Online Access Free 1z0-1067-22 Exam Questions

You set up a bastion host in your VCN to only allow your IP address (140.19.2.140) to establish SSH connections to your Compute Instances that are deployed in a private subnet. The Compute Instances have an attached Network Security Group with a Source Type: Network Security Group (NSG), Source NSG:
NSG-050504. To secure the bastion host, you added the following ingress rules to its Network Security Group:

However, after checking the bastion host logs, you discovered that there areIP addresses other than your own that can access your bastion host.
What is the root cause of this issue? (Choose the best answer.)

• A.A netmask of /32 allows all IP address in the 140.19.2.0 network, other thanyour IP 140.19.2.140
• B.The port 22 provides unrestricted access to 140.19.2.140 and to other IP address.
• C.The Security List allows access to all IP address which overrides the Network Security Group ingress rules.
• D.Allcompute instances associated with NSG-050504 are also able to connect to the bastion host.

Your team implemented a SaaS application that requires a whole system deployment for each new customer.
The infrastructure provisioning is already automated via Terraform, and now you have been asked to develop an Ansible playbook to centralize configuration file management and deployment.
What is the most effective way to ensure your playbooks are utilizing up-to-date and accurate inventory?
(Choose the best answer.)

• A.Implement a Command Line Interface script to list all the resources and run it within Ansible to generate a dynamic inventory list.
• B.Export an inventory list from the Oracle Cloud Infrastructure Web console.
• C.Download the dynamic inventory script provided by Oracle Cloud Infrastructure and include it in the playbook invocation command.
• D.Export an inventory list using Terraform apply command.

You have been contracted by a local e-commerce company to assistwith enhancing their online shopping application. The application is currently deployed in a single Oracle Cloud Infrastructure (OCI) region. The application utilizes a public load balancer, application servers in a private subnet, and a database in a separate, private subnet.
The company would like to deploy another set of similar infrastructure in a different OCI region that will act as standby site. In the event of a failure at the primary site, all customers should be routed to the failover site automatically.
After deploying the additional infrastructure within the second region, how should you configure automated failover requirements? (Choose the best answer.)

• A.Create a new A record in DNS that points to the public load balancer at the secondary site. Create a CNAME for the sub-domain failover that will resolve to the new A record. Inform customers to prepend the website URL with failover if the primary site is unavailable.
• B.Create a failover policy in the Traffic Management service. Set the IP address of the public load balancerfor the primary site in answer pool 1. Set the IP address of the public load balancer for the secondary site in answer pool 2. Define a health check to monitor both sites.
• C.Create a load balancer policy in the Traffic Management service. Configure one answerfor each site. Set the answer for the primary site with a weight of 10 and the answer for the secondary site with a weight of 100.
• D.Deploy a new load balancer in the primary region. Create one backend set for theprimary application servers and a second backend set for the standby application servers. Create a listener for the primary backend set with a timeout of 3 minutes. Create a listener for the secondary backend set with a timeout of 10 minutes.

You have the following compartment structure within your company's Oracle Cloud Infrastructure (OCI) tenancy:

You want to create a policy in the root compartment to allow SystemAdmins to manage VCNs only in CompartmentC.
Which policy is correct? (Choose the best answer.)

• A.Allow group SystemAdmins to manage virtual-network-family in compartment CompartmentC
• B.Allow group SystemAdmins to manage virtual-network-family in compartment Root
• C.Allow group SystemAdmins to manage virtual-network-family in
  compartmentCompartmentA:CompartmentB:CompartmentC
• D.Allow group SystemAdmins to manage virtual-network-family in compartment CompartmentB:CompartmentC

Your application is using an Object Storage bucket named app-data in the namespace vision, to store both persistent and temporary data. Every week all the temporary data should be deleted to limit the storage consumption.
Currently you need to navigate to the Object Storage page using the web console, select the appropriate bucket to view all the objects and delete the temporary ones.
To simplify the task you have configured the application to save all the temporary data with /temp prefix. You have also decided to use the Command Line Interface (CLI) to perform this operation.
What is the command you should use to speed up the data cleanup? (Choose the best answer.)

• A.oci objectstorage bulk-delete -ns vision -bn app-data --prefix /temp --force
• B.oci os object bulk-delete -ns vision -bn app-data --prefix /temp --force
• C.oci os object delete app-data in vision where prefix = /temp
• D.oci os object delete -ns vision -bn app-data --prefix /temp