1z0-1072-23のPDF問題集で2024年06月12日最近更新された問題 [Q23-Q43]

1z0-1072-23のPDF問題集で2024年06月12日最近更新された問題

1z0-1072-23試験問題有効な1z0-1072-23問題集PDF

質問 # 23
You are using a custom application with third-party APIs to manage the application and data hosted in an Oracle Cloud Infrastructure (OCI) tenancy. Although your third-party APIs do not support OCI's signature-based authentication, you want them to communicate with OCI resources. Which authentication option should you use to ensure this?

A. API Signing Key
B. Auth Tokens
C. OCI Username and Password
D. SSH Key Pair with 2048-bit algorithm

正解：B

解説：
Auth Tokens is the authentication option that you should use to ensure that your custom application with third-party APIs can communicate with OCI resources. Auth Tokens are tokens that can be used as an alternative to passwords when making API calls to OCI services. Auth Tokens can be generated and revoked by users in the OCI Console or CLI, and can be used with any API client that supports basic authentication. The other options are not suitable for this scenario, as they either require OCI's signature-based authentication or are not applicable for API calls. Reference: [Auth Tokens]

質問 # 24
You have an instance running in Oracle Cloud Infrastructure (OCI) that cannot be live-migrated during an infrastructure maintenance event. OCI schedules a maintenance due date within 14 to 16 days and sends you a notification.
What would happen if you choose not to proactively reboot the instance before the scheduled maintenance due date?

A. The instance is either reboot-migrated or rebuilt in place for you.
B. The instance will get terminated.
C. You will receive another notification to reboot within the next 7 days.
D. You will receive another notification to reboot within the next 14 days.

正解：A

解説：
If you choose not to proactively reboot the instance before the scheduled maintenance due date, the instance is either reboot-migrated or rebuilt in place for you. Reboot-migration is a process where OCI migrates your instance to a new physical host without changing its configuration or public IP address. Rebuild in place is a process where OCI shuts down your instance, performs maintenance on the physical host, and restarts your instance with the same configuration and public IP address. The other options are not correct. Reference: [Reboot-Migration], [Rebuild in Place]

質問 # 25
You have a high-demand web application running on Oracle Cloud Infrastructure (OCI). Your tenancy administrator has set up a schedule-based autoscaling policy on instance pool with an initial size of 5 instances for the application.
Policy 1:
Target pool size:10 instances
Execution time:8:30 a.m. on every Monday through Friday, in every month, in every year Cron expression:0 30 8 ? * MON-FRI * Which statement accurately explains the goal of this policy?

A. Goal: A recurring monthly schedule. On all days of the month, set the initial pool size to 5 instances. At
8.30 a.m., on every day of the month, scale out to 10 instances.
B. Goal: A recurring daily schedule. On weekday mornings at 8.30 a.m., scale out to 10 instances.
C. Goal: A one-time schedule with only one scaling out event. At 8:30 a.m., on December 31, 2021, scale the instance pool to 10 instances from 5.
D. Goal: A recurring weekly schedule. On all days of the week at 8.30 a.m., scale out the pool to 10 instances from the initial size of 5

正解：B

解説：
The explanation is that a schedule-based autoscaling policy allows you to adjust the size of your instance pool based on a cron expression that specifies the date and time of the scaling action. The cron expression consists of six fields: seconds, minutes, hours, day of month, month, and day of week. In this case, the cron expression is 0 30 8 ? * MON-FRI *, which means that the scaling action will occur at 8:30 a.m. on every Monday through Friday, regardless of the day of month or month. Therefore, the goal of this policy is to scale out the instance pool to 10 instances on weekday mornings at 8:30 a.m.

質問 # 26
In which TWO ways does Cloud Guard help improve the overall security posture for your tenancy?

A. Masks sensitive data and monitors security controls on your Oracle databases.
B. Helps detect misconfigured resources, such as publicly accessible Object Storage buckets, instances, and restricted ports on security lists.
C. Monitors unauthorized or suspicious user activity.
D. Allows you to centrally manage encryption keys.
E. Prevents you from creating misconfigurations on your resources in Oracle Cloud Infrastructure (OCI).

正解：B、C

解説：
Monitors unauthorized or suspicious user activity, prevents you from creating misconfigurations on your resources in OCI, and helps detect misconfigured resources, such as publicly accessible Object Storage buckets, instances, and restricted ports on security lists. The explanation is that Cloud Guard is a service that helps you improve the security posture of your tenancy by providing visibility into your cloud resources, identifying security misconfigurations and threats, and taking corrective actions to remediate them. Cloud Guard monitors user activity and resource configurations using data collectors and detectors, evaluates them against predefined or custom rules, generates problems and recommendations based on severity levels, and executes responders to fix the issues automatically or manually.

質問 # 27
Which statement is NOT correct regarding the Oracle Cloud Infrastructure (OI) File System snapshots?

A. Before you can clone a file system, at least one snapshot must exist for the file system.
B. Even if nothing has changed within the file system since the last snapshot was taken, a new snapshot consumes more storage.
C. Snapshots are a consistent, point-in-time view of your file systems.
D. Snapshots are accessible under the root directory of the file system at .snapshot/name.

正解：B

解説：
Even if nothing has changed within the file system since the last snapshot was taken, a new snapshot does not consume more storage. This is because snapshots are incremental and only store the changes made to the file system since the previous snapshot. The other statements are correct regarding the OCI File System snapshots. Reference: [Snapshots and Storage Consumption]

質問 # 28
You are backing up your on-premises data to the Oracle Cloud Infrastructure (OCI) Object Storage Service.
Your requirements are:
1. Backups need to be retained for at least full 31 days.
2. Data should be accessible immediately if and when needed after the backup.
Which OCI Object Storage tier is suitable for storing the backup to minimize cost?

A. Infrequent Access tier
B. Standard tier
C. Archive tier
D. Auto-Tiering tier

正解：A

解説：
The explanation is that the Infrequent Access tier is suitable for storing data that is accessed less frequently but requires immediate access when needed. The Infrequent Access tier has lower storage costs than the Standard tier, but higher retrieval costs. The Infrequent Access tier also has a minimum storage duration of 30 days, which means that you will be charged for at least 30 days of storage even if you delete or move the data before that period.

質問 # 29
What should be created before provisioning an Oracle Cloud Infrastructure (OCI) DB System?

A. Compartment
B. Virtual Cloud Network
C. Compute Instance
D. Bucket in Object Storage

正解：B

解説：
The explanation is that a Virtual Cloud Network (VCN) is a software-defined network that you set up in OCI to connect your cloud resources, such as compute instances and databases. A VCN provides you with complete control over your network environment, including selecting your own IP address range, creating subnets, route tables, gateways, security lists, etc. You need to create a VCN before provisioning an OCI DB System, as you need to specify which subnet in your VCN you want to launch your DB System in.

質問 # 30
Which TWO statements are NOTcorrect regarding the Oracle Cloud Infrastructure (OCI) burstable instances?

A. Burstable instances are charged according to the baseline OCPU.
B. Burstable instances cost less than regular instances with the same total OCPU count.
C. Baseline utilization is a fraction of each CPU core, either 25% or 75%.
D. If the instance's average CPU utilization over the past 24 hours is below the baseline, the system allows it to burst above the baseline.
E. Burstable instances are designed for scenarios where an instance is not typically idle and has high CPU utilization.

正解：C、E

解説：
The explanation is that burstable instances are VM instances that have a baseline utilization of either 12% or 50% of each CPU core, not 25% or 75%. Burstable instances are designed for scenarios where an instance is typically idle or has low CPU utilization but occasionally needs to burst above the baseline to handle spikes in demand. Burstable instances cost less than regular instances with the same total OCPU count but charge extra for bursting above the baseline OCPU.

質問 # 31
You need to set up instance principals so that an application running on aninstance can call Oracle CloudInfrastructure (OCI) public services, without the need to configure user credentials.
A developer in your team has already configured the application built using an OCISDK to authenticate using theinstance principals provider.
Which is NOTa necessary step to complete this set up?

A. Deploy the application and the SDK to all the instances that belong to the dynamic group.
B. Generate Auth Tokens to enable instances in the dynamic group to authenticate with APIs.
C. Create a dynamic group with matching rules to specify which instances can make API calls against services.
D. Create a policy granting permissions to the dynamic group to access services in your compartment or tenancy.

正解：B

解説：
Explanation
Generating Auth Tokens to enable instances in the dynamic group to authenticate with APIs is not a necessary step to complete this set up. This is because Auth Tokens are used to authenticate users, not instances, when making API calls to OCI services. Instance principals are a feature that allows instances to authenticate themselves using certificates, without requiring user credentials or Auth Tokens. The other options are necessary steps to complete this set up, as they enable instances in the dynamic group to make API calls against services using instance principals and IAM policies. References: [Instance Principals], [Auth Tokens]

質問 # 32
In which two ways can Oracle Security Zones assist with the cloud security shared responsibility model?

A. Add or move a standard compartment to a highly secured security zone compartment.
B. Encrypt storage resources with a customer-managed key.
C. Deny public access to Oracle Cloud Infrastructure resources, such as databases and object storage buckets.
D. Allow access to an unsecured compartment, which is moved from a standard compartment.

正解：B、C

解説：
Explanation
Oracle Security Zones is a service that helps you enforce best practices and prevent misconfigurations on your OCI resources by applying predefined policies and controls. Some of the benefits of using Security Zones are:
Encrypt storage resources with a customer-managed key: Security Zones require that all storage resources, such as block volumes, boot volumes, file systems, and object storage buckets, are encrypted with a customer-managed key from Vault. This ensures that you have full control over the encryption and decryption of your data at rest.
Deny public access to OCI resources, such as databases and object storage buckets: Security Zones prevent you from creating or updating OCI resources that have public access enabled, such as databases and object storage buckets that are accessible from the internet. This reduces the risk of unauthorized access or data leakage.

質問 # 33
In which TWO ways does Cloud Guard help improve the overall security posture for your tenancy?

A. Masks sensitive data and monitors security controls on your Oracle databases.
B. Helps detect misconfigured resources, such as publicly accessible Object Storage buckets, instances, and restricted ports on security lists.
C. Prevents you from creating misconfigurations on your resources in Oracle Cloud Infrastructure (OCI).
D. Monitors unauthorized or suspicious user activity.
E. Allows you to centrally manage encryption keys.

正解：B、C、D

解説：
Explanation
Monitors unauthorized or suspicious user activity, prevents you from creating misconfigurations on your resources in OCI, and helps detect misconfigured resources, such as publicly accessible Object Storage buckets, instances, and restricted ports on security lists. The explanation is that Cloud Guard is a service that helps you improve the security posture of your tenancy by providing visibility into your cloud resources, identifying security misconfigurations and threats, and taking corrective actions to remediate them. Cloud Guard monitors user activity and resource configurations using data collectors and detectors, evaluates them against predefined or custom rules, generates problems and recommendations based on severity levels, and executes responders to fix the issues automatically or manually.

質問 # 34
You are responsible for deploying an application on Oracle Cloud Infrastructure (OCI). The application is memoryintensive and performs poorly if enough memory is not available. You have created an instance pool of Linuxcompute instances in OCI to host the application and defined Autoscaling Configuration for the instance pool.
What should you do to ensure that the instance pool autoscales to prevent poor application performance?

A. Install the monitoring agent on all compute instances, which triggers the autoscaling group.
B. Install OCI SDK on all compute instances and create a script that triggers theautoscaling event if there ishigh memory usage.
C. Configure the autoscaling policy to monitor memory usage and scale up the number of instances when itmeets the threshold.
D. Configure the autoscaling policy to monitor CPU usage and scale up the number of instances when it meets the threshold

正解：C

質問 # 35
As a solution architect, you are showcasing the Oracle Cloud Infrastructure (OCI) Object Storage feature aboutObject Versioning to a customer.
Which statement is true regarding OCI Object Storage Versioning?

A. Object Versioning does not provide data protection against accidental or malicious object update, overwrite, or deletion.
B. Object Versioning is disabled on a bucket by default.
C. A bucket that is versioning-enabled can and will always have the latest version of the object in the bucket.
D. Objects are physically deleted from a bucket when versioning is enabled.

正解：B

解説：
Explanation
Object Versioning is disabled on a bucket by default is a true statement regarding OCI Object Storage Versioning. Object Versioning is a feature that allows users to preserve, retrieve, and restore every version of every object stored in a bucket. Object Versioning is disabled on a bucket by default, but can be enabled or suspended by the user at any time. The other statements are false regarding OCI Object Storage Versioning.
References: [Object Versioning]

質問 # 36
A financial firm is designing an application architecture for its online trading platform that should have high availability and fault tolerance.
Their solutions architects configured the application to use an Oracle Cloud Infrastructure (OCI) Object Storage bucket located in the US West (us-phoenix-1) region to store large amounts of financial dat a. The stored financial data in the bucket should not be impacted even if there is an outage in one of the Availability Domains or a complete region.
What should the architect do to avoid any costly service disruptions and ensure data durability?

A. Create a new Object Storage bucket in another region and configure lifecycle policy to move data every 5 days.
B. Create a lifecycle policy to regularly send data from the Standard to Archive storage.
C. Copy the Object Storage bucket to a block volume.
D. Create a replication policy to send data to a different bucket in another OCI region.

正解：D

解説：
Create a replication policy to send data to a different bucket in another OCI region. The explanation is that replication is a feature of Object Storage that allows you to automatically copy objects from one bucket to another bucket, either in the same region or in a different region. Replication can help you improve data availability and durability, as well as meet compliance and disaster recovery requirements. To enable replication, you need to create a replication policy that specifies the source and destination buckets, the replication frequency, and the replication filters. Replication policies are evaluated every five minutes and copy any new or updated objects from the source bucket to the destination bucket.

質問 # 37
You want to create a policy to allow the NetworkAdmins group to manage Virtual Cloud Network (VCN) in compartment C. You want to attach this policy to the tenancy. The compartment hierarchy is shown below.

Which policy statement can be used to accomplish this task?

A. Allow group NetworkAdmins to manage virtual-network-family in compartment C
B. Allow group NetworkAdmins to manage virtual-network-family in compartment B:C
C. Allow group NetworkAdmins to manage virtual-network-family in tenancy
D. Allow group NetworkAdmins to manage virtual-network-family in compartment A:B:C

正解：D

解説：
Allow group NetworkAdmins to manage virtual-network-family in compartment A:B:C. The explanation is that when you attach a policy to the tenancy, you need to specify the full path of the compartment where you want to grant permissions. In this case, the compartment C is a sub-compartment of compartment B, which is a sub-compartment of compartment A, which is a sub-compartment of the root compartment (tenancy). Therefore, the full path of compartment C is A:B:C. The virtual-network-family resource type includes all the resources related to VCN, such as subnets, route tables, security lists, gateways, etc.

質問 # 38
You have objects stored in an OCI Object Storage bucket that you want to share with a partner company. You decide to use pre-authenticated requests to grant access to the objects. Which statement is true about preauthenticated requests?

A. You need to provide your OCI credentials to the partner company.
B. Pre-authenticated requests can be used to delete buckets or objects.
C. You cannot edit a pre-authenticated request.
D. Deleting a pre-authenticated request does not revoke user access to the associated bucket or object.

正解：C

解説：
Explanation
You cannot edit a pre-authenticated request is a true statement about pre-authenticated requests.
Pre-authenticated requests are URLs that allow users to access objects or buckets in OCI Object Storage without requiring additional authentication or authorization. Pre-authenticated requests can be created with an expiration date and time, and can be used for read or write operations. However, once created, pre-authenticated requests cannot be edited, but can only be deleted or extended. The other statements are false about pre-authenticated requests. References: [Pre-Authenticated Requests]

質問 # 39
Which statement is true about File System Replication in Oracle Cloud Infrastructure (OCI)?

A. Only a file system that has been exported can be used as a target file system.
B. You can replicate the data in one file system to another file system in the same region or a different region.
C. You cannot specify a replication interval when you create the replication resource.
D. You can replicate the data in one file system to another file system only in the same region.

正解：B

解説：
You can replicate the data in one file system to another file system in the same region or a different region is a true statement about File System Replication in OCI. File System Replication is a feature that allows users to create a copy of a file system in another file system, either within the same region or across regions. This can be useful for disaster recovery, data migration, or data distribution purposes. The other statements are false about File System Replication in OCI. Reference: [File System Replication]

質問 # 40
You plan to launch a VM instance with the VM.Standard2.24 shape and Oracle Linux 8 platform image. You want to protect your VM instance from low-level threats, such as rootkits and bootkits that can infect the firmware and operating system and are difficult to detect.
What should you do?

A. Create a burstable instance.
B. Create a shielded instance.
C. Use Vulnerability Scanning Service.
D. Use in-transit encryption.

正解：B

解説：
The explanation is that shielded instances are VM instances that have additional security features to protect them from low-level threats, such as rootkits and bootkits that can infect the firmware and operating system and are difficult to detect. Shielded instances use verified boot, which ensures that only trusted software components are executed during the boot process. Shielded instances also use virtual trusted platform module (vTPM), which provides a secure storage for encryption keys and certificates. Shielded instances are available for Oracle Linux 8 platform images with VM.Standard2.* shapes.

質問 # 41
Which tool provides a diagram of the implemented topology of all Virtual Cloud Networks (VCNs) in a selected region and tenancy?

A. Network Visualizer
B. VCN Flow Logs
C. Traffic Analytics
D. Network Watcher

正解：A

解説：
Explanation
Network Visualizer is the tool that provides a diagram of the implemented topology of all VCNs in a selected region and tenancy. Network Visualizer is a feature of the OCI Networking service that allows users to view and manage their network resources in a graphical interface. It can help users understand their network topology, troubleshoot issues, and optimize performance. The other options are not tools that provide a diagram of the VCN topology, but rather other features or services of OCI Networking. References: [Network Visualizer]

質問 # 42
You are using a custom application with third-party APIs to manage the application and data hosted in an OracleCloud Infrastructure (OCI) tenancy. Although your third-party APIs do not support OCI's signature-based authentication, you want them to communicate with OCI resources. Which authentication option should you useto ensure this?

A. API Signing Key
B. Auth Tokens
C. OCI Username and Password
D. SSH Key Pair with 2048-bit algorithm

正解：B

解説：
Explanation
Auth Tokens is the authentication option that you should use to ensure that your custom application with third-party APIs can communicate with OCI resources. Auth Tokens are tokens that can be used as an alternative to passwords when making API calls to OCI services. Auth Tokens can be generated and revoked by users in the OCI Console or CLI, and can be used with any API client that supports basic authentication.
The other options are not suitable for this scenario, as they either require OCI's signature-based authentication or are not applicable for API calls. References: [Auth Tokens]

質問 # 43
......

1z0-1072-23問題集合格確定させる練習には57問があります：https://www.jpntest.com/shiken/1z0-1072-23-mondaishu

1z0-1072-23練習テスト問題解答更新された57問があります：https://drive.google.com/open?id=15U6CI26OPD7CNMPjsc_Ql3rIFlIdMaHh