1z0-1072-22
Free trial
Verified
Question 1
You can attach resources to a Dynamic Routing Gateway (DRG). Select THREE of these resources. (Choose three.)
- A: IPSec Tunnel
- B: Subnet
- C: VNIC
- D: Remote Peering Connections
- E: Local Peering Connection
- F: Virtual Circuits
Question 2
You have three compartments: ProjectA, ProjectB, and ProjectC. For each compartment, there is an admin group set up: A-Admins, B-Admins, and C-Admins.
Each admin group has full access over their respective compartments as shown in the graphic below.
Your organization has set up a tag namespace, EmployeeGroup.Role and all your admin groups are tagged with a value of 'Admin'.
You want to set up a Test compartment for members of the three projects to share. You also need to provide admin access to all three of your existing admin groups.
Which policy would you write to accomplish this task?
- A: Allow dynamic-group to manage all-resources in compartment Test where request.principal.group.tag.EmployeeGroup.Role='Admin'
- B: Allow all-group to manage all-resources in compartment Test where request.principal.group.tag.EmployeeGroup.Role='Admin'
- C: Allow group any-group to manage all-resources in compartment Test where request.principal.group.tag.EmployeeGroup.Role='Admin'
- D: Allow any user to manage all resources in compartment Test where request.principal.group.tag.EmployeeGroup.Role='Admin'
Question 3
Which is NOT a valid action within the Oracle Cloud Infrastructure (OCI) Block Volume service?
- A: Cloning an existing volume to a new, larger volume.
- B: Expanding an existing volume in place with offline resizing.
- C: Restoring from a volume backup to a larger volume.
- D: Attaching a block volume to an instance in a different availability domain.
Question 4
Which of the following statements is true about cloning a volume in the Oracle Cloud Infrastructure (OCI) Block Volume service?
- A: You can change the block volume size when cloning a volume.
- B: You need to detach a volume before cloning it.
- C: Creating a clone takes longer than creating a backup of a volume.
- D: You can clone a volume to another region.
Question 5
Which TWO statements about the Oracle Cloud Infrastructure (OCI) File Storage Service are accurate? (Choose two.)
- A: File systems use Oracle-managed keys by default.
- B: Mount targets use Oracle-managed keys by default.
- C: Customer can encrypt the communication to a mount target via export options.
- D: Customer can encrypt data in their file system using their own Vault encryption key.
- E: Communication with file systems in a mount target is encrypted via HTTPS.
Question 6
Which TWO are key benefits of setting up Site-to-Site VPN on Oracle Cloud Infrastructure (OCI)? (Choose two.)
- A: When setting up Site-to-Site VPN, it creates a private connection that provides consistent network experience.
- B: When setting up Site-to-Site VPN, customers can expect bandwidth above 2 Gbps.
- C: When setting up Site-to-Site VPN, OCI provisions redundant VPN tunnels.
- D: When setting up Site-to-Site VPN, customers can configure it to use static or dynamic routing (BGP).
Question 7
Which of the following is a valid RFC 1918 CIDR prefix that can be used for creating an Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN)?
- A: 10.0.0.0/8
- B: 0.0.0.0/0
- C: 192.168.0.0/16
- D: 189.215.154.89/32
- E: 192.268.0.0/24
- F: 172.16.0.0/12
Question 8
Which is NOT a valid Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN) approach?
- A: Ensure VCN CIDR prefix overlaps with other VCNs in your tenancy or with your organizations private IP network ranges.
- B: Private subnets should ideally have individual route tables to control the flow of traffic within and outside of VCN.
- C: Use OCI tags to tag VCN resources so that all resources follow organizational tagging/naming conventions.
- D: Ensure not all IP addresses are allocated at once within a VCN or subnet; instead reserve some IP addresses for future use.
Question 9
Which TWO statements are TRUE about Public IP addresses in Oracle Cloud Infrastructure (OCI)? (Choose two.)
- A: By default, an instance in a public subnet has one primary public IP address.
- B: You must use OCI provided public IP addresses. You cannot bring your own IP addresses to OCI.
- C: You can assign a given instance multiple public IPs across one or more VNICs.
- D: Public IP addresses can be ephemeral or reserved.
Question 10
Which TWO statements are TRUE about Private IP addresses in Oracle Cloud Infrastructure (OCI)? (Choose two.)
- A: Each VNIC can only have one private IP address.
- B: A private IP can have an optional public IP assigned to it if it resides in a public subnet.
- C: By default, the primary VNIC of an instance in a subnet has one primary private IP address and one secondary private IP address.
- D: By default, the primary VNIC of an instance in a subnet has one primary private IP address.
Question 11
You are using the Oracle Cloud Infrastructure (OCI) Vault service to create and manage Secrets. For your database password, you have created a secret and rotated the secret one time. The secret versions are as follows:
You later realize that you have made a mistake in updating the secret content for version 2 and want to rollback to version 1.
What should you do to rollback to version 1?
- A: Deprecate version 2 (latest). Create new Secret version 3. Create soft link from version 3 to version 1.
- B: From the version 1 menu on the OCI console, select "Promote to Current".
- C: From the version 2 (latest) menu, select "Rollback" and select version 1 when given the option.
- D: Create a new secret version 3 and set to Pending. Copy the content of version 1 into version 3.
That’s the end of your free questions
You’ve reached the preview limit for 1z0-1072-22Consider upgrading to gain full access!
Free preview mode
Enjoy the free questions and consider upgrading to gain full access!