Online 1Z0-1067-25 Practice Test

Question 1

As a solution architect of the Oracle Cloud Infrastructure tenancy, you have been asked to provide members of group CloudOps the ability to view and retrieve monitoring metrics, but only for all monitoring-enabled compute instances. Which policy statement will you define to grant this access?

Options :

A : Allow group CloudOps to read metrics in tenancy where tar-get.metrics.namespace=oci_computeagent

B : Allow group CloudOps to read compute-metrics in tenancy

C : Restricting monitoring access only to compute instances metrics is not possible.

D : Allow group CloudOps to read metrics in tenancy where tar-get.metrics.monitoring='oci_computeagent'

Answer: A

Question 2

You have been asked to ensure that in-transit communication between an Oracle Cloud Infrastructure (OCI) compute instance and an on-premises server (192.168.10.10/32) is encrypted. The instances communicate using HTTP. The OCI Virtual Cloud Network (VCN) is connected to the on-premises network by two separate connections: a Dynamic IPsec VPN tunnel and a FastConnect virtual circuit. No static configuration has been added. What solution should you recommend? (Choose the best answer.)

Options :

A : The instances will communicate by default over IPsec VPN, which ensures data is encrypted in-transit.

B : Advertise a 192.168.10.10/32 router over the FastConnect.

C : Advertise a 192.168.10.10/32 route over the VPN.

D :

The instances will communicate by default over the FastConnect private virtual circuit, which ensures data is encrypted in-transit.

Answer: C

Question 3

A developer has created a file system in the Oracle Cloud Infrastructure (OCI) File Storage service. She then

launches an Oracle Linux compute instance and mounts the file system successfully on this instance. The next

day, she tries writing to the file system from the compute instance using the following command: touch /mnt

/yourmountpoint/helloworld.txt But receives an error message: touch: cannot touch '/mnt/yourmountpoint

/helloworld.txt': Permission denied What might be the reason for this error?

Options :

A : Service limits or quota for file system writes have been breached.

B : User is connecting as the default Oracle Linux user opc instead of the root user.

C :

User is not part of any OCI Identity and Access Management (IAM) group with write permissions to the File Storage service.

D : The touch command is not available in Oracle Linux, by default.

Answer: B

Question 4

You have a Terraform configuration that includes a VCN and three compute instances in the VCN. The configuration also includes a cloud-init script for each compute instance. You upload the configuration to OCI Resource Manager and run an apply job. Which option correctly describes the order of execution, assuming the configuration does not model explicit dependencies?

Options :

A :

Resource Manager provisions the VCN, then the compute instances one at a time. Terraform does not wait for the cloud-init script of each instance to complete before proceeding to the next instance.

B : Resource Manager provisions the VCN, then all compute instances in parallel.

C :

Resource Manager provisions the VCN, then the compute instances one at a time. Terraform waits for the cloud-init script of each instance to complete before proceeding to the next instance.

D : Resource Manager provisions the resources from top to bottom in the configuration file.

Answer: B

Question 5

You run a large global application with 90% of customers based in the US and Canada. You want to be able to test a new feature and allow a small percentage of users to access the new version of your application. What Oracle Cloud Infrastructure Traffic Management steering policy should you utilize? (Choose the best answer.)

Options :

A : Geolocation steering

B : Load Balancer

C : IP Prefix steering

D : ASN steering

Answer: B

EXPERTY DESIGNED 1Z0-1067-25 PRACTICE TEST