Oracle Cloud Infrastructure 2021 Cloud Operations Associate

Here you have the best Oracle 1z0-1067-21 practice exam questions

You have 55 total questions to study from
Each page has 5 questions, making a total of 11 pages
You can navigate through the pages using the buttons at the bottom
This questions were last updated on November 18, 2024

Question 1 of 55

You have been asked to ensure that in-transit communication between an Oracle Cloud Infrastructure (OCI) compute instance and an on-premises server

(192.168.10.10/32) is encrypted. The instances communicate using HTTP. The OCI Virtual Cloud Network (VCN) is connected to the on-premises network by two separate connections: a Dynamic IPsec VPN tunnel and a FastConnect virtual circuit. No static configuration has been added.

What solution should you recommend? (Choose the best answer.)

The instances will communicate by default over IPsec VPN, which ensures data is encrypted in-transit.

Advertise a 192.168.10.10/32 route over the VPN.

Advertise a 192.168.10.10/32 router over the FastConnect.

The instances will communicate by default over the FastConnect private virtual circuit, which ensures data is encrypted in-transit.

Correct Answer: A

To ensure encrypted in-transit communication between an OCI compute instance and an on-premises server using HTTP, the best solution is to use the Dynamic IPsec VPN tunnel. By default, IPsec VPN provides encrypted communication, ensuring that data transmitted across the network is secure. FastConnect, while offering high-bandwidth connectivity, does not inherently provide encryption unless additional configurations are applied, such as enabling MacSec.

Question 2 of 55

You have created a group for several auditors. You assign the following policies to the group:

What actions are the auditors allowed to perform within your tenancy? (Choose the best answer.)

The Auditors can view resources in the tenancy.

Auditors are able to create new instances in the tenancy.

The Auditors are able to delete resource in the tenancy.

Auditors are able to view all resources in the compartment.

Correct Answer: A

The auditors are allowed to view resources in the tenancy. The policies given include inspecting all resources, reading instances, and reading audit events within the tenancy. These actions allow auditors to view but not modify resources, which aligns with option A.

Question 3 of 55

You have a web application running on Oracle Cloud Infrastructure (OCI) that lets users log in with a username and password. You notice that an attacker has tried to use SQL comment `--" to alter the database query, remove the password check and log in as a user. You decide to prevent any future attacks.

Which of the following OCI services or features would you choose to safeguard your application? (Choose the best answer.)

Network Security Group

Data Safe

Web Application Framework (WAF)

Vault

Correct Answer: C

To safeguard a web application from SQL injection attacks, using a Web Application Firewall (WAF) is the best choice. WAFs can protect against various types of attacks, including SQL injection, by filtering and monitoring HTTP traffic between a web application and the Internet. This helps to block attempts to exploit vulnerabilities in web applications, thus enhancing security.

Question 4 of 55

One of the compute instances that you have deployed on Oracle Cloud Infrastructure (OCI) is malfunctioning. You have created a console connection to remotely troubleshoot it.

Which two statements about console connections are TRUE? (Choose two.)

It is not possible to use VNC console connections to connect to Bare Metal Instances.

VNC console connection uses SSH port forwarding to create a secure connection from your local system to the VNC server attached to your instance's console.

It is not possible to connect to the serial console to an instance running Microsoft Windows, however VNC console connection can be used.

For security purpose, the console connection will not let you edit system configuration files.

If you do not disconnect from the session, your serial console connection will automatically be terminated after 24 hours.

Correct Answer: B, E

A VNC console connection uses SSH port forwarding to create a secure connection from your local system to the VNC server attached to your instance's console. Additionally, if you do not disconnect from the session, your serial console connection will automatically be terminated after 24 hours.

Question 5 of 55

You have created an Autonomous Data Warehouse (ADW) service in your company's Oracle Cloud Infrastructure (OCI) tenancy and you now have to load historical data into it. You have already extracted this historical data from multiple data marts and data warehouses. This data is stored in multiple CSV text files and these files are ranging in size from 25 MB to 20 GB.

Which is the most efficient and error tolerant method for loading data into ADW? (Choose the best answer.)

Create Auth token, use it to create an object storage credential by executing DBMS_CLOUD.CREATE_CREDENTIAL, using the web console upload the CSV files to an OCI object storage bucket, create the tables in the ADW database and then execute DBMS_CLOUD.COPY_DATA for each CSV file to copy the contents into the corresponding ADW database table.

Create the tables in the ADW database and then execute SQL*Loader for each CSV file to load the contents into the corresponding ADW database table.

Create Auth token, use it to create an object storage credential by executing DBMS_CLOUD.CREATE_CREDENTIAL, using OCI CLI upload the CSV files to an OCI object storage bucket, create the tables in the ADW database and then execute Data Pump Import for each CSV file to copy the contents into the corresponding ADW database table.

Create Auth token, use it to create an object storage credential by executing DBMS_CLOUD.CREATE_CREDENTIAL, using OCI CLI upload the CSV files to an OCI object storage bucket, create the tables in the ADW database and then execute DBMS_CLOUD.COPY_DATA for each CSV file to copy the contents into the corresponding ADW database table.

Correct Answer: D

The most efficient and error-tolerant method for loading large files into an Autonomous Data Warehouse (ADW) is to use the OCI Command Line Interface (CLI) for uploading the CSV files. First, create an Auth token and use it to create an object storage credential using the DBMS_CLOUD.CREATE_CREDENTIAL procedure. Then, upload the CSV files to an OCI object storage bucket using the OCI CLI, which supports multipart uploads for handling large files. Next, create the tables in the ADW database and use the DBMS_CLOUD.COPY_DATA procedure to copy the content from each CSV file into the corresponding ADW database table. This method efficiently manages large files and reduces the chances of transfer failures.