実践サンプルと問題集と指導には2023年最新の1z0-1067-22有効なテスト問題集
最新 [2023年10月23日] 100%合格率保証付きの素晴らしい1z0-1067-22試験問題PDF
質問 # 12
Which technique does NOT help you get the optimal performance out of the Oracle Cloud Infrastructure (OCI) File Storage service? (Choose the best answer.)
- A. Right size compute instances from where file system is accessed based on their network capacity.
- B. Increase concurrency by using multiple threads, multiple clients, and multiple mount targets.
- C. Serialize operations to the file system to access consecutive blocks as much as possible.
- D. Limit access to the same Availability Domain (AD) as the File Storageservice where possible.
正解：B
解説：
Explanation
"File Storage performance increases with parallelism. Increase concurrency by using multiple threads, multiple clients, and multiple mount targets."
質問 # 13
What is a key benefit of using Oracle Cloud Infrastructure's Resource Manager for your Terraform provisioning and management activities? (Choose the best answer.)
- A. Resource Manager has administrative privileges by design. Even if your IAM user does not have access, you can leverage Resource Manager to provision new resources to any compartment in the Tenancy.
- B. Resource Manager manages to Terraform state file for your infrastructure andlocks the file so that only one job at a time can run on a given stack.
- C. You can use Resource Manager to identify and maintain an inventory of all Compute and Database instances across your tenancy.
- D. You can useResource Manager to apply patches to all existing Oracle Linux interfaces in a specified compartment.
正解：B
解説：
Explanation
https://docs.oracle.com/en-us/iaas/Content/ResourceManager/Concepts/resourcemanager.htm A Terraform configuration codifies your infrastructure in declarative configuration files. Resource Manager allows you to share and manage infrastructure configurations and state files across multiple teams and platforms. This infrastructure management can't be done with local Terraform installations and Oracle Terraform modules alone. For more information about the Oracle Cloud Infrastructure Terraform provider, see Terraform Provider.
質問 # 14
You have recently been asked to take over management of your company's infrastructure provisioning efforts, utilizing Terraform v0.12 to provision and manage infrastructure resources in Oracle Cloud Infrastructure (OCI). For the past fewdays the development environments have been failing to provision. Terraform returns the following error:
You locate the related code block in the Terraform config and find the following:
Which correction should you make to solve this issue? (Choosethe best answer.)
- A. Replace the curly braces '{ }' inlines 11 and 16 with square braces '[ ]'
- B. Modify line 15 to be the following:
tcp_options = {min = "22", max = "22") - C. Place a command at the end of line 16
- D. Modify line 15 to be the following:
tcp_options { min = "22"
max = "22"
}
正解：D
質問 # 15
You have a Linux compute instance located in a public subnet in a VCN which hosts a web application. The security list attached to subnet containing the compute instance has the following stateful ingress rule.
The Route table attached to the Public subnet is shown below. You can establish an SSH connection into the computeinstance from the internet. However, you are not able to connect to the web server using your web browser.
Which step will resolve the issue? (Choose the best answer.)
- A. In the security list, remove the ssh rule.
- B. In the route table, add a rule for your default traffic to be routed to NAT gateway.
- C. In the security list, add an ingress rule for port 80 (http).
- D. In the route table, add a rule for your default traffic to be routed to service gateway.
正解：C
解説：
Explanation
You need to add a rule in thesecurity list table to allow access to web application. Web applications are usually exposed over port 80 (HTTP), therefore answer B makes sense here.
質問 # 16
You have been contracted by a local e-commerce company to assistwith enhancing their online shopping application. The application is currently deployed in a single Oracle Cloud Infrastructure (OCI) region. The application utilizes a public load balancer, application servers in a private subnet, and a database in a separate, private subnet.
The company would like to deploy another set of similar infrastructure in a different OCI region that will act as standby site. In the event of a failure at the primary site, all customers should be routed to the failover site automatically.
After deploying the additional infrastructure within the second region, how should you configure automated failover requirements? (Choose the best answer.)
- A. Create a new A record in DNS that points to the public load balancer at the secondary site. Create a CNAME for the sub-domain failover that will resolve to the new A record. Inform customers to prepend the website URL with failover if the primary site is unavailable.
- B. Create a load balancer policy in the Traffic Management service. Configure one answerfor each site. Set the answer for the primary site with a weight of 10 and the answer for the secondary site with a weight of 100.
- C. Deploy a new load balancer in the primary region. Create one backend set for theprimary application servers and a second backend set for the standby application servers. Create a listener for the primary backend set with a timeout of 3 minutes. Create a listener for the secondary backend set with a timeout of 10 minutes.
- D. Create a failover policy in the Traffic Management service. Set the IP address of the public load balancerfor the primary site in answer pool 1. Set the IP address of the public load balancer for the secondary site in answer pool 2. Define a health check to monitor both sites.
正解：D
質問 # 17
You have a 750 MIB file in an Oracle Cloud Infrastructure (OCI)Object Storage bucket. You want to download the file in multiple parts to speed up the download using the OCI CLI. You also want to configure each part size to be 128 MIB.
Which is the correct OCI CLI command for this operation? (Choose the best answer.)
- A. oci os object get -ns my-namespace -bn my-bucket --name my-large-object -- multipart-download-threshold 750 --parallel-download-count 128
- B. oci os object download -ns my-namespace -bn my-bucket --name my-large-object -- multipart-download-threshold 750 --parallel-download-count 128
- C. oci os object get -ns my-namespace -bn my-bucket --name my-large-object
--multipart-download-threshold 500 --part-size 128 - D. oci os object download -ns my-namespace -bn my-bucket --name my-large-object -- resume-put
--multipart-download-threshold 500 --part-size 128
正解：C
解説：
Explanation
https://docs.public.oneportal.content.oci.oraclecloud.com/en-us/iaas/Content/API/SDKDocs/cliusing.htm
https://docs.oracle.com/en-us/iaas/tools/oci-cli/2.6.15/oci_cli_docs/cmdref/os/object/get.html
質問 # 18
A developer has created a file system in Oracle Cloud Infrastructure (OCI) File Storage service. She launches an Oracle Linux compute instance and successfully mounts the file system from the instance.
She then tries writing to the file system from the compute instance using the following command:
touch /mnt/yourmountpoint/helloworld
But gets an error message:
touch: cannot touch'/mnt/yourmountpoint/helloworrld': Permission denied Which is a reason for this error? (Choose the best answer.)
- A. 'touch' command is not available in Oracle Linux by default.
- B. User is connecting as the default Oracle Linux user 'opc' instead of 'root' user.
- C. Service limits or quota for file system writes have been breached.
- D. Useris not part of any OCI Identity and Access Management group with write permissions to File Storage service.
正解：B
解説：
Explanation
https://docs.oracle.com/en-us/iaas/Content/File/Troubleshooting/cannotwrite.htm When a file system is created, the root user owns the root directory. If you're connecting from an instance that uses a Linux orCentOS platform image, the default user is opc. The default user is ubuntu when you connect from an instance that uses an Ubuntu platform image. These default users are not root users, so you can't initially write a file or directory to a new file system with these users.
質問 # 19
One of your development teams has asked for your help to standardize the creation of several compute instances that must be provisioned each day of the week. You initially write several Command Line Interface (CLI) commands with all appropriate configuration parametersto achieve this task later determining this method lacks flexibility.
Which command generates a JSON-based template that Oracle Cloud Infrastructure (OCI) CLI can use to provision these instances on a regular basis? (Choose the best answer.)
- A. oci compute instance launch - -generate-cli-skeleton
- B. oci compute instance create - -generate-cli-skeleton
- C. oci compute provision-instance - -generate-full-command-json-input
- D. oci compute instance launch - -generate-full-command-json-input
正解：D
解説：
Explanation
https://docs.oracle.com/en-us/iaas/tools/oci-cli/3.0.5/oci_cli_docs/oci.html#cmdoption-generate-full-command-js
質問 # 20
You have been asked to set up connectivity between a client's on-premises network and Oracle Cloud Infrastructure (OCI). The requirements are:
Low latency: The applications are financial and require low latency connectivity intoOCI. Consistency: The application isn't tolerant of performance variation.
Performance: The communications link needs to support up to 1.25 Gbps.
Encryption: The communications link needs to encrypt any data in transit between the on-premises network and OCI Virtual Cloud Network (VCN).
The client wants to implement the above with as low a cost as possible, while meeting all of the requirements.
What should you suggest? (Choose the best answer.)
- A. Provision FastConnect with a single private virtualcircuit, and run an IPsec VPN tunnel over the top of this virtual circuit.
- B. Provision FastConnect with a single public virtual circuit, and run an IPsec VPN tunnel over the top of this virtual circuit.
- C. Provision FastConnect with a single private virtual circuit.
- D. Provision FastConnect with a single public virtual circuit.
- E. Provision a site-to-site IPsec VPN between your on-premises network and your virtual cloud network (VCN) using VPNConnect.
正解：B
解説：
Explanation
https://docs.oracle.com/en-us/iaas/Content/Resources/Assets/whitepapers/encrypted-fastconnect-public-peering.p
質問 # 21
You launched a Linux compute instance to host the new version of your company website via Apache Httpd server on HTTPS (port 443). The instance is created in a public subnet along with other instances. The default security list associated to the subnet is:
You want to allow access to the company website from public internet without exposing websites eventually hosted on the other instances in the public subnet.
Which actionwould you take to accomplish the task? (Choose the best answer.)
- A. Create a new security list with a stateful rule to allow ingress access on port 443 and associate it to the public subnet.
- B. Create a network security group, add a stateful rule to allow ingress access on port 443 and associate it to the public subnet that hosts the company website.
- C. In default security list,add a stateful rule to allow ingress access on port 443.
- D. Create a network security group, add a stateful rule to allow ingressaccess on port 443 and associate it to the instance that hosts the company website.
正解：D
解説：
Explanation
Since we want to avoid exposing other instances in the same public subnet to the internet, Network Security Groups (NSG) must be used instead of Security Lists. NSG are attached to the vnic of the instance and not to the subnet
質問 # 22
You have the following compartment structure within your company's Oracle Cloud Infrastructure (OCI) tenancy:
You want to create a policy in the root compartment to allow SystemAdmins to manage VCNs only in CompartmentC.
Which policy is correct? (Choose the best answer.)
- A. Allow group SystemAdmins to manage virtual-network-family in compartment Root
- B. Allow group SystemAdmins to manage virtual-network-family in compartment CompartmentB:CompartmentC
- C. Allow group SystemAdmins to manage virtual-network-family in
compartmentCompartmentA:CompartmentB:CompartmentC - D. Allow group SystemAdmins to manage virtual-network-family in compartment CompartmentC
正解：C
解説：
Explanation
Complete Compartment path is required. It is also advisable to do so, as policies are name based ones.
質問 # 23
You havecreated a geolocation steering policy in the Oracle Cloud Infrastructure (OCI) Traffic Management service, with this configuration:
What happens to requests that originate in Africa? (Choose the best answer.)
- A. The traffic will be forwarded randomly to any of the pools mentioned in the rules.
- B. The traffic will be forwarded to Pool 1. If Pool 1 is not available, then it will be forwarded toPool 2.
- C. The traffic will be forwarded at the same time to both Pool 1 and Pool 2.
- D. The traffic will be dropped.
正解：A
解説：
Explanation
This policy currently has no global catch-all. No global catch-all means that queries not matching any of the above rules will receive a random answer. Global Catche-all need to set up if the traffic does not meet any condition in the pool and you still want to serve the request. Default is serve randomly.
https://www.oracle.com/a/ocom/docs/cloud/traffic-management-100.pdf
質問 # 24
You have been asked to update the lifecycle policy for object storage using the Oracle Cloud Infrastructure (OCI) Command Line Interface (CLI).
Which command can successfully update the policy? (Choose the bestanswer.)
- A. oci os object-lifecycle-policy put -ns <object_storage_namespace> -bn <bucket_name>
- B. oci os object-lifecycle-policy get -ns <object_storage_namespace> -bn <bucket_name>
- C. oci os object-lifecycle-policy delete -ns <object_storage_namespace> -bn <bucket_name>
- D. oci os object-lifecycle-policy put -ns <object_storage_namespace> -bn <bucket_name> - -items
<json_formatted_lifecycle_policy>
正解：D
解説：
Explanation
https://docs.oracle.com/en-us/iaas/Content/Object/Tasks/usinglifecyclepolicies.htm#cli
https://docs.oracle.com/en-us/iaas/tools/oci-cli/2.17.0/oci_cli_docs/cmdref/os/object-lifecycle-policy/put.html
質問 # 25
Which two statements about the OracleCloud Infrastructure (OCI) Command Line Interface (CLI) are TRUE?
(Choose two.)
- A. The CLI provides the same core functionality as the Console, plus additional commands.
- B. You can run CLI commands from inside OCI Regions only.
- C. The CLI allows you to use the Python language to interact with OCI APIs.
- D. You can filter CLI output using the JMESPath query option for JSON.
- E. The CLI provides an automatic way to connect with instances provisioned on OCI.
正解：A、D
解説：
Explanation
https://docs.oracle.com/en-us/iaas/Content/API/SDKDocs/cliusing.htm
https://blogs.oracle.com/cloud-infrastructure/post/exploring-the-search-and-query-features-of-oracle-cloud-infras
質問 # 26
A subscriber of an Oracle Cloud Infrastructure (OCI) Notifications service topic complained about not receiving messages from the service.
Which optioncan help you debug this issue? (Choose the best answer.)
- A. If OCI Notifications service does not receive an acknowledgement from a subscription endpoint, the service tries to redeliver messages for up to one day. Make sure that the subscriber is online at least once a day to help debug the issue.
- B. If OCI Notifications service does not receive an acknowledgement from a subscription endpoint, the service tries to redeliver messages for up to two hours. Configure an alarm on the NumberOfNotificationFailed metric through the OCI Monitoring service to help debug the issue.
- C. If OCI Notifications service does not receive an acknowledgement from a subscription endpoint, the service drops the message. Confirm that the subscriber is always online to receive messages to help debug the issue.
- D. If OCI Notifications service does not receive an acknowledgement from a subscription endpoint, check the NumberOfNotificationFailed metric through the OCI Monitoring service for failed messages. Copy these messages to an OCI ObjectStorage bucket. Make sure the subscriber has the required credentials to access this bucket to help debug the issue.
正解：B
解説：
Explanation
https://www.oracle.com/devops/notifications/faq/
When a subscriber's endpoint doesn't acknowledge receipt of a message, the service retries delivery and currently retains the message up to two hours from the time the message is published to a topic. The service tries to deliver messages within the retentionwindow.
質問 # 27
You run a large global application with 90% of customers based in the US and Canada. You want to be able to test a new feature and allow a small percentage of users to access the new version of your application.
What Oracle Cloud Infrastructure Traffic Management steering policy should you utilize? (Choose the best answer.)
- A. Load Balancer
- B. ASN steering
- C. IP Prefix steering
- D. Geolocation steering
正解：A
解説：
Explanation
https://docs.oracle.com/en-us/iaas/Content/TrafficManagement/Tasks/trafficmanagement.htm
質問 # 28
You created an Oracle Linux compute instance through the Oracle Cloud Infrastructure (OCI) management console then immediately realize you forgot toadd an SSH key file. You notice that OCI compute service provides instance console connections that supports adding SSH keys for a running instance. Hence, you created the console connection for your Linux server and activated it using the connection string provided.
However, now you get prompted for a username and password to login.
What option should you recommend to add the SSH key to your running instance, while minimizing the administrative overhead? (Choose the best answer.)
- A. You need to modify the serial console connection string to include the identity file flag, -i to specify the SSH key to use.
- B. You need to reboot the instance from the console, boot into the bash shell in maintenance mode,and add SSH keys for the opc user.
- C. You need to configure the boot loader to use ttyS0 as a console terminal on the VM.
- D. You need to terminate the running instance and recreate it by providing the SSH key file.
正解：B
解説：
Explanation
If you created an instance without an SSH key, you can use the serial console toboot into maintenance mode and add or reset the SSH key for the opc user or reset the password for the opc user. Alternately, you can stop the instance, attach the boot volume to a new instance, and configure SSH on the new instance.
https://docs.oracle.com/en-us/iaas/Content/Compute/Tasks/accessinginstance.htm
質問 # 29
Which two statements are TRUE about Object Storage data security and encryption in Oracle Cloud Infrastructure (OCI)? (Choose two.)
- A. Client-side encryption is managed by the customer.
- B. All traffic to and from Object Storage service is encrypted using TLS.
- C. A VPN connection to OCI is required to ensure secure data transfer to an object storage bucket.
- D. Data needs to be decrypted on the client side before retrieving it.
- E. OCI Vault Management is used by default to provide data security.
正解：A、B
質問 # 30
You have been asked to ensure that in-transit communication between an OracleCloud Infrastructure (OCI) compute instance and an on-premises server (192.168.10.10/32) is encrypted. The instances communicate using HTTP. The OCI Virtual Cloud Network (VCN) is connected to the on-premises network by two separate connections: a DynamicIPsec VPN tunnel and a FastConnect virtual circuit. No static configuration has been added.
What solution should you recommend? (Choose the best answer.)
- A. Advertise a 192.168.10.10/32 route over the VPN.
- B. The instances will communicate by default over the FastConnect private virtual circuit, which ensures data is encrypted in-transit.
- C. The instances will communicate by default over IPsec VPN, which ensures data is encrypted in-transit.
- D. Advertise a 192.168.10.10/32 router over the FastConnect.
正解：A
解説：
Explanation
https://www.oracle.com/uk/cloud/networking/fastconnect-faq.html
質問 # 31
You set up a bastion host in your VCN to only allow your IP address (140.19.2.140) to establish SSH connections to your Compute Instances that are deployed in a private subnet. The Compute Instances have an attached Network Security Group with a Source Type: Network Security Group (NSG), Source NSG:
NSG-050504. To secure the bastion host, you added the following ingress rules to its Network Security Group:
However, after checking the bastion host logs, you discovered that there areIP addresses other than your own that can access your bastion host.
What is the root cause of this issue? (Choose the best answer.)
- A. A netmask of /32 allows all IP address in the 140.19.2.0 network, other thanyour IP 140.19.2.140
- B. The port 22 provides unrestricted access to 140.19.2.140 and to other IP address.
- C. The Security List allows access to all IP address which overrides the Network Security Group ingress rules.
- D. Allcompute instances associated with NSG-050504 are also able to connect to the bastion host.
正解：D
質問 # 32
Multiple teams are sharing a tenancy in OracleCloud Infrastructure (OCI). You are asked to figure out an appropriate method to manage OCI costs.
Which is NOT a valid technique to accurately attribute costs to resources used by each team? (Choose the best answer.)
- A. Create a Cost-Tracking tag. Apply this tag to all resources with team information. Use the OCI cost analysis tools to filter costs by tags.
- B. Create separate compartment for each team. Use the OCI cost analysis tools to filter costs by compartment.
- C. Create an Identity and Access Management (IAM) group for each team. Create an OCI budget for each group to track spending.
- D. Define and use tags for resources used by each team. Analyze usage data from the OCI Usage Report which has detailed information about resources and tags.
正解：C
解説：
Explanation
Budgets are set on cost-tracking tags or on compartments not by user groups
質問 # 33
You are using Oracle Cloud Infrastructure (OCI) services across several regions: us-phoenix-1, us-ashburn-1, uk-london-1 and ap-tokyo-1. You have creates a separateadministrator group for each region: PHX-Admins, ASH-Admins, LHR-Admins and NRT-Admins, respectively.
You want to restrict admin access to a specific region. E.g., PHX-Admins should be able to manage all resources in the us-phoenix-1 region only and not any other OCI regions.
What IAM policy syntax is required to restrict PHX-Admins to manage OCI resources in the us-phoenix-1 region only? (Choose the best answer.)
- A. Allow group PHX-Admins to manage all-resources in tenancy where request.permission= 'phx'
- B. Allow group PHX-Admins to manage all-resources in tenancy where request.location= 'phx'
- C. Allow group PHX-Admins to manage all-resources in tenancy where request.region= 'phx'
- D. Allow group PHX-Admins to manage all-resources in tenancy where request.target= 'phx'
正解：C
解説：
Explanation
Use conditions to limit access depending on region:
request.regionhttps://docs.oracle.com/en-us/iaas/Content/Identity/Reference/policyreference.htm#General
質問 # 34
......
1z0-1067-22時間限定！無料アクセス：https://www.passtest.jp/Oracle/1z0-1067-22-shiken.html
1z0-1067-22認定有効な試験問題集と解答学習ガイド：https://drive.google.com/open?id=1Z2JtkFoHmuUmfqODY8F6OLXkfaytEVU9