Oracle Cloud Infrastructure 2021 Architect Associate (1z0-1072-21) Free Practice Test

Question 1

Which three are default Virtual Cloud Network (VCN) components? (Choosethree.)

A. DHCP options

B. Dynamic Routing Gateway

C. Internet Gateway

D. Route Table

E. Security List

Correct Answer: A,D,E

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

You have been asked to create anIdentity and Access Management (IAM) user that will authenticate to Oracle Cloud Infrastructure (OCI) API endpoints. This user must not be given credentials that would allow them to log into the OCI console.
Which two authentication options can you use? (Choose two.)

A. SSH key pair

B. PEM Certificate file

C. Auth token

D. SSL certificate

E. API signing key

Correct Answer: C,E

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

As a solution architect, you are showcasing the Oracle Cloud Infrastructure (OCI) Object Storage feature about Object Versioning to a customer.
Which statement is true in regards to OCI Object StorageVersioning?

A. A bucket that is versioning-enabled can have only andalways will have a latest version of the object in the bucket.

B. By default, object versioning is disabled on a bucket.

C. Objects are physically deleted from a bucket when versioning is enabled.

D. Object versioning does not provide data protection against accidental or malicious object update, overwrite, or deletion.

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

You work for a health insurance company that stores a large number of patient health records in an Oracle Cloud Infrastructure (OCI) Object Storage bucket named "HealthRecords".
Each record needs to be securely stored for a period of 5 years for regulatory compliance purposes and cannot be modified, overwritten or deleted during this time period.
What can you do to meet this requirement?

A. Enable versioning on the HealthRecords bucket.

B. Enable encryption on the HealthRecords bucket using your own vault master encryption keys.

C. Create an OCI Object Storage time-bound Retention Rule on the HealthRecords bucket for five years.
Enable Retention Rule Lock on this bucket.

D. Create an OCI Object Storage Lifecycle Policies rule to archive objects in the HealthRecords bucket for five years.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

You aredesigning a two-tier web application in Oracle Cloud Infrastructure (OCI). Your clients want to access the web servers from anywhere, but want to prevent access to the database servers from the Internet.
Which is the recommended way to design the networkarchitecture?

A. Create public subnets for web servers and private subnets for database servers in your VCN, and associate separate security listsand route tables for each subnet.

B. Create public subnets for web servers and private subnets for database servers in your virtual cloud network (VCN), and associate separate internet gateways for each subnet.

C. Create public subnets for web servers and associate adynamic routing gateway with that subnet, and a private subnet for database servers with no association to dynamic gateway.

D. Create a single public subnet for your web servers and database servers, and associate only your web servers to internet gateway.

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

When you try to create an instance on Oracle Cloud Infrastructure (OCI), what are three valid sources to choose theimage from?

A. Partner Images

B. Custom Image

C. Instance Pools

D. Object Storage

E. Bare Metal Instance

F. Dedicated VM Host

G. Platform Images

Correct Answer: A,B,G

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 7

Which two statements are true about Database Cloud Service (DBCS)? (Choose two.)

A. Data Guard as a Service is offered among regions.

B. You cannot manage the database as sys/sysdba.

C. You have full control over backup schedule and retention.

D. You can manageOracle parameters at a global system level.

Correct Answer: C,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 8

With regard to Oracle Cloud Infrastructure Load Balancing service, which two actions will occur when a backend server that is registered with a backend set ismarked to drain connections?

A. All connections to this backend server are forcibly closed after a timeout period.

B. Requests to this backend server are redirected to a user-defined error page.

C. All existing connections to this backend sever will be immediately closed.

D. Connections to this backend server will remain open until all in-flight requests are completed.

E. All new connections to this backend server are disallowed.

Correct Answer: D,E

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 9

Which of the following statement is true regarding Oracle Cloud Infrastructure Object Storage Pre-Authenticated Requests?

A. It is not possible to create pre-authenticated requests for the buckets, but only for the objects

B. Pre-authenticated requests don't have an expiration

C. It Is not possible to create pre-authenticated requests for "archive" storage tier

D. Changing the bucket visibility does not change existing pre-authenticated requests

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 10

What does Terraform use to create, manage, and manipulate infrastructure resources?

A. resources

B. provisioner

C. instances

D. provider

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 11

Which two statements are true about encryption on Oracle Cloud Infrastructure (OCI)? (Choosetwo.)

A. A customer is responsible for data encryption in all services of OCI.

B. By default, object storage and block storage are encrypted at rest.

C. By default, NVMe drives are encrypted but theblock volume service is not.

D. By default, DB Systems offers an encrypted database.

Correct Answer: B,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 12

Which two Oracle Cloud Infrastructure services use a Dynamic Routing Gateway?

A. Local Peering

B. OCI FastConnect Public Peering

C. Internet Gateway

D. OCI FastConnect Private Peering

E. OCI IPSec VPN Connect

Correct Answer: D,E

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 13

A customer has launched a compute Instance in the Virtual Cloud Network (VCN), which hasan Internet gateway, a service gateway, a default security lists and a default route table. Customer has opened up Port 22 in the security lists attached to the compute instance subnet, however is still unable to connect to compute instances using ssh.
Which option would remedy this situation?

A. Modify the route table associated with the VCN subnet in which the instance resides. Add a following route to the route table.
Destination CIDR: 0.0.0.0/0
Target: Dynamic Routing Gateway (DRG)

B. Modify the security list associated with the VCN subnet in which the instance resides. Add a stateful egress rule to allow icmp traffic in addition to the port 22.

C. Modify the route table associated with the VCN subnet in which the instance resides. Add a following route to the route table.
Destination CIDR: 0.0.0.0/0
Target: Service Gateway (SGW)

D. Modify the route table associated with the VCN subnet in which the instance resides. Add a following route to the route table.
Destination CIDR: 0.0.0.0/0
Target: Internet Gateway (IGW)

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 14

You are running a mission-critical database application in Oracle Cloud Infrastructure (OCI). You take regular backups of your DB system to OCI object storage. Recently, you notice a failed database backup status in the console.
What step can you take to determine the cause of the backup failure?

A. Don't restart the dcsagent program even if it has a status of stop/waiting.

B. Make sure that the database is not active and running while the backup is in progress.

C. Ensure the database archiving mode is set to NOARCHIVELOG.

D. Ensure that your database host can connect to OCI object storage.

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 15

Which three are capabilities of the dbaascli utility? (Choose three.)

A. Open port 1521 in the VCN to allow for traffic to the listener

B. Switchover and failover in an Oracle Guard configuration

C. Patching the primary database deployment

D. Start and open the database instance

E. Clone a DB

Correct Answer: B,C,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

Oracle Cloud Infrastructure 2021 Architect Associate (1z0-1072-21) Free Practice Test