1Z0-1072-20 試験問題を無料オンラインアクセス

You are tasked with creating a highly available clustered application on Oracle Cloud Infrastructure consisting of three nodes. The round-trip latency between nodes must be less than 500 µs (micro-seconds) and your cluster should be resilient to hardware failure.
What is the recommended deployment strategy?

• A.Deploy the cluster nodes in a single region and deploy each node into a different AD. Select the same fault domain in each AD to ensure consistency.
• B.Deploy the cluster nodes in a single region and deploy each node in different fault domains within a single AD.
• C.Deploy the cluster nodes in a single region and deploy each node into a different AD.
• D.Deploy the cluster nodes in two separate regions and take advantage of multiple availability domains (ADs) in each region.

You need to set up instance principals so that an application running on an instance can call Oracle Cloud Infrastructure (OCI) public services, without the need to configure user credentials.
A developer in your team has already configured the application built using an OCI SDK to authenticate using the instance principals provider.
Which is NOT a necessary step to complete this set up?

• A.Create a policy granting permissions to the dynamic group to access services in your compartment or tenancy.
• B.Deploy the application and the SDK to all the instances that belong to the dynamic group.
• C.Create a dynamic group with matching rules to specify which instances you want to allow to make API calls against services.
• D.Generate Auth Tokens to enable instances in the dynamic group to authenticate with APIs.

Which statement is true about Oracle Cloud Infrastructure (OCI) object storage support for server-side encryption?

• A.You must manually enable server-side encryption for each object as you upload to OCI object storage
• B.You must manually decrypt the data when retrieving from OCI object storage
• C.Only the object data is encrypted and the user-defined metadata that is associated with the object is not encrypted
• D.Objects are automatically encrypted as they are uploaded to object storage and decrypted upon retrieval

A customer has established an Oracle Cloud Infrastructure (OCI) FastConnect connection to OCI. The virtual circuit is up and routes are being advertised from the customer's end, however the customer is unable to ping from compute instances inside the virtual cloud network (VCN) to servers residing in its on-premises data center.
Which two options on OCI would remedy this situation? (Choose two.)

• A.Modify the default VCN route table to add a route back to the customer's on-premises network via the DRG.
• B.Modify the security list associated with the VCN subnet in which the instance resides. Add a stateful ingress rule to allow ICMP traffic from anywhere.
• C.Modify the route table associated with the VCN subnet in which the instance resides. Add a route to the customer's on-premises network via the Dynamic Routing Gateway (DRG).
• D.Modify the security list associated with the VCN subnet in which the instance resides. Add a stateful egress rule to allow ICMP traffic to the customer's on-premises network.

A company currently uses Microsoft Active Directory as its identity provider. The company recently purchased Oracle Cloud Infrastructure (OCI) to leverage the cloud platform for its test and development operations. As the administrator, you are now tasked with giving access only to developers so that they can start creating resources in their OCI accounts.
Which step will you perform to achieve this requirement?

• A.Create a new user account for each user, and then create policies to provide access to developers.
• B.Create a group for developers on OCI, export all the developers from Microsoft Active Directory, and then import them into the Identity and Access Management (IAM) group.
• C.Federate all Microsoft Active Directory groups with OCI to allow users to use their existing credentials.
• D.Create a group for developers on OCI and map the group to a similar group in Microsoft Active Directory during the federation process.