無料1z0-1072-23サンプル問題で100%カバー率のリアル試験問題（更新された57問あります)
今すぐダウンロード！リアルOracle 1z0-1072-23試験問題集テストエンジン試験問題
質問 # 20
Which is NOT a valid Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN) approach?
- A. Ensure VCN CIDR prefix overlaps with other VCNs in your tenancy or with your organizations private IP network ranges.
- B. Private subnets should ideally have individual route tables to control the flow of traffic within and outside of VCN.
- C. Ensure not all IP addresses are allocated at once within a VCN or subnet; instead reserve some IP addresses for future use.
- D. Use OCI tags to tag VCN resources so that all resources follow organizational tagging/naming conventions.
正解：A
解説：
Ensure VCN CIDR prefix overlaps with other VCNs in your tenancy or with your organizations private IP network ranges. The explanation is that a VCN CIDR prefix is the range of IPv4 addresses that can be used within the VCN and its subnets. The VCN CIDR prefix should not overlap with other VCNs in your tenancy or with your organization's private IP network ranges, as this can cause routing conflicts and connectivity issues. You should choose a VCN CIDR prefix that is large enough to accommodate your current and future needs, but not too large to waste IP addresses. You can use any of the private IPv4 address ranges specified in RFC 1918 for your VCN CIDR prefix.
質問 # 21
You just got a last minute request to create a set of instances in Oracle Cloud Infrastructure (OCI). The configuration and installed software are identical for every instance, and you already have a running instance inyour OCI tenancy. Which image option allows you to achieve this task with the least amount of effort?
- A. Create a custom image and use it as a template for the new instances.
- B. Bring your own image and use it as a template for the new instances.
- C. Use Oracle-provided images and customize the installation using a third-party tool.
- D. Select an image from the OCI Marketplace.
正解：A
解説：
Explanation
Creating a custom image and using it as a template for the new instances is the option that allows you to achieve this task with the least amount of effort. A custom image is a copy of an existing instance that you can use to launch other instances with the same configuration and installed software. The other options are not suitable for this scenario, as they would require more time and effort to create and customize the instances.
References: [Custom Images]
質問 # 22
You want a full-featured Identity-as-a-Service (IDaaS) solution that helps you manage workforce authenticationand access to all of your Oracle and non-Oracle applications, whether they are SaaS apps, on-premises enterpriseapps, or apps that are hosted in the cloud. Which IAM Identity Domain type should you create?
- A. External User
- B. Premium
- C. Oracle Apps Premium
- D. Free
正解：B
解説：
Explanation
Premium is the IAM Identity Domain type that you should create if you want a full-featured IDaaS solution that helps you manage workforce authentication and access to all of your Oracle and non-Oracle applications.
Premium Identity Domain provides users with access to Oracle Identity Cloud Service, which is an IDaaS solution that offers identity management, single sign-on, multifactor authentication, identity governance, and integration with third-party applications. The other options are not IAM Identity Domain types that provide a full-featured IDaaS solution. References: [Identity Domains], [Oracle Identity Cloud Service]
質問 # 23
You are using a custom application with third-party APIs to manage the application and data hosted in an OracleCloud Infrastructure (OCI) tenancy. Although your third-party APIs do not support OCI's signature-based authentication, you want them to communicate with OCI resources. Which authentication option should you useto ensure this?
- A. API Signing Key
- B. OCI Username and Password
- C. Auth Tokens
- D. SSH Key Pair with 2048-bit algorithm
正解：C
解説：
Explanation
Auth Tokens is the authentication option that you should use to ensure that your custom application with third-party APIs can communicate with OCI resources. Auth Tokens are tokens that can be used as an alternative to passwords when making API calls to OCI services. Auth Tokens can be generated and revoked by users in the OCI Console or CLI, and can be used with any API client that supports basic authentication.
The other options are not suitable for this scenario, as they either require OCI's signature-based authentication or are not applicable for API calls. References: [Auth Tokens]
質問 # 24
Which THREE capabilities are available with the Oracle Cloud Infrastructure (OCI) DNS service?
- A. Creating and managing records
- B. Viewing all zones
- C. Creating and managing security lists
- D. Creating and managing WAF rules
- E. Creating and managing Identity Access Management (IAM) policies
- F. Creating and managing zones
正解：A、B、F
解説：
Creating and managing records, creating and managing zones, and viewing all zones are three capabilities that are available with the OCI DNS service. Records are data elements that map domain names to IP addresses or other information. Zones are collections of records that correspond to a domain name or a subdomain name. The OCI DNS service allows users to create and manage records and zones for their domains or subdomains, as well as view all zones in their tenancy. The other options are not capabilities of the OCI DNS service, but of other OCI services such as WAF, IAM, and Networking. Reference: [DNS Service], [Records], [Zones]
質問 # 25
Which TWO statements are NOTcorrect regarding the Oracle Cloud Infrastructure (OCI) burstable instances?
- A. If the instance's average CPU utilization over the past 24 hours is below thebaseline, the system allows itto burst above the baseline.
- B. Burstable instances are charged according to the baseline OCPU.
- C. Baseline utilization is a fraction of each CPU core, either 25% or 75%.
- D. Burstable instances are designed for scenarios where an instance is not typically idle and has high CPUutilization.
- E. Burstable instances cost less than regular instances with the same total OCPU count.
正解：C、D
解説：
Explanation
The explanation is that burstable instances are VM instances that have a baseline utilization of either 12% or 50% of each CPU core, not 25% or 75%. Burstable instances are designed for scenarios where an instance is typically idle or has low CPU utilization but occasionally needs to burst above the baseline to handle spikes in demand. Burstable instances cost less than regular instances with the same total OCPU count but charge extra for bursting above the baseline OCPU.
質問 # 26
Company XYZ is spending $300,000.00 USD per month in egress fees for 7 Petabytes that they consume for Outbound Data Transfer in North America with their current cloud provider. The company is seeking to lower that expense considerably without reducing consumption. You propose migration to OCI because the Gigabyte Outbound Data Transfer in North America costs just $0.0085 USD per month. With OCI, how much will they spend per month for 7 Petabytes of Outbound Data Transfer? (1 Petabyte = 1000 Terabytes)
- A. $59,500.00
- B. $59,415.00
- C. $150,000.00
- D. $0.00 (free with OCI)
正解：A
解説：
$59,415.00 is the amount that Company XYZ will spend per month for 7 Petabytes of Outbound Data Transfer in North America with OCI. This is calculated by multiplying 7 Petabytes by 1000 Terabytes (to convert Petabytes to Terabytes), then multiplying by $0.0085 USD (the cost per Gigabyte Outbound Data Transfer in North America), then dividing by 1000 (to convert Gigabytes to Terabytes). The formula is:
(7 * 1000 * 0.0085) / 1000 = $59,415.00
質問 # 27
You plan to launch a VM instance with the VM.Standard2.24 shape and Oracle Linux 8 platform image. You want to protect your VM instance from low-level threats, such as rootkits and bootkits that can infect the firmware and operating system and are difficult to detect.
What should you do?
- A. Use Vulnerability Scanning Service.
- B. Use in-transit encryption.
- C. Create a burstable instance.
- D. Create a shielded instance.
正解：D
解説：
The explanation is that shielded instances are VM instances that have additional security features to protect them from low-level threats, such as rootkits and bootkits that can infect the firmware and operating system and are difficult to detect. Shielded instances use verified boot, which ensures that only trusted software components are executed during the boot process. Shielded instances also use virtual trusted platform module (vTPM), which provides a secure storage for encryption keys and certificates. Shielded instances are available for Oracle Linux 8 platform images with VM.Standard2.* shapes.
質問 # 28
A financial firm is designing an application architecture for its online trading platform that should have high availability and fault tolerance.
Their solutions architects configured the application to use an Oracle Cloud Infrastructure (OCI) Object Storagebucket located in the US West (us-phoenix-1) region to store large amounts of financial data. The stored financialdata in the bucket should not be impacted even if there is an outage in one of the Availability Domains or a complete region.
What should the architect do to avoid any costly service disruptions and ensure data durability?
- A. Create a new Object Storage bucket in another region and configure lifecycle policy to move data every
5days. - B. Create a replication policy to send data to a different bucket in another OCI region.
- C. Create a lifecycle policy to regularly send data from the Standard to Archive storage.
- D. Copy the Object Storage bucket to a block volume.
正解：B
解説：
Explanation
Create a replication policy to send data to a different bucket in another OCI region. The explanation is that replication is a feature of Object Storage that allows you to automatically copy objects from one bucket to another bucket, either in the same region or in a different region. Replication can help you improve data availability and durability, as well as meet compliance and disaster recovery requirements. To enable replication, you need to create a replication policy that specifies the source and destination buckets, the replication frequency, and the replication filters. Replication policies are evaluated every five minutes and copy any new or updated objects from the source bucket to the destination bucket.
質問 # 29
Which TWO are key benefits of setting up Site-to-Site VPN on Oracle Cloud Infrastructure (OCI)?
- A. When setting up Site-to-Site VPN, OCI provisions redundant VPN tunnels.
- B. When setting up Site-to-Site VPN, customers can configure it to use static or dynamic routing (BGP).
- C. When setting up Site-to-Site VPN, it creates a private connection that provides consistent network experience.
- D. When setting up Site-to-Site VPN, customers can expect bandwidth above 2 Gbps.
正解：A、B
解説：
When setting up Site-to-Site VPN, customers can configure it to use static or dynamic routing (BGP). When setting up Site-to-Site VPN, OCI provisions redundant VPN tunnels. The explanation is that Site-to-Site VPN is a secure and encrypted connection between your on-premises network and your Virtual Cloud Network (VCN) in OCI over the public internet. When setting up Site-to-Site VPN, you can choose to use static routing or dynamic routing (Border Gateway Protocol or BGP) to exchange routes between your network and OCI. OCI also provisions two redundant VPN tunnels for each Site-to-Site VPN connection to provide high availability and failover.
質問 # 30
Company XYZ is spending $300,000.00 USD per month in egress fees for 7 Petabytes that they consume for Outbound Data Transfer in North America with their current cloud provider. The company is seeking to lower that expense considerably without reducing consumption. You propose migration to OCI because the Gigabyte Outbound Data Transfer in North America costs just $0.0085 USD per month. With OCI, how much will they spend per month for 7 Petabytes of Outbound Data Transfer? (1 Petabyte = 1000 Terabytes)
- A. $59,415.00
- B. $59,500.00
- C. $150,000.00
- D. $0.00 (free with OCI)
正解：A
解説：
Explanation
$59,415.00 is the amount that Company XYZ will spend per month for 7 Petabytes of Outbound Data Transfer in North America with OCI. This is calculated by multiplying 7 Petabytes by 1000 Terabytes (to convert Petabytes to Terabytes), then multiplying by $0.0085 USD (the cost per Gigabyte Outbound Data Transfer in North America), then dividing by 1000 (to convert Gigabytes to Terabytes). The formula is:
(7 * 1000 * 0.0085) / 1000 = $59,415.00
質問 # 31
Which statement accurately describes the key features and benefits of OCI Confidential Computing?
- A. It enables users to securely store and retrieve data by using distributed file systems, ensuring high availability and fault tolerance.
- B. It provides automatic scalability and load balancing capabilities, which allow seamless integration with other cloud providers.
- C. It encrypts and isolates in-use data and the applications processing that data, thereby preventing unauthorized access or modification.
- D. It optimizes network performance and reduces latency through advanced routing algorithms and caching mechanisms.
正解：C
解説：
It encrypts and isolates in-use data and the applications processing that data, thereby preventing unauthorized access or modification is an accurate description of the key features and benefits of OCI Confidential Computing. Confidential Computing is a feature that leverages hardware-based Trusted Execution Environments (TEEs) to protect data and applications from unauthorized access or modification while they are in use by the CPU or memory. This adds an extra layer of security to cloud computing, as it protects data not only at rest and in transit, but also in use. The other options are not accurate descriptions of the key features and benefits of OCI Confidential Computing. Reference: [Confidential Computing]
質問 # 32
You have an instance running in Oracle Cloud Infrastructure (OCI) that cannot be live-migrated during an infrastructure maintenance event. OCI schedules a maintenance due date within 14 to 16 days and sends you a notification.
What would happen if you choose not to proactively reboot the instance before the scheduled maintenance due date?
- A. The instance will get terminated.
- B. You will receive another notification to reboot within the next 7 days.
- C. The instance is either reboot-migrated or rebuilt in place for you.
- D. You will receive another notification to reboot within the next 14 days.
正解：C
解説：
If you choose not to proactively reboot the instance before the scheduled maintenance due date, the instance is either reboot-migrated or rebuilt in place for you. Reboot-migration is a process where OCI migrates your instance to a new physical host without changing its configuration or public IP address. Rebuild in place is a process where OCI shuts down your instance, performs maintenance on the physical host, and restarts your instance with the same configuration and public IP address. The other options are not correct. Reference: [Reboot-Migration], [Rebuild in Place]
質問 # 33
You have a high-demand web application running on Oracle Cloud Infrastructure (OCI). Your tenancy administrator has set up a schedule-based autoscaling policy on instance pool with an initial size of 5 instances for the application.
Policy 1:
Target pool size:10 instances
Execution time:8:30 a.m. on every Monday through Friday, in every month, in every year Cron expression:0 30 8 ? * MON-FRI * Which statement accurately explains the goal of this policy?
- A. Goal: A recurring monthly schedule. On all days of the month, set the initial pool size to 5 instances. At
8.30 a.m., on every day of the month, scale out to 10 instances. - B. Goal: A recurring daily schedule. On weekday mornings at 8.30 a.m., scale out to 10 instances.
- C. Goal: A one-time schedule with only one scaling out event. At 8:30 a.m., on December 31, 2021, scale the instance pool to 10 instances from 5.
- D. Goal: A recurring weekly schedule. On all days of the week at 8.30 a.m., scale out the pool to 10 instances from the initial size of 5
正解：B
解説：
The explanation is that a schedule-based autoscaling policy allows you to adjust the size of your instance pool based on a cron expression that specifies the date and time of the scaling action. The cron expression consists of six fields: seconds, minutes, hours, day of month, month, and day of week. In this case, the cron expression is 0 30 8 ? * MON-FRI *, which means that the scaling action will occur at 8:30 a.m. on every Monday through Friday, regardless of the day of month or month. Therefore, the goal of this policy is to scale out the instance pool to 10 instances on weekday mornings at 8:30 a.m.
質問 # 34
You are backing up your on-premises data to the Oracle Cloud Infrastructure (OCI) Object Storage Service.
Your requirements are:
1. Backups need to be retained for at least full 31 days.
2. Data should be accessible immediately if and when needed after the backup.
Which OCI Object Storage tier is suitable for storing the backup to minimize cost?
- A. Archive tier
- B. Infrequent Access tier
- C. Standard tier
- D. Auto-Tiering tier
正解：B
解説：
The explanation is that the Infrequent Access tier is suitable for storing data that is accessed less frequently but requires immediate access when needed. The Infrequent Access tier has lower storage costs than the Standard tier, but higher retrieval costs. The Infrequent Access tier also has a minimum storage duration of 30 days, which means that you will be charged for at least 30 days of storage even if you delete or move the data before that period.
質問 # 35
In which TWO ways does Cloud Guard help improve the overall security posture for your tenancy?
- A. Monitors unauthorized or suspicious user activity.
- B. Allows you to centrally manage encryption keys.
- C. Helps detect misconfigured resources, such as publicly accessible Object Storage buckets, instances, and restricted ports on security lists.
- D. Masks sensitive data and monitors security controls on your Oracle databases.
- E. Prevents you from creating misconfigurations on your resources in Oracle Cloud Infrastructure (OCI).
正解：A、C、E
解説：
Explanation
Monitors unauthorized or suspicious user activity, prevents you from creating misconfigurations on your resources in OCI, and helps detect misconfigured resources, such as publicly accessible Object Storage buckets, instances, and restricted ports on security lists. The explanation is that Cloud Guard is a service that helps you improve the security posture of your tenancy by providing visibility into your cloud resources, identifying security misconfigurations and threats, and taking corrective actions to remediate them. Cloud Guard monitors user activity and resource configurations using data collectors and detectors, evaluates them against predefined or custom rules, generates problems and recommendations based on severity levels, and executes responders to fix the issues automatically or manually.
質問 # 36
Which Oracle Cloud Infrastructure (OCI) Identity and Access Management (IAM) policy is invalid?
- A. Allow dynamic-group FrontEnd to manage instance-family in compartment Project-A
- B. Allow group A-Admins to manage all-resources in compartment Project-A
- C. Allow group A-Developers to create volumes in compartment Project-A
- D. Allow any-user to inspect users in tenancy
正解：C
解説：
Allow group A-Developers to create volumes in compartment Project-A is an invalid IAM policy. This is because create is not a valid verb for volumes. The correct verb for creating volumes is attach. The other options are valid IAM policies that use correct verbs and syntax. Reference: [IAM Policies], [Verbs]
質問 # 37
A financial firm is designing an application architecture for its online trading platform that should have high availability and fault tolerance.
Their solutions architects configured the application to use an Oracle Cloud Infrastructure (OCI) Object Storage bucket located in the US West (us-phoenix-1) region to store large amounts of financial dat a. The stored financial data in the bucket should not be impacted even if there is an outage in one of the Availability Domains or a complete region.
What should the architect do to avoid any costly service disruptions and ensure data durability?
- A. Create a new Object Storage bucket in another region and configure lifecycle policy to move data every 5 days.
- B. Create a replication policy to send data to a different bucket in another OCI region.
- C. Create a lifecycle policy to regularly send data from the Standard to Archive storage.
- D. Copy the Object Storage bucket to a block volume.
正解：B
解説：
Create a replication policy to send data to a different bucket in another OCI region. The explanation is that replication is a feature of Object Storage that allows you to automatically copy objects from one bucket to another bucket, either in the same region or in a different region. Replication can help you improve data availability and durability, as well as meet compliance and disaster recovery requirements. To enable replication, you need to create a replication policy that specifies the source and destination buckets, the replication frequency, and the replication filters. Replication policies are evaluated every five minutes and copy any new or updated objects from the source bucket to the destination bucket.
質問 # 38
You want to create a policy to allow the NetworkAdmins group to manage Virtual Cloud Network (VCN) in compartment C. You want to attach this policy to the tenancy. The compartment hierarchy is shown below.
Which policy statement can be used to accomplish this task?
- A. Allow group NetworkAdmins to manage virtual-network-family in compartment C
- B. Allow group NetworkAdmins to manage virtual-network-family in compartment A:B:C
- C. Allow group NetworkAdmins to manage virtual-network-family in compartment B:C
- D. Allow group NetworkAdmins to manage virtual-network-family in tenancy
正解：B
解説：
Allow group NetworkAdmins to manage virtual-network-family in compartment A:B:C. The explanation is that when you attach a policy to the tenancy, you need to specify the full path of the compartment where you want to grant permissions. In this case, the compartment C is a sub-compartment of compartment B, which is a sub-compartment of compartment A, which is a sub-compartment of the root compartment (tenancy). Therefore, the full path of compartment C is A:B:C. The virtual-network-family resource type includes all the resources related to VCN, such as subnets, route tables, security lists, gateways, etc.
質問 # 39
When creating an Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN) with the VCN wizard, which THREE gateways are created automatically?
- A. Service Gateway
- B. Dynamic Routing Gateway
- C. NAT Gateway
- D. Storage Gateway
- E. Internet Gateway
- F. Local Peering Gateway
- G. Bastion Host
正解：A、C、E
解説：
Internet Gateway, NAT Gateway, and Service Gateway are three gateways that are created automatically when creating a VCN with the VCN wizard. An Internet Gateway allows public traffic between the VCN and the internet. A NAT Gateway allows private traffic from the VCN to access the internet without exposing the VCN resources to incoming internet connections. A Service Gateway allows private traffic from the VCN to access OCI services such as Object Storage, Email Delivery, and Notifications. The other options are not created automatically by the VCN wizard, but can be added manually later if needed. Reference: [VCN Wizard], [Gateways]
質問 # 40
Which is NOT a valid Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN) approach?
- A. Ensure VCN CIDR prefix overlaps with other VCNs in your tenancy or with your organizations private IP network ranges.
- B. Private subnets should ideally have individual route tables to control the flow of traffic within and outside of VCN.
- C. Ensure not all IP addresses are allocated at once within a VCN or subnet; instead reserve some IP addresses for future use.
- D. Use OCI tags to tag VCN resources so that all resources follow organizational tagging/naming conventions.
正解：A
解説：
Ensure VCN CIDR prefix overlaps with other VCNs in your tenancy or with your organizations private IP network ranges. The explanation is that a VCN CIDR prefix is the range of IPv4 addresses that can be used within the VCN and its subnets. The VCN CIDR prefix should not overlap with other VCNs in your tenancy or with your organization's private IP network ranges, as this can cause routing conflicts and connectivity issues. You should choose a VCN CIDR prefix that is large enough to accommodate your current and future needs, but not too large to waste IP addresses. You can use any of the private IPv4 address ranges specified in RFC 1918 for your VCN CIDR prefix.
質問 # 41
......
Oracle 1z0-1072-23 認定試験の出題範囲：
| トピック | 出題範囲 |
|---|---|
| トピック 1 |
|
| トピック 2 |
|
| トピック 3 |
|
| トピック 4 |
|
| トピック 5 |
|
最新1z0-1072-23テスト問題集を試そう！更新されたOracle試験が合格できます：https://jp.fast2test.com/1z0-1072-23-premium-file.html