (VNICs)
to an existing compute instance in Oracle Cloud Infrastructure? (Choose two.)
A. The secondary VNIC is required to be in the same Virtual Cloud Network (VCN), but can be in different subnet, as the primary VNIC.
B. The primary and secondary VNIC association can be in different virtual cloud networks (VCNs).
C. You cannot assign an Ephemeral Public IP to a secondary VNIC.
D. The primary and secondary VNIC association must be in the same availability domain.
E. You can remove the primary VNIC after the secondary VNIC's attachment is complete.
Correct Answer: BD
QUESTION 35
You provisioned an Oracle Autonomous Data Warehouse (ADW) on Oracle Cloud Infrastructure (OCI) and imported data into ADW.
You want to give your business analyst the ability to connect to the ADW database and run queries. Which two actions can help you meet this
requirement? (Choose two.)
A. Create a database user account for the business analyst.
B. Grant the predefined database role DWROLE to the database user.
C. Grant unlimited table space privilege to the database user.
D. Grant the predefined database role DWADW to the database user.
E. Grant the predefined database role DWUSER to the database user.

Correct Answer: BC
QUESTION 36
Which statement is true about interconnecting Virtual Cloud Network (VCN)?
A. VCNs support transitive peering.
B. Peering VCNs should not have overlapping CIDR blocks.
C. VCNs must be in the same tenancy to be peered.
D. The only way to interconnect VCNs is through peering.
Correct Answer: B
QUESTION 37
Which two statements are true about restoring a volume from a block volume backup in Oracle Cloud Infrastructure Block Volume service?
A. You can restore a volume from any full volume backup but not from an Incremental backup.
B. You can only restore a volume to the same availability domain in which the original block volume resides.
C. You can restore a block volume backup to a larger volume size.
D. You can restore a volume to any availability domain within the same region where the backup is stored.
E. You can restore only one volume from a manual block volume backup.
Correct Answer: CD
QUESTION 38
You are running a mission-critical database application in Oracle Cloud Infrastructure (OCI). You take regular backups of your DB system to OCI object
storage. Recently, you notice a failed database backup status in the console.
What step can you take to determine the cause of the backup failure?
A. Ensure that your database host can connect to OCI object storage.
B. Ensure the database archiving mode is set to NOARCHIVELOG.
C. Make sure that the database is not active and running while the backup is in progress.
D. Don't restart the dcsagent program even if it has a status of stop/waiting.
Correct Answer: A
QUESTION 39
Which two statements are true about an Oracle Cloud Infrastructure (OCI) virtual cloud network (VCN)? (Choose two.)
A. To delete a VCN, its subnets must contain no resources.

B. A VCN can have multiple CIDR blocks associated with it.
C. In regions with multiple Availability Domains (AD), each AD should have their own VCN assigned to it.
D. If you own a block of public IPs, you can assign it to one of your VCNs.
E. A VCN covers a single, contiguous IPv4 CIDR block of your choice.
Correct Answer: AE
QUESTION 40
What happens after you successfully run the following command on your Oracle Cloud Infrastructure Container Engine for Kubernetes (OKE) using the
YAMLfile defined below? kubectl create -f definition.yml
YAML file - definition.yml
A. A single Pod with a single container is created.
B. Two Pods with a container each are created.
C. A single Pod with two containers is created.
D. No Pod gets created.
Correct Answer: C
QUESTION 41
You create an auto scaling configuration of Linux compute instances in Oracle Cloud Infrastructure (OCI). You noticed that your application is running

slow.
After checking your compute instances, you noticed that auto scaling is not launching additional instances, even though the existing compute instances
already have high memory usage.
How can you resolve this issue?
A. Modify the scaling policy to monitor memory usage and scale up the number of instances when it meets the threshold.
B. Modify the scaling policy to monitor CPU usage and scale up the number of instances when it meets the threshold.
C. Install the monitoring agent to all compute instances which will trigger the autos caling group.
D. Install OCI SDK in all compute instances and create a script that will trigger the auto scaling event if there is high memory usage.
Correct Answer: B
QUESTION 42
You developed a micro services based application that runs on Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE). You want to
provide access to this cluster to other team members. What should you do to provide access to this cluster using as fewest steps as possible?
A. Create a group in OCI Infrastructure Access Management (IAM). Create a policy to grant access to the OKE cluster. Other team members should
use OCI Cloud Shell to generate the kubeconfig into their own cloud shell environment and access the cluster using kubectl from cloud shell.
B. Create a group in OCI Infrastructure Access Management (IAM). Create a policy to grant access to the OKE cluster. Create individual users and
access token for each team member. Other team members should use OCI Cloud Shell to generate the kubeconfig into their own cloud shell
environment and access the cluster using kubectl from cloud shell.
C. Create a group in OCI Infrastructure Access Management (IAM). Create a policy to grant access to the OKE cluster. Create a cluster role and cluster
role binding to provide access to the cluster for each team member. Other team members should install oci cli and kubectl locally on their laptop.
Use the oci cli to generate the kubeconfig and use kubectl to access the cluster.
D. Create a group in OCI Infrastructure Access Management (IAM). Create a policy to grant access to the OKE cluster. Other team members should
install oci cli and kubectl locally on their laptop. Use the oci cli to generate the kubeconfig and use kubectl to access the cluster.
Correct Answer: B
QUESTION 43
You have been notified of an application failure indicating that one or more of the Oracle Cloud Infrastructure (OCI) resources have become unavailable.
After scanning the Compute and Database consoles, you notice that one of the DB Systems is missing. What would you do to identify the reason for this
missing resource?
A. Navigate to the Audit console and search the previous 24 hours for all DELETE request actions to get a list of any resource that was deleted in the
past 24 hours.
B. Navigate to the Audit console and search the previous 24 hours for all the GET request actions to get a list of every event that occurred in the past
24 hours.
C. View the service limits associated with your account to ensure that you have not exceeded the allowable number of DB Systems in your tenancy.
D. Create a serial console connection to the DB System that does not appear in the management console. Connect to the serial console connection,

and then review the system logs under /var/log/messages.
Correct Answer: A
QUESTION 44
Which two statements are true when Oracle Data Guard is configured (using the Console) between two Virtual Machine DB Systems deployed in Oracle
Cloud Infrastructure? (Choose two.)
A. Primary is a 1-node RAC DB system and Standby is a 2-node RAC DB system.
B. Primary is a 2-node RAC DB system and Standby is a 2-node RAC DB system.
C. Primary is a 1-node RAC DB system and Standby is a 1-node RAC DB system.
D. Primary is a 2-node RAC DB system and Standby is a 1-node RAC DB system.
E. Primary is a Bare Metal DB system and Standby is a 1-node RAC DB system.
Correct Answer: AC
QUESTION 45
You are deploying a highly available web application In Oracle Cloud Infrastructure and have decided to use a public load balancer. The back-end web
servers will be distributed across all three availability domains (ADs). How many subnets should you create to deliver a secure, highly available
application?
A. two subnets in total; one regional private subnet to host your back-end web servers and one regional public subnet to host your public load load
balancer.
B. two subnets in total; one regional public subnet to host your back-end web servers and one regional private subnet to host your public load load
balancer.
C. three subnets in total; one regional public subnet to host your back-end web servers and two AD specific private subnets to host your private load
load balancer.
D. One subnet in total; one regional private subnet to host your back-end web servers and your public load balancer.
Correct Answer: A
QUESTION 46
You have hired a new employee to run reports from the Autonomous Data Warehouse (ADW) and are not confident in their SQL writing ability.
Into which consumer group will you assign this individual to minimize the impact of their code?
A. Lowest
B. Medium
C. Highest
D. High
E. Low

Correct Answer: E
QUESTION 47
You are managing a tier-1 OLTP application on an Autonomous Transaction Processing (ATP) database. Your business needs to run hourly batch
processes on this ATP database that may consume more CPUs than what is available on the server.
How can you limit these batch processes to not interfere with the OLTP transactions?
A. Configure ATP resource management rules to change CPU/IO shares for the consumer group of batch processes.
B. Copy OLTP data into new tables in a new table space and run batch processes against these new tables.
C. Disable automated backup during the batch process operations.
D. ATP is designed for OLTP workload on y, you cannot run batch processes on ATP.
Correct Answer: A
QUESTION 48
Which two tagging related items are attributes that may be included in payload of an audit log event? (Choose two.)
A. Predefined values
B. Free-form tags
C. Tag variables
D. Defined tags
E. Cost-tracking tags
F. Default tags
Correct Answer: BD
QUESTION 49
You are a network architect and have designed the network infrastructure of a three-tier application on Oracle Cloud Infrastructure (OCI). In the
architecture, back-end DB servers are in a private subnet. One of your DB administrators requests to have access to OCI object storage service.
How can you meet this requirement?
A. Add a new route rule to the private subnet route table to route default traffic to the internet gateway.
B. Attach a public IP address to the instances in the private subnet, and then add a new route rule to the private subnet route table to route default
traffic to the internet gateway
C. Create a dynamic routing gateway (DRG) and attach it to your virtual cloud ne work (VCN). Add a default route rule to the private subnets route table
and set the target as DRG
D. Create a service gateway, add a new route rule to the private subn t route table that uses object storage as target type.
Correct Answer: D

QUESTION 50
A customer has launched a compute Instance in the Virtual Cloud Network (VCN), which has an Internet gateway, a service gateway, a default security
lists and a default route table. Customer has opened up Port 22 in the security lists attached to the compute instance subnet, however is still unable to
connect to compute instances using ssh.
Which option would remedy this situation?
A. Modify the route table associated with the VCN subnet in which the instance resides. Add a following route to the route table.
Destination CIDR: 0.0.0.0/0
Target: Internet Gateway (IGW)
B. Modify the security list associated with the VCN subnet in which the instance resides. Add a stateful egress rule to allow icmp traffic in addition to the
port 22.
C. Modify the route table associated with the VCN subnet in which the instance resides. Add a following route to the route table.
Target: Dynamic Routing Gateway (DRG)
D. Modify the route table associated with the VCN subnet in which the instance resides. Add a following route to the route table.
Target: Service Gateway (SGW)
Correct Answer: A
QUESTION 51
Your customer is using an Oracle Cloud Infrastructure (OCI) compartment named Production that hosts several resources such as compute instances,
DB Systems and File Systems. Each resource in the Production compartment is tagged.
The customer's security team wants to restrict access to DB Sys ems to only the authorized group of DBAs. Which OCI Tagging capability can be used
to meet this requirement?
A. Tags Defaults with predefined values
B. Tag Defaults
C. Cost-Tracking Tags
D. Tag-based Access Control
Correct Answer: D
QUESTION 52
You have multiple applications installed on a compute instance and these applications generate a large amount of log files. These log files must reside
on the boot volume for a minimum of 15 days and must be retained for at least 60 days. The 60-day retention requirement is causing an issue with
available disk space. What are the two recommended methods to provide additional boot volume space for this compute instance? (Choose two.)
A. Terminate the instance while preserving the boot volume. Create a new instance from the boot volume and select a DenseIO shape to take
advantage of local NVMe storage.

B. Create an object storage bucket and use a script that runs daily to move log files oldert han 15 days to the bucket.
C. Create and attach a block volume to the compute instance and copy the log files.
D. Create a custom image and launch a new compute instance with a larger boot volume size.
E. Write a custom script to remove the log files on a daily basis and free up the space on the boot volume.
Correct Answer: BD
QUESTION 53
You have an application server running in a public subnet on a compute instance in US West (usphoenix-
1) region of Oracle Cloud Infrastructure (OCI). The data sitting on this instance needs to be copied to OCI Object storage bucket available in the same
region without traversing over the internet. To enable the connectivity between the instance and Object Storage, you created a service gateway with
service CIDR of all Object Storage in us-phoenix-1 enabled. You also modified the security rules to allow the desired traffic. However, when you tried
sending the data to the Object Storage bucket, you notice that the data is going over the internet and not via the service gateway.
What could be the possible reason for this behavior?
A. The route table associated with the subnet has no route rule where the destination is object storage service
B. The service gateway created in the VCN resides in a different availability domain
C. The security list associated with the subnet has an egress rule that allows all traffic to be forwarded to a destination CIDR 0.0.0.0/0
D. Identity and Access Management (IAM) policies restrict t e access to the object storage bucket
Correct Answer: A
QUESTION 54
Which two choices are true for Oracle Autonomous Database with Shared Exadata Infrastructure?
A. Billing for storage usage continues when autonomous database is stopped.
B. Billing stops for both CPU and storage usage when autonomous database is stopped.
C. Billing for compute usage stops when autonomous database is stopped.
D. Autonomous database does not support per-second billing.
E. Billing does not stop when autonomous database is terminated.
Correct Answer: AC
QUESTION 55
You are responsible for creating and maintaining an enterprise application that consists of multiple storage volumes across multiple compute instances
in Oracle Cloud Infrastructure (OCI). The storage volumes include boot volumes and block volumes for your data storage. You need to create backups
of these storage volumes in the most time-efficient manner.
How can you meet this requirement?
A. Create clones of all boot volumes and block volumes one at a time.

B. Create on-demand full backups of boot volumes, and copy data in block volumes to Object Storage using OCI CLI.
C. Create on-demand full backups of block volumes, and create custom images from the boot volumes.
D. Group together multiple storage volumes in a volume group and create volume group backups.
Correct Answer: D
QUESTION 56
As an Oracle Cloud Infrastructure tenancy administrator, you created predefined lists of values and associated them with tag key definitions.
One of the users in your tenancy complains that she cannot see these predefined values. What is causing this issue?
A. The user is trying to use free-form tags.
B. Some of the predefined values are null.
C. The user is not part of an Identity and Access Management group that gives access to tagging.
D. The user has breached either the quota or service limit for using tags.
Correct Answer: A
QUESTION 57
You have compartments C and D under the root compartment in your Oracle Cloud Infrastructure (OCI) tenancy; compartment C contains a sub-
compartment also named D. You are trying to move this sub- compartment D to the parent compartment D like shown in the picture, but the move fails.

What is the reason for this error?
A. You need to move all the compartments in the hierarchy to the new parent compartment.
B. You cannot move a sub compartment to another parent compartment.
C. Both parent and child compartments cannot have the same name.
D. Sub-compartment D needs to be empty before it can be moved.
Correct Answer: C
QUESTION 58
You are working for a financial institution that is currently running two web applications in Oracle Cloud Infrastructure (OCI). All resources were created
in the root compartment. Your manager asked you to deploy new resources to support a proof-of-concept (PoC) for Oracle FlexCube. You must ensure
that the FlexCube resources are secured and cannot be affected by the team that manages the two web applications.
Which two tasks should you complete to ensure the required security of your resources? (Choose two.)
A. Create a new compartment for the two web applications and move the existing resources into the compartment. Deploy the FlexCube application into
the root compartment. Create a new policy in the root compartment that gives the FlexCube project team the ability to manage all resources in the
tenancy.
B. Create a new policy in the root compartment for the FlexCube project team. Assign a policy statement that grants the FlexCube project team the
ability to manage all resources in the tenancy, where a specific tag key and tag value are present.
C. Create a Tag Default within the root compartment with a default value of ${iam.principle.name} so that policy
each new resource created is tagged with the name of the person who created it. Create a new IAM that allows users to only modify resources they
created.
D. Create a new compartment for the two web applications and move the existing resources into this compartment. Modify the existing policy for the
team that manages these applications so that the scope of access is defined as this new compartment.
E. Create a new compartment for the FlexCube application deployment. Create a policy in this compartment for the project team that gives them the
ability to manage all resources within the scope of this compartment.
Correct Answer: CD
QUESTION 59
Which two parameters are required in a back end set's HTTP health check? (Choose two.)
A. response body
B. URL path
C. timeout
D. port
E. status code

Correct Answer: BD
QUESTION 60
Which two are true for achieving High Availability on Oracle Cloud Infrastructure? (Choose two.)
A. Store your database across multiple regions so that half of the data resides in one region and the other half resides in another region.
B. Attach your block volume form Availability Domain 1 to a compute instance in Availability Domain 2 (and vice versa) so that they are highly available.
C. Configure your database to have Data Guard in another Availability Domain in Sync mode within a region.
D. Store your database files on Object Storage so that they are available in all Availability Domains in all regions.
E. Distribute your application servers across all Availability Domains within a region.
Correct Answer: CE
QUESTION 61
Which two configuration formats does Terraform support? (Choose two.)
A. YAML
B. JSON
C. HCL
D. XML
Correct Answer: BC
QUESTION 62
At the end of a terraform apply operation, what is the default output?
A. nothing by default
B. statistics about what was added, changed, and destroyed
C. the entire state file
D. statistics about what was added, changed and destroyed, and the values of outputs
Correct Answer: D
QUESTION 63
You want an instance in your compartment to make API calls to other services within Oracle Cloud Infrastructure without storing credentials in a
configuration file.
What do you need to do?
A. No action is required. By default, all VM instances are created with an Instance Principal.

B. Instances cannot access services outside their compartment.
C. VM instances are treated as users. Create a user and assign the user to that VM instance.
D. Create appropriate matching rules in the Dynamic Group to create an Instance Principal.
Correct Answer: D
QUESTION 64
Which three must be configured for a load balancer to accept incoming traffic? (Choose two.)
A. a listener
B. a back-end server
C. a back end set
D. a security list that is open on a listener port
E. a certificate
Correct Answer: ABC
QUESTION 65
Which two statements are true about Oracle Cloud Infrastructure Compute Service? (Choose two.)
A. You can launch a virtual or bare metal instance by using the same Launch Instance API.
B. You cannot launch a bare metal server in Oracle Cloud Infrastructure Compute Service.
C. You can attach a block volume in an Availability Domain other than your compute instance.
D. You can share custom images across tenancies and regions.
Correct Answer: AD
QUESTION 66
Which five are the required parameters to launch an instance in Oracle Cloud Infrastructure? (Choose five.)
A. subnet
B. Availability Domain
C. Virtual Cloud Network
D. host name
E. instance shape
F. image operating system
G. private IP address

Correct Answer: ABCEF
QUESTION 67
Which DNS resource record type is used to point a host name to an IPv4 address?
A. ALIAS
B. A
C. CNAME
D. AAAA
Correct Answer: B
QUESTION 68
Which three can you achieve by using Terraform? (Choose three.)
A. Create resources in the right order without regard to the order in the terraform plan file.
B. Automatically re-provision the resources that are tainted or whose configuration has changed.
C. Automatically translate a deployed infrastructure and create a plan.
D. Automatically destroy all the resources that are in tenancy.
E. Continuously maintain the configuration files in an instance.
Correct Answer: ABD
QUESTION 69
Your application front end consists of several Oracle Cloud Infrastructure compute instances behind a public load balancer. You have configured the
load balancer o perform health checks on these instances. What will happen if an instance fails to the configured health checks?
A. The instance is replaced automatically by the load balancer.
B. The instance is terminated automatically by the load balancer.
C. The instance is taken out of the back en set by the load balancer.
D. The load balancer stops sending traffic to that instance.
Correct Answer: D
QUESTION 70
Which statement is true about cloning a volume?
A. You need to detach a volume before cloning from it.
B. A cloned volume is the same as a snapshot that has a dependency on the source volume.

C. You can change the block volume size when cloning a volume.
D. You can create a clone for a volume across regions.
Correct Answer: C
QUESTION 71
Which scaling option does Database Cloud Service (DBCS) on Bare Metal Shape offer?
A. network bandwidth
B. CPU
C. storage
D. memory
Correct Answer: B
QUESTION 72
Which statement is true about Oracle Cloud Identifiers (OCID)?
A. mytenancy.oc.ocid is a OCID.
B. If you delete a user, and them create a new user with the same name, the user will be considered a different user because of different OCIDs.
C. Users can customize OCIDs for all the resources in their compartment
D. If you delete a user, and then create a new user with the same name, the n w user will be assigned the exact same OCIDs as the system
remembers.
Correct Answer: B
QUESTION 73
Which three types of credentials are used to manage Oracle Cloud Infrastructure Identity and Access
Management (IAM)? (Choose three.)
A. Windows Password
B. API Signing Key
C. Swift Password
D. SSH Key
E. Console Password
Correct Answer: BCE

QUESTION 74
Which two are true for Oracle Cloud Infrastructure DNS? (Choose two.)
A. It can function only as a primary DNS.
B. It supports other cloud providers such as AWS and Azure.
C. It supports segregation of traffic by using the private pool.
D. It does not provide DDoS protection.
Correct Answer: BC
QUESTION 75
Which service is NOT supported by Oracle Cloud Infrastructure CLI?
A. load balancer
B. compute
C. database
D. block volumes
Correct Answer: D
QUESTION 76
In which language are Terraform and Terraform providers written?
A. Python
B. Go
C. C
D. Ruby
Correct Answer: B
QUESTION 77
Given: When creating multiple subnets within a Virtual Cloud Network (VCN), security lists are often made to group common services, for example, SSH
and RDP (remote access), 80 and 443 (HTTP), and so on. By default, what is the maximum number of security lists that can be associated with a
subnet upon creation?
A. 4
B. 2
C. 5
D. 3

Correct Answer: C
QUESTION 78
Why are two subnets required to create a public load balancer when additional subnets are often used for back-end servers? (Choose two.)
A. Routing is simpler when the load balancer is not in the same subnet as the back-end server.
B. Performance is higher when more subnets are used.
C. Additional subnets for back-end servers allow for separate route tables for these servers.
D. Additional subnets for back-end servers allow for separate security lists for these servers.
Correct Answer: BD
QUESTION 79
Which certificate format is used with the load balancer?
A. PFX
B. PEM
C. PKCS12
D. CRT
Correct Answer: B
QUESTION 80
A new employee has just started working for your company. You create an Oracle Cloud Infrastructure user account for this employ e following which
they are able to log in, but still cannot create any resources.
What should you do to resolve this?
A. Send the employee API Signing Keys to log in.
B. Delete the account and create another one.
C. Make sure that the employee is logging in to the Oracle Cloud Infrastructure account from your corporate network only.
D. Add the employee to a group with policies to grant access to relevant resources.
Correct Answer: D
QUESTION 81
Which two statements are true about subnets within a VCN? (Choose two.)
A. You can have multiple subnets in an Availability Domain for a given VCN.
B. Private and Public subnets cannot reside in the same Availability Domain for a given VCN.

C. Subnets can have their IP addresses overlap with other subnets in another network for a given VCN.
D. Instances obtain their private IP and the associated security list from their subnets.
Correct Answer: AD
QUESTION 82
Which resource is required when connecting to your on-premise network from your Virtual Cloud Network (VCN) via IPSec VPN or FastConnect?
A. Internet Gateway (IGW)
B. Dynamic Routing Gateway (DRG)
C. local peering gateway
D. NAT
Correct Answer: B
QUESTION 83
Which two resources are availability domain constructs? (Choose two.)
A. VCN
B. Groups
C. Block Volume
D. Compute Instance
E. Object Storage
Correct Answer: CD
QUESTION 84
What is the default backup location for database backup on Database Cloud Service (DBCS)?
A. Object Storage on Oracle Cloud Infrastructure
B. ASM disk group
C. block volume
D. locally attached NVMe on Virtual Machine
Correct Answer: A
QUESTION 85
Which statement is true about restoring a block volume from a manual or policy-based block volume backup?

A. It can be restored as new volumes to any Availability Domain within the same region.
B. It must be restored as new volumes to the same Availability Domain on which the original block volume backup resides.
C. It can be restored as new volumes to any Availability Domain across different regions.
D. It can be restored as new volumes with different sizes from the backups.
Correct Answer: A
QUESTION 86
Which three are Terraform configuration components? (Choose three.)
A. variable
B. region
C. metadata
D. instance
E. resource
F. data source
Correct Answer: AEF
QUESTION 87
Which three components can you configure in Oracle Infrastructure Identity and Access Management? (Choose three.)
A. Groups
B. Users
C. Instances
D. Policies
E. VCNs
Correct Answer: ABD
QUESTION 88
Which two are NOT image sources when launching a new compute instance? (Choose two.)
A. boot volume
B. custom image
C. Object Storage
D. bare metal instance

Correct Answer: CD
QUESTION 89
Where is the tenancy Oracle Cloud Identifier (OCID) located?
A. given by support on account creation
B. at the bottom of every console page
C. on the Identity Users page
D. contained within the compartment OCID
Correct Answer: D
QUESTION 90
Which two features are offered natively on Oracle Cloud Infrastructure Database Cloud Service (DBCS)? (Choose two.)
A. Data Guard in A sync mode within a region
B. Golden Gate replication between two regions
C. Data Guard in Maximum Protection mode
D. backup to Object Storage
Correct Answer: AD
QUESTION 91
What happens when you run terraform plan?
A. It configures, reconfigures, and instantiates resources and their dependencies.
B. It shows the operator the course of action that would be taken if a change is applied.
C. It deletes all existing resources and re-creates them.
D. It shows a dependency graph.
Correct Answer: B
QUESTION 92
When creating a subnet, one or more placeholder security lists are often associated with the subnet.
Why?
A. Each operator needs its own security list.
B. Each protocol needs its own security list.
C. Each network endpoint or instance in the subnet needs its own security list.

D. It is not possible to add or remove security lists after a subnet is created.
Correct Answer: C
QUESTION 93
When terminating a compute instance, you want to preserve the boot volume and its data. Which step will you need to perform?
A. You cannot preserve the boot volume; it will always be deleted when you terminate the instance.
B. Reboot the instance first, and then terminate the instance.
C. Disable the default option to delete the boot volume when terminating an instance.
D. Before terminating the instance, you must detach the boot volume.
Correct Answer: C
QUESTION 94
An instance is launched with a primary VNIC that is created during instance launch. Which two operations are true when you add secondary VNICs to an
existing instance? (Choose two.)
A. You can remove the primary VNIC after the secondary VNIC's attachment is complete.
B. You can remove the secondary VNIC later if it is not needed.
C. The primary and secondary VNIC association should be within the same Availability Domain.
D. It is not possible to connect two VNICs to an instance.
Correct Answer: BC
QUESTION 95
Which does NOT set a variable in Terraform?
A. Passing the variable with a var statement to Terraform
B. Setting the variable as key value pairs in a file in a subdirectory named tfvar
C. A default value in the variable d claration within a TF plan file
D. Setting the environment variable using a TF_VAR_ predicate in front of the variable name
Correct Answer: B
QUESTION 96
Which two are required to create an IPSec VPN connection? (Choose two.)
A. security list

B. static route CIDR
C. name
D. compute instance
Correct Answer: AB
QUESTION 97
When deploying a highly available, Internet-facing, 2-tier web application on Oracle Cloud Infrastructure (OCI), which design option would you use?
A. Deploy all web servers into one Availability Domain and behind a public load balancer, and deploy two single-node OCI database systems in the
same Availability Domain with Data Guard enabled.
B. Deploy all web servers into multiple Availability Domains and behind a public load balancer, and deploy two single-node OCI database systems
across two Availability Domains with Data Guard enabled.
C. Deploy all web servers into multiple Availability Domains and behind a private load balancer, and deploy two single-node OCI database systems
across two Availability Domains with Data Guard enabled.
D. Deploy all web servers into one Availability Domain, and deploy a single-node OCI database system into a different Availability Domain.
Correct Answer: B
QUESTION 98
Which two identity providers can your administrator federate with Oracle Cloud Infrastructure? (Choose two.)
A. Microsoft Active Directory
B. Oracle Identity Cloud Services
C. AWS Directory Services
D. Google Directory Federation Services
Correct Answer: AB
QUESTION 99
What is the maximum CIDR range that can be assigned when configuring a Virtual Cloud Network?
A. /16
B. /26
C. /24
D. /8
Correct Answer: A

QUESTION 100
Which two tools would you use to manage Database Cloud Service (DBCS)? (Choose two.)
A. psql
B. Oracle Swingbench
C. SQL Developer
D. Oracle Enterprise Manager
Correct Answer: CD
QUESTION 101
A customer wants to do development on premise while leveraging services such as Java Cloud, Mobile Developer Cloud, and App Builder Services. The
customer would also like to scale out the application, stretching from on-premises to the cloud by using a common API. Which two Infrastructure options
can the customer leverage to do this? (Choose two.)
A. Oracle Cloud at Customer
B. Oracle Cloud Infrastructure Classic
C. Oracle Cloud Ravello service
D. Oracle Cloud Infrastructure
Correct Answer: AD
QUESTION 102
Which statement is true about a pre-authenticated request in Oracle Cloud Infrastructure Object Storage?
A. You can create only 1, 000 pre-authenticated requests per bucket.
B. You can create a pre-authenticated request only for public buckets.
C. You cannot retire a pre-authenticated request before it expires.
D. You cannot extend the expiration date on a pre-authenticated request.
Correct Answer: D
QUESTION 103
Which statement is true about Oracle Cloud Infrastructure Object Storage Service?
A. An Archive Object Storage tier bucket can be upgraded to the Standard Object Storage tier.
B. You cannot directly download an object from an Archive Object Storage bucket.
C. An existing Standard Object Storage tier bucket can be downgraded to the Archive Object Storage tier.
D. Data retrieval in Archive Object Storage is instantaneous.

Correct Answer: B
QUESTION 104
For a compute instance that is launched in a private subnet in a Virtual Cloud Network (VCN), which action needs to be performed to connect to the
Internet, assuming that the required security list is properly set up?
A. Assign a Public IP address to the compute instance.
B. Create and configure Network Address Translation (NAT) in a public subnet and route all traffic to it.
C. There is no way for an instance in a private subnet to connect to the Internet.
D. Create a default route entry in the route table to forward all traffic to the Internet gateway.
Correct Answer: D
QUESTION 105
Which two are options when migrating a database from on-premise to Oracle Cloud Infrastructure? (Choose two.)
A. snapping or cloning storage form on-premise to Oracle Cloud Infrastructure
B. performing a backup to Oracle Cloud Infrastructure Object Storage, and then restoring to a database server on Oracle Cloud Infrastructure
C. performing RMAN backup to an on-premise storage device, and then shipping to Oracle Cloud Infrastructure
D. converting the Oracle database to a No SQL database and migrating to Oracle Cloud Infrastructure by using rsync file copy
Correct Answer: AC
QUESTION 106
You are responsible for setting up access for all the cloud users of a large enterprise. You log in to the Phoenix region and start creating users and
policies. You then realize that some users might be creating resources in the Ashburn region.
Which step should you perform to enable those users?
A. You can assign a region to each of the users at the time of creation.
B. IAM users are global and non-admin users can add resources to any region by default.
C. You need to log in to each region separately to create users for that particular region.
D. IAM users are global. As an administrator, make sure that you subscribe to the Ashburn region.
Correct Answer: D
QUESTION 107
Your company has decided to move a few applications to Oracle Cloud a d you have been asked to design it for both High Availability (HA) and Disaster
Recovery (DR). Which two should you consider while designing your Oracle Cloud Infrastructure architecture? (Choose two.)

A. Region
B. Instance Shape
C. Compartments
D. Availability Domain
Correct Answer: AD
QUESTION 108
Which three are capabilities of the dbaascli utility? (Choose three.)
A. Patching the primary database deployment
B. Open port 1521 in the VCN to allow for traffic to the listener
C. Start and open the database instance
D. Switchover and failover in an Oracle Guard configuration
E. Clone a DB
Correct Answer: ACD
QUESTION 109
You have one database-style application that frequently makes many random reads and writes across the dataset.
Which storage offering supports this application?
A. Object Storage Service
B. Archive Storage Service
C. File Storage Service
D. Block Storage Service
Correct Answer: D
QUESTION 110
You create a public Load Balancer instance and configure a back end set "BES1" with one back end server running a service on port 80. You also
create a listener on port 80 and configure that listener to use the backend set "BES1" . A client makes one HTTP request o the Load Balancer with the
correct protocol and port. How many connections does the Load Balancer maintain?
A. 1
B. 2
C. 4
D. 3

Correct Answer: B
QUESTION 111
Which three actions are required to configure a highly available and secure hybrid network between Oracle Cloud and your data center? (Choose three.)
A. Define a non-overlapping IP Address Space between the data center and the cloud.
B. Configure each of the CPEs to leverage each of the IPSec Tunnels created by the connection process.
C. Create two or more CPEs that map to the private IP addresses of the customer routers used in the IPSec VPN Tunnel.
D. Define a default route table entry for the VCN that directs all traffic to the data center network to a single DRG.
E. Create dynamic routing gateways in more than one AD within your region.
Correct Answer: ABC
QUESTION 112
Which tool can automatically install Oracle Cloud Infrastructure CLI?
A. Python
B. RPM
C. APT
D. PIP
Correct Answer: D
QUESTION 113
Which two statements are true about the Oracle Cloud Infrastructure Object Storage Service? (Choose two.)
A. It provides higher IOPS than Block Storage.
B. It can be directly attached or detached from a compute instance.
C. Data is stored redundantly only in a single AD.
D. Data is stored redundantly across multiple availability domains (ADs) in a multi-AD region.
E. It provides strong consistency.
Correct Answer: DE
QUESTION 114
What does Terraform use to create, manage, and manipulate infrastructure resources?
A. resources
B. provisioner

C. instances
D. provider
Correct Answer: D
QUESTION 115
Which deployment architecture is offered when you deploy the Platform Service Manager based Database Cloud Service (DBCS) onto Oracle Cloud
Infrastructure?
A. Two node Primary RAC database leveraging ACFS for the shared file system
B. Single Instance database with a Single Instance Data Guard in Maximum Performance mode
C. Single Instance database with a Single Instance Data Guard in Maximum Protection mode
D. Two node Primary RAC database with a two node RAC Data Guard Standby in Maximum Performance mode
Correct Answer: D
QUESTION 116
Which three load-balancing policies can be used with a back end set? (Choose three.)
A. Throughput
B. IP Hash
C. Weighted Round Robin
D. CPU Utilization
E. Least Connections
Correct Answer: BCE
QUESTION 117
You are in the process of setting up a highly a ailable student registration website on Oracle Cloud Infrastructure (OCI). You use a load balancer and a
database service on OCI. Youlaunch two compute instances each in a different subnet and add them to the back end set of a public load balancer. The
load balancer is configured correctly and working. You then deploy the student registration application on these two compute instances. The application
can communicate with the database service. However, when you type the URL of this student registration application in your browser, no web page
appears.
What could be the cause?
A. The security lists of the subnets on which the two instances are located do not have "allow" rules for port 80 and 443.
B. The load balancer performed a health check on the application and found that compute instances were not in a healthy state and terminated the
instances.
C. The client requested https access to the application and the load balancer service does not support end-to- end SSL from the client to the listener to
the back-end set.

D. The Dynamic Routing Gateway is preventing the client traffic from your data center network from reaching the public IP of the load balancer.
Correct Answer: A
QUESTION 118
Which two actions will occur when a back-end server that is registered with a backend set is marked to drain connections? (Choose two.)
A. It disallows new connections to that backend server.
B. It keeps the connections to that instance open and attempts to complete any in-flight requests.
C. It redirects the requests to a user-defined error page.
D. It immediately closes all existing connections to that instance.
E. It forcibly closes all connections to that instance after a timeout period.
Correct Answer: AB
QUESTION 119
You have a shared file system between two web servers using File Storage Service (FSS) and you were tasked to create a backup plan for this
environment to protect the data placed into he shared file system. What is the recommended approach to create this backup using FSS features
A. Implement a backup policy to execute a snapshot of the shared volume.
B. Implement a backup policy to copy data from the shared volume t object storage.
C. Compress the data that is in the shared volume and copy it into a different folder on the boot volume disk.
D. Use the rsync tool to send data from the shared volume to a boo volume disk.
E. Use the rsync tool to send data from the shared volume to a block volume.
Correct Answer: A
QUESTION 120
Which storage would you use if your big da a workload requires shared access and an NFS based interface?
A. File Storage
B. Storage Software Cloud Appliance
C. Object Storage
D. Archive Storage
E. Block Volume
Correct Answer: A
QUESTION 121

You need to transfer over 12 TB of data from on-premises to your cloud account. You started copying this data over the internet and noticed that it will
take too long to complete. Without increasing the costs of your subscription, what is the recommended way to send this amount of data to your cloud
account?
A. Use Data Transfer Service to send your data.
B. Split the data into multiple parts and use the multipart tool.
C. Use a 10 GB FastConnect line to send the data.
D. Send the data over a VPN IPsec tunnel.
E. Compress the data and use the multipart tool.
Correct Answer: A
QUESTION 122
Which two statements are true about encryption on Oracle Cloud Infrastructure (OCI)? (Choose two.)
A. By default, object storage and block storage are encrypted at rest.
B. A customer is responsible for data encryption in all services of OCI.
C. By default, DB Systems offers an encrypted database.
D. By default, NVMe drives are encrypted but the block volume service is not.
Correct Answer: AC
QUESTION 123
You are the Cloud Architect of a company, and are designing a solution on Oracle Cloud Infrastructure where you want to have all your compute
instances resistant to hardware failure. Which two are recommended best practices to achieve the requirement on Oracle Cloud Infrastructure? (Choose
two.)
A. Create a custom image of your system drive each time you change the image.
B. Attach block volumes from different Availability Domains to compute instances in different Availability Domains for high availability.
C. Design your system with redundant compute modes in different Availability Domains to support the failover capability.
D. Create backups of your block volumes that are associated with compute instances in different regions.
Correct Answer: AC
QUESTION 124
For what business need should you use Database Cloud Service (DBCS) instead of Oracle database on a compute instance?
A. to bring your own license on a compute service
B. to lower license and infrastructure cost

C. to implement Oracle RAC for high availability
D. to build an Oracle database on a compute service
Correct Answer: C
QUESTION 125
You need to create a high performance shared file system and have been advised to use file storage service (FSS). You have logged into the Oracle
Cloud Infrastructure console, created a file system, and followed the steps to mount the shared file system on your Linux instance. However, you are still
unable to access the shared file system from your Linux instance.
What is the likely reason for this?
A. There are no security list rules for mount target traffic
B. There is no internet gateway (IGW) set up for mount target traffic
C. There is no Identity and Access Management (IAM) policies set up to allow you to access the mount target
D. There is no route in your virtual cloud network's (VCN) route table for mount target traffic
Correct Answer: A
QUESTION 126
Which two statements define the types of DNS resolvers that exist? (Choose two.)
A. A custom resolver allows instances to use the host names of the hosts in your on-prem network that are connected to your VCN by an IPSec VPN
connection.
B. A VCN resolver allows instances to use the host names of the hosts in your on-prem network that are connected to your VCN by an IPSec VPN
connection.
C. A VCN resolver allows instances to use host names to communicate with instances on other VCNs in your tenancy.
D. An Internet resolver allows instances to use the host names that are published on the Internet.
Correct Answer: AD
QUESTION 127
What is a "transfer package" when transferring data to OCI via the OCI Data Transfer Service?
A. A transfer package is the logical representation of the physical shipment containing the HDD transfer devices that you ship to Oracle to upload o
OCI.
B. A transfer package is the software Oracle provides for you to prepare transfer devices for shipment to Oracle
C. A transfer package contains the physical devices.
D. A transfer package is the archive file that the Data Transfer Service Utility (dts) writes to the transfer device.

Correct Answer: A
QUESTION 128
How can you provide users access to an existing compartment?
A. by granting users access to a compartment when the compartment is created
B. adding users to a group and defining a policy to provide the group access to the compartment
C. by adding users to a compartment. All users in the compartment will have access to the objects in the compartment.
D. by granting access directly to the user when the user is created
Correct Answer: B
QUESTION 129
You are the Solutions Architect of a large company and are tasked with migrating all your services to Oracle Cloud Infrastructure. As part of this, you first
design a Virtual Cloud Network (VCN) with a public subnet and a private subnet. Then in order to provide Internet connectivity to the instances in your
private subnet, you create an Oracle Linux instance in your public subnet and configure NAT on it. However, even after adding all related security list
rules and routes in the Route Table, your private subnet instances still cannot connect to the Internet. Which action should you perform to enable
Internet connectivity?
A. Disable "Source and Destination Check" on the VNIC of your Linux instance.
B. There is no way that a private subnet can connect to the Internet.
C. Create a Dynamic Routing Gateway (DRG) and route your private IP traffic to the DRG.
D. Restart the NAT instance.
Correct Answer: A
QUESTION 130
When terminating a compute instance, which statement is true?
A. The instance needs to be stopped first, and then terminated.
B. The boot volume is always deleted.
C. All block volumes attached to the instance are terminated.
D. Users can preserve the boot volume associated with the instance.
Correct Answer: D
QUESTION 131
There are multiple options of migrating Oracle Databases from on-premises to Oracle Cloud Infrastructure. Which two characteristics do you need to
consider when choosing a migration method? (Choose two.)

A. On-premises database character set and application version
B. On-premises database version and quantity of data, including indexes
C. On-premises host operating system platform and network bandwidth
D. On-premises connectivity using remote and local VCN peering
Correct Answer: BC
QUESTION 132
Within your tenancy you have a compute instance with a boot volume and a block volume attached. The boot volume contains the OS and the attached
block volume contains the instance's important data. Logs on the boot volume have filled the boot volume and are causing issues with the OS.
What should you do to resolve this situation?
A. Stop the instance that is full.
Create a manual backup of the block storage before making changes.
Detach the block volume, create a new instance of the same shape with a larger custom boot volume and attach the block volume to the new
instance.
Configure the OS and any related application(s) to access the block volume under the same mount point as before.
B. Create a new instance with a larger boot volume size as well a new block volume which is the same size or larger than the one attached to the full
instance. rsync the state of the boot volume and the state of the block volume between the two instances.
C. Detach the block volume from the full instance.
Create a new instance of the same shape with a larger boot volume and rsync the state of the boot volume between the instances.
Attach the block volume to the new instance.
D. Create a manual backup of the block storage instance.
Create a custom image of the full instance.
Once that completes deploy the custom image to a new instance.
Correct Answer: A
QUESTION 133
Which two resources are available by default when your Oracle Cloud Infrastructure tenancy is provisioned?
A. an NVMe SSD boot disk for each instance, whose size is determined by the image and shape of the instance
B. a range of public IP addresses that are reserved for your tenancy
C. a set of images,where each image is a template of a virtual hard drive that consists of the OS and installed software and applications
D. a variety of shapes, where each shape determines the number of CPUs and memory allocated to an instance.
Correct Answer: CD
QUESTION 134
Your company is moving an Internet-facing, 2-tier web application into Oracle Cloud Infrastructure. The application must have a highly available

Oracle_1Z0-1072-22_March_2023-v1.1.pdf

Oracle_1Z0-1072-22_March_2023-v1.1.pdf

Recommended

Recommended

More Related Content

Similar to Oracle_1Z0-1072-22_March_2023-v1.1.pdf

Similar to Oracle_1Z0-1072-22_March_2023-v1.1.pdf (20)

More from CCIEHOMER

More from CCIEHOMER (13)

Recently uploaded

Recently uploaded (20)

Oracle_1Z0-1072-22_March_2023-v1.1.pdf