Is this exam completely free?

ExamCademy offers a free preview for every exam, covering around 20% of the total questions. Full access to all questions is available for free by signing up for an account. Optional supporters unlock AstroTutor (AI tutor) and advanced study modes.

Can I practice IT certification exams from Microsoft, AWS, or CompTIA?

Yes! ExamCademy supports a wide range of IT certification exams including Microsoft Azure, AWS Cloud Practitioner, and CompTIA A+ and Security+.

How accurate are the mock exams?

Our practice questions are community-created and moderator-reviewed to align with realistic exam objectives, style, and difficulty.

1z0-1067-21 by Oracle - Page 1 | ExamCademy

Mode Selection

Question 1

Question 2

Question 3

You have a Linux compute instance located in a public subnet in a VCN which hosts a web application. The security list attached to subnet containing the compute instance has the following stateful ingress rule.

Question 4

Your company recently adopted a hybrid cloud architecture which requires them to migrate some of their on-premises web applications to Oracle Cloud
Infrastructure (OCI). You created a Terraform template which automatically provisions OCI resources such as compute instances, load balancer, and a database instance. After running the stack using the terraform apply command, it successfully launched the compute instances and the load balancer, but it failed to create a new database instance with the following error:
Service error: NotAuthorizedOrNotFound. shape VM.Standard2.4 not found. http status code: 404
You discovered that the resource quotas assigned to your compartment prevent you from using VM.Standard2.4 instance shapes available in your tenancy. You edit the Terraform script and replace the shape with VM.Standard2.2
Which option would you recommend to re-run the terraform command to have required OCI resources provisioned with the least effort? (Choose the best answer.)

A terraform plan ג€"target=oci_database_db_system.db_system
B terraform apply ג€"auto-approve
C terraform refresh ג€"target=oci_database_db_system.db_system
D terraform apply ג€"target=oci_database_db_system.db_system

Question 5

You have been monitoring your company's applications running in Oracle Cloud Infrastructure (OCI) and notice that the application is using OCI Traffic
Management service. This service uses a traffic steering policy to distribute the DNS traffic based on subnet addresses in a rule set.
Which steering policy is in use in this particular case? (Choose the best answer.)

A Load Balancing policy
B Geolocation steering
C ASN steering policy
D IP Prefix steering

Question 6

You have the following compartment structure within your company's Oracle Cloud Infrastructure (OCI) tenancy:

Question 7

Which option contains the essential components of the Oracle Cloud Infrastructure Notifications service? (Choose the best answer.)

A An ALARM with a name unique across the tenancy, a SUBSCRIPTION, and a METRIC with the measurement of interest.
B A TOPIC with a name unique across the tenancy, a SUBSCRIPTION, and a MESSAGE where content is published.
C A TOPIC with a name unique across the compartment, a SUBSCRIPTION, and a MESSAGE where content is published.
D An ALARM with a name unique across the compartment, a SUBSCRIPTION, and a METRIC with the measurement of interest.

Question 8

You run a large global application with 90% of customers based in the US and Canada. You want to be able to test a new feature and allow a small percentage of users to access the new version of your application.
What Oracle Cloud Infrastructure Traffic Management steering policy should you utilize? (Choose the best answer.)

A Load Balancer
B IP Prefix steering
C ASN steering
D Geolocation steering

Question 9

Which two statements are TRUE about Object Storage data security and encryption in Oracle Cloud Infrastructure (OCI)? (Choose two.)

A Client-side encryption is managed by the customer.
B Data needs to be decrypted on the client side before retrieving it.
C OCI Vault Management is used by default to provide data security.
D All traffic to and from Object Storage service is encrypted using TLS.
E A VPN connection to OCI is required to ensure secure data transfer to an object storage bucket.

Question 10

You are using Oracle Cloud Infrastructure (OCI) console to set up an alarm on a budget to track your OCI spending.
Which two are valid targets for creating a budget in OCI? (Choose two.)

A Select group as the type of target for your budget.
B Select Tenancy as the type of target for your budget.
C Select user as the type of target for your budget.
D Select Cost-Tracking Tags as the type of target for your budget.
E Select Compartment as the type of target for your budget.

Question 11

Your application is using an Object Storage bucket named app-data in the namespace vision, to store both persistent and temporary data. Every week all the temporary data should be deleted to limit the storage consumption.
Currently you need to navigate to the Object Storage page using the web console, select the appropriate bucket to view all the objects and delete the temporary ones.
To simplify the task you have configured the application to save all the temporary data with /temp prefix. You have also decided to use the Command Line
Interface (CLI) to perform this operation.
What is the command you should use to speed up the data cleanup? (Choose the best answer.)

A oci os object delete ג€"ns vision ג€"bn appג€"data ג€"ג€"prefix /temp
B oci os object bulk-delete ג€"ns vision ג€"bn appג€"data ג€"ג€"prefix /temp ג€"ג€"force
C oci objectstorage bulkג€"delete ג€"ns vision ג€"bn appג€"data ג€"ג€"prefix /temp ג€"ג€"force
D oci os object delete app-data in vision where prefix = /temp

That's the end of the Preview

Create a free account to unlock all questions for this exam.

Log In / Sign Up

Page 1 of 3 • Questions 1-25 of 55

1 2 3

→

Know a question that should be here? Contribute to this exam

You have been asked to ensure that in-transit communication between an Oracle Cloud Infrastructure (OCI) compute instance and an on-premises server
(192.168.10.10/32) is encrypted. The instances communicate using HTTP. The OCI Virtual Cloud Network (VCN) is connected to the on-premises network by two separate connections: a Dynamic IPsec VPN tunnel and a FastConnect virtual circuit. No static configuration has been added.
What solution should you recommend? (Choose the best answer.)

A The instances will communicate by default over IPsec VPN, which ensures data is encrypted in-transit.
B Advertise a 192.168.10.10/32 route over the VPN.
C Advertise a 192.168.10.10/32 router over the FastConnect.
D The instances will communicate by default over the FastConnect private virtual circuit, which ensures data is encrypted in-transit.

Which two statements about the Oracle Cloud Infrastructure (OCI) Command Line Interface (CLI) are TRUE? (Choose two.)

A You can run CLI commands from inside OCI Regions only.
B You can filter CLI output using the JMESPath query option for JSON.
C The CLI provides an automatic way to connect with instances provisioned on OCI.
D The CLI allows you to use the Python language to interact with OCI APIs.
E The CLI provides the same core functionality as the Console, plus additional commands.

The Route table attached to the Public subnet is shown below. You can establish an SSH connection into the compute instance from the internet. However, you are not able to connect to the web server using your web browser.

Which step will resolve the issue? (Choose the best answer.)

A In the route table, add a rule for your default traffic to be routed to NAT gateway.
B In the security list, add an ingress rule for port 80 (http).
C In the security list, remove the ssh rule.
D In the route table, add a rule for your default traffic to be routed to service gateway.

You want to create a policy in the root compartment to allow SystemAdmins to manage VCNs only in CompartmentC.
Which policy is correct? (Choose the best answer.)

A Allow group SystemAdmins to manage virtual-network-family in compartment CompartmentB:CompartmentC
B Allow group SystemAdmins to manage virtual-network-family in compartment Root
C Allow group SystemAdmins to manage virtual-network-family in compartment CompartmentA:CompartmentB:CompartmentC
D Allow group SystemAdmins to manage virtual-network-family in compartment CompartmentC