[2024年04月最新リリース]1z0-1067-23問題集でOracle Cloud認証
最新の完璧な1z0-1067-23問題集問題と解答で100%パスさせます
質問 # 19
As a solution architect of the Oracle Cloud Infrastructure tenancy, you have been asked to provide members of group CloudOps the ability to view and retrieve monitoring metrics, but only for all monitoring-enabled compute instances. Which policy statement will you define to grant this access?
- A. Allow group CloudOps to read compute-metrics in tenancy
- B. Allow group CloudOps to read metrics in tenancy where tar-get.metrics.monitoring='oci_computeagent'
- C. Allow group CloudOps to read metrics in tenancy where tar-get.metrics.namespace=oci_computeagent
- D. Restricting monitoring access only to compute instances metrics is not possible.
正解：C
質問 # 20
You have been asked to ensure that in-transit communication between an Oracle Cloud Infrastructure (OCI) compute instance and an on-premises server (192.168.10.10/32) is encrypted. The instances communicate using HTTP. The OCI Virtual Cloud Network (VCN) is connected to the on-premises network by two separate connections: a Dynamic IPsec VPN tunnel and a FastConnect virtual circuit. No static configuration has been added. What solution should you recommend? (Choose the best answer.)
- A. Advertise a 192.168.10.10/32 route over the VPN.
- B. Advertise a 192.168.10.10/32 router over the FastConnect.
- C. The instances will communicate by default over the FastConnect private virtual circuit, which ensures data is encrypted in-transit.
- D. The instances will communicate by default over IPsec VPN, which ensures data is encrypted in-transit.
正解：A
質問 # 21
You have been brought In to help secure an existing application that leverages Object Storage buckets to distribute content. The data is currently being shared from public buckets and the security team Is not satisfied with this approach. They have stated that all data must be stored In storage buckets. Your application should be able to provide secure access to the data. The URL that is provided for access to the data must be rotated every 30 days. Which design option will meet these requirements?
- A. Create a private bucket only to share the data.
- B. Create a new group and map users to this group, create a IAM policy providing access to Object Storage service only to this group. Users can then simply login to OCI console and retrieve needed flies.
- C. Create multiple bucket and classify them as Public and Private. Use public bucket for non-sensitive data and private bucket for sensitive data.
- D. Use Pre-Authenticated request, even though there will be multiple URLs this will pro-vide better security.
正解：D
質問 # 22
You are working with Terraform on your laptop and have been tasked with spinning up multiple compute instances in Oracle Cloud Infrastructure (OCI) for a project. In addition, you are also required to collect IP addresses of provisioned instances and write them to a file and save it in your laptop. Which specific Terraform functionality can help accomplish this task? (Choose the best answer.)
- A. Terraform remote-exec
- B. Terraform local-exec
- C. Terraform modules
- D. Terraform remote state
正解：B
質問 # 23
The general syntax for an IAM policy is: Allow <identity_domain_name>/<subject> to <verb>
<resource-type> in <location> where <conditions> Which two are valid values for <verb>?
- A. destroy
- B. create
- C. manage
- D. alter
- E. read
正解：C、E
質問 # 24
Your team implemented a SaaS application that requires a whole system deployment for each new customer.
The infrastructure provisioning is already automated via Terraform, and now you have been asked to develop an Ansible playbook to centralize configuration file management and deployment. What is the most effective way to ensure your playbooks are utilizing up-to-date and accurate inventory? (Choose the best answer.)
- A. Export an inventory list from the Oracle Cloud Infrastructure Web console.
- B. Download the dynamic inventory script provided by Oracle Cloud Infrastructure and include it in the playbook invocation command.
- C. Implement a Command Line Interface script to list all the resources and run it within Ansible to generate a dynamic inventory list.
- D. Export an inventory list using Terraform apply command.
正解：B
質問 # 25
A developer has created a file system in the Oracle CloudInfrastructure (OCI) File Storage service. She then launches an Oracle Linux compute instance and mounts the file system successfully on this instance. The next day, she tries writing to the file system from the compute instance using the following command: touch
/mnt/yourmountpoint/helloworld.txt But receives an error message: touch: cannot touch
'/mnt/yourmountpoint/helloworld.txt': Permission denied What might be the reason for this error?
- A. User is not part of any OCI Identity and Access Management (IAM) group with write permissions to the File Storage service.
- B. Service limits or quota for file system writes have been breached.
- C. User is connecting as the default Oracle Linux user opc instead of the root user.
- D. The touch command is not available in Oracle Linux, by default.
正解：C
質問 # 26
You have set an alarm to be generated when the CPU usage of a specified instance is greater than 10%. In the alarm behavior view below you notice that the critical condition happened around 23:30. You were expecting a notification after 1 minute, however, the alarm firing state did not begin until 23:33.
What should you change to fix it? (Choose the best answer.)
- A. Change the alarm trigger delay minutes value to 1.
- B. Change the alarm condition to be grater than 3%.
- C. Change the alarm metric interval to 1.
- D. Change the notification topic that you previously associated with the alarm.
正解：A
質問 # 27
You are using Oracle Cloud Infrastructure (OCI) services across several regions: us-phoenix-1, us-ashburn-1, uk-london-1 and ap-tokyo-1. You have creates a separate administrator group for each region: PHX-Admins, ASH-Admins, LHR-Admins and NRT-Admins, respectively. You want to restrict admin access to a specific region. E.g., PHX-Admins should be able to manage all resources in the us phoenix-1 region only and not any other OCI regions. What IAM policy syntax is required to restrict PHX-Admins to manage OCI resources in the us-phoenix-1 region only? (Choose the best answer.)
- A. Allow group PHX-Admins to manage all-resources intenancy where re-guest.location='us-phoenix-1'
- B. Allow group PHX-Admins to manage all-resources in tenancy where re-guest.region='us-phoenix-1'
- C. Allow group PHX-Admins to manage all-resources in tenancy where re-guest.permission=
'us-phoenix-1' - D. Allow group PHX-Admins to manage all-resources in tenancy where re-guest.target='us-phoenix-1'
正解：B
質問 # 28
The boot volume on your Oracle Linux instance has run out of space. Your application has crashed due to a lack of swap space, forcing you to increase the size of the boot volume. Which step should NOT be included in the process used to solve the issue? (Choose the best answer.)
- A. Resize the boot volume by specifying a larger value than the boot volume current size.
- B. Stop the instance and detach the boot volume.
- C. Create a RAID 0 configuration to extend the boot volume file system onto another block volume.
- D. Attach the resized boot volume to a second instance asa data volume; extend the partition and grow the file system in the resized boot volume.
- E. Reattach the boot volume and restart the instance.
正解：C
質問 # 29
You have ordered two FastConnect connections that provide a high availability connection architecture between your on-premises data center and Oracle Cloud Infrastructure (OCI). You want to run these connections in an ACTIVE/PASSIVE architecture. How can you accomplish this? (Choose the best answer.)
- A. Decrease the prefix length of AS for the FastConnect you want to use as PASSIVE connection.
- B. Use AS PATH prepending with your routes.
- C. Enable BGP on the FastConnect that you want as the ACTIVE connection.
- D. Adjust one of the connections to have a higher ASN.
正解：B
質問 # 30
You are asked to implement the disaster recovery (DR)and business continuity requirements for Oracle Cloud Infrastructure (OCI) Block Volumes. Two OCI regions being used: a primary/source region and a DR/destination region. The requirements are: There should be a copy of data in the destination region to use if a region-wide disaster occurs in the source regionMinimize costs Which design will help you meet these requirements? (Choose the best answer.)
- A. Back up block volumes. Copy block volume backups from source region to destination region at regular intervals.
- B. Clone block volumes. Copy block volume clones fromsource region to destination region at regular intervals.
- C. Back up block volumes. Use Object Storage lifecycle management to automatically move backup objects to Archive Storage. Copy Archive Storage buckets from source region to destination at regular intervals.
- D. Clone block volumes. Use Object Storage lifecycle management to automatically move clone objects to Archive Storage. Copy Archive Storage buckets from source region to destination at regular intervals.
正解：C
質問 # 31
Which TWO statements are NOT true regarding Block Storage Volume Resize in Oracle Cloud Infrastructure (OCI)? (Choose two.)
- A. Volumes may not have attachments added or removed during resize.
- B. Volumes may not be resized if there is a prior resize or an ongoing cloning operation
- C. Volume size can be either increased or decreased.
- D. Volumes may only be resized if there is a backup pending.
正解：C、D
質問 # 32
Which of the following THREE statements are true about Versioning? (Choose three.)
- A. If Versioning is enabled and you delete the files stored in a bucket, then a delete marker is created so that you can restore the deleted file.
- B. You can enable the Versioning and Retention rule simultaneously on bucket.
- C. If Versioning disabled, and you try uploading files with the same name, then a copy of the file in kept with a different name.
- D. Versioning is applied at the bucket level.
- E. If versioning enabled, even if you delete the file inside the bucket, you will be charged for the data shared as the meta data still resides inside the bucket.
正解：A、D、E
質問 # 33
You have been asked to set up connectivity between a client on-premises network and Oracle Cloud Infrastructure (OCI). The requirements are:
Low latency: The applications are financial and require low latency connectivity into OCI.Consistency: The application is not tolerant of performance variation.
Performance: The communications link needs to support up to 1.25 Gbps.
Encryption: The communications link needs to encrypt any data in transit between the on-premises network and OCI Virtual Cloud Network (VCN). The client wants to implement the above with as low a cost as possible, while meeting all of the requirements. What should you suggest? (Choose the best answer.)
- A. Provision FastConnect with a single public virtual circuit.
- B. Provision FastConnect with a single public virtual circuit, and run an IPsec VPN tunnel over the top of this virtual circuit.
- C. Provision FastConnect with a single private virtual circuit, and run an IPsec VPN tunnel over the top of this virtual circuit.
- D. Provision a site-to-site IPsec VPN between your on-premises network and your virtual cloud network (VCN) using VPN Connect.
- E. Provision FastConnect with a single private virtual circuit.
正解：B
質問 # 34
You have a group pf developers who launch multiple VM.Standard2.2 compute instances every day into the compartment Dev. As a result, your OCI tenancy quickly hit the service limit for this shape. Other groups can no longer create new instances using VM.Standard2.2 shape. Because of this, your company has issued a new mandate that the Dev compartment must include a quota to allow for use of only 20 VM.Standard2.2 shapes per Availability Do-main. Your solution should not affect any other compartment in the tenancy. Which quota statement should be used to implement this new requirement? (Choose the best answer.)
- A. set compute quota vm-standard2-count to 10 in compartment dev where request.region = us-phoenix-01
- B. zero compute quotas in tenancy set compute quota vm standard22--count to 20 in compartment dev
- C. zero compute quotas in tenancy set compute quota vm standard22--count to 20 in tenancy dev
- D. set compute quota vm-standard22--count to 20 in compartment dev
正解：D
質問 # 35
Scenario: 1 (Create a reusable VCN Configuration with Terraform)
Scenario Description: (Hands-On Performance Exam Certification)
You'll launch and destroy a VCN and subnet by creating Terraform automation scripts and issuing commands in Code Editor. Next, you'll download those Terraform scripts and create a stack by uploading them into Oracle Cloud Infrastructure Resource Manager.
You'll then use that service to launch and destroy the same VCN and subnet.
In this scenario, you will:
a. Create a Terraform folder and file in Code Editor.
b. Create and destroy a VCN using Terraform.
c. Create and destroy a VCN using Resource Manager.
正解：
解説：
See the solution below with Step by Step Explanation.
Explanation
Create a Terraform Folder and File in Code Editor:
You'll create a folder and file to hold your Terraform scripts.
1. Log in to your tenancy in the Cloud Console and open the Code Editor, whose icon is at the top-right corner, to the right of the CLI Cloud Shell icon.
2. Expand the Explorer panel with the top icon on the left panel. It looks like two overlapping documents.
3. Expand the drop-down for your home directory if it isn't already expanded. It's okay if it is empty.
4. Create a new folder by clicking File, then New Folder, and name it terraform-vcn.
5. Create a file in that folder by clicking File, then New File, and name it vcn.tf. To make Code Editor, create the file in the correct folder, click the folder name in your home directory to highlight it.
6. First, you'll set up Terraform and the OCI Provider in this directory. Add these lines to the file:
terraform {required_providers {oci = {source = "oracle/oci"version = ">=4.67.3"}}required_version = ">=
1.0.0"}
7. Save the changes by clicking File, then Save.
8. Now, run this code. Open a terminal panel in Cloud Editor by clicking Terminal, then New Terminal.
9. Use pwd to check that you are in your home directory.
10. Enter ls and you should see your terraform_vcn directory.
11. Enter cd terraform_vcn/ to change to that directory with.
12. Use terraform init to initialize this directory for Terraform.
13. Use ls -a and you should see that Terraform created a hidden directory and file.
Create and Destroy a VCN Using Terraform
You'll create a Terraform script that will launch a VCN and subnet.
You'll then alter your script and create two additional files that will apply a compartment OCID variable to your Terraform script.
Write the Terraform
1. Add the following code block to your Terraform script to declare a VCN, replacing < your_compartment_ocid> with the proper OCID. The only strictly required parameter is the compartment OCID, but you'll add more later.
If you need to retrieve your compartment OCID, navigate to Identity & Security, then Compartments. Find your compartment, hover the cursor over the OCID, and click Copy.
resource "oci_core_vcn" "example_vcn" {compartment_id = "<your_compartment_ocid>"} This snippet declares a resource block of type oci_core_vcn. The label that Terraform will use for this resource is example_vcn.
2. In the terminal, run terraform plan, and you should see that Terraform would create a VCN. Because most of the parameters were unspecified, terraform will list their values as "(known after apply)." You can ignore the "-out option to save this plan" warning.
Note that terraform plan parses your Terraform configuration and creates an execution plan for the associated stack, while terraform apply applies the execution plan to create (or modify) your resources.
3. Add a display name and CIDR block (the bolded portion) to the code. Note that we want to set the cidr_blocks parameter, rather than cidr_block (which is deprecated).
resource "oci_core_vcn" "example_vcn" {compartment_id = "<your_compartment_ocid>"display_name =
"VCN-01"cidr_blocks = ["10.0.0.0/16"]}
4. Save the changes and run terraform plan again. You should see the display name and CIDR block reflected in Terraform's plan.
5. Now add a subnet to this VCN. At the bottom of the file, add the following block:
resource "oci_core_subnet" "example_subnet" {compartment_id = "<your_compartment_ocid>"display_name
= "SNT-01"vcn_id = oci_core_vcn.example_vcn.idcidr_block = "10.0.0.0/24"} Note the line where we set the VCN ID. Here we reference the OCID of the previously declared VCN, using the name we gave it to Terraform: example_vcn. This dependency makes Terraform provision the VCN first, wait for OCI to return the OCID, then provision the subnet.
6. Run terraform plan to see that it will now create a VCN and subnet.
Add Variables
7. Before moving on there are a few ways to improve the existing code. Notice that the subnet and VCN both need the compartment OCID. We can factor this out into a variable. Create a file named variables.tf
8. In variables.tf, declare a variable named compartment_id:
variable "compartment_id" {type = string}
9. In vcn.tf, replace all instances of the compartment OCID with var.compartment_id as follows:
terraform {required_providers {oci = {source = "oracle/oci"version = ">=4.67.3"}}required_version = ">=
1.0.0"} resource "oci_core_vcn" "example_vcn" {compartment_id = var.compartment_iddisplay_name =
"VCN-01"cidr_blocks = ["10.0.0.0/16"]} resource "oci_core_subnet" "example_subnet" {compartment_id = var.compartment_iddisplay_name = "SNT-01"vcn_id = oci_core_vcn.example_vcn.idcidr_block =
"10.0.0.0/24"}
Save your changes in both vcn.tf and variables.tf
10. If you were to run terraform plan or apply now, Terraform would see a variable and provide you a prompt to input the compartment OCID. Instead, you'll provide the variable value in a dedicated file. Create a file named exactly terraform.tfvars
11. Terraform will automatically load values provided in a file with this name. If you were to use a different name, you would have to provide the file name to the Terraform CLI. Add the value for the compartment ID in this file:
compartment_id = "<your_compartment_ocid>"
Be sure to save the file.
12. Run terraform plan and you should see the same output as before.
Provision the VCN
13. Run terraform apply and confirm that you want to make the changes by entering yes at the prompt.
14. Navigate to VCNs in the console. Ensure that you have the right compartment selected. You should see your VCN. Click its name to see the details. You should see its subnet listed.
Terminate the VCN
15. Run terraform destroy. Enter yes to confirm. You should see the VCN terminate. Refresh your browser if needed.
Create and Destroy a VCN Using Resource Manager (You will most probably be tested on this in the actual certification) We will reuse the Terraform code but replace the CLI with Resource Manager.
1. Create a folder named terraform_vcn on your host machine. Download the vcn.tf, terraform.tfvars, and variables.tf files from Code Editor and move them to the terraform_vcn folder to your local machine. To download from Code Editor, right-click the file name in the Explorer panel and select Download. You could download the whole folder at once, but then you would have to delete Terraform's hidden files.
Create a Stack
2. Navigate to Resource Manager in the Console's navigation menu under Developer Services. Go to the Stacks page.
3. Click Create stack.
a. The first page of the form will be for stack information.
1) For the origin of the Terraform configuration, keep My configuration selected.
2) Under Stack configuration, upload your terraform_vcn folder.
3) Under Custom providers, keep Use custom Terraform providers deselected.
4) Name the stack and give it a description.
5) Ensure that your compartment is selected.
6) Click Next.
b. The second page will be for variables.
1) Because you uploaded a terraform.tfvars file, Resource Manager will auto-populate the variable for compartment OCID.
2) Click Next.
c. The third page will be for review.
1) Keep Run apply deselected.
2) Click Create. This will take you to the stack's details page.
Run a Plan Job
4. The stack itself is only a bookkeeping resource-no infrastructure was provisioned yet. You should be on the stack's page. Click Plan. A form will pop up.
a. Name the job RM-Plan-01.
b. Click Plan again at the bottom to submit a job for Resource Manager to run terraform plan. This will take you to the job's details page.
5. Wait for the job to complete, and then view the logs. They should match what you saw when you ran Terraform in Code Editor.
Run an Apply Job
6. Go back to the stack's details page (use the breadcrumbs). Click Apply. A form will pop up.
a. Name the job RM-Apply-01.
b. Under Apply job plan resolution, select the plan job we just ran (instead of "Automatically approve").
This makes it execute based on the previous plan, instead of running a new one.
c. Click Apply to submit a job for Resource Manager to run terraform apply. This will take you to the job's details page.
7. Wait for the job to finish. View the logs and confirm that it was successful.
View the VCN
8. Navigate to VCNs in the Console through the navigation menu under Networking and Virtual Cloud Networks.
9. You should see the VCN listed in the table. Click its name to go to its Details page.
10. You should see the subnet listed.
Run a Destroy Job
11. Go back to the stack's details page in Resource Manager.
12. Click Destroy. Click Destroy again on the menu that pops up.
13. Wait for the job to finish. View the logs to see that it completed successfully.
14. Navigate back to VCNs in the Console. You should see that it has been terminated.
15. Go back to the stack in Resource Manager. Click the drop-down for More actions. Select Delete stack.
Confirm by selecting Delete.
質問 # 36
One of your development teams has asked for your help tostandardize the creation of several compute instances that must be provisioned each day of the week. You initially write several Command Line Interface (CLI) commands with all appropriate configuration parameters to achieve this task later determining this method lacks flexibility. Which command generates a JSON-based template that Oracle Cloud Infrastructure (OCI) CLI can use to provision these instances on a regular basis? (Choose the best answer.)
- A. oci compute instance create --generate-cli-skeleton
- B. oci compute provision-instance --generate-full-command-json-input
- C. oci compute instance launch --generate-cli-skeleton
- D. oci compute instance launch --generate-full-command-json-input
正解：D
質問 # 37
In your root compartment, you have two subcompartments, A and B. You have three in-stances in each compartment, including the root (for a total of nine). What does the following metric query return if you use the console to run it in the root compartment? CpuUtiliza-tion[1m].mean()
- A. One number: the average CPU utilization over all nine instances over the last minute
- B. Three different time series: each time series represents the average CPU utilization of one of the three instances in the root compartment per minute.
- C. One time series: the average CPU utilization over all nine instances per minute
- D. One time series: the average CPU utilization over the three instances in the root compartment per minute
正解：D
質問 # 38
......
Oracle 1z0-1067-23 認定試験の出題範囲：
| トピック | 出題範囲 |
|---|---|
| トピック 1 |
|
| トピック 2 |
|
| トピック 3 |
|
| トピック 4 |
|
| トピック 5 |
|
| トピック 6 |
|
| トピック 7 |
|
| トピック 8 |
|
最新の1z0-1067-23試験問題集でOracle試験トレーニング：https://jp.fast2test.com/1z0-1067-23-premium-file.html