[2024年01月12日] 究極の1z0-1067-22準備ガイド！無料最新のOracle練習テスト問題集
今すぐゲットせよ！高評価Oracle 1z0-1067-22試験問題集
Oracle 1z0-1067-22 認定試験の出題範囲：
| トピック | 出題範囲 |
|---|---|
| トピック 1 |
|
| トピック 2 |
|
| トピック 3 |
|
| トピック 4 |
|
| トピック 5 |
|
| トピック 6 |
|
質問 # 18
You have a Linux compute instance located in a public subnet in a VCN which hosts a web application. The security list attached to subnet containing the compute instance has the following stateful ingress rule.
The Route table attached to the Public subnet is shown below. You can establish an SSH connection into the computeinstance from the internet. However, you are not able to connect to the web server using your web browser.
Which step will resolve the issue? (Choose the best answer.)
- A. In the security list, remove the ssh rule.
- B. In the route table, add a rule for your default traffic to be routed to service gateway.
- C. In the route table, add a rule for your default traffic to be routed to NAT gateway.
- D. In the security list, add an ingress rule for port 80 (http).
正解：D
解説：
Explanation
You need to add a rule in thesecurity list table to allow access to web application. Web applications are usually exposed over port 80 (HTTP), therefore answer B makes sense here.
質問 # 19
You have created an Autonomous Data Warehouse (ADW) service in your company's Oracle Cloud Infrastructure (OCI) tenancy and you now have to load historical data into it. You have already extracted this historical data from multiple data marts and data warehouses. This data is stored in multiple CSV text files and these files are ranging in size from 25 MB to 20 GB.
Which is the most efficient and error tolerant method for loading data into ADW? (Choose the best answer.)
- A. Create Auth token, useit to create an object storage credential by executing DBMS_CLOUD.CREATE_CREDENTIAL, using OCI CLI upload the CSV files to an OCI object storage bucket, create the tables in the ADW database and then execute Data Pump Import for each CSV file to copy the contents into the corresponding ADW database table.
- B. CreateAuth token, use it to create an object storage credential by executing DBMS_CLOUD.CREATE_CREDENTIAL, using the web console upload the CSV files to an OCI object storage bucket, create the tables in the ADW database and then execute DBMS_CLOUD.COPY_DATA foreach CSV file to copy the contents into the corresponding ADW database table.
- C. Create the tables in the ADW database and then execute SQL*Loader for each CSV file to load the contents into the corresponding ADW database table.
- D. Create Auth token, use it to create an object storage credential by executing DBMS_CLOUD.CREATE_CREDENTIAL, using OCI CLI upload the CSV files to an OCI object storage bucket, create the tables in the ADW database and then execute DBMS_CLOUD.COPY_DATA for each CSV file to copy the contents into the corresponding ADW database table.
正解：D
解説：
Explanation
Using Object Storage and COPY_DATA is the standard recommended method for fetching data into ADW.
Furthermore using CLI over web has the benefit of multipart upload, that is chunk upload of large files, thus reducing the chance of a transfer failure
質問 # 20
Which statement about Oracle Cloud Infrastructure paravirtualized block volume attachments is TRUE?
(Choose the best answer.)
- A. Paravirtualization utilizes the internal storage stack of compute instance OS and network hardware virtualization to access block volumes.
- B. Paravirtualized is required to manage iSCSI configuration for virtual machine instances.
- C. Paravirtualized volumes may reduce the maximum IOPS performance for larger block volumes.
- D. Paravirtualized volumes become immediately available on bare metal compute instances.
正解：C
解説：
Explanation
https://docs.oracle.com/en-us/iaas/Content/Block/Concepts/overview.htm#Paravirtualized
質問 # 21
You have been contracted by a local e-commerce company to assistwith enhancing their online shopping application. The application is currently deployed in a single Oracle Cloud Infrastructure (OCI) region. The application utilizes a public load balancer, application servers in a private subnet, and a database in a separate, private subnet.
The company would like to deploy another set of similar infrastructure in a different OCI region that will act as standby site. In the event of a failure at the primary site, all customers should be routed to the failover site automatically.
After deploying the additional infrastructure within the second region, how should you configure automated failover requirements? (Choose the best answer.)
- A. Deploy a new load balancer in the primary region. Create one backend set for theprimary application servers and a second backend set for the standby application servers. Create a listener for the primary backend set with a timeout of 3 minutes. Create a listener for the secondary backend set with a timeout of 10 minutes.
- B. Create a new A record in DNS that points to the public load balancer at the secondary site. Create a CNAME for the sub-domain failover that will resolve to the new A record. Inform customers to prepend the website URL with failover if the primary site is unavailable.
- C. Create a load balancer policy in the Traffic Management service. Configure one answerfor each site. Set the answer for the primary site with a weight of 10 and the answer for the secondary site with a weight of 100.
- D. Create a failover policy in the Traffic Management service. Set the IP address of the public load balancerfor the primary site in answer pool 1. Set the IP address of the public load balancer for the secondary site in answer pool 2. Define a health check to monitor both sites.
正解：D
質問 # 22
You have a group pf developers who launch multiple VM.Standard2.2 compute instances every day into the compartment Dev. As a result, your OCI tenancyquickly hit the service limit for this shape. Other groups can no longer create new instances using VM.Standard2.2 shape.
Because of this, your company has issued a new mandate that the Dev compartment must include a quota to allow for use of only 20 VM.Standard2.2 shapes per Availability Domain. Your solution should not affect any other compartment in the tenancy.
Which quota statement should be used to implement this new requirement? (Choose the best answer.)
- A. zero compute quotas in tenancy set compute quota vm-standard2-2-count to 20 in tenancy dev
- B. zero compute quotas in tenancy set compute quota vm-standard2-2-count to 20 in compartment dev
- C. set compute quota vm-standard2-2-count to 20 in compartment dev
- D. set compute quota vm-standard2-2count to10 in compartment dev where request.region = us-phoenix-1
正解：C
解説：
Explanation
https://docs.oracle.com/en-us/iaas/Content/General/Concepts/resourcequotas.htm#two
質問 # 23
Which two statements about the OracleCloud Infrastructure (OCI) Command Line Interface (CLI) are TRUE?
(Choose two.)
- A. The CLI provides the same core functionality as the Console, plus additional commands.
- B. You can run CLI commands from inside OCI Regions only.
- C. You can filter CLI output using the JMESPath query option for JSON.
- D. The CLI allows you to use the Python language to interact with OCI APIs.
- E. The CLI provides an automatic way to connect with instances provisioned on OCI.
正解：A、C
解説：
Explanation
https://docs.oracle.com/en-us/iaas/Content/API/SDKDocs/cliusing.htm
https://blogs.oracle.com/cloud-infrastructure/post/exploring-the-search-and-query-features-of-oracle-cloud-infras
質問 # 24
You are asked to deploy a new application that has been designed to scale horizontally. The business stakeholders have asked that theapplication be deployed in us-phoenix-1.
Normal usage requires 2 OCPUs. You expect to have few spikes during the week, that will require up to 4 OCPUs, and a major usage uptick at the end of each month that will require 8 OCPUs.
What is the most cost-effective approach to implement a highly available and scalable solution? (Choose the best answer.)
- A. Create an instance pool with a VM.Standard2.2 shape instance configuration. Setup the autoscaling configuration to use 2 availability domains and have a minimum of 2 instances, to handle the weekly spikes, and a maximum of 4 instances.
- B. Create an instance pool with a VM.Standard2.1 shape instance configuration. Setup the autoscaling configuration to use 2 availability domains and have a minimum of 2 instances and a maximum of 8 instances.
- C. Create an instance with 1 OCPU shape. Use the Resize Instance action to scale up to a larger shape when more resources are needed.
- D. Create an instance with 1 OCPU shape.Use a CLI script to clone it when more resources are needed.
正解：B
解説：
Explanation
https://docs.oracle.com/en-us/iaas/Content/Compute/References/computeshapes.htm#baremetalshapes__bm-stan
質問 # 25
Which option contains the essential components of the Oracle Cloud Infrastructure Notifications service?
(Choose the best answer.)
- A. An ALARM with a name unique across thecompartment, a SUBSCRIPTION, and a METRIC with the measurement of interest.
- B. A TOPIC with a name unique across the tenancy, a SUBSCRIPTION, and a MESSAGE where content is published.
- C. An ALARM with a name unique across the tenancy, a SUBSCRIPTION, and a METRIC with the measurement of interest.
- D. A TOPIC with a name unique across the compartment, a SUBSCRIPTION, and a MESSAGE where content is published.
正解：B
解説：
Explanation
https://docs.oracle.com/en-us/iaas/Content/Notification/Concepts/notificationoverview.htm
https://docs.oracle.com/en-us/iaas/Content/Notification/Tasks/managingtopicsandsubscriptions.htm
質問 # 26
Your team implemented a SaaS application that requires a whole system deployment for each new customer.
The infrastructure provisioning is already automated via Terraform, and now you have been asked to develop an Ansible playbook to centralize configuration file management and deployment.
What is the most effective way to ensure your playbooks are utilizing up-to-date and accurate inventory?
(Choose the best answer.)
- A. Export an inventory list using Terraform apply command.
- B. Download the dynamic inventory script provided by Oracle Cloud Infrastructure and include it in the playbook invocation command.
- C. Implement a Command Line Interface script to list all the resources and run it within Ansible to generate a dynamic inventory list.
- D. Export an inventory list from the Oracle Cloud Infrastructure Web console.
正解：B
解説：
Explanation
https://docs.oracle.com/en-us/iaas/Content/API/SDKDocs/ansibleinventoryscript.htm
質問 # 27
An insurance company has contracted you to help automate their application business continuity plan. They have the application running in eu-frankfurt-1 asthe primary site and uk-london-1 as a disaster recovery site.
Normally they have a DNS A record associated with the IP address of the primary endpoint in eu-frankfurt-1.
In the event of a disaster, they use OCI DNS Zone Management to update the A record and replace it with the IP address of the endpoint in uk-londond-1.
How can you automate the failover process? (Choose the best answer.)
- A. Create a Traffic Management Steering policy with Load Balancer type and add both eu-frankfurt-1 and uk- london-1 endpoints. Attach the Traffic Management Steering policy to the A record.
- B. Create a Health Check that evaluates both regional endpoints. Create a Traffic Management Steering policy with Failover type and associate it with the Health Check.
- C. Create a Traffic Management Steering policy and attach it to a backend servers from both eu-frankfurt-1 and uk-london-1 regions.
- D. Provision a Load Balancer in Frankfurt and associate it with the A record in DNS. Create a backend set with backend servers from both eu-frankfurt-1 and uk-london-1 regions.
正解：B
質問 # 28
You created an Oracle Linux compute instance through the Oracle Cloud Infrastructure (OCI) management console then immediately realize you forgot toadd an SSH key file. You notice that OCI compute service provides instance console connections that supports adding SSH keys for a running instance. Hence, you created the console connection for your Linux server and activated it using the connection string provided.
However, now you get prompted for a username and password to login.
What option should you recommend to add the SSH key to your running instance, while minimizing the administrative overhead? (Choose the best answer.)
- A. You need to modify the serial console connection string to include the identity file flag, -i to specify the SSH key to use.
- B. You need to terminate the running instance and recreate it by providing the SSH key file.
- C. You need to configure the boot loader to use ttyS0 as a console terminal on the VM.
- D. You need to reboot the instance from the console, boot into the bash shell in maintenance mode,and add SSH keys for the opc user.
正解：D
解説：
Explanation
If you created an instance without an SSH key, you can use the serial console toboot into maintenance mode and add or reset the SSH key for the opc user or reset the password for the opc user. Alternately, you can stop the instance, attach the boot volume to a new instance, and configure SSH on the new instance.
https://docs.oracle.com/en-us/iaas/Content/Compute/Tasks/accessinginstance.htm
質問 # 29
You launched a Linux compute instance to host the new version of your company website via Apache Httpd server on HTTPS (port 443). The instance is created in a public subnet along with other instances. The default security list associated to the subnet is:
You want to allow access to the company website from public internet without exposing websites eventually hosted on the other instances in the public subnet.
Which actionwould you take to accomplish the task? (Choose the best answer.)
- A. In default security list,add a stateful rule to allow ingress access on port 443.
- B. Create a network security group, add a stateful rule to allow ingress access on port 443 and associate it to the public subnet that hosts the company website.
- C. Create a new security list with a stateful rule to allow ingress access on port 443 and associate it to the public subnet.
- D. Create a network security group, add a stateful rule to allow ingressaccess on port 443 and associate it to the instance that hosts the company website.
正解：D
解説：
Explanation
Since we want to avoid exposing other instances in the same public subnet to the internet, Network Security Groups (NSG) must be used instead of Security Lists. NSG are attached to the vnic of the instance and not to the subnet
質問 # 30
You have been asked to update the lifecycle policy for object storage using the Oracle Cloud Infrastructure (OCI) Command Line Interface (CLI).
Which command can successfully update the policy? (Choose the bestanswer.)
- A. oci os object-lifecycle-policy get -ns <object_storage_namespace> -bn <bucket_name>
- B. oci os object-lifecycle-policy put -ns <object_storage_namespace> -bn <bucket_name>
- C. oci os object-lifecycle-policy put -ns <object_storage_namespace> -bn <bucket_name> - -items
<json_formatted_lifecycle_policy> - D. oci os object-lifecycle-policy delete -ns <object_storage_namespace> -bn <bucket_name>
正解：C
解説：
Explanation
https://docs.oracle.com/en-us/iaas/Content/Object/Tasks/usinglifecyclepolicies.htm#cli
https://docs.oracle.com/en-us/iaas/tools/oci-cli/2.17.0/oci_cli_docs/cmdref/os/object-lifecycle-policy/put.html
質問 # 31
You have a 750 MIB file in an Oracle Cloud Infrastructure (OCI)Object Storage bucket. You want to download the file in multiple parts to speed up the download using the OCI CLI. You also want to configure each part size to be 128 MIB.
Which is the correct OCI CLI command for this operation? (Choose the best answer.)
- A. oci os object get -ns my-namespace -bn my-bucket --name my-large-object -- multipart-download-threshold 750 --parallel-download-count 128
- B. oci os object download -ns my-namespace -bn my-bucket --name my-large-object -- multipart-download-threshold 750 --parallel-download-count 128
- C. oci os object download -ns my-namespace -bn my-bucket --name my-large-object -- resume-put
--multipart-download-threshold 500 --part-size 128 - D. oci os object get -ns my-namespace -bn my-bucket --name my-large-object
--multipart-download-threshold 500 --part-size 128
正解：D
解説：
Explanation
https://docs.public.oneportal.content.oci.oraclecloud.com/en-us/iaas/Content/API/SDKDocs/cliusing.htm
https://docs.oracle.com/en-us/iaas/tools/oci-cli/2.6.15/oci_cli_docs/cmdref/os/object/get.html
質問 # 32
Which two statements are TRUE about Object Storage data security and encryption in Oracle Cloud Infrastructure (OCI)? (Choose two.)
- A. Data needs to be decrypted on the client side before retrieving it.
- B. All traffic to and from Object Storage service is encrypted using TLS.
- C. A VPN connection to OCI is required to ensure secure data transfer to an object storage bucket.
- D. OCI Vault Management is used by default to provide data security.
- E. Client-side encryption is managed by the customer.
正解：B、E
質問 # 33
You are working as a Cloud Operations Administrator for your company. They have different Oracle Cloud Infrastructure (OCI) tenancies for developmentand production workloads. Each tenancy has resources in two regions - uk-london-1 and eu-frankfurt-1. You are asked to manage all resources and to automate all the tasks using OCI Command Line Interface (CLI).
Which is the most efficient method to managemultiple environments using OCI CLI? (Choose the best answer.)
- A. Run oci setup config to create new credentials for each environment every time you want to access the environment.
- B. Create environment variables for the sets of credentials that align to each combination of tenancy, region, and environment.
- C. Use different bash terminals for each environment.
- D. Use OCI CLI profiles to create multiple sets of credentials in your config file, and reference the appropriate profile at runtime.
正解：D
質問 # 34
You are working with Terraform on your laptop and have been tasked with spinning up multiple compute instances in Oracle Cloud Infrastructure (OCI) for a project. In addition, you are also required tocollect IP addresses of provisioned instances and write them to a file and save it in your laptop.
Which specific Terraform functionality can help accomplish this task? (Choose the best answer.)
- A. Terraform remote state
- B. Terraform modules
- C. Terraform remote-exec
- D. Terraform local-exec
正解：C
解説：
Explanation
https://www.terraform.io/docs/language/resources/provisioners/remote-exec.html
質問 # 35
You are using Oracle Cloud Infrastructure (OCI) services across several regions: us-phoenix-1, us-ashburn-1, uk-london-1 and ap-tokyo-1. You have creates a separateadministrator group for each region: PHX-Admins, ASH-Admins, LHR-Admins and NRT-Admins, respectively.
You want to restrict admin access to a specific region. E.g., PHX-Admins should be able to manage all resources in the us-phoenix-1 region only and not any other OCI regions.
What IAM policy syntax is required to restrict PHX-Admins to manage OCI resources in the us-phoenix-1 region only? (Choose the best answer.)
- A. Allow group PHX-Admins to manage all-resources in tenancy where request.permission= 'phx'
- B. Allow group PHX-Admins to manage all-resources in tenancy where request.region= 'phx'
- C. Allow group PHX-Admins to manage all-resources in tenancy where request.target= 'phx'
- D. Allow group PHX-Admins to manage all-resources in tenancy where request.location= 'phx'
正解：B
解説：
Explanation
Use conditions to limit access depending on region:
request.regionhttps://docs.oracle.com/en-us/iaas/Content/Identity/Reference/policyreference.htm#General
質問 # 36
The boot volume on your Oracle Linux instance has run out of space. Your application has crashed due to a lack of swap space, forcing you to increase the size ofthe boot volume.
Which step should NOT be included in the process used to solve the issue? (Choose the best answer.)
- A. Create a RAID 0 configuration to extend the boot volume file system onto another block volume.
- B. Reattach the boot volume and restart the instance.
- C. Attach the resized boot volume to a second instance as a data volume; extend the partition and grow the file system in the resized boot volume.
- D. Resize the boot volume by specifying a larger value than the boot volume's current size.
- E. Stop the instance and detach the boot volume.
正解：C
質問 # 37
......
合格率取得する秘訣は1z0-1067-22認定試験エンジンPDF：https://www.passtest.jp/Oracle/1z0-1067-22-shiken.html
1z0-1067-22試験問題集で合格できるには更新されたテスト問題集：https://drive.google.com/open?id=1WHFM6igxadifw8ZE9m84K9yES6QuMuvv