[2023年10月31日] 実際の1z0-1067-22試験問題集は2023年最新のOracle練習試験合格させます
2023年最新の実際にある1z0-1067-22問題集テストエンジン試験問題はここにある
Oracle 1Z0-1067-22認定試験の準備をするために、候補者は、研究ガイド、練習試験、トレーニングコースなど、Oracleが提供するさまざまなリソースを利用できます。候補者は、OCI環境で実際のプロジェクトに取り組むことで、実践的な経験を積むこともできます。適切な準備と献身により、候補者はOracle 1Z0-1067-22認定試験に合格し、認定されたOCIクラウドオペレーションの専門家になることができます。
この試験は、Oracle Cloud Infrastructureで作業するクラウド管理者、クラウドオペレーションの専門家、およびDevOpsエンジニアを対象としています。この試験では、クラウドアーキテクチャ、セキュリティ、ネットワーク、ストレージ、コンピューティング、およびデータベースサービスを含む幅広いトピックがカバーされます。また、Terraform、Ansible、Grafanaなどの自動化および監視ツールもカバーされます。
質問 # 27
You have been asked to ensure that in-transit communication between an OracleCloud Infrastructure (OCI) compute instance and an on-premises server (192.168.10.10/32) is encrypted. The instances communicate using HTTP. The OCI Virtual Cloud Network (VCN) is connected to the on-premises network by two separate connections: a DynamicIPsec VPN tunnel and a FastConnect virtual circuit. No static configuration has been added.
What solution should you recommend? (Choose the best answer.)
- A. The instances will communicate by default over IPsec VPN, which ensures data is encrypted in-transit.
- B. Advertise a 192.168.10.10/32 router over the FastConnect.
- C. The instances will communicate by default over the FastConnect private virtual circuit, which ensures data is encrypted in-transit.
- D. Advertise a 192.168.10.10/32 route over the VPN.
正解：D
解説：
Explanation
https://www.oracle.com/uk/cloud/networking/fastconnect-faq.html
質問 # 28
You have been asked to review a network design for Oracle Cloud Infrastructure (OCI) by a major client. The client's IT team needs to provision two Virtual Cloud Networks (VCNs) for a major application. The application uses a large number of virtual machine instances. Additionally, in the future, a VCN peering will be required to allow connectivity between the VCNs.
Which of the following are valid IP ranges to consider? (Choose the best answer.)
- A. 10.0.0.0/30 and 192.168.0.0/30
- B. 10.0.0.0/8 and 11.0.0.0/8
- C. 10.0.0.0/16 and 10.0.64.0/24
- D. 10.0.8.0/21 and 10.0.16.0/22
正解：C
質問 # 29
You are working as a Cloud Operations Administrator for your company. They have different Oracle Cloud Infrastructure (OCI) tenancies for developmentand production workloads. Each tenancy has resources in two regions - uk-london-1 and eu-frankfurt-1. You are asked to manage all resources and to automate all the tasks using OCI Command Line Interface (CLI).
Which is the most efficient method to managemultiple environments using OCI CLI? (Choose the best answer.)
- A. Use different bash terminals for each environment.
- B. Run oci setup config to create new credentials for each environment every time you want to access the environment.
- C. Use OCI CLI profiles to create multiple sets of credentials in your config file, and reference the appropriate profile at runtime.
- D. Create environment variables for the sets of credentials that align to each combination of tenancy, region, and environment.
正解：C
質問 # 30
A subscriber of an Oracle Cloud Infrastructure (OCI) Notifications service topic complained about not receiving messages from the service.
Which optioncan help you debug this issue? (Choose the best answer.)
- A. If OCI Notifications service does not receive an acknowledgement from a subscription endpoint, the service drops the message. Confirm that the subscriber is always online to receive messages to help debug the issue.
- B. If OCI Notifications service does not receive an acknowledgement from a subscription endpoint, the service tries to redeliver messages for up to two hours. Configure an alarm on the NumberOfNotificationFailed metric through the OCI Monitoring service to help debug the issue.
- C. If OCI Notifications service does not receive an acknowledgement from a subscription endpoint, the service tries to redeliver messages for up to one day. Make sure that the subscriber is online at least once a day to help debug the issue.
- D. If OCI Notifications service does not receive an acknowledgement from a subscription endpoint, check the NumberOfNotificationFailed metric through the OCI Monitoring service for failed messages. Copy these messages to an OCI ObjectStorage bucket. Make sure the subscriber has the required credentials to access this bucket to help debug the issue.
正解：B
解説：
Explanation
https://www.oracle.com/devops/notifications/faq/
When a subscriber's endpoint doesn't acknowledge receipt of a message, the service retries delivery and currently retains the message up to two hours from the time the message is published to a topic. The service tries to deliver messages within the retentionwindow.
質問 # 31
Here is a partial code from a Terraform template written for Oracle Cloud Infrastructure (OCI):
What operation(s) does it perform? (Choose the best answer.)
- A. Creates a pre-authenticated request for objects in an OCI Object Storage bucket.
- B. Creates a lifecycle policy for an OCI Object Storage bucket for moving data to Archival storage at a specified time.
- C. Provides objectread and write access for an OCI Object Storage bucket.
- D. Creates a URL to provide access to an OCI Object Storage bucket for managing objects.
正解：A
質問 # 32
You have created a group for several auditors. You assign the following policies tothe group:
What actions are the auditors allowed to perform within your tenancy? (Choose the best answer.)
- A. Auditors are able to view all resources in the compartment.
- B. Auditors are able to create new instances in the tenancy.
- C. The Auditors can view resources in the tenancy.
- D. The Auditors are able to delete resource in the tenancy.
正解：C
解説：
Explanation
https://docs.oracle.com/en-us/iaas/Content/Identity/Concepts/policies.htm#Verbs
質問 # 33
You are working with Terraform on your laptop and have been tasked with spinning up multiple compute instances in Oracle Cloud Infrastructure (OCI) for a project. In addition, you are also required tocollect IP addresses of provisioned instances and write them to a file and save it in your laptop.
Which specific Terraform functionality can help accomplish this task? (Choose the best answer.)
- A. Terraform local-exec
- B. Terraform remote state
- C. Terraform modules
- D. Terraform remote-exec
正解：D
解説：
Explanation
https://www.terraform.io/docs/language/resources/provisioners/remote-exec.html
質問 # 34
You have been contracted by a local e-commerce company to assistwith enhancing their online shopping application. The application is currently deployed in a single Oracle Cloud Infrastructure (OCI) region. The application utilizes a public load balancer, application servers in a private subnet, and a database in a separate, private subnet.
The company would like to deploy another set of similar infrastructure in a different OCI region that will act as standby site. In the event of a failure at the primary site, all customers should be routed to the failover site automatically.
After deploying the additional infrastructure within the second region, how should you configure automated failover requirements? (Choose the best answer.)
- A. Create a load balancer policy in the Traffic Management service. Configure one answerfor each site. Set the answer for the primary site with a weight of 10 and the answer for the secondary site with a weight of 100.
- B. Deploy a new load balancer in the primary region. Create one backend set for theprimary application servers and a second backend set for the standby application servers. Create a listener for the primary backend set with a timeout of 3 minutes. Create a listener for the secondary backend set with a timeout of 10 minutes.
- C. Create a failover policy in the Traffic Management service. Set the IP address of the public load balancerfor the primary site in answer pool 1. Set the IP address of the public load balancer for the secondary site in answer pool 2. Define a health check to monitor both sites.
- D. Create a new A record in DNS that points to the public load balancer at the secondary site. Create a CNAME for the sub-domain failover that will resolve to the new A record. Inform customers to prepend the website URL with failover if the primary site is unavailable.
正解：C
質問 # 35
You have been asked to update the lifecycle policy for object storage using the Oracle Cloud Infrastructure (OCI) Command Line Interface (CLI).
Which command can successfully update the policy? (Choose the bestanswer.)
- A. oci os object-lifecycle-policy delete -ns <object_storage_namespace> -bn <bucket_name>
- B. oci os object-lifecycle-policy get -ns <object_storage_namespace> -bn <bucket_name>
- C. oci os object-lifecycle-policy put -ns <object_storage_namespace> -bn <bucket_name> - -items
<json_formatted_lifecycle_policy> - D. oci os object-lifecycle-policy put -ns <object_storage_namespace> -bn <bucket_name>
正解：C
解説：
Explanation
https://docs.oracle.com/en-us/iaas/Content/Object/Tasks/usinglifecyclepolicies.htm#cli
https://docs.oracle.com/en-us/iaas/tools/oci-cli/2.17.0/oci_cli_docs/cmdref/os/object-lifecycle-policy/put.html
質問 # 36
Your team implemented a SaaS application that requires a whole system deployment for each new customer.
The infrastructure provisioning is already automated via Terraform, and now you have been asked to develop an Ansible playbook to centralize configuration file management and deployment.
What is the most effective way to ensure your playbooks are utilizing up-to-date and accurate inventory?
(Choose the best answer.)
- A. Implement a Command Line Interface script to list all the resources and run it within Ansible to generate a dynamic inventory list.
- B. Download the dynamic inventory script provided by Oracle Cloud Infrastructure and include it in the playbook invocation command.
- C. Export an inventory list using Terraform apply command.
- D. Export an inventory list from the Oracle Cloud Infrastructure Web console.
正解：B
解説：
Explanation
https://docs.oracle.com/en-us/iaas/Content/API/SDKDocs/ansibleinventoryscript.htm
質問 # 37
Your application is using an Object Storage bucket named app-data in the namespace vision, to store both persistent and temporary data. Every week all the temporary data should be deleted to limit the storage consumption.
Currently you need to navigate to the Object Storage page using the web console, select the appropriate bucket to view all the objects and delete the temporary ones.
To simplify the task you have configured the application to save all the temporary data with /temp prefix. You have also decided to use the Command Line Interface (CLI) to perform this operation.
What is the command you should use to speed up the data cleanup? (Choose the best answer.)
- A. oci os object bulk-delete -ns vision -bn app-data --prefix /temp --force
- B. oci objectstorage bulk-delete -ns vision -bn app-data --prefix /temp --force
- C. oci os object delete app-data in vision where prefix = /temp
- D. oci os object delete -ns vision -bn app-data --prefix /temp
正解：A
解説：
Explanation
https://docs.oracle.com/en-us/iaas/tools/oci-cli/3.0.2/oci_cli_docs/cmdref/os/object/bulk-delete.html
質問 # 38
Your deploymentplatform within Oracle Cloud Infrastructure (OCI) leverages a compute instance with multiple block volumes attached. There are multiple teams that use the same compute instance and have access to these block volumes. You want to ensure that no one accidentally deletes any of these block volumes. You have started to construct the following IAM policy but need to determine which permissions should be used.
allow group DeploymentUsers to manage volume-family where ANY
{ request.permission != <???>, request.permission != <???>, request.permission !=
<???> }
Which permissions can you use in place of <???> in this policy? (Choose the best answer.)
- A. VOLUME_ERASE, VOLUME_ATTACHMENT_ERASE, VOLUME_BACKUP_ERASE
- B. DELETE_VOLUME, DELETE_VOLUME_ATTACHMENT, DELETE_VOLUME_BACKUP
- C. ERASE_VOLUME, ERASE_VOLUME_ATTACHMENT, ERASE_VOLUME_BACKUP
- D. VOLUME_DELETE, VOLUME_ATTACHMENT_DELETE, VOLUME_BACKUP_DELETE
正解：D
解説：
Explanation
https://docs.oracle.com/en-us/iaas/Content/Identity/Concepts/policyadvancedfeatures.htm
質問 # 39
You have created an Autonomous Data Warehouse (ADW) service in your company's Oracle Cloud Infrastructure (OCI) tenancy and you now have to load historical data into it. You have already extracted this historical data from multiple data marts and data warehouses. This data is stored in multiple CSV text files and these files are ranging in size from 25 MB to 20 GB.
Which is the most efficient and error tolerant method for loading data into ADW? (Choose the best answer.)
- A. Create Auth token, use it to create an object storage credential by executing DBMS_CLOUD.CREATE_CREDENTIAL, using OCI CLI upload the CSV files to an OCI object storage bucket, create the tables in the ADW database and then execute DBMS_CLOUD.COPY_DATA for each CSV file to copy the contents into the corresponding ADW database table.
- B. Create the tables in the ADW database and then execute SQL*Loader for each CSV file to load the contents into the corresponding ADW database table.
- C. Create Auth token, useit to create an object storage credential by executing DBMS_CLOUD.CREATE_CREDENTIAL, using OCI CLI upload the CSV files to an OCI object storage bucket, create the tables in the ADW database and then execute Data Pump Import for each CSV file to copy the contents into the corresponding ADW database table.
- D. CreateAuth token, use it to create an object storage credential by executing DBMS_CLOUD.CREATE_CREDENTIAL, using the web console upload the CSV files to an OCI object storage bucket, create the tables in the ADW database and then execute DBMS_CLOUD.COPY_DATA foreach CSV file to copy the contents into the corresponding ADW database table.
正解：A
解説：
Explanation
Using Object Storage and COPY_DATA is the standard recommended method for fetching data into ADW.
Furthermore using CLI over web has the benefit of multipart upload, that is chunk upload of large files, thus reducing the chance of a transfer failure
質問 # 40
You created an Oracle Linux compute instance through the Oracle Cloud Infrastructure (OCI) management console then immediately realize you forgot toadd an SSH key file. You notice that OCI compute service provides instance console connections that supports adding SSH keys for a running instance. Hence, you created the console connection for your Linux server and activated it using the connection string provided.
However, now you get prompted for a username and password to login.
What option should you recommend to add the SSH key to your running instance, while minimizing the administrative overhead? (Choose the best answer.)
- A. You need to configure the boot loader to use ttyS0 as a console terminal on the VM.
- B. You need to terminate the running instance and recreate it by providing the SSH key file.
- C. You need to reboot the instance from the console, boot into the bash shell in maintenance mode,and add SSH keys for the opc user.
- D. You need to modify the serial console connection string to include the identity file flag, -i to specify the SSH key to use.
正解：C
解説：
Explanation
If you created an instance without an SSH key, you can use the serial console toboot into maintenance mode and add or reset the SSH key for the opc user or reset the password for the opc user. Alternately, you can stop the instance, attach the boot volume to a new instance, and configure SSH on the new instance.
https://docs.oracle.com/en-us/iaas/Content/Compute/Tasks/accessinginstance.htm
質問 # 41
Which two statements are TRUE about Object Storage data security and encryption in Oracle Cloud Infrastructure (OCI)? (Choose two.)
- A. Data needs to be decrypted on the client side before retrieving it.
- B. OCI Vault Management is used by default to provide data security.
- C. All traffic to and from Object Storage service is encrypted using TLS.
- D. Client-side encryption is managed by the customer.
- E. A VPN connection to OCI is required to ensure secure data transfer to an object storage bucket.
正解：C、D
質問 # 42
You have a Linux compute instance located in a public subnet in a VCN which hosts a web application. The security list attached to subnet containing the compute instance has the following stateful ingress rule.
The Route table attached to the Public subnet is shown below. You can establish an SSH connection into the computeinstance from the internet. However, you are not able to connect to the web server using your web browser.
Which step will resolve the issue? (Choose the best answer.)
- A. In the route table, add a rule for your default traffic to be routed to NAT gateway.
- B. In the security list, add an ingress rule for port 80 (http).
- C. In the security list, remove the ssh rule.
- D. In the route table, add a rule for your default traffic to be routed to service gateway.
正解：B
解説：
Explanation
You need to add a rule in thesecurity list table to allow access to web application. Web applications are usually exposed over port 80 (HTTP), therefore answer B makes sense here.
質問 # 43
The boot volume on your Oracle Linux instance has run out of space. Your application has crashed due to a lack of swap space, forcing you to increase the size ofthe boot volume.
Which step should NOT be included in the process used to solve the issue? (Choose the best answer.)
- A. Reattach the boot volume and restart the instance.
- B. Attach the resized boot volume to a second instance as a data volume; extend the partition and grow the file system in the resized boot volume.
- C. Resize the boot volume by specifying a larger value than the boot volume's current size.
- D. Stop the instance and detach the boot volume.
- E. Create a RAID 0 configuration to extend the boot volume file system onto another block volume.
正解：B
質問 # 44
You have been monitoring your company's applications running in Oracle Cloud Infrastructure (OCI) and notice that the application is using OCI Traffic Management service. This service uses a traffic steering policy to distribute the DNS traffic based on subnet addresses in a rule set.
Which steering policy is in use in this particular case? (Choose the best answer.)
- A. ASN steering policy
- B. Geolocation steering
- C. IP Prefix steering
- D. Load Balancing policy
正解：C
解説：
Explanation
IP Prefix steering policies enable customers to steer DNS traffic based on the IP Prefix of the originating query.
質問 # 45
You are asked to implement the disaster recovery (DR) and business continuity requirements for Oracle Cloud Infrastructure (OCI) Block Volumes. Two OCI regions being used: a primary/source region and a DR/destination region. The requirements are:
* There should be a copy of data in the destination region to use if a region-wide disaster occurs in the source region
* Minimize costs
Which design will help you meet these requirements? (Choose the best answer.)
- A. Clone block volumes. Use Object Storage lifecycle management to automatically move clone objects to Archive Storage. Copy Archive Storage buckets from source region to destination at regular intervals.
- B. Back up block volumes. Use Object Storage lifecycle management to automatically move backup objects to Archive Storage. Copy Archive Storage buckets from source region to destination at regular intervals.
- C. Back up block volumes. Copy block volume backups from source region to destination region at regular intervals.
- D. Clone block volumes. Copy block volume clonesfrom source region to destination region at regular intervals.
正解：C
解説：
Explanation
https://docs.oracle.com/en-us/iaas/Content/Block/Tasks/copyingvolumebackupcrossregion.htm
質問 # 46
You havecreated a geolocation steering policy in the Oracle Cloud Infrastructure (OCI) Traffic Management service, with this configuration:
What happens to requests that originate in Africa? (Choose the best answer.)
- A. The traffic will be forwarded to Pool 1. If Pool 1 is not available, then it will be forwarded toPool 2.
- B. The traffic will be forwarded randomly to any of the pools mentioned in the rules.
- C. The traffic will be forwarded at the same time to both Pool 1 and Pool 2.
- D. The traffic will be dropped.
正解：B
解説：
Explanation
This policy currently has no global catch-all. No global catch-all means that queries not matching any of the above rules will receive a random answer. Global Catche-all need to set up if the traffic does not meet any condition in the pool and you still want to serve the request. Default is serve randomly.
https://www.oracle.com/a/ocom/docs/cloud/traffic-management-100.pdf
質問 # 47
Recently, your e-commerce web application has been receiving significantly more traffic than usual. Users are reporting they often encounter a 503 Service Error when trying to access your site. Sometimes the site is very slow.
You check your instance pool configuration to confirm that the maximum number of instances is configured to allow 20 compute instances. Currently, 14 compute instances have been provisioned by the instance pool.
You also confirm that current CPU utilization across all hosts exceeds the scale-out threshold you set in your auto-scaling policy. However, the instance pool is not provisioning any newinstances.
What can you check to determine why the application is NOT functioning properly? (Choose the best answer.)
- A. Verify that the new offer feature code did not introduce any performance bugs.
- B. Verify that the database is accessible.
- C. Verify that the Quality Assurance team is not currently performing load-testing against production.
- D. Verifythat the compute resource quota has not been exceeded.
正解：D
質問 # 48
You are launching a Windows server in your Oracle Cloud Infrastructure (OCI) tenancy.You provided a startup script during instance initialization, but it was not executed successfully.
What is a possible reason for this error? (Choose the best answer.)
- A. Wrote a custom script which tried to install GPU drivers.
- B. Didn't include anything in user_data.
- C. Ran a cloudbase-init script instead of cloud-init.
- D. Specified a #directive on the first line of your script.
正解：C
質問 # 49
......
更新された問題を提供しています1z0-1067-22問題集PDF：https://www.passtest.jp/Oracle/1z0-1067-22-shiken.html
更新された公式問題1z0-1067-22認定には1z0-1067-22問題集PDF：https://drive.google.com/open?id=1hGYebLBHKcY4Q6EMBAYjXyGppVs3zxKr