Winter Special - Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: top65certs

Free and Premium Oracle 1z0-1072-24 Dumps Questions Answers

Page: 1 / 4
Total 51 questions

Oracle Cloud Infrastructure 2024 Architect Associate Questions and Answers

Question 1

Which policy would you write to provide admin access to all three of your existing admin groups for a shared Test compartment?

Options:

A.

Allow all-group to manage all-resources in compartment Test where request.principal.group.tag.EmployeeGroup.Role=’Admin’

B.

Allow dynamic-group to manage all-resources in compartment Test where request.principal.group.tag.EmployeeGroup.Role=’Admin’

C.

Allow any-user to manage all-resources in compartment Test where request.principal.group.tag.EmployeeGroup.Role=’Admin’

D.

Allow group any-group to manage all-resources in compartment Test whererequest.principal.group.tag.EmployeeGroup.Role=’Admin’

Buy Now
Question 2

A financial firm is designing an application architecture for its online trading platform that should have high availability and fault tolerance. What should the architect do to avoid any costly service disruptions and ensure data durability?

Options:

A.

Create a new Object Storage bucket in another region and configure recycle policy to move data every 5 days.

B.

Create a replication policy to send data to a different bucket in another OCI region.

C.

Create a lifecycle policy to regularly send data from the Standard to Archive storage.

D.

Copy the Object Storage bucket to a block volume.

Question 3

By default, OCI IAM policies follow the principle of least privilege. What does this principle mean in the context of policy creation?

Options:

A.

Policies should be written in a complex and technical manner to enhance security.

B.

Policies should grant all possible permissions to simplify access control.

C.

Policies should provide only the minimum set of permissions required for users to perform their tasks effectively.

D.

Policies should be identical for all users within a tenancy.

Question 4

How can OCI IAM be configured to facilitate cross-region access?

Options:

A.

The administrator can grant users permissions to access specific resources in the other region.

B.

The identity domain automatically replicates to the other region.

C.

Users can access resources in all regions by default.

D.

Identity domain replication must be enabled.

Question 5

Which components are required for establishing remote peering between two Virtual Cloud Networks (VCNs) in Oracle Cloud Infrastructure (OCI)?

Options:

A.

A single VCN with nonoverlapping CIDRS in each region, a dynamic routing gateway (DRG) attached to each VCN, and a direct connection between the DRGS.

B.

Two VCNs with overlapping CIDRS in different regions, a virtual private network (VPN) gateway attached to each VCN, and a direct connection between the VPN gateways.

C.

Two VCNs with nonoverlapping CIDRS in the same region, a dynamic routing gateway (DRG) attached to each VCN, and a direct connection between the DRGs.

D.

Two VCNs with nonoverlapping CIDRS in different regions, a dynamic routing gateway (DRG) attached to each VCN, a remote peering connection (RPC) on each DRG, and a connection established between the RPCs.

Question 6

You want to protect your VM instance from low-level threats, such as rootkits and bootkits. What should you do?

Options:

A.

Create a shielded instance.

B.

Use in-transit encryption.

C.

Create a burstable instance.

D.

Use Vulnerability Scanning Service.

Question 7

Which OCI feature should be used to ensure that communication between database servers and OCI Object Storage is secure?

Options:

A.

Use a Local Peering Gateway

B.

Use a NAT Gateway

C.

Use a VPN Gateway

D.

Use a Service Gateway

Question 8

Which Oracle Cloud Infrastructure (OCI) Identity and Access Management (IAM) policy is invalid?

Options:

A.

Allow dynamic-group 'Default'/'FrontEnd' to manage instance-family in compartment Project-A

B.

Allow group 'Default'/'A-Admins' to manage all-resources in compartment Project-A

C.

Allow any-user to inspect users in tenancy

D.

Allow group 'Default'/'A-Developers' to create volumes in compartment Project-A

Question 9

How would you allow access to FSS for a DB System with read-only permissions?

Options:

A.

Create an NFS export option that allows READ_ONLY access.

B.

Modify the security list to allow stateful ingress rules.

C.

Modify the security list to allow stateless ingress rules.

D.

Create an instance principal for the DB System.

Question 10

Which OCI Object Storage tier is suitable for storing the backup to minimize cost while meeting the requirements of immediate accessibility and retention of 31 days?

Options:

A.

Archive tier

B.

Auto-Tiering tier

C.

Standard tier

D.

Infrequent Access tier

Question 11

Which statement is NOT true about the Oracle Cloud Infrastructure (OCI) Object Storage service?

Options:

A.

Immutable option for data stored in Object Storage can be set via retention rules.

B.

Object Storage resources can be shared across tenancies.

C.

Object lifecycle rules can be used to archive or delete objects.

D.

Object Versioning is enabled at the namespace level.

Question 12

Which OCI service would you use to apply kernel security updates to all instances?

Options:

A.

Container Registry

B.

Data Safe

C.

Artifact Registry

D.

OS Management Service

Question 13

Why is the OCI Inter-Region Latency dashboard useful for optimizing data transfer and backup strategies?

Options:

A.

It offers a current and historical view of latency snapshots.

B.

It's designed for troubleshooting latency issues within your specific applications.

C.

It provides real-time data specific to your tenancy's workloads.

D.

It focuses solely on latency within your own tenancy.

Question 14

How will moving a database instance to a different compartment impact user access?

Options:

A.

IAM policies are not tied to compartments.

B.

Access will be revoked for all users.

C.

Compartments prevent resource movement.

D.

Compartments are not covered by IAM policies.

Question 15

Which compute capacity type would you select to meet these requirements?

Options:

A.

Capacity reservation

B.

Preemptible capacity

C.

On-demand capacity

D.

Dedicated host

Page: 1 / 4
Total 51 questions