[Q75-Q92] Certification Training for 1z0-1072-22 Exam Dumps Test Engine [2023]

admin • June 25, 2023

[Q75-Q92] Certification Training for 1z0-1072-22 Exam Dumps Test Engine [2023]

Rate this post

Certification Training for 1z0-1072-22 Exam Dumps Test Engine [2023]

Jun 25, 2023 Step by Step Guide to Prepare for 1z0-1072-22 Exam

Oracle 1z0-1072-22 is an exam that is designed to test the skills and knowledge of individuals who are interested in becoming certified Oracle Cloud Infrastructure 2022 Architect Associates. This exam is intended to validate the skills and knowledge of candidates in various areas such as cloud infrastructure, networking, security, and database services. This certification is recognized globally and is an excellent way for individuals to demonstrate their expertise in the field of cloud computing.

NO.75 Which three actions are required to configure a highly available and secure hybrid network between Oracle Cloud and your data center? (Choose three.)

Define a non-overlapping IP Address Space between the data center and the cloud.

Configure each of the CPEs to leverage each of the IPSec Tunnels created by the connection process.

Create two or more CPEs that map to the private IP addresses of the customer routers used in the IPSec VPN Tunnel.

Define a default route table entry for the VCN that directs all traffic to the data center network to a single DRG.

Create dynamic routing gateways in more than one AD within your region.

https://docs.cloud.oracle.com/iaas/Content/Network/Tasks/configuringCPE.htm

NO.76 A financial firm is designing an application architecture for its online trading platform that must have high availability and fault tolerance.
Their solutions architect configured the application to use an Oracle Cloud InfrastructureObject Storage bucket located in the US West (us-phoenix-1) region to store large amounts of financial data. The stored financial data in the bucket must not be affected even if there is an outage in one of the Availability Domains or a complete region.
What should the architect do to avoid any costly service disruptions and ensure data durability?

Create a new Object Storage bucket in another region and configure lifecycle policy to move data every
5 days.

Create a lifecycle policy to regularly senddata from Standard to Archive storage.

Copy the Object Storage bucket to a block volume.

Create a replication policy to send data to a different bucket in another OCI region.

NO.77 You developed a microservices based application that runs on Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE). You want to provide access to this cluster to other team members.
What should you do to provide access to this cluster using as fewest steps as possible?

Create a group in OCI Infrastructure Access Management (IAM). Create a policy to grant access to the OKE cluster. Other team members should use OCI Cloud Shell to generate the kubeconfig into their own cloud shell environment and access the cluster using kubectl from cloud shell.

Create a group in OCI Infrastructure Access Management (IAM). Create a policy to grant access to the OKE cluster. Create individual users and access token for each team member. Other team members should use OCI Cloud Shell to generate the kubeconfig into their own cloud shell environment and access the cluster using kubectl from cloud shell.

Create a group in OCI Infrastructure Access Management (IAM). Create a policy to grant access to the OKE cluster. Create a cluster role and cluster role binding to provide access to the cluster for each team member. Other team members should install oci cli and kubectl locally on their laptop. Use the oci cli to generate the kubeconfig and use kubectl to access the cluster.

Create a group in OCI Infrastructure Access Management (IAM). Create a policy to grant access to the OKE cluster. Other team members should install oci cli and kubectl locally on their laptop. Use the oci cli to generate the kubeconfig and use kubectl to access the cluster.

NO.78 You have deployed a compute instance (VM.Standard2.24) to run an Oracle database. With this set up, you run into some performance issues and want to leverage an OCI Dense IO shape (VM.DenseIO2.24), with which you get 25.6 TB local NVMe SSD. You do not want to lose the configuration changes you made to the instance. Which of the following TWO steps ARE NOT required to make this transition?

Terminate the VM.Standard2.24 instance and do not preserve the boot volume

Create a new instance using the VM.Dense102.24 shape using the preserved boot volume and move the Oracle Database data to NVMe disks

Terminate the VM.Standard2.24 instance and preserve the boot volume

Create a new instance using a VM.DenseIO2.24 shape using the preserved boot volume and move the Oracle Database data to block volumes

You can permanently terminate (delete) instances that you no longer need. Any attached VNICs and volumes are automatically detached when the instance terminates. Eventually, the instance’s public and private IP addresses are released and become available for other instances. By default, the instance’s boot volume is deleted when you terminate the instance, however you can preserve the boot volume associated with the instance, so that you can attach it to a different instance as a data volume, or use it to launch a new instance.
Dense I/O Shapes Designed for large databases, big data workloads, and applications that require high-performance local storage. DenseIO shapes include locally-attached NVMe-based SSDs.
so once you create the VM.DenseIO you need to moce the Database to locally-attached NVMe-based SSDs

NO.79 Why are two subnets required to create a public load balancer when additional subnets are often used for back-end servers? (Choose two.)

Routing is simpler when the load balancer is not in the same subnet as the back-endserver.

Performance is higher when more subnets are used.

Additional subnets for back-end servers allow for separate route tables for these servers.

Additional subnets for back-end servers allow for separate security lists for these servers.

Explanation
References:
http://www.oracle.com/webfolder/technetwork/tutorials/obe/cloud/ocis/load-balancer/load-balancer.html

NO.80 Which certificate format is used with the load balancer?

PFX

PEM

PKCS12

CRT

https://docs.cloud.oracle.com/iaas/Content/Balance/Tasks/managingcertificates.htm

NO.81 Which three must be configured for a load balancer to accept incoming traffic? (Choose two.)

a listener

a back-end server

a back end set

a security list that is open on a listener port

a certificate

Explanation
https://docs.cloud.oracle.com/iaas/Content/Balance/Tasks/managingloadbalancer.htm?tocpath=Services%7CLoa The essential components for load balancing include:* A load balancer with pre-provisioned bandwidth.* Abackend set with a health check policy. See Managing Backend Sets.* Backend servers for your backend set.
See Managing Backend Servers.* One or more listeners . See Managing Load Balancer Listeners.* Load balancer subnet security rules to allow the intended traffic. To learn more about these rules, see Security Rules.* Optionally, you can associate your listeners with SSL server certificate bundles to manage how your system handles SSL traffic. See Managing SSL Certificates.

NO.82 Which are the TWO tools you would use for Logical migration?

Data Pump

Data Guard

RMAN

GoldenGate

NO.83 An instance is launched with a primary VNIC that is created during instance launch.
Which two operations are true when you add secondary VNICs to an existing instance? (Choose two.)

You can remove the primary VNIC after the secondary VNIC’s attachment is complete.

You can remove the secondary VNIC later if it is not needed.

The primary and secondary VNIC association should be within the same Availability Domain.

It is not possible to connect two VNICs to an instance.

https://docs.cloud.oracle.com/iaas/Content/Network/Tasks/managingVNICs.htm

NO.84 You are a network architect and have designed the network infrastructure of a three-tier application on Oracle Cloud Infrastructure (OCI). In the architecture, back-end DB servers are in a private subnet. One of your DB administrators requests to have access to OCI object storage service.
How can you meet this requirement?

Add a new route rule to the private subnet route table to route default traffic to the internet gateway.

Attach a public IP address to the instances in the private subnet, and then add a new route rule to the private subnet route table to route default traffic to the internet gateway.

Create a dynamic routing gateway (DRG) and attach it to your virtual cloud network (VCN). Add a default route rule to the private subnets route table and set the target as DRG.

Create a service gateway, add a new route rule to the private subnet route table that uses object storage as target type.

A service gateway lets resources in your VCN privately access specific Oracle services, without exposing the data to an internet gateway or NAT. The resources in the VCN can be in a private subnet and use only private IP addresses. The traffic from the VCN to the service of interest travels over the Oracle network fabric and never traverses the internet.
To give your VCN access to a given service CIDR label, you must enable that service CIDR label for the VCN’s service gateway. You can do that when you create the service gateway, or later after it’s created. You can also disable a service CIDR label for the service gateway at any time.
For traffic to be routed from a subnet in your VCN to a service gateway, you must add a rule accordingly to the subnet’s route table. The rule must use the service gateway as the target.

NO.85 Which two are required to create an IPSec VPN connection? (Choose two.)

security list

static route CIDR

name

compute instance

NO.86 How can you provide users access to an existing compartment?

by granting users access to a compartment when the compartment is created

by adding users to a group and defining a policy to provide the group access to the compartment

by adding users to a compartment. All users in the compartment will have access to the objects in the compartment.

by granting access directly to the user when the user is created

A policy is a document that specifies who can access which Oracle Cloud Infrastructure resources that your company has, and how. A policy simply allows a group to work in certain ways with specific types of resources in a particular compartment In general, here’s the process an IAM administrator in your organization needs to follow:
Define users, groups, and one or more compartments to hold the cloud resources for your organization.
Create one or more policies, each written in the policy language.
Place users into the appropriate groups depending on the compartments and resources they need to work with.
Provide the users with the one-time passwords that they need in order to access the Console and work with the compartments. For more information,

NO.87 Your company has decided to move a few applications to Oracle Cloud and you have been asked to design it for both High Availability (HA) and Disaster Recovery (DR).
Which two should youconsider while designing your Oracle Cloud Infrastructure architecture? (Choose two.)

Region

Instance Shape

Compartments

Availability Domain

Explanation
References:https://blogs.oracle.com/cloud-infrastructure/migration-and-disaster-recovery-in-the-oracle-cloud-wi

NO.88 You are designing a networking infrastructure in multiple Oracle Cloud Infrastructure regions and require connectivity between workloads in each region. You have created a dynamic routing gateway (DRG) and a remote peering connection. However, your workloads are unable to communicate with each other.
What are two reasons for this? (Choose two.)

The security lists associated with subnets in each virtual cloud network (VCN) do not have the appropriate ingress rules

Identity and Access Management (IAM) policies have not been defined to allow connectivity across the two VCNs in different regions

A local peering gateway needs to be created in each VCN with a default route rule added in the route table forwarding the traffic to the local peering gateway

An Internet gateway needs to be created in each VCN with a default route rule added in the route table forwarding the traffic to the Internet Gateway

The route table associated with subnets in each VCN do not have a route rule defined to forward the traffic to their respective DRGs

Setting Up a Remote Peering
Create the RPCs: Each VCN administrator creates an RPC for their own VCN’s DRG.
Share information: The administrators share the basic required information.
Set up the required IAM policies for the connection: The administrators set up IAM policies to enable the connection to be established.
Establish the connection: The requestor connects the two RPCs (see Important Remote Peering Concepts for the definition of the requestor and acceptor).
Update route tables: Each administrator updates their VCN’s route tables to enable traffic between the peered VCNs as desired.
Update security rules: Each administrator updates their VCN’s security rules to enable traffic between the peered VCNs as desired.

NO.89 Your company has been running several small applications in Oracle Cloud Infrastructure and is planning a proof-of-concept (POC) to deploy PeopleSoft.
If your existing resources are being maintained in the root compartment, what is the recommended approach for defining security for the upcoming POC?

Create a new compartment for the POC and grant appropriate permissions to create and manage resources within the compartment.

Provision all new resources into the root compartment. Grant permissions that only allow for creation and management of resources specific to the POC.

Provision all new resources into the root compartment. Use defined tags to separate resources that belong to different applications.

Create a new tenancy for the POC. Provision all new resources into the root compartment. Grant appropriate permissions to create and manage resources within the root compartment.

If your organization is small, or if you are still in the proof-of-concept stage of evaluating Oracle Cloud Infrastructure, consider placing all of your resources in the root compartment (tenancy). This approach makes it easy for you to quickly view and manage all your resources. You can still write policies and create groups to restrict permissions on specific resources to only the users who need access. If you plan to maintain all your resources in the root compartment, we recommend setting up a separate sandbox compartment to give users a dedicated space to try out features. In the sandbox compartment, you can grant users permissions to create and manage resources, while maintaining stricter permissions on the resources in your tenancy (root) compartment. https://www.oracle.com/a/ocom/docs/best-practices-for-iam-on-oci.pdf

NO.90 D18912E1457D5D1DDCBD40AB3BF70D5D
Which two methods are supportedfor migrating your on-premises Oracle database to an Oracle Autonomous Transaction Processing (ATP) database in Oracle Cloud Infrastructure? (Choose two.)

Load text files into ATP using SQL Developer.

Use RMAN duplicate.

Use Oracle Data Pump.

Transfer the physical database files and re-create the database.

Use database backup and restore.

Reference:https://docs.oracle.com/en/solutions/migrate-to-atp/index.html#GUID-28E5A683-6DC6-4A07- BB1C-55F020D4C1CD

NO.91 In which language are Terraform and Terraform providers written?

Python

Ruby

NO.92 You are designing a high bandwidth, redundant connection between your data center and Oracle Cloud Infrastructure (OCI). While researching for OCI FastConnect locations, you notice that you are co-located with Oracle at one of the Oracle FastConnect locations in the Ashburn region.
What is the recommended design in this scenario?

Create a cross-connect group and have two or more cross-connects in that group. Create an IPsec VPN connection on this group.

Setup two IPsec connections between your data center and OCI Ashburn region. Create a OCI load balancer to distribute the traffic across the two connections.

Create a cross-connect group and have at least two or more cross-connects in that group. Create at least two or more virtual circuits in the group.

Create a cross-connect group and have at least one cross-connect in that group. Create at least one virtual circuit in the group.

You could have multiple private virtual circuits, for example, to isolate traffic from different parts of your organization (one virtual circuit for 10.0.1.0/24; another for 172.16.0.0/16), or to provide redundancy.

Loading …