1Z0-1067-25問題集、Oracle実際の試験問題

質問 1

You have been brought In to help secure an existing application that leverages Object Storage buckets to distribute content. The data is currently being shared from public buckets and the security team Is not satisfied with this approach. They have stated that all data must be stored In storage buckets. Your application should be able to provide secure access to the dat a. The URL that is provided for access to the data must be rotated every 30 days. Which design option will meet these requirements?

A. Create a private bucket only to share the data.

B. Create a new group and map users to this group, create a IAM policy providing access to Object Storage service only to this group. Users can then simply login to OCI console and retrieve needed flies.

C. Create multiple bucket and classify them as Public and Private. Use public bucket for non-sensitive data and private bucket for sensitive data.

D. Use Pre-Authenticated request, even though there will be multiple URLs this will pro-vide better security.

正解: D

質問 2

You are asked to implement the disaster recovery (DR) and business continuity requirements for Oracle Cloud Infrastructure (OCI) Block Volumes. Two OCI regions being used: a primary/source region and a DR/destination region. The requirements are: There should be a copy of data in the destination region to use if a region-wide disaster occurs in the source region * Minimize costs Which design will help you meet these requirements? (Choose the best answer.)

A. Clone block volumes. Copy block volume clones from source region to destination region at regular intervals.

B. Back up block volumes. Copy block volume backups from source region to destination region at regular intervals.

C. Back up block volumes. Use Object Storage lifecycle management to automatically move backup objects to Archive Storage. Copy Archive Storage buckets from source region to destination at regular intervals.

D. Clone block volumes. Use Object Storage lifecycle management to automatically move clone objects to Archive Storage. Copy Archive Storage buckets from source region to destination at regular intervals.

正解: C

質問 3

You are using Oracle Cloud Infrastructure (OCI) console to set up an alarm on a budget to track your OCI spending. Which two are valid targets for creating a budget in OCI? (Choose two.)

A. Select Compartment as the type of target for your budget.

B. Select Tenancy as the type of target for your budget.

C. Select Cost-Tracking Tags as the type of target for your budget.

D. Select user as the type of target for your budget.

E. Select group as the type of target for your budget.

正解: A,C

質問 4

As a cloud operations engineer responsible for a Rails application on multiple compute instances in an OCI subnet your database team recently provided you with a new config/database. yml file to direct Rails to use a new database back end. You need to update this file on each compute instance and restart Rails in a rolling fashion.
Which tool is best suited for this task?

A. Oracle Cloud Agent

B. Ansible

C. OCI CLI

D. Terraform

正解: B

質問 5

When creating an alarm query in Oracle Cloud Infrastructure (OCI) Monitoring, which of the following statement is NOT valid?

A. You must specify Resource Group

B. You must specify Statistic

C. You must specify Trigger rule (threshold or absence).

D. You must specify a Metric

E. You must specify an interval

正解: A

質問 6

You are working with Terraform on your laptop and have been tasked with spinning up multiple compute instances in Oracle Cloud Infrastructure (OCI) for a project. In addition, you are also required to collect IP addresses of provisioned instances and write them to a file and save it in your laptop. Which specific Terraform functionality can help accomplish this task? (Choose the best answer.)

A. Terraform remote-exec

B. Terraform modules

C. Terraform local-exec

D. Terraform remote state

正解: C

質問 7

You set up a bastion host in your Virtual Cloud Network (VCN) to allow only your IP ad-dress (140.19.2.140) to establish SSH connections with your compute instances that are deployed in a private subnet. The compute instances have an attached Network Security Group (NSG) with a Source Type: Network Security Group (NSG), Source NSG: NSG-050504. To secure the bastion host, you add the following ingress rules to its NSG: Type: All TCP Proto-col: TCP Port Range: 22 Source: 140.19.2.140/32 Type: All TCP Protocol: TCP Port Range: 22 Source: NSG-050504 However, when you check the bastion host logs, you discover that there are IP addresses other than your own that can access your bastion host. What is the root cause of this issue?

A. All compute instances associated with NSG-050504 are also able to connect to the bastion host.

B. The security list allows access to all IP addresses that override the NSG ingress rules.

C. The port 22 provides unrestricted access to 140.19.2.140 and to other IP addresses.

D. A netmask of /32 allows all IP addresses in the140.19.2.0 network, other than your IP 140.19.2.140.

正解: A

質問 8

Your application is using an Object Storage bucket named app-data in the namespace vision, to store both persistent and temporary dat a. Every week all the temporary data should be deleted to limit the storage consumption. Currently you need to navigate to the Object Storage page using the web console, select the appropriate bucket to view all the objects and delete the temporary ones. To simplify the task you have configured the application to save all the temporary data with /temp prefix. You have also decided to use the Command Line Interface (CLI) to perform this operation. What is the command you should use to speed up the data cleanup? (Choose the best answer.)

A. oci os object delete app-data in vision where prefix = /temp

B. oci os object delete -ns vision -bn app-data --prefix /temp

C. oci objectstorage bulk-delete -ns vision -bn app-data --prefix /temp -force

D. oci os object bulk-delete -ns vision -bn app-data --prefix /temp --force

正解: D

質問 9

You have received an email from your manager to provision new resources on Oracle Cloud Infrastructure (OCI). When researching OCI, you determined that you should use OCI Resource Manager. Since this is a task that will be done multiple times for development, test, and production. You will need to create a command that can be re-used. Which CLI command can be used in this situation? (Choose the best answer.)

A. oci resource-manager stack create --compartment-id <compartment_OCID> \ --config-source prod.zip --variables file://variables.json \ --display-name "Production stack build" \ --description Creating new Production environment

B. oci resource-manager stack update --compartment-id <compartment_OCID> \ --config-source prod.zip --variables file://variables.json \ --display-name "Production stack build" \ --description Creating new Production environment

C. oci resource-manager stack update --tenancy-id <tenancy_OCID> \ --config-source prod.zip --variables file://variables.json \ --display-name "Production stack build" \ --description Creating new Production environment

D. oci resource-manager stack create --tenancy-id <tenancy_OCID> \ --config-source prod.zip --variables file://variables.json \ --display-name Production stack build \ --description Creating new Production environment

正解: A

質問 10

Your deployment platform within Oracle Cloud Infrastructure (OCI) leverages a compute instance with multiple block volumes attached. There are multiple teams that use the same compute instance and have access to these block volumes. You want to ensure that no one accidentally deletes any of these block volumes. You have started to construct the following IAM policy but need to determine which permissions should be used. allow group DeploymentUsers to manage volume-family where ANY { request.permission != <???>, request.permission != <???>, request.permission != <???> } Which permissions can you use in place of <???> in this policy? (Choose the best answer.)

A. DELETE_VOLUME, DELETE_VOLUME_ATTACHMENT, DE-LETE_VOLUME_BACKUP

B. ERASE_VOLUME, ERASE_VOLUME_ATTACHMENT, ERASE_VOLUME_BACKUP

C. VOLUME_DELETE, VOLUME_ATTACHMENT_DELETE, VOL-UME_BACKUP_DELETE

D. VOLUME_ERASE, VOLUME_ATTACHMENT_ERASE, VOL-UME_BACKUP_ERASE

正解: C

Oracle Cloud Infrastructure 2025 Cloud Ops Professional - 1Z0-1067-25 模擬練習