Get Perfect Results with Premium 1z0-1072-23 Dumps Updated 57 Questions [Q20-Q45]

Share

Get Perfect Results with Premium 1z0-1072-23 Dumps Updated 57 Questions

Free 1z0-1072-23 Exam Study Guide for the NEW Dumps Test Engine


Oracle 1z0-1072-23 Exam Syllabus Topics:

TopicDetails
Topic 1
  • Understand Observability and Management platform
  • Configure Dynamic Groups and Tag based access control
Topic 2
  • Understand File System Snapshots and Cloning
  • Describe and Configure Web Application Firewall and Certificates
Topic 3
  • Configure Security Lists and Network Security Groups
  • Describe and configure OS Management
Topic 4
  • Configure and manage Object Storage
  • Understand File System usage and metering
Topic 5
  • Describe OCI compute image options
  • Configure DNS and Traffic Management
Topic 6
  • Describe Public and Private DNS zones
  • Configure Cloud Guard, Security Zone, and Security Advisor
Topic 7
  • Implement and manage Virtual Cloud Networks
  • Describe and configure a layer-4 Network Load Balancer
Topic 8
  • Configure Virtual Cloud Network Routing and Gateways
  • Describe and configure a layer-7 Load Balancer
Topic 9
  • Understand Block Volume performance tiers
  • Understand Object Storage replication
Topic 10
  • Describe public and private IP addresses and virtual NICs
  • Understand Network Command Center Services

 

NEW QUESTION # 20
In which two ways can Oracle Security Zones assist with the cloud security shared responsibility model?

  • A. Encrypt storage resources with a customer-managed key.
  • B. Deny public access to Oracle Cloud Infrastructure resources, such as databases and object storage buckets.
  • C. Allow access to an unsecured compartment, which is moved from a standard compartment.
  • D. Add or move a standard compartment to a highly secured security zone compartment.

Answer: A,B

Explanation:
Oracle Security Zones is a service that helps you enforce best practices and prevent misconfigurations on your OCI resources by applying predefined policies and controls. Some of the benefits of using Security Zones are:
Encrypt storage resources with a customer-managed key: Security Zones require that all storage resources, such as block volumes, boot volumes, file systems, and object storage buckets, are encrypted with a customer-managed key from Vault. This ensures that you have full control over the encryption and decryption of your data at rest.
Deny public access to OCI resources, such as databases and object storage buckets: Security Zones prevent you from creating or updating OCI resources that have public access enabled, such as databases and object storage buckets that are accessible from the internet. This reduces the risk of unauthorized access or data leakage.


NEW QUESTION # 21
A financial firm is designing an application architecture for its online trading platform that should have high availability and fault tolerance.
Their solutions architects configured the application to use an Oracle Cloud Infrastructure (OCI) Object Storage bucket located in the US West (us-phoenix-1) region to store large amounts of financial dat a. The stored financial data in the bucket should not be impacted even if there is an outage in one of the Availability Domains or a complete region.
What should the architect do to avoid any costly service disruptions and ensure data durability?

  • A. Create a new Object Storage bucket in another region and configure lifecycle policy to move data every 5 days.
  • B. Create a replication policy to send data to a different bucket in another OCI region.
  • C. Create a lifecycle policy to regularly send data from the Standard to Archive storage.
  • D. Copy the Object Storage bucket to a block volume.

Answer: B

Explanation:
Create a replication policy to send data to a different bucket in another OCI region. The explanation is that replication is a feature of Object Storage that allows you to automatically copy objects from one bucket to another bucket, either in the same region or in a different region. Replication can help you improve data availability and durability, as well as meet compliance and disaster recovery requirements. To enable replication, you need to create a replication policy that specifies the source and destination buckets, the replication frequency, and the replication filters. Replication policies are evaluated every five minutes and copy any new or updated objects from the source bucket to the destination bucket.


NEW QUESTION # 22
You need to set up instance principals so that an application running on an instance can call Oracle Cloud Infrastructure (OCI) public services, without the need to configure user credentials.
A developer in your team has already configured the application built using an OCI SDK to authenticate using the instance principals provider.
Which is NOTa necessary step to complete this set up?

  • A. Create a policy granting permissions to the dynamic group to access services in your compartment or tenancy.
  • B. Create a dynamic group with matching rules to specify which instances can make API calls against services.
  • C. Deploy the application and the SDK to all the instances that belong to the dynamic group.
  • D. Generate Auth Tokens to enable instances in the dynamic group to authenticate with APIs.

Answer: D

Explanation:
Generating Auth Tokens to enable instances in the dynamic group to authenticate with APIs is not a necessary step to complete this set up. This is because Auth Tokens are used to authenticate users, not instances, when making API calls to OCI services. Instance principals are a feature that allows instances to authenticate themselves using certificates, without requiring user credentials or Auth Tokens. The other options are necessary steps to complete this set up, as they enable instances in the dynamic group to make API calls against services using instance principals and IAM policies. Reference: [Instance Principals], [Auth Tokens]


NEW QUESTION # 23
You are using the Oracle Cloud Infrastructure (OCI) Vault service to create and manage Secrets. For your databasepassword, you have created a secret and rotated the secret one time. The secret versions are as follows:
Version Number | Status
-----------------------------------------
2 (latest) | Current
1 | Previous
You later realize that you have made a mistake in updating the secret content for version 2 and want to rollback to version 1.
What should you do to rollback to version 1?

  • A. Deprecate version 2 (latest). Create new Secret version 3. Create soft link from version 3 to version 1.
  • B. From the version 2 (latest) menu, select "Rollback" and select version 1 when given the option.
  • C. Create a new secret version 3 and set to Pending. Copy the content of version 1 into version 3.
  • D. From the version 1 menu on the OCI console, select "Promote to Current".

Answer: D

Explanation:
Explanation
From the version 1 menu on the OCI console, select "Promote to Current". The explanation is that when you promote a secret version to current, it becomes the latest version of the secret and is used by default when you access the secret. This way, you can rollback to a previous version of the secret without creating a new version.


NEW QUESTION # 24
You are in the process of migrating several legacy applications from on-premises to Oracle Cloud Infrastructure (OCI). The current servers are already virtualized. However, you notice that the version of CentOS currently running does not align with any of the Oracle-provided compute images.How would you migrate your existing virtual server images to OCI?

  • A. Export your current image in the VMDK format and copy to an Object Storage bucket. Import it as a custom image. Select native mode to ensure the best possible performance.
  • B. Export your current image in the VDI format and copy to an Object Storage bucket. Import it as a custom image. Select native modeto ensure the best possible performance.
  • C. Export your current image in the QED format and copy to an Object Storage bucket. Import it as a custom image. Select emulated modeto ensure compatibility with legacy drivers.
  • D. Export your current image in the QCOW2 format and copy to an Object Storage bucket. Import it as a custom image. Select emulated mode to ensure compatibility with legacy drivers

Answer: D

Explanation:
Export your current image in the QCOW2 format and copy to an Object Storage bucket. Import it as a custom image. Select emulated mode to ensure compatibility with legacy drivers. The explanation is that QCOW2 is one of the supported formats for importing custom images to OCI. Custom images are images that you can create from your own on-premises or cloud servers and use them to launch instances in OCI. To import a custom image, you need to export your current image in a supported format, copy it to an Object Storage bucket, and then import it as a custom image using the OCI console or API. When you import a custom image, you can choose between native mode or emulated mode. Native mode offers better performance but requires compatible drivers and firmware. Emulated mode offers better compatibility but lower performance.


NEW QUESTION # 25
Which statement is NOT correct regarding the Oracle Cloud Infrastructure (OI) File System snapshots?

  • A. Before you can clone a file system, at least one snapshot must exist for the file system.
  • B. Snapshots are a consistent, point-in-time view of your file systems.
  • C. Snapshots are accessible under the root directory of the file system at .snapshot/name.
  • D. Even if nothing has changed within the file system since the last snapshot was taken, a new snapshot consumes more storage.

Answer: D

Explanation:
Even if nothing has changed within the file system since the last snapshot was taken, a new snapshot does not consume more storage. This is because snapshots are incremental and only store the changes made to the file system since the previous snapshot. The other statements are correct regarding the OCI File System snapshots. Reference: [Snapshots and Storage Consumption]


NEW QUESTION # 26
Which Oracle Cloud Infrastructure (OCI) Identity and Access Management (IAM) policy is invalid?

  • A. Allow dynamic-group FrontEnd to manage instance-family in compartment Project-A
  • B. Allow group A-Admins to manage all-resources in compartment Project-A
  • C. Allow group A-Developers to create volumes in compartment Project-A
  • D. Allow any-user to inspect users in tenancy

Answer: C

Explanation:
Explanation
Allow group A-Developers to create volumes in compartment Project-A is an invalid IAM policy. This is because create is not a valid verb for volumes. The correct verb for creating volumes is attach. The other options are valid IAM policies that use correct verbs and syntax. References: [IAM Policies], [Verbs]


NEW QUESTION # 27
When defining a query for metric data in Monitoring, which field provides the time window for aggregating metric data points plotted on the metric chart?

  • A. Dimension
  • B. Interval
  • C. Statistic
  • D. Namespace

Answer: B

Explanation:
Interval is the field that provides the time window for aggregating metric data points plotted on the metric chart. Interval is a parameter that specifies how often metric data points are collected and aggregated by the Monitoring service. For example, an interval of 5 minutes means that metric data points are aggregated every 5 minutes and displayed on the chart. The other options are not fields that provide the time window for aggregating metric data points, but rather other parameters that define the metric query. Reference: [Interval]


NEW QUESTION # 28
Which tool provides a diagram of the implemented topology of all Virtual Cloud Networks (VCNs) in a selected region and tenancy?

  • A. VCN Flow Logs
  • B. Network Watcher
  • C. Traffic Analytics
  • D. Network Visualizer

Answer: D

Explanation:
Network Visualizer is the tool that provides a diagram of the implemented topology of all VCNs in a selected region and tenancy. Network Visualizer is a feature of the OCI Networking service that allows users to view and manage their network resources in a graphical interface. It can help users understand their network topology, troubleshoot issues, and optimize performance. The other options are not tools that provide a diagram of the VCN topology, but rather other features or services of OCI Networking. Reference: [Network Visualizer]


NEW QUESTION # 29
Which TWO components are optional while creating the Monitoring Query Language (MQL) expressions in the Oracle Cloud Infrastructure (OCI) Monitoring service?

  • A. Grouping Function
  • B. Dimensions
  • C. Interval
  • D. Metric
  • E. Statistic

Answer: A,B

Explanation:
Explanation
Dimensions and Grouping Function are two optional components while creating the Monitoring Query Language (MQL) expressions in the OCI Monitoring service. Dimensions are key-value pairs that provide additional information about a metric, such as region, compartment, or resource type. Grouping Function is a function that aggregates metric data across one or more dimensions, such as sum, count, or average. The other options are required components for MQL expressions. References: [Dimensions], [Grouping Function]


NEW QUESTION # 30
Which is NOT a valid action within the Oracle Cloud Infrastructure (OCI) Block Volume service?

  • A. Expanding an existing volume in place with offline resizing.
  • B. Cloning an existing volume to a new, larger volume.
  • C. Attaching a block volume to an instance in a different availability domain.
  • D. Restoring from a volume backup to a larger volume.

Answer: C

Explanation:
Explanation
Attaching a block volume to an instance in a different availability domain is not a valid action within the OCI Block Volume service. A block volume can only be attached to an instance in the same availability domain.
The other options are valid actions that can be performed with the Block Volume service. References: [Block Volume Actions]


NEW QUESTION # 31
Which of the following statements is true about cloning a volume in the Oracle Cloud Infrastructure (OCI) Block Volume service?

  • A. Creating a clone takes longer than creating a backup of a volume.
  • B. You need to detach a volume before cloning it.
  • C. You can clone a volume to another region.
  • D. You can change the block volume size when cloning a volume.

Answer: D

Explanation:
You can change the block volume size when cloning a volume. The explanation is that cloning a volume is a way of creating an exact copy of an existing volume without creating a backup first. Cloning a volume is faster and cheaper than creating a backup and restoring it to a new volume. When you clone a volume, you can change the block volume size, performance, encryption settings, and tags of the new volume. You do not need to detach a volume before cloning it, as cloning does not affect the source volume or its attachments. You cannot clone a volume to another region, as cloning only works within the same region and availability domain. Creating a clone usually takes less time than creating a backup of a volume, as cloning does not involve transferring data to Object Storage.


NEW QUESTION # 32
As a network architect you have deployed a public subnet on your Virtual Cloud Network (VCN) with this security list:

You have also created a network security group (NSG) as shown in the table here, and assigned it to your bastion host:

You have confirmed that routing is correct but when you SSH to the VM from your home over the Internet you are unable to connect.
What could be the problem?

  • A. Internet traffic should be allowed only on the NSG.
  • B. Public subnet does not have a route rule to the Internet Gateway.
  • C. User will be able to SSH to the VM from the Internet as SSH is open on the NSG.
  • D. SSH traffic is not allowed in the security list nor on the NSG from the Internet.

Answer: D

Explanation:
SSH traffic is not allowed in the security list nor on the NSG from the Internet is the correct answer. This is because the security list only allows ingress traffic from 10.0.0.24 on port 22, and the NSG only allows ingress traffic from 10.0.0.0/16 on port 22. Neither of them allows ingress traffic from 0.0.0.0/0 (the Internet) on port 22, which is required for SSH access. The other options are not correct, as they do not explain why SSH access is not possible. Reference: [Security Lists], [Network Security Groups]


NEW QUESTION # 33
You want to create a policy to allow the NetworkAdmins group to manageVirtual Cloud Network (VCN) incompartment C.
You want to attach this policy to the tenancy. The compartment hierarchy is shown below.

Which policy statement can be used to accomplish this task?

  • A. Allow group NetworkAdmins to manage virtual-network-family in compartment C
  • B. Allow group NetworkAdmins to manage virtual-network-family in compartment A:B:C
  • C. Allow group NetworkAdmins to manage virtual-network-family in compartment B:C
  • D. Allow group NetworkAdmins to manage virtual-network-family in tenancy

Answer: B

Explanation:
Explanation
Allow group NetworkAdmins to manage virtual-network-family in compartment A:B:C. The explanation is that when you attach a policy to the tenancy, you need to specify the full path of the compartment where you want to grant permissions. In this case, the compartment C is a sub-compartment of compartment B, which is a sub-compartment of compartment A, which is a sub-compartment of the root compartment (tenancy).
Therefore, the full path of compartment C is A:B:C. The virtual-network-family resource type includes all the resources related to VCN, such as subnets, route tables, security lists, gateways, etc.


NEW QUESTION # 34
You are backing up your on-premises data to the Oracle Cloud Infrastructure (OCI) Object Storage Service.
Your requirements are:
1. Backups need to be retained for at least full 31 days.
2. Data should be accessible immediately if and when needed after the backup.
Which OCI Object Storage tier is suitable for storing the backup to minimize cost?

  • A. Archive tier
  • B. Infrequent Access tier
  • C. Standard tier
  • D. Auto-Tiering tier

Answer: B

Explanation:
The explanation is that the Infrequent Access tier is suitable for storing data that is accessed less frequently but requires immediate access when needed. The Infrequent Access tier has lower storage costs than the Standard tier, but higher retrieval costs. The Infrequent Access tier also has a minimum storage duration of 30 days, which means that you will be charged for at least 30 days of storage even if you delete or move the data before that period.


NEW QUESTION # 35
Which Oracle Cloud Infrastructure (OCI) Identity and Access Management (IAM) policy is invalid?

  • A. Allow dynamic-group FrontEnd to manage instance-family in compartment Project-A
  • B. Allow group A-Admins to manage all-resources in compartment Project-A
  • C. Allow group A-Developers to create volumes in compartment Project-A
  • D. Allow any-user to inspect users in tenancy

Answer: C

Explanation:
Allow group A-Developers to create volumes in compartment Project-A is an invalid IAM policy. This is because create is not a valid verb for volumes. The correct verb for creating volumes is attach. The other options are valid IAM policies that use correct verbs and syntax. Reference: [IAM Policies], [Verbs]


NEW QUESTION # 36
company sells services to photographers where patrons can preview the photos that they want prints for.
To avoid unauthorized copies, the sample photos have lower resolution and are watermarked. The photos are processed after they are uploaded. The process is fast but not immediate. It creates samples and sends them to storage outside of the instances. Which type of instance is ideal for a process like this; short lived and one that keeps the cost low?

  • A. Spot instances
  • B. Burstable instances
  • C. On-demand instances
  • D. Preemptible instances

Answer: D

Explanation:
The explanation is that preemptible instances are VM instances that offer lower costs than regular instances but can be reclaimed by OCI at any time due to capacity constraints or after running for a maximum of 24 hours. Preemptible instances are ideal for short-lived and stateless workloads that can tolerate interruptions and do not require guaranteed availability or performance. Preemptible instances are billed by the second at a fixed rate that is lower than regular instances.


NEW QUESTION # 37
You have three compartments: ProjectA, ProjectB, and ProjectC. For each compartment, there is an admin group set up: A-Admins, B-Admins, and C-Admins.
Each admin group has full access over their respective compartments as shown in the graphic below.
Your organization has set up a tag namespace, EmployeeGroup.Role and all your admin groups are tagged with a value of 'Admin'.

You want to set up a Test compartment for members of the three projects to share. You also need to provide admin access to all three of your existing admin groups.
Which policy would you write to accomplish this task?

  • A. Allow group any-group to manage all-resources in compartment Test where request.principal.group.tag.EmployeeGroup.Role='Admin'
  • B. Allow dynamic-group to manage all-resources in compartment Test where request.principal.group.tag.EmployeeGroup.Role='Admin'
  • C. Allow all-group to manage all-resources in compartment Test where
    request.principal.group.tag.EmployeeGroup.Role='Admin'
  • D. Allow any-user to manage all-resources in compartment Test where request.principal.group.tag.EmployeeGroup.Role='Admin'

Answer: D

Explanation:
Allow all-group to manage all-resources in compartment Test where request.principal.group.tag.EmployeeGroup.Role='Admin' is the policy that would accomplish this task. This policy grants admin access to all groups that have the tag EmployeeGroup.Role='Admin' in the compartment Test. The other options are not correct, as they use incorrect terms such as dynamic-group, any-group, or any-user. Reference: [Tag-Based Authorization]


NEW QUESTION # 38
Which is NOT a valid Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN) approach?

  • A. Ensure VCN CIDR prefix overlaps with other VCNs in your tenancy or with your organizations private IP network ranges.
  • B. Private subnets should ideally have individual route tables to control the flow of traffic within and outside of VCN.
  • C. Ensure not all IP addresses are allocated at once within a VCN or subnet; instead reserve some IP addresses for future use.
  • D. Use OCI tags to tag VCN resources so that all resources follow organizational tagging/naming conventions.

Answer: A

Explanation:
Ensure VCN CIDR prefix overlaps with other VCNs in your tenancy or with your organizations private IP network ranges. The explanation is that a VCN CIDR prefix is the range of IPv4 addresses that can be used within the VCN and its subnets. The VCN CIDR prefix should not overlap with other VCNs in your tenancy or with your organization's private IP network ranges, as this can cause routing conflicts and connectivity issues. You should choose a VCN CIDR prefix that is large enough to accommodate your current and future needs, but not too large to waste IP addresses. You can use any of the private IPv4 address ranges specified in RFC 1918 for your VCN CIDR prefix.


NEW QUESTION # 39
You have a high-demand web application running on Oracle Cloud Infrastructure (OCI). Your tenancy administrator has set up a schedule-based autoscaling policy on instance pool withan initial size of 5 instancesfor the application.
Policy 1:
Target pool size:10 instances
Execution time:8:30 a.m. on every Monday through Friday, in every month, in every year Cron expression:0 30 8 ? * MON-FRI * Which statement accurately explains the goal of this policy?

  • A. Goal: A recurring monthly schedule. On all days of the month, set the initial pool size to 5 instances. At
    8.30 a.m., on every day of the month, scale out to 10 instances.
  • B. Goal: A recurring daily schedule. On weekday mornings at 8.30 a.m., scale out to 10 instances.
  • C. Goal: A one-time schedule with only one scaling out event. At 8:30 a.m., on December 31, 2021, scale theinstance pool to 10 instances from 5.
  • D. Goal: A recurring weekly schedule. On all days of the week at 8.30 a.m., scale out the pool to 10 instancesfrom the initial size of 5

Answer: B

Explanation:
Explanation
The explanation is that a schedule-based autoscaling policy allows you to adjust the size of your instance pool based on a cron expression that specifies the date and time of the scaling action. The cron expression consists of six fields: seconds, minutes, hours, day of month, month, and day of week. In this case, the cron expression is 0 30 8 ? * MON-FRI *, which means that the scaling action will occur at 8:30 a.m. on every Monday through Friday, regardless of the day of month or month. Therefore, the goal of this policy is to scale out the instance pool to 10 instances on weekday mornings at 8:30 a.m.


NEW QUESTION # 40
Which TWO statements about the Oracle Cloud Infrastructure (OCI) File Storage Service are accurate?

  • A. Customer can encrypt the communication to a mount target via export options.
  • B. Mount targets use Oracle-managed keys by default.
  • C. File systems use Oracle-managed keys by default.
  • D. Customer can encrypt data in their file system using their own Vault encryption key.
  • E. Communication with file systems in a mount target is encrypted via HTTPS.

Answer: C,D

Explanation:
Explanation
File systems use Oracle-managed keys by default. Customer can encrypt data in their file system using their own Vault encryption key. The explanation is that File Storage Service encrypts all data at rest using AES-256 encryption algorithm. By default, File Storage Service uses Oracle-managed keys to encrypt and decrypt data.
However, you can also use your own Vault encryption key to encrypt data in your file system. To do so, you need to create a key in Vault and associate it with your file system when you create or update it.


NEW QUESTION # 41
Which TWO statements are TRUE about Private IP addresses in Oracle Cloud Infrastructure (OCI)?

  • A. Each VNIC can only have one private IP address.
  • B. By default, the primary VNIC of an instance in a subnet has one primary private IP address.
  • C. A private IP can have an optional public IP assigned to it if it resides in a public subnet.
  • D. By default, the primary VNIC of an instance in a subnet has one primary private IP address and one secondary private IP address.

Answer: B,C

Explanation:
By default, the primary VNIC of an instance in a subnet has one primary private IP address. A private IP can have an optional public IP assigned to it if it resides in a public subnet. The explanation is that a private IP address is an IPv4 address that is assigned to a VNIC and belongs to the CIDR block of the VCN or subnet. By default, the primary VNIC of an instance in a subnet has one primary private IP address, which is automatically assigned by OCI and cannot be changed. However, you can also assign secondary private IP addresses to a VNIC, either manually or automatically, up to a maximum of 31 per VNIC. A private IP address can have an optional public IP address assigned to it, which allows the instance to communicate with the internet. A public IP address can be either ephemeral or reserved, depending on whether you want to keep it after stopping or terminating the instance. A private IP address can only have a public IP address assigned to it if it resides in a public subnet, which means that the subnet's route table has a route rule that directs traffic to the internet gateway.


NEW QUESTION # 42
You are using the Oracle Cloud Infrastructure (OCI) Vault service to create and manage Secrets. For your database password, you have created a secret and rotated the secret one time. The secret versions are as follows:
-----------------------------------------
2 (latest) | Current
1 | Previous
You later realize that you have made a mistake in updating the secret content for version 2 and want to rollback to version 1.
What should you do to rollback to version 1?

  • A. Deprecate version 2 (latest). Create new Secret version 3. Create soft link from version 3 to version 1.
  • B. From the version 2 (latest) menu, select "Rollback" and select version 1 when given the option.
  • C. Create a new secret version 3 and set to Pending. Copy the content of version 1 into version 3.
  • D. From the version 1 menu on the OCI console, select "Promote to Current".

Answer: D

Explanation:
From the version 1 menu on the OCI console, select "Promote to Current". The explanation is that when you promote a secret version to current, it becomes the latest version of the secret and is used by default when you access the secret. This way, you can rollback to a previous version of the secret without creating a new version.


NEW QUESTION # 43
Your DevOps team needs to interconnect the on-premises network to the Oracle Cloud Infrastructure (OCI) resources, such as a managed database that resides in a private subnet. They indicate that they have a low budget and their bandwidth requirements are minimal, so you decide that a site-to-site VPN is the best option.
They provide you with their router public IP address. You need to create an object in OCI that represents this router. Which object would you create?

  • A. IPSec Tunnel
  • B. Internet Gateway
  • C. Virtual Network Interface Card (vNIC)
  • D. Dynamic Routing Gateway (DRG)
  • E. Customer Premises Equipment (CPE)
  • F. Bastion Host

Answer: E

Explanation:
Customer Premises Equipment (CPE). The explanation is that CPE is an object in OCI that represents your on-premises router or VPN device that connects to your VCN via a site-to-site VPN. A site-to-site VPN is a secure and encrypted connection between your on-premises network and your VCN over the public internet. To set up a site-to-site VPN, you need to create a CPE object with your router's public IP address and other information, such as vendor and platform. You also need to create a Dynamic Routing Gateway (DRG) object in your VCN and attach it to your VCN. Then, you need to create an IPSec connection between your CPE and DRG, which will create two redundant VPN tunnels for high availability.


NEW QUESTION # 44
You have a high-demand web application running on Oracle Cloud Infrastructure (OCI). Your tenancy administrator has set up a schedule-based autoscaling policy on instance pool with an initial size of 5 instances for the application.
Policy 1:
Target pool size:10 instances
Execution time:8:30 a.m. on every Monday through Friday, in every month, in every year Cron expression:0 30 8 ? * MON-FRI * Which statement accurately explains the goal of this policy?

  • A. Goal: A recurring monthly schedule. On all days of the month, set the initial pool size to 5 instances. At
    8.30 a.m., on every day of the month, scale out to 10 instances.
  • B. Goal: A recurring daily schedule. On weekday mornings at 8.30 a.m., scale out to 10 instances.
  • C. Goal: A one-time schedule with only one scaling out event. At 8:30 a.m., on December 31, 2021, scale the instance pool to 10 instances from 5.
  • D. Goal: A recurring weekly schedule. On all days of the week at 8.30 a.m., scale out the pool to 10 instances from the initial size of 5

Answer: B

Explanation:
The explanation is that a schedule-based autoscaling policy allows you to adjust the size of your instance pool based on a cron expression that specifies the date and time of the scaling action. The cron expression consists of six fields: seconds, minutes, hours, day of month, month, and day of week. In this case, the cron expression is 0 30 8 ? * MON-FRI *, which means that the scaling action will occur at 8:30 a.m. on every Monday through Friday, regardless of the day of month or month. Therefore, the goal of this policy is to scale out the instance pool to 10 instances on weekday mornings at 8:30 a.m.


NEW QUESTION # 45
......

1z0-1072-23 PDF Dumps Extremely Quick Way Of Preparation: https://passleader.realexamfree.com/1z0-1072-23-real-exam-dumps.html