Oracle 1Z0-1067 問題集

質問 1：
You have been brought In to help secure an existing application that leverages Object Storage buckets to distribute content. The data is currently being shared from public buckets and the security team Is not satisfied with this approach. They have stated that all data must be stored In storage buckets. Your application should be able to provide secure access to the dat a. The URL that is provided for access to the data must be rotated every 30 days.
Which design option will meet these requirements?
A. Create a new group and map users to this group, create a IAM policy providing access to Object Storage service only to this group. Users can then simply login to OCI console and retrieve needed flies.
B. Create a private bucket only to share the data.
C. Create multiple bucket and classify them as Public and Private. Use public bucket for non-sensitive data and private bucket for sensitive data.
D. Use Pre-Authenticated request, even though there will be multiple URLs this will provide better security.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 2：
You need to set up daily Incremental backups of your database In Oracle Cloud Infrastructure (OCI) Database Service. The backups need to be retained for at least 50 days.
Which of the following method allows you do accomplish this Is an efficient and cost effective manner?
A. Enable automatic backups and set the retention period to 50 days.
B. Use Recovery Manager (RMAN) to take backups to an OCI Object Store bucket. Delete backups older than 50 days.
C. Enable automatic backups and choose the preset retention period of 60 days.
D. Set up a cron job with OCI Database Service CreateBackuP API call to take periodic full-backups to OCI Object Store. Delete backups older than 50 days.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 3：
You have created several block volumes in the us-phoenix-1 region in a specific compartment. The compartment can be identified by the following Oracle Cloud Infrastructure (OCI) unique identifier, or ocid1.compartment.oc1.phx..exampleuniquelD Your manager has asked you to leverage the OCI monitoring service and write a metric query showing all read IOPS at a one-minute interval, filtered to this compartment and aggregated for the maximum.
Which metric query will you create?
A. IopsRead[lm]{compartmentId="ocldl.compartment.ocl.phx..exampleuniquelD"}.max()
B. IopsRead[lm]{compartmentId="ocidl.compartment.ocl.phx..exampleuniquelD"}.grouplng().max()
C. IopsRead[lm]{compartmentId = "odd 1.compartment.ocl.phx..exampleuniquelD"}.grouping().mean()
D. IopsWrite[lm]{compartmentId=Hocidl.compartment.ocl.phx..exampleuniquelD"}.mean()
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 4：
You have a group of developers who launch multiple VM.Standard2.2 compute Instances every day into the compartment Dev. As a result your OCI tenancy quickly hit the service limit for this shape. Other groups can no longer create new instances using VM.Standard2.2 shape.
of this, your company has Issued a new mandate that the Dev compartment must include a quota to allow for use of only 20 VM.Standar2.2 shapes per Availability Domain. Your solution should not affect any other compartment In the tenancy.
Which quota statement should be used to implement this new requirement?
A)

B)

C)

D)

E)

A. Option E
B. Option A
C. Option C
D. Option D
E. Option B
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Your company will undergo a security audit in one week. Your manager has asked you to download and review recent logs from an Object Storage bucket. The current log archive file is approximately 19 GB In size.
Which command would you run to download the archive file as quickly as possible?
A)
oci os object get -ns my-namespace -bn my-bucket --name my-large-object --multipart-download-threshold 2000 --part-size 120 B) oci os object get -ns my-namespace -bn my-bucket --name my-large-object --multipart-download-threshold 2000 --part-size 128 C) oci os object put -ns my-namespace -bn my-bucket --name my-large-object --multipart-download-threshold 20000 --part-size 128 D) oci os object get -ns my-namespace -bn my-bucket --name my-large-object --multipart-download-threshold 20000 --part-size 128
A. Option A
B. Option C
C. Option D
D. Option B
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 6：
Security testing Policy describes when and how you may conduct certain types of security testing of Oracle Cloud Services, Including vulnerability and penetration tests, as well as tests Involving data scraping tools.
What does Oracle allow as part of this testing?
A. Customers are allowed to use their own testing and monitoring tools.
B. Customers are allowed to test Oracle Cloud Infrastructure (OCI) hardware related to resources in their tenancy.
C. Customers can simulate DoS attack scenarios as long as Its restricted to the customer's own environment.
D. Customers can validate that their network resources are isolated from other customer resources.
正解：A
解説: (Topexam メンバーにのみ表示されます)