Oracle 1Z0-1067 問題集

質問 1：
You have shared your Oracle Cloud Infrastructure (OCI) tenancy with a group of developers in your organization by creating a compartment called developer. You are an administrator in the tenancy with privileges to modify IAM policies. Developers need privileges to configure Federation to a Single Sign-On (SSO).
m would you give them permissions to complete their task In the most secure manner?
A. Create a group called IdPAdmins. Assign the following IAM policy statement:
Allow group IdPAdmins to manage identity-providers in tenancy
Allow group IdPAdmins to manage groups in tenancy
B. Create a group called Developers. Set up the following IAM policy:
Allow group Developers to manage identity-providers in compartment a-developer Allow group Developers to manage groups in compartment
C. Create a new policy with the following statements:
Allow any-user to manage identity-providers in tenancy a-developer
Allow any-user to manage groups in tenancy
D. Create a group called IdPAdmins. Assign the following IAM policy statement:
Allow group IdPAdmins to manage identity-providers in compartment
Allow group IdPAdmins to manage groups in compartment
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 2：
You are asked to Implement the disaster recovery (DR) and business continuity requirements for Oracle Cloud Infrastructure (OCI) Block Volumes. Two OCI regions being used: a primary/source region and a DR/destination region.
The requirements are:
* There should be a copy of data in the destination region to use If a region-wide disaster occurs in the source region
* Minimize costs
Which of the following design will help you meet these requirements?
A. Back up block volumes. Use Object Storage lifecycle management to automatically move backup objects to Archive Storage. Copy Archive Storage buckets from source region to destination at regular Intervals.
B. Clone block volumes. Use Object Storage lifecycle management to automatically move clone object Archive Storage. Copy Archive Storage buckets from source region to destination at regular intervals.
C. Back up block volumes. Copy block volume backups from source region to destination region at regular intervals.
D. Clone block volumes. Copy block volume clones from source region to destination region at regular intervals.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 3：
As the operations administrator for your company's Oracle Cloud Infrastructure (OCI), you have been entrusted the task of ensuring that data being accessed by the application is encrypted.
Your application portfolio Includes both Virtual Machine (VM) and Bare Metal (BM) database systems.
Which method should you use to achieve encryption of data in-transit?
A. Native Oracle Net Services encryption and integrity capabilities
B. Key Store/Wallet service for on the fly encryption of data in transit
C. Configure backup encryption for RMAN backup sets before transferring data
D. Data is encrypted at rest using TDE and no additional encryption is needed
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 4：
Your team Implemented a SaaS application that requires a whole system deployment for each new customer. The Infrastructure provisioning is already automated via Terraform, and now you have been asked to develop an Ansible playbook to centralize configuration file management and deployment.
What Is the most effective way to ensure your playbooks are utilizing up-to-date and accurate Inventory?
A. Implement a Command Line Interface script to list all the resources and run it within Ansible to generate a dynamic inventory list.
B. Export an inventory list from the Oracle Cloud Infrastructure Web console.
C. Export an inventory list using Terraform apply command.
D. Download the dynamic inventory script provided by Oracle Cloud Infrastructure and include It in the playbook Invocation command.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 5：
You have been contracted by a local e-commerce company to assist with enhancing their online shopping application. The application is currently deployed In a single Oracle Cloud Infrastructure (OCI) region. The application utilizes a public load balancer, application servers in a private subnet and a database in a separate, private subnet.
The company would like to deploy another set of similar Infrastructure In a different OCI region that will act as standby site. In the event of a failure at the primary site, all customers should be routed to the failover site automatically.
After deploying the additional infrastructure within the second region, how should you configure automated failover requirements?
A. Create a failover policy in the Traffic Management service. Set the IP address of the public load balancer for the primary site in answer pool 1 Set the IP address of the public load balancer for the secondary site in answer pool 2. Define a health check to monitor both sites.
B. Deploy a new load balancer in the primary region. Create one backend set for the primary application servers and a second backend set for the standby application servers. Create a listener for the primary backend set with a timeout of 3 minutes. Create a listener for the secondary backend set with a timeout of 10 minutes.
C. Create a load balancer policy in the Traffic Management service. Configure one answer for each site. Set the answer for the primary site with a weight of 10 and the answer for the secondary site with a weight of 100.
D. Create a new A record in DNS that points to the public load balancer at the secondary site. Create a CNAME for the sub-domain failover that will resolve to the new A record. Inform customers to prepend the website URL with failover If the primary site Is unavailable.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 6：
You have a Linux compute Instance located in a public subnet in a VCN which hosts a web application. The security list attached to subnet containing the compute Instance has the following stateful Ingress rule.

Which step will resolve the issue?
A. In the route table, add a rule for your default traffic to be routed to NAT gateway.
B. In the security list, remove the ssh rule.
C. In the route table, add a rule for your default traffic to be routed to service gateway.
D. In the security list, add an ingress rule for port 80 (http).
正解：D
解説: (Topexam メンバーにのみ表示されます)