1z0-1067-22 試験問題を無料オンラインアクセス

You set up a bastion host in your VCN to only allow your IP address (140.19.2.140) to establish SSH connections to your Compute Instances that are deployed in a private subnet. The Compute Instances have an attached Network Security Group with a Source Type: Network Security Group (NSG), Source NSG:
NSG-050504. To secure the bastion host, you added the following ingress rules to its Network Security Group:

However, after checking the bastion host logs, you discovered that there areIP addresses other than your own that can access your bastion host.
What is the root cause of this issue? (Choose the best answer.)

• A.Allcompute instances associated with NSG-050504 are also able to connect to the bastion host.
• B.A netmask of /32 allows all IP address in the 140.19.2.0 network, other thanyour IP 140.19.2.140
• C.The port 22 provides unrestricted access to 140.19.2.140 and to other IP address.
• D.The Security List allows access to all IP address which overrides the Network Security Group ingress rules.

You have been asked to review a network design for Oracle Cloud Infrastructure (OCI) by a major client. The client's IT team needs to provision two Virtual Cloud Networks (VCNs) for a major application. The application uses a large number of virtual machine instances. Additionally, in the future, a VCN peering will be required to allow connectivity between the VCNs.
Which of the following are valid IP ranges to consider? (Choose the best answer.)

• A.10.0.8.0/21 and 10.0.16.0/22
• B.10.0.0.0/30 and 192.168.0.0/30
• C.10.0.0.0/16 and 10.0.64.0/24
• D.10.0.0.0/8 and 11.0.0.0/8

You have a web application running on Oracle Cloud Infrastructure (OCI) that lets users log in with a username and password. You notice that an attacker has tried to use SQL comment "--" to alter the database query, remove the password check and log in as a user. You decide to prevent any future attacks.
Which of the following OCI services or features would you choose tosafeguard your application? (Choose the best answer.)

• A.Web Application Framework (WAF)
• B.Data Safe
• C.Network Security Group
• D.Vault

You have been asked to investigate a potential security risk on your company's Oracle Cloud Infrastructure (OCI) tenancy. You decide to start by looking throughthe audit logs for suspicious activity.
How can you retrieve the audit logs using the OCI Command Line Interface (CLI)? (Choose the best answer.)

• A.oci audit event list --start-time $start-time --end-time $end-time -- compartment-id $compartment-id
• B.oci audit event list --end-time $end-time --compartment-id $compartment-id
• C.oci audit event list --start-time $start-time --end-time $end-time --tenancy-id
  $tenancy-id
• D.oci audit event list --start-time $start-time --compartment-id $compartment-id

You are working with Terraform on your laptop and have been tasked with spinning up multiple compute instances in Oracle Cloud Infrastructure (OCI) for a project. In addition, you are also required tocollect IP addresses of provisioned instances and write them to a file and save it in your laptop.
Which specific Terraform functionality can help accomplish this task? (Choose the best answer.)

• A.Terraform remote-exec
• B.Terraform remote state
• C.Terraform local-exec
• D.Terraform modules