1z0-1067-24練習問題集で検証済みで更新された95問題あります [Q16-Q40]

1z0-1067-24練習問題集で検証済みで更新された95問題あります

更新された1z0-1067-24試験問題集でPDF問題とテストエンジン

質問 # 16
You have been asked to update the lifecycle policy for object storage using the Oracle Cloud Infrastructure (OCI) Command Line Interface (CLI). Which command can successful-ly update the policy? (Choose the best answer.)

A. oci os object-lifecycle-policy put --ns <object_storage_namespace> --bn <bucket_name>
B. oci os object-lifecycle-policy delete --ns <object_storage_namespace> --bn <buck-et_name>
C. oci os object-lifecycle-policy get --ns <object_storage_namespace> --bn <bucket_name>
D. oci os object-lifecycle-policy put --ns <object_storage_namespace> --bn <bucket_name> -- --items <json_formatted_lifecycle_policy>

正解：D

質問 # 17
Which TWO statements are NOT true regarding Block Storage Volume Resize in Oracle Cloud Infrastructure (OCI)? (Choose two.)

A. Volumes may not have attachments added or removed during resize.
B. Volume size can be either increased or decreased.
C. Volumes may not be resized if there is a prior resize or an ongoing cloning operation
D. Volumes may only be resized if there is a backup pending.

正解：B、D

質問 # 18
You run a large global application with 90% of your customers based in the US and Canada. You want to test a new feature and allow a small percentage of users to access the new version of your application. Which Oracle Cloud Infrastructure (OCI) Traffic Management steering policy should you utilize?

A. ASN steering
B. IP Prefix steering
C. Geolocation steering
D. Load Balancer

正解：D

質問 # 19
Recently, your e-commerce web application has been receiving significantly more traffic than usual. Users are reporting they often encounter a 503 Service Error when trying to access your site. Sometimes the site is very slow. You check your instance pool configuration to con-firm that the maximum numberof instances is configured to allow 20 compute instances. Currently, 14 compute instances have been provisioned by the instance pool. You also confirm that current CPU utilization across all hosts exceeds the scale-out threshold you set in your auto-scaling policy. However, the instance pool is not provisioning any new instances. What can you check to determine why the application is NOT functioning properly? (Choose the best answer.)

A. Verify that the new offer feature code did not introduce any performance bugs.
B. Verify that the database is accessible.
C. Verify that the Quality Assurance team is not currently performing load-testing against production.
D. Verify that the compute resource quota has not been exceeded.

正解：D

質問 # 20
You have created several block volumes in the us-phoenix-1 region in a specific compart-ment. The compartment can be identified by the following Oracle Cloud Infrastructure (OCI) unique identifier, or ocid1.compartment.oc1.phx..exampleuniquelD Your manager has asked you to leverage the OCI monitoring service and write a metric query showing all read IOPS at a one-minute interval, filtered to this compartment and aggregated for the maximum. Which metric query will you create?

A. IopsRead[lm]{compartmentId = 'odd1.compartment.ocl.phx..exampleuniquelD'}.grouping().mean()
B. Iop-sRead[lm{compartmentId='ocidl.compartment.ocl.phx..exampleuniquelD'}.grouplng().max()
C. Iop-sWrite[lm]{compartmentId=Hocidl.compartment.ocl.phx..exampleuniquelD'}.mean()
D. IopsRead[lm]{compartmentId='ocldl.compartment.ocl.phx..exampleuniquelD'}.max()

正解：B

質問 # 21
(CHK) Your company recently adopted a hybrid cloud architecture which requires them to migrate some of their on-premises web applications to Oracle Cloud Infrastructure (OCI). You created a Terraform template which automatically provisions OCI resources such as compute instances, load balancer, and a database instance. After running the stack using the terraform apply command, it successfully launched the compute instances and the load balancer, but it failed to create a new database instance with the following error: Service error: NotAuthorizedOrNotFound. shape VM.Standard2.4 not found. http status code: 404 You dis-covered that the resource quotas assigned to your compartment prevent you from using VM.Standard2.4 instance shapes available in your tenancy. You edit the Terraform script and replace the shape with VM.Standard2.2 Which option would you recommend to re-run the terraform command to have required OCI resources provisioned with the least effort? (Choose the best answer.)

A. terraform apply target=oci_database_db_system.db_system
B. terraform plan target=oci_database_db_system.db_system
C. terraform refresh target=oci_database_db_system.db_system
D. terraform apply auto-approve

正解：A

質問 # 22
SIMULATION
Scenario: 1 (Create a reusable VCN Configuration with Terraform)
Scenario Description: (Hands-On Performance Exam Certification)
You'll launch and destroy a VCN and subnet by creating Terraform automation scripts and issuing commands in Code Editor. Next, you'll download those Terraform scripts and create a stack by uploading them into Oracle Cloud Infrastructure Resource Manager.
You'll then use that service to launch and destroy the same VCN and subnet.
In this scenario, you will:
a. Create a Terraform folder and file in Code Editor.
b. Create and destroy a VCN using Terraform.
c. Create and destroy a VCN using Resource Manager.

正解：

解説：
See the solution below with Step by Step Explanation
Explanation:
Create a Terraform Folder and File in Code Editor:
You'll create a folder and file to hold your Terraform scripts.
1. Log in to your tenancy in the Cloud Console and open the Code Editor, whose icon is at the top-right corner, to the right of the CLI Cloud Shell icon.
2. Expand the Explorer panel with the top icon on the left panel. It looks like two overlapping documents.
3. Expand the drop-down for your home directory if it isn't already expanded. It's okay if it is empty.
4. Create a new folder by clicking File, then New Folder, and name it terraform-vcn.
5. Create a file in that folder by clicking File, then New File, and name it vcn.tf. To make Code Editor, create the file in the correct folder, click the folder name in your home directory to highlight it.
6. First, you'll set up Terraform and the OCI Provider in this directory. Add these lines to the file:
terraform {required_providers {oci = {source = "oracle/oci"version = ">=4.67.3"}}required_version = ">= 1.0.0"}
7. Save the changes by clicking File, then Save.
8. Now, run this code. Open a terminal panel in Cloud Editor by clicking Terminal, then New Terminal.
9. Use pwd to check that you are in your home directory.
10. Enter ls and you should see your terraform_vcn directory.
11. Enter cd terraform_vcn/ to change to that directory with.
12. Use terraform init to initialize this directory for Terraform.
13. Use ls -a and you should see that Terraform created a hidden directory and file.
Create and Destroy a VCN Using Terraform
You'll create a Terraform script that will launch a VCN and subnet.
You'll then alter your script and create two additional files that will apply a compartment OCID variable to your Terraform script.
Write the Terraform
1. Add the following code block to your Terraform script to declare a VCN, replacing <your_compartment_ocid> with the proper OCID. The only strictly required parameter is the compartment OCID, but you'll add more later.
If you need to retrieve your compartment OCID, navigate to Identity & Security, then Compartments. Find your compartment, hover the cursor over the OCID, and click Copy.
resource "oci_core_vcn" "example_vcn" {compartment_id = "<your_compartment_ocid>"} This snippet declares a resource block of type oci_core_vcn. The label that Terraform will use for this resource is example_vcn.
2. In the terminal, run terraform plan, and you should see that Terraform would create a VCN. Because most of the parameters were unspecified, terraform will list their values as "(known after apply)." You can ignore the "-out option to save this plan" warning.
Note that terraform plan parses your Terraform configuration and creates an execution plan for the associated stack, while terraform apply applies the execution plan to create (or modify) your resources.
3. Add a display name and CIDR block (the bolded portion) to the code. Note that we want to set the cidr_blocks parameter, rather than cidr_block (which is deprecated).
resource "oci_core_vcn" "example_vcn" {compartment_id = "<your_compartment_ocid>"display_name = "VCN-01"cidr_blocks = ["10.0.0.0/16"]}
4. Save the changes and run terraform plan again. You should see the display name and CIDR block reflected in Terraform's plan.
5. Now add a subnet to this VCN. At the bottom of the file, add the following block:
resource "oci_core_subnet" "example_subnet" {compartment_id = "<your_compartment_ocid>"display_name = "SNT-01"vcn_id = oci_core_vcn.example_vcn.idcidr_block = "10.0.0.0/24"} Note the line where we set the VCN ID. Here we reference the OCID of the previously declared VCN, using the name we gave it to Terraform: example_vcn. This dependency makes Terraform provision the VCN first, wait for OCI to return the OCID, then provision the subnet.
6. Run terraform plan to see that it will now create a VCN and subnet.
Add Variables
7. Before moving on there are a few ways to improve the existing code. Notice that the subnet and VCN both need the compartment OCID. We can factor this out into a variable. Create a file named variables.tf
8. In variables.tf, declare a variable named compartment_id:
variable "compartment_id" {type = string}
9. In vcn.tf, replace all instances of the compartment OCID with var.compartment_id as follows:
terraform {required_providers {oci = {source = "oracle/oci"version = ">=4.67.3"}}required_version = ">= 1.0.0"} resource "oci_core_vcn" "example_vcn" {compartment_id = var.compartment_iddisplay_name = "VCN-01"cidr_blocks = ["10.0.0.0/16"]} resource "oci_core_subnet" "example_subnet" {compartment_id = var.compartment_iddisplay_name = "SNT-01"vcn_id = oci_core_vcn.example_vcn.idcidr_block = "10.0.0.0/24"} Save your changes in both vcn.tf and variables.tf
10. If you were to run terraform plan or apply now, Terraform would see a variable and provide you a prompt to input the compartment OCID. Instead, you'll provide the variable value in a dedicated file. Create a file named exactly terraform.tfvars
11. Terraform will automatically load values provided in a file with this name. If you were to use a different name, you would have to provide the file name to the Terraform CLI. Add the value for the compartment ID in this file:
compartment_id = "<your_compartment_ocid>"
Be sure to save the file.
12. Run terraform plan and you should see the same output as before.
Provision the VCN
13. Run terraform apply and confirm that you want to make the changes by entering yes at the prompt.
14. Navigate to VCNs in the console. Ensure that you have the right compartment selected. You should see your VCN. Click its name to see the details. You should see its subnet listed.
Terminate the VCN
15. Run terraform destroy. Enter yes to confirm. You should see the VCN terminate. Refresh your browser if needed.
Create and Destroy a VCN Using Resource Manager (You will most probably be tested on this in the actual certification) We will reuse the Terraform code but replace the CLI with Resource Manager.
1. Create a folder named terraform_vcn on your host machine. Download the vcn.tf, terraform.tfvars, and variables.tf files from Code Editor and move them to the terraform_vcn folder to your local machine. To download from Code Editor, right-click the file name in the Explorer panel and select Download. You could download the whole folder at once, but then you would have to delete Terraform's hidden files.
Create a Stack
2. Navigate to Resource Manager in the Console's navigation menu under Developer Services. Go to the Stacks page.
3. Click Create stack.
a. The first page of the form will be for stack information.
1) For the origin of the Terraform configuration, keep My configuration selected.
2) Under Stack configuration, upload your terraform_vcn folder.
3) Under Custom providers, keep Use custom Terraform providers deselected.
4) Name the stack and give it a description.
5) Ensure that your compartment is selected.
6) Click Next.
b. The second page will be for variables.
1) Because you uploaded a terraform.tfvars file, Resource Manager will auto-populate the variable for compartment OCID.
2) Click Next.
c. The third page will be for review.
1) Keep Run apply deselected.
2) Click Create. This will take you to the stack's details page.
Run a Plan Job
4. The stack itself is only a bookkeeping resource-no infrastructure was provisioned yet. You should be on the stack's page. Click Plan. A form will pop up.
a. Name the job RM-Plan-01.
b. Click Plan again at the bottom to submit a job for Resource Manager to run terraform plan. This will take you to the job's details page.
5. Wait for the job to complete, and then view the logs. They should match what you saw when you ran Terraform in Code Editor.
Run an Apply Job
6. Go back to the stack's details page (use the breadcrumbs). Click Apply. A form will pop up.
a. Name the job RM-Apply-01.
b. Under Apply job plan resolution, select the plan job we just ran (instead of "Automatically approve"). This makes it execute based on the previous plan, instead of running a new one.
c. Click Apply to submit a job for Resource Manager to run terraform apply. This will take you to the job's details page.
7. Wait for the job to finish. View the logs and confirm that it was successful.
View the VCN
8. Navigate to VCNs in the Console through the navigation menu under Networking and Virtual Cloud Networks.
9. You should see the VCN listed in the table. Click its name to go to its Details page.
10. You should see the subnet listed.
Run a Destroy Job
11. Go back to the stack's details page in Resource Manager.
12. Click Destroy. Click Destroy again on the menu that pops up.
13. Wait for the job to finish. View the logs to see that it completed successfully.
14. Navigate back to VCNs in the Console. You should see that it has been terminated.
15. Go back to the stack in Resource Manager. Click the drop-down for More actions. Select Delete stack. Confirm by selecting Delete.

質問 # 23
As a solutions architect of the Oracle Cloud Infrastructure (OCI) tenancy, you have been asked to provide members of the CloudOps group the ability to view and retrieve monitoring metrics, but only for all monitoring-enabled compute instances. Which policy statement would you define to grant this access?

A. Allow group CloudOps to read metrics in tenancy where tar-get.metrics.monitoring='oci_computeagent'
B. Restricting monitoring access only to compute instances metrics is not possible.
C. Allow group CloudOps to read compute-metrics in tenancy
D. Allow group CloudOps to read metrics in tenancy where tar-get.metrics.namespace='oci_computeagent'

正解：D

質問 # 24
You are using the Oracle Cloud Infrastructure Command Line Interface to launch a Linux virtual machine.
You enter the following command (with correct values for all parameters):
The command fails. Which is NOT a valid parameter in this command? (Choose the best answer.)

A. "-c <compartment_id>"
B. "--image-id <image_id>"
C. "--shape <shape_name>"
D. "-t <tenancy_id>"
E. "--subnet-id <subnet_id>"

正解：D

質問 # 25
Which statement about Oracle Cloud Infrastructure paravirtualized block volume attachments is TRUE?
(Choose the best answer.)

A. Paravirtualized volumes become immediately available on bare metal compute instances.
B. Paravirtualization utilizes the internal storage stack of compute instance OS and net-work hardware virtualization to access block volumes.
C. Paravirtualized volumes may reduce the maximum IOPS performance for larger block volumes.
D. Paravirtualized is required to manage iSCSI configuration for virtual machine instances.

正解：C

質問 # 26
You have received an email from your manager to provision new resources on Oracle Cloud Infrastructure (OCI). When researching OCI, you determined that you should use OCI Resource Manager. Since this is a task that will be done multiple times for development, test, and production. You will need to create a command that can be re-used. Which CLI command can be used in this situation? (Choose the best answer.)

A. oci resource-manager stack create --compartment-id <compartment_OCID> \ --config-source prod.zip
--variables file://variables.json \ --display-name "Production stack build" \ --description Creating new Production environment
B. oci resource-manager stack update --compartment-id <compartment_OCID> \ --config-source prod.zip
--variables file://variables.json \ --display-name "Production stack build" \ --description Creating new Production environment
C. oci resource-manager stack create --tenancy-id <tenancy_OCID> \ --config-source prod.zip --variables file://variables.json \ --display-name Production stack build \ --description Creating new Production environment
D. oci resource-manager stack update --tenancy-id <tenancy_OCID> \ --config-source prod.zip --variables file://variables.json \ --display-name "Production stack build" \ --description Creating new Production environment

正解：A

質問 # 27
When you provision a compute instance in Oracle Cloud Infrastructure (OCI), you can provide data to cloud- init on the instance. This data is referred to as "user data" by cloud-init. and can be written in various formats that cloud-init can read.
Which two file formats can be used to write user data with cloud- init?

A. Cloud-config (YAML)
B. JSON
C. Binary executable
D. Markdown
E. Shell script

正解：A、E

質問 # 28
SIMULATION
Scenario: 4 (Write Identity and Access Management Policies to Secure a Tenancy) Scenario Description: (Hands-On Performance Exam Certification) Your company has signed up for an OCI tenancy to migrate an e-commerce application, a supply chain management (SCM) system, and a customer relationship management (CRM) system. You have been tasked with setting up the requisite identity and access management (IAM) policies for your team to begin developing on OCI.
You start by setting up the following compartment hierarchy:
Tenancy (root)
Common-Infra
Network
Security
Applications
E-Comm
SCM
CRM
You create the following groups:
Network-Admins
Security-Admins
E-Comm-Admins
SCM-Admins
CRM-Admins
Write the IAM policies for the following use cases:
Assumptions:
Assume that all policies will be attached to the root compartment.
Write one policy per given text box.
Keep policies as simple as possible by using verbs instead of permissions (for example, "inspect orm-stacks" instead of "ORM_STACK_INSPECT") and aggregate resource types instead of individual ones (for example, "file-family" instead of "file-systems" and "mount-targets") Task 1 Write a policy statement to enable Network-Admins to create and destroy network-related resources, such as VCNs, subnets, gateways, and so on in the Network compartment.
Task 2
Write policy statements to enable E-Comm-Admins to provision and destroy compute instances in the E-Comm compartment by using networking resources in the Network compartment.[Write one policy per given text box] Task 3 Write a policy statement to enable SCM-Admins to provision, destroy, and back up block volumes in the SCM compartment-but only in Phoenix and London.

正解：

解説：
See the solution below with Step by Step Explanation
Explanation:
Task 1
Write a policy statement to enable Network-Admins to create and destroy network-related resources, such as VCNs, subnets, gateways, and so on in the Network compartment.
Solution- Policy Statement:
allow Network-Admins to manage virtual-network-family in compartment Common-Infra:Network Task 2 Write policy statements to enable E-Comm-Admins to provision and destroy compute instances in the E-Comm compartment by using networking resources in the Network compartment.[Write one policy per given text box] Solution- Policy Statement:
allow E-Comm-Admins to manage instance-family in compartment Applications:E-Comm allow E-Comm-Admins to use virtual-network-family in compartment Common-Infra:Network Task 3 Write a policy statement to enable SCM-Admins to provision, destroy, and back up block volumes in the SCM compartment-but only in Phoenix and London.
Solution- Policy Statement:
allow SCM-Admins to manage volume-family in compartment Applications:SCM where any{request.region='phx',request.region='lhr'}

質問 # 29
Which option is NOT a possible return value for an OCI health check?

A. UNREACHABLE
B. REGEX_MISMATCH
C. UNKNOWN
D. TIMED_OUT
E. INVALID_STATUS_CODE

正解：A

質問 # 30
You have created the following JSON file to specify a lifecycle policy for one of your object storage buckets:

How will this policy affect the objects that are stored in the bucket? (Choose the best answer.)

A. Objects containing the name prefix LOGS will be automatically migrated from standard Storage to Archive storage 30 days after the creation date. The object will be deleted 120 days after creation.
B. Objects containing the name prefix LOGS will be automatically migrated from standard Storage to Archive storage 30 days after the creation date. The object will be mi-grated back to standard Storage 120 days after creation.
C. The objects with prefix LOGS will be deleted 30 days after creation date.
D. Objects with the prefix LOGS will be retained for 120 days and then deleted permanently.

正解：A

質問 # 31
You have the following compartment structure within your company Oracle Cloud Infrastructure (OCI) tenancy:

You want to create a policy in the root compartment to allow SystemAdmins to manage VCNs only in CompartmentC. Which policy is correct? (Choose the best answer.)

A. Allow group SystemAdmins to manage virtual-network-family in compartment Root
B. Allow group SystemAdmins to manage virtual-network-family in compartment CompartmentC
C. Allow group SystemAdmins to manage virtual-network-family in compartment Com-partmentA:
CompartmentB:CompartmentC
D. Allow group SystemAdmins to manage virtual-network-family in compartment CompartmentB:
CompartmentC

正解：C

質問 # 32
Scenario: 1 (Create a reusable VCN Configuration with Terraform)
Scenario Description: (Hands-On Performance Exam Certification)
You'll launch and destroy a VCN and subnet by creating Terraform automation scripts and issuing commands in Code Editor. Next, you'll download those Terraform scripts and create a stack by uploading them into Oracle Cloud Infrastructure Resource Manager.
You'll then use that service to launch and destroy the same VCN and subnet.
In this scenario, you will:
a. Create a Terraform folder and file in Code Editor.
b. Create and destroy a VCN using Terraform.
c. Create and destroy a VCN using Resource Manager.

正解：

解説：
See the solution below with Step by Step Explanation.
Explanation:
Create a Terraform Folder and File in Code Editor:
You'll create a folder and file to hold your Terraform scripts.
1. Log in to your tenancy in the Cloud Console and open the Code Editor, whose icon is at the top-right corner, to the right of the CLI Cloud Shell icon.
2. Expand the Explorer panel with the top icon on the left panel. It looks like two overlapping documents.
3. Expand the drop-down for your home directory if it isn't already expanded. It's okay if it is empty.
4. Create a new folder by clicking File, then New Folder, and name it terraform-vcn.
5. Create a file in that folder by clicking File, then New File, and name it vcn.tf. To make Code Editor, create the file in the correct folder, click the folder name in your home directory to highlight it.
6. First, you'll set up Terraform and the OCI Provider in this directory. Add these lines to the file:
terraform {required_providers {oci = {source = "oracle/oci"version = ">=4.67.3"}}required_version = ">=
1.0.0"}
7. Save the changes by clicking File, then Save.
8. Now, run this code. Open a terminal panel in Cloud Editor by clicking Terminal, then New Terminal.
9. Use pwd to check that you are in your home directory.
10. Enter ls and you should see your terraform_vcn directory.
11. Enter cd terraform_vcn/ to change to that directory with.
12. Use terraform init to initialize this directory for Terraform.
13. Use ls -a and you should see that Terraform created a hidden directory and file.
Create and Destroy a VCN Using Terraform
You'll create a Terraform script that will launch a VCN and subnet.
You'll then alter your script and create two additional files that will apply a compartment OCID variable to your Terraform script.
Write the Terraform
1. Add the following code block to your Terraform script to declare a VCN, replacing < your_compartment_ocid> with the proper OCID. The only strictly required parameter is the compartment OCID, but you'll add more later.
If you need to retrieve your compartment OCID, navigate to Identity & Security, then Compartments. Find your compartment, hover the cursor over the OCID, and click Copy.
resource "oci_core_vcn" "example_vcn" {compartment_id = "<your_compartment_ocid>"} This snippet declares a resource block of type oci_core_vcn. The label that Terraform will use for this resource is example_vcn.
2. In the terminal, run terraform plan, and you should see that Terraform would create a VCN. Because most of the parameters were unspecified, terraform will list their values as "(known after apply)." You can ignore the "-out option to save this plan" warning.
Note that terraform plan parses your Terraform configuration and creates an execution plan for the associated stack, while terraform apply applies the execution plan to create (or modify) your resources.
3. Add a display name and CIDR block (the bolded portion) to the code. Note that we want to set the cidr_blocks parameter, rather than cidr_block (which is deprecated).
resource "oci_core_vcn" "example_vcn" {compartment_id = "<your_compartment_ocid>"display_name =
"VCN-01"cidr_blocks = ["10.0.0.0/16"]}
4. Save the changes and run terraform plan again. You should see the display name and CIDR block reflected in Terraform's plan.
5. Now add a subnet to this VCN. At the bottom of the file, add the following block:
resource "oci_core_subnet" "example_subnet" {compartment_id = "<your_compartment_ocid>" display_name = "SNT-01"vcn_id = oci_core_vcn.example_vcn.idcidr_block = "10.0.0.0/24"} Note the line where we set the VCN ID. Here we reference the OCID of the previously declared VCN, using the name we gave it to Terraform: example_vcn. This dependency makes Terraform provision the VCN first, wait for OCI to return the OCID, then provision the subnet.
6. Run terraform plan to see that it will now create a VCN and subnet.
Add Variables
7. Before moving on there are a few ways to improve the existing code. Notice that the subnet and VCN both need the compartment OCID. We can factor this out into a variable. Create a file named variables.tf
8. In variables.tf, declare a variable named compartment_id:
variable "compartment_id" {type = string}
9. In vcn.tf, replace all instances of the compartment OCID with var.compartment_id as follows:
terraform {required_providers {oci = {source = "oracle/oci"version = ">=4.67.3"}}required_version = ">=
1.0.0"} resource "oci_core_vcn" "example_vcn" {compartment_id = var.compartment_iddisplay_name =
"VCN-01"cidr_blocks = ["10.0.0.0/16"]} resource "oci_core_subnet" "example_subnet" {compartment_id = var.compartment_iddisplay_name = "SNT-01"vcn_id = oci_core_vcn.example_vcn.idcidr_block = "10.0.0.0
/24"}
Save your changes in both vcn.tf and variables.tf
10. If you were to run terraform plan or apply now, Terraform would see a variable and provide you a prompt to input the compartment OCID. Instead, you'll provide the variable value in a dedicated file. Create a file named exactly terraform.tfvars
11. Terraform will automatically load values provided in a file with this name. If you were to use a different name, you would have to provide the file name to the Terraform CLI. Add the value for the compartment ID in this file:
compartment_id = "<your_compartment_ocid>"
Be sure to save the file.
12. Run terraform plan and you should see the same output as before.
Provision the VCN
13. Run terraform apply and confirm that you want to make the changes by entering yes at the prompt.
14. Navigate to VCNs in the console. Ensure that you have the right compartment selected. You should see your VCN. Click its name to see the details. You should see its subnet listed.
Terminate the VCN
15. Run terraform destroy. Enter yes to confirm. You should see the VCN terminate. Refresh your browser if needed.
Create and Destroy a VCN Using Resource Manager (You will most probably be tested on this in the actual certification) We will reuse the Terraform code but replace the CLI with Resource Manager.
1. Create a folder named terraform_vcn on your host machine. Download the vcn.tf, terraform.tfvars, and variables.tf files from Code Editor and move them to the terraform_vcn folder to your local machine. To download from Code Editor, right-click the file name in the Explorer panel and select Download. You could download the whole folder at once, but then you would have to delete Terraform's hidden files.
Create a Stack
2. Navigate to Resource Manager in the Console's navigation menu under Developer Services. Go to the Stacks page.
3. Click Create stack.
a. The first page of the form will be for stack information.
1) For the origin of the Terraform configuration, keep My configuration selected.
2) Under Stack configuration, upload your terraform_vcn folder.
3) Under Custom providers, keep Use custom Terraform providers deselected.
4) Name the stack and give it a description.
5) Ensure that your compartment is selected.
6) Click Next.
b. The second page will be for variables.
1) Because you uploaded a terraform.tfvars file, Resource Manager will auto-populate the variable for compartment OCID.
2) Click Next.
c. The third page will be for review.
1) Keep Run apply deselected.
2) Click Create. This will take you to the stack's details page.
Run a Plan Job
4. The stack itself is only a bookkeeping resource-no infrastructure was provisioned yet. You should be on the stack's page. Click Plan. A form will pop up.
a. Name the job RM-Plan-01.
b. Click Plan again at the bottom to submit a job for Resource Manager to run terraform plan. This will take you to the job's details page.
5. Wait for the job to complete, and then view the logs. They should match what you saw when you ran Terraform in Code Editor.
Run an Apply Job
6. Go back to the stack's details page (use the breadcrumbs). Click Apply. A form will pop up.
a. Name the job RM-Apply-01.
b. Under Apply job plan resolution, select the plan job we just ran (instead of "Automatically approve"). This makes it execute based on the previous plan, instead of running a new one.
c. Click Apply to submit a job for Resource Manager to run terraform apply. This will take you to the job's details page.
7. Wait for the job to finish. View the logs and confirm that it was successful.
View the VCN
8. Navigate to VCNs in the Console through the navigation menu under Networking and Virtual Cloud Networks.
9. You should see the VCN listed in the table. Click its name to go to its Details page.
10. You should see the subnet listed.
Run a Destroy Job
11. Go back to the stack's details page in Resource Manager.
12. Click Destroy. Click Destroy again on the menu that pops up.
13. Wait for the job to finish. View the logs to see that it completed successfully.
14. Navigate back to VCNs in the Console. You should see that it has been terminated.
15. Go back to the stack in Resource Manager. Click the drop-down for More actions. Select Delete stack.
Confirm by selecting Delete.

質問 # 33
Your company has restructured its HR department. As part of this change, you also need to re-organize the compartments within Oracle Cloud Infrastructure (OCI) to align them with the company's new organizational structure. The following change is required:

Compartment Team_x needs to be moved under a new parent compartment, Project_B The tenancy has the following policies defined for compartments Project_A and Project_B:
Policy1: Allow group G1 to manage instance-family in compartment HR:Project_A Policy2: Allow group G2 to manage instance-family in compartment HR:Project_B Which two statements describe the impacts after the compartment Team_x is moved? (Choose two.)

A. Group G2 can now manage instance-families in compartment Project_B, compartment Project_A and compartment Team_X
B. Group G1 can now manage instance-families in compartment Project_A but not in compartment Team_x
C. Group G2 can now manage instance-families in compartment Project_B and compart-ment Team_X
D. Group G1 can now manage instance-families in compartment Project_A, compartment Project_B and compartment Team_X
E. Group G2 can now manage instance-families in compartment Project_A but not in compartment Team_x

正解：B、C

質問 # 34
An insurance company has contracted you to help automate their application business continuity plan. They have the application running in eu-frankfurt-1 as the primary site and uk-london-1 as a disaster recovery site.
Normally they have a DNS A record associated with the IP address of the primary endpoint in eu- frankfurt-1.
In the event of a disaster, they use OCI DNS Zone Management to update the A record and replace it with the IP address of the end-point in uk- londond-1. How can you automate the failover process? (Choose the best answer.)

A. Create a Traffic Management Steering policy with Load Balancer type and add both eu-frankfurt-1 and uk-london-1 endpoints. Attach the Traffic Management Steering policy to the A record.
B. Provision a Load Balancer in Frankfurt and associate it with the A record in DNS. Create a backend set with backend servers from both eu-frankfurt-1 and uk- london-1 regions.
C. Create a Health Check that evaluates both regional endpoints. Create a Traffic Management Steering policy with Failover type and associate it with the Health Check.
D. Create a Traffic Management Steering policy and attach it to a backend servers from both eu-frankfurt-
1 and uk-london-1 regions.

正解：C

質問 # 35
(CHK) Your company recently adopted a hybrid cloud architecture which requires them to migrate some of their on-premises web applications to Oracle Cloud Infrastructure (OCI). You created a Terraform template which automatically provisions OCI resources such as compute instances, load balancer, and a database instance. After running the stack using the terraform apply command, it successfully launched the compute instances and the load balancer, but it failed to create a new database instance with the following error:
Service error: NotAuthorizedOrNotFound. shape VM.Standard2.4 not found. http status code: 404 You dis- covered that the resource quotas assigned to your compartment prevent you from using VM.Standard2.4 instance shapes available in your tenancy. You edit the Terraform script and replace the shape with VM.
Standard2.2 Which option would you recommend to re-run the terraform command to have required OCI resources provisioned with the least effort? (Choose the best answer.)

A. terraform apply target=oci_database_db_system.db_system
B. terraform plan target=oci_database_db_system.db_system
C. terraform refresh target=oci_database_db_system.db_system
D. terraform apply auto-approve

正解：A

質問 # 36
You have a web application that is running on compute instances distributed across an availability domain's fault domains. To share state, instances of the application need to read and write to a shared file system that supports concurrent access from multiple instances.
Which two can help fulfill this technical requirement?

A. Attach a single block volume in read/write shared mode to all the instances. Enable the cluster plug-in on the Oracle Cloud Agent to coordinate access to the shared volume.
B. Attach a single block volume in read/write shared mode to alt the instances. Use a cluster aware system such as Oracle Cluster File System version 2 (OCFS2) to coordinate access to the shared volume.
C. Attach a block volume to each instance. Enable replication between the block volumes.
D. Create a file system in the File Storage service. Create a mount target and export the file system. Mount the export onto all of the instances.

正解：B、D

質問 # 37
You have recently joined a startup company and quickly find that nobody is tracking the amount of money spent on Oracle Cloud Infrastructure (OCI). Seeing an opportunity to help save money you begin creating a solution to better track the cost of resources provisioned by each individual on the team. Which option allows you to identify excessive spend across all re-sources in your tenancy? (Choose the best answer.)

A. Create a tag namespace named BILLING with a Tag Key named CostCenter. Tag each of your resources with this Tag Key and the correct value.
B. Use the Events Service and create rules that will act when a new Object Storage bucket or Compute Instance has been created. Have the rule email you each time one of these events occurs.
C. Create a budget for each compartment that will send a notification when monthly spend reaches a pre- defined amount.
D. Use the Python SDK to write a custom application that will monitor the Audit log. Look for CREATE events and configure the application to send you an email each time a new resource is created.

正解：C

質問 # 38
Your team implemented a SaaS application that requires a whole system deployment for each new customer.
The infrastructure provisioning is already automated via Terraform, and now you have been asked to develop an Ansible playbook to centralize configuration file management and deployment. What is the most effective way to ensure your playbooks are utilizing up-to-date and accurate inventory? (Choose the best answer.)

A. Implement a Command Line Interface script to list all the resources and run it within Ansible to generate a dynamic inventory list.
B. Download the dynamic inventory script provided by Oracle Cloud Infrastructure and include it in the playbook invocation command.
C. Export an inventory list using Terraform apply command.
D. Export an inventory list from the Oracle Cloud Infrastructure Web console.

正解：B

質問 # 39
The general syntax for an IAM policy is: Allow <identity_domain_name>/<subject> to <verb> <resource- type> in <location> where <conditions> Which two are valid values for <lo-cation>?