最上級の1z0-1067-22試験問題Oracleテスト最高成績で最速合格をゲットせよ！
試験準備には最適な1z0-1067-22試験問題2023年最新のOracle Cloud Solutions Infrastructure究極な56問があります
オラクル1z0-1067-22認定試験は、クラウドアーキテクチャ、クラウドオペレーション、自動化、セキュリティ、ネットワーキング、およびトラブルシューティングなど、幅広いトピックをカバーしています。候補者は、Oracle Cloud Infrastructure 2022や、Compute、Storage、Networking、Databaseサービスなどの様々なコンポーネントについて深い理解を持つ必要があります。
Oracle 1z0-1067-22 試験は、Oracle Cloud Infrastructure (OCI) サービスの運用と管理を担当するクラウドプロフェッショナルのスキルをテストするために設計されています。この認定試験は、クラウドアーキテクチャ、モニタリングとアラート、セキュリティとコンプライアンス、災害復旧、自動化など幅広いトピックをカバーしています。この試験に合格した候補者は、Oracle Cloud Infrastructure 2022 Cloud Operations Professionals として認定され、OCI サービスの管理と最適化における専門知識を証明します。
試験は60問の多肢選択問題で構成され、105分以内に完了する必要があります。試験の合格基準は70％で、試験料は245ドルです。受験者は、オンラインまたはPearson VUEテストセンターで試験を受けることができます。
質問 # 28
Your deploymentplatform within Oracle Cloud Infrastructure (OCI) leverages a compute instance with multiple block volumes attached. There are multiple teams that use the same compute instance and have access to these block volumes. You want to ensure that no one accidentally deletes any of these block volumes. You have started to construct the following IAM policy but need to determine which permissions should be used.
allow group DeploymentUsers to manage volume-family where ANY
{ request.permission != <???>, request.permission != <???>, request.permission !=
<???> }
Which permissions can you use in place of <???> in this policy? (Choose the best answer.)
- A. ERASE_VOLUME, ERASE_VOLUME_ATTACHMENT, ERASE_VOLUME_BACKUP
- B. DELETE_VOLUME, DELETE_VOLUME_ATTACHMENT, DELETE_VOLUME_BACKUP
- C. VOLUME_ERASE, VOLUME_ATTACHMENT_ERASE, VOLUME_BACKUP_ERASE
- D. VOLUME_DELETE, VOLUME_ATTACHMENT_DELETE, VOLUME_BACKUP_DELETE
正解：D
解説：
Explanation
https://docs.oracle.com/en-us/iaas/Content/Identity/Concepts/policyadvancedfeatures.htm
質問 # 29
You are using Oracle Cloud Infrastructure (OCI) services across several regions: us-phoenix-1, us-ashburn-1, uk-london-1 and ap-tokyo-1. You have creates a separateadministrator group for each region: PHX-Admins, ASH-Admins, LHR-Admins and NRT-Admins, respectively.
You want to restrict admin access to a specific region. E.g., PHX-Admins should be able to manage all resources in the us-phoenix-1 region only and not any other OCI regions.
What IAM policy syntax is required to restrict PHX-Admins to manage OCI resources in the us-phoenix-1 region only? (Choose the best answer.)
- A. Allow group PHX-Admins to manage all-resources in tenancy where request.permission= 'phx'
- B. Allow group PHX-Admins to manage all-resources in tenancy where request.region= 'phx'
- C. Allow group PHX-Admins to manage all-resources in tenancy where request.location= 'phx'
- D. Allow group PHX-Admins to manage all-resources in tenancy where request.target= 'phx'
正解：B
解説：
Explanation
Use conditions to limit access depending on region:
request.regionhttps://docs.oracle.com/en-us/iaas/Content/Identity/Reference/policyreference.htm#General
質問 # 30
You are working as a Cloud Operations Administrator for your company. They have different Oracle Cloud Infrastructure (OCI) tenancies for developmentand production workloads. Each tenancy has resources in two regions - uk-london-1 and eu-frankfurt-1. You are asked to manage all resources and to automate all the tasks using OCI Command Line Interface (CLI).
Which is the most efficient method to managemultiple environments using OCI CLI? (Choose the best answer.)
- A. Use different bash terminals for each environment.
- B. Create environment variables for the sets of credentials that align to each combination of tenancy, region, and environment.
- C. Use OCI CLI profiles to create multiple sets of credentials in your config file, and reference the appropriate profile at runtime.
- D. Run oci setup config to create new credentials for each environment every time you want to access the environment.
正解：C
質問 # 31
You have been contracted by a local e-commerce company to assistwith enhancing their online shopping application. The application is currently deployed in a single Oracle Cloud Infrastructure (OCI) region. The application utilizes a public load balancer, application servers in a private subnet, and a database in a separate, private subnet.
The company would like to deploy another set of similar infrastructure in a different OCI region that will act as standby site. In the event of a failure at the primary site, all customers should be routed to the failover site automatically.
After deploying the additional infrastructure within the second region, how should you configure automated failover requirements? (Choose the best answer.)
- A. Create a load balancer policy in the Traffic Management service. Configure one answerfor each site. Set the answer for the primary site with a weight of 10 and the answer for the secondary site with a weight of 100.
- B. Create a failover policy in the Traffic Management service. Set the IP address of the public load balancerfor the primary site in answer pool 1. Set the IP address of the public load balancer for the secondary site in answer pool 2. Define a health check to monitor both sites.
- C. Create a new A record in DNS that points to the public load balancer at the secondary site. Create a CNAME for the sub-domain failover that will resolve to the new A record. Inform customers to prepend the website URL with failover if the primary site is unavailable.
- D. Deploy a new load balancer in the primary region. Create one backend set for theprimary application servers and a second backend set for the standby application servers. Create a listener for the primary backend set with a timeout of 3 minutes. Create a listener for the secondary backend set with a timeout of 10 minutes.
正解：B
質問 # 32
You have the following compartment structure within your company's Oracle Cloud Infrastructure (OCI) tenancy:
You want to create a policy in the root compartment to allow SystemAdmins to manage VCNs only in CompartmentC.
Which policy is correct? (Choose the best answer.)
- A. Allow group SystemAdmins to manage virtual-network-family in compartment CompartmentB:CompartmentC
- B. Allow group SystemAdmins to manage virtual-network-family in
compartmentCompartmentA:CompartmentB:CompartmentC - C. Allow group SystemAdmins to manage virtual-network-family in compartment CompartmentC
- D. Allow group SystemAdmins to manage virtual-network-family in compartment Root
正解：B
解説：
Explanation
Complete Compartment path is required. It is also advisable to do so, as policies are name based ones.
質問 # 33
You have been asked to investigate a potential security risk on your company's Oracle Cloud Infrastructure (OCI) tenancy. You decide to start by looking throughthe audit logs for suspicious activity.
How can you retrieve the audit logs using the OCI Command Line Interface (CLI)? (Choose the best answer.)
- A. oci audit event list --start-time $start-time --end-time $end-time --tenancy-id
$tenancy-id - B. oci audit event list --end-time $end-time --compartment-id $compartment-id
- C. oci audit event list --start-time $start-time --compartment-id $compartment-id
- D. oci audit event list --start-time $start-time --end-time $end-time -- compartment-id $compartment-id
正解：D
解説：
Explanation
https://docs.oracle.com/en-us/iaas/tools/oci-cli/2.9.7/oci_cli_docs/cmdref/audit/event/list.html
質問 # 34
One of the compute instances that you have deployed on Oracle Cloud Infrastructure (OCI) is malfunctioning.
You have created a console connection to remotely troubleshoot it.
Which two statements about console connections are TRUE? (Choose two.)
- A. It is not possible to use VNC console connections to connect to Bare Metal Instances.
- B. VNC console connection uses SSH port forwarding to create a secure connection from your local system to the VNC server attached to your instance's console.
- C. If you do not disconnect from the session, your serial console connection will automatically be terminated after 24 hours.
- D. For security purpose, the console connection will not let you edit system configuration files.
- E. It is not possible to connect to the serial console to an instance running Microsoft Windows, however VNC console connection can beused.
正解：B、C
解説：
Explanation
https://docs.oracle.com/en-us/iaas/Content/Compute/References/serialconsole.htm
質問 # 35
A developer has created a file system in Oracle Cloud Infrastructure (OCI) File Storage service. She launches an Oracle Linux compute instance and successfully mounts the file system from the instance.
She then tries writing to the file system from the compute instance using the following command:
touch /mnt/yourmountpoint/helloworld
But gets an error message:
touch: cannot touch'/mnt/yourmountpoint/helloworrld': Permission denied Which is a reason for this error? (Choose the best answer.)
- A. Service limits or quota for file system writes have been breached.
- B. Useris not part of any OCI Identity and Access Management group with write permissions to File Storage service.
- C. User is connecting as the default Oracle Linux user 'opc' instead of 'root' user.
- D. 'touch' command is not available in Oracle Linux by default.
正解：C
解説：
Explanation
https://docs.oracle.com/en-us/iaas/Content/File/Troubleshooting/cannotwrite.htm When a file system is created, the root user owns the root directory. If you're connecting from an instance that uses a Linux orCentOS platform image, the default user is opc. The default user is ubuntu when you connect from an instance that uses an Ubuntu platform image. These default users are not root users, so you can't initially write a file or directory to a new file system with these users.
質問 # 36
Multiple teams are sharing a tenancy in OracleCloud Infrastructure (OCI). You are asked to figure out an appropriate method to manage OCI costs.
Which is NOT a valid technique to accurately attribute costs to resources used by each team? (Choose the best answer.)
- A. Create separate compartment for each team. Use the OCI cost analysis tools to filter costs by compartment.
- B. Define and use tags for resources used by each team. Analyze usage data from the OCI Usage Report which has detailed information about resources and tags.
- C. Create a Cost-Tracking tag. Apply this tag to all resources with team information. Use the OCI cost analysis tools to filter costs by tags.
- D. Create an Identity and Access Management (IAM) group for each team. Create an OCI budget for each group to track spending.
正解：D
解説：
Explanation
Budgets are set on cost-tracking tags or on compartments not by user groups
質問 # 37
You have received an email from your manager to provision new resources on Oracle Cloud Infrastructure (OCI). When researching OCI, you determined that you should use OCI Resource Manager. Since this is a task that will be done multiple times for development, test, and production. You will need to create a command that can be re-used.
Which CLI command can be used in this situation? (Choose the best answer.)
- A. oci resource-manager stack update --tenancy-id <tenancy_OCID> \
--config-source prod.zip --variables file://variables.json \
--display-name "Production stack build" \
--description Creating new Production environment - B. oci resource-manager stack update --compartment-id <compartment_OCID> \
--config-source prod.zip --variables file://variables.json \
--display-name "Production stack build" \
--description Creating new Production environment - C. oci resource-manager stack create --compartment-id <compartment_OCID> \
--config-source prod.zip --variables file://variables.json \
--display-name Production stack build \
--description Creating new Production environment - D. oci resource-manager stack create --tenancy-id <tenancy_OCID> \
--config-source prod.zip --variables file://variables.json \
--display-name Production stack build \
--description Creating new Production environment
正解：C
解説：
Explanation
https://docs.oracle.com/en-us/iaas/tools/oci-cli/3.0.2/oci_cli_docs/cmdref/resource-manager/stack/create.html
質問 # 38
A subscriber of an Oracle Cloud Infrastructure (OCI) Notifications service topic complained about not receiving messages from the service.
Which optioncan help you debug this issue? (Choose the best answer.)
- A. If OCI Notifications service does not receive an acknowledgement from a subscription endpoint, the service tries to redeliver messages for up to one day. Make sure that the subscriber is online at least once a day to help debug the issue.
- B. If OCI Notifications service does not receive an acknowledgement from a subscription endpoint, the service drops the message. Confirm that the subscriber is always online to receive messages to help debug the issue.
- C. If OCI Notifications service does not receive an acknowledgement from a subscription endpoint, check the NumberOfNotificationFailed metric through the OCI Monitoring service for failed messages. Copy these messages to an OCI ObjectStorage bucket. Make sure the subscriber has the required credentials to access this bucket to help debug the issue.
- D. If OCI Notifications service does not receive an acknowledgement from a subscription endpoint, the service tries to redeliver messages for up to two hours. Configure an alarm on the NumberOfNotificationFailed metric through the OCI Monitoring service to help debug the issue.
正解：D
解説：
Explanation
https://www.oracle.com/devops/notifications/faq/
When a subscriber's endpoint doesn't acknowledge receipt of a message, the service retries delivery and currently retains the message up to two hours from the time the message is published to a topic. The service tries to deliver messages within the retentionwindow.
質問 # 39
Your company hasrestructured its HR departments. As part of this change, you also need to re-organize compartments within Oracle Cloud Infrastructure (OCI) to align them to the company's new organizational structure. The following change is required:
Compartment Team_xneeds to be moved under a new parent compartment, Project_B The tenancy has the following policies defined for compartments Project_A and Project_B: Policy1: Allow group G1 to manage instance-family in compartment HR:Project_A Policy2: Allow group G2 tomanage instance-family in compartment HR:Project_B Which two statements describe the impacts after the compartment Team_x is moved? (Choose two.)
- A. Group G2 can now manage instance-families in compartment Project_A but not in compartment Team_x
- B. Group G2 can now manage instance-families in compartment Project_B, compartment Project_A and compartment Team_X
- C. Group G2 can now manage instance-families in compartment Project_B and compartment Team_X
- D. Group G1 can now manage instance-families in compartment Project_A but not in compartment Team_x
- E. Group G1 can now manage instance-families in compartment Project_A, compartment Project_B and compartment Team_X
正解：C、D
質問 # 40
You launched a Linux compute instance to host the new version of your company website via Apache Httpd server on HTTPS (port 443). The instance is created in a public subnet along with other instances. The default security list associated to the subnet is:
You want to allow access to the company website from public internet without exposing websites eventually hosted on the other instances in the public subnet.
Which actionwould you take to accomplish the task? (Choose the best answer.)
- A. Create a network security group, add a stateful rule to allow ingressaccess on port 443 and associate it to the instance that hosts the company website.
- B. In default security list,add a stateful rule to allow ingress access on port 443.
- C. Create a network security group, add a stateful rule to allow ingress access on port 443 and associate it to the public subnet that hosts the company website.
- D. Create a new security list with a stateful rule to allow ingress access on port 443 and associate it to the public subnet.
正解：A
解説：
Explanation
Since we want to avoid exposing other instances in the same public subnet to the internet, Network Security Groups (NSG) must be used instead of Security Lists. NSG are attached to the vnic of the instance and not to the subnet
質問 # 41
You run a large global application with 90% of customers based in the US and Canada. You want to be able to test a new feature and allow a small percentage of users to access the new version of your application.
What Oracle Cloud Infrastructure Traffic Management steering policy should you utilize? (Choose the best answer.)
- A. ASN steering
- B. IP Prefix steering
- C. Load Balancer
- D. Geolocation steering
正解：C
解説：
Explanation
https://docs.oracle.com/en-us/iaas/Content/TrafficManagement/Tasks/trafficmanagement.htm
質問 # 42
You are launching a Windows server in your Oracle Cloud Infrastructure (OCI) tenancy.You provided a startup script during instance initialization, but it was not executed successfully.
What is a possible reason for this error? (Choose the best answer.)
- A. Specified a #directive on the first line of your script.
- B. Ran a cloudbase-init script instead of cloud-init.
- C. Didn't include anything in user_data.
- D. Wrote a custom script which tried to install GPU drivers.
正解：B
質問 # 43
One of your development teams has asked for your help to standardize the creation of several compute instances that must be provisioned each day of the week. You initially write several Command Line Interface (CLI) commands with all appropriate configuration parametersto achieve this task later determining this method lacks flexibility.
Which command generates a JSON-based template that Oracle Cloud Infrastructure (OCI) CLI can use to provision these instances on a regular basis? (Choose the best answer.)
- A. oci compute instance launch - -generate-full-command-json-input
- B. oci compute provision-instance - -generate-full-command-json-input
- C. oci compute instance create - -generate-cli-skeleton
- D. oci compute instance launch - -generate-cli-skeleton
正解：A
解説：
Explanation
https://docs.oracle.com/en-us/iaas/tools/oci-cli/3.0.5/oci_cli_docs/oci.html#cmdoption-generate-full-command-js
質問 # 44
You set up a bastion host in your VCN to only allow your IP address (140.19.2.140) to establish SSH connections to your Compute Instances that are deployed in a private subnet. The Compute Instances have an attached Network Security Group with a Source Type: Network Security Group (NSG), Source NSG:
NSG-050504. To secure the bastion host, you added the following ingress rules to its Network Security Group:
However, after checking the bastion host logs, you discovered that there areIP addresses other than your own that can access your bastion host.
What is the root cause of this issue? (Choose the best answer.)
- A. Allcompute instances associated with NSG-050504 are also able to connect to the bastion host.
- B. The port 22 provides unrestricted access to 140.19.2.140 and to other IP address.
- C. The Security List allows access to all IP address which overrides the Network Security Group ingress rules.
- D. A netmask of /32 allows all IP address in the 140.19.2.0 network, other thanyour IP 140.19.2.140
正解：A
質問 # 45
You havecreated a geolocation steering policy in the Oracle Cloud Infrastructure (OCI) Traffic Management service, with this configuration:
What happens to requests that originate in Africa? (Choose the best answer.)
- A. The traffic will be forwarded at the same time to both Pool 1 and Pool 2.
- B. The traffic will be forwarded to Pool 1. If Pool 1 is not available, then it will be forwarded toPool 2.
- C. The traffic will be forwarded randomly to any of the pools mentioned in the rules.
- D. The traffic will be dropped.
正解：C
解説：
Explanation
This policy currently has no global catch-all. No global catch-all means that queries not matching any of the above rules will receive a random answer. Global Catche-all need to set up if the traffic does not meet any condition in the pool and you still want to serve the request. Default is serve randomly.
https://www.oracle.com/a/ocom/docs/cloud/traffic-management-100.pdf
質問 # 46
You are working with Terraform on your laptop and have been tasked with spinning up multiple compute instances in Oracle Cloud Infrastructure (OCI) for a project. In addition, you are also required tocollect IP addresses of provisioned instances and write them to a file and save it in your laptop.
Which specific Terraform functionality can help accomplish this task? (Choose the best answer.)
- A. Terraform local-exec
- B. Terraform remote-exec
- C. Terraform modules
- D. Terraform remote state
正解：B
解説：
Explanation
https://www.terraform.io/docs/language/resources/provisioners/remote-exec.html
質問 # 47
......
注目の1z0-1067-22豪華セット試験ガイドで最速合格を目指そう：https://www.passtest.jp/Oracle/1z0-1067-22-shiken.html
1z0-1067-22試験ガイド豪華セットで最速合格を目指そう：https://drive.google.com/open?id=1WHFM6igxadifw8ZE9m84K9yES6QuMuvv