Online Access Free 1Z0-1067 Practice Test

You have been tasked with allocating an identity to one of your compute instances that needs to retrieve and process static files that are stored in an Object Storage bucket. After creating a dynamic group with a matching rule that specifies the OCID of the compute instance, you discover the that API calls are failing.
Which step should you take to resolve this issue?

• A.Create IAM policies to permit users in these groups to make API calls against Oracle Cloud Infrastructure services.
• B.Initial credentials must be initialized using OCI console for the Instance in dynamic group. This can be a bulk operation.
• C.Once instances are in dynamic group no additional steps are required.
• D.Create IAM policies to permit instances in these groups to make API calls against Oracle Cloud Infrastructure services.

You set up a bastion host in your VCN to only allow your IP address (140.19.2.140) to establish SSH connections to your Compute instances that are deployed private subnet. The Compute instances have an attached Network Security Group with a Source Type: Network security Group (NSG) , Source NSG: -050504. To secure the bastion host, you added the following ingress rules to its Network Security Group:

However, after checking the bastion host logs, you discovered that there are IP addresses other than your own that can access your bastion host.
What is the root cause of this issue?

• A.The Security List allows access to all IP address which overrides the Network Security Group ingress rules.
• B.The port 22 provides unrestricted access to 140.19.2.140 and to other IP address
• C.All compute instances associated with NSG-050504 are also able to connect to the bastion host.
• D.A netmask of /32 allows all IP address in the 140.19.2.0 network, other than your IP 110.19.2.140

You are working as a Cloud Operations Administrator for your company. They have different Oracle Cloud Infrastructure (OCI) tenancies for development and production workloads. Each tenancy has resources in two regions - uk-london-1 and eu-frankfurt-1. You are asked to manage all resources and to automate all the tasks using OCI Command Line Interface (CLI).
Which is the most efficient method to manage multiple environments using OCI CLI?

• A.Create environment variables for the sets of credentials that align to each combination of tenancy, region, and environment.
• B.Run OCI setup config to create new credentials for each environment every time you want to access the environment.
• C.Use different bash terminals for each environment.
• D.Use OCI CLI profiles to create multiple set of credentials in your config file, and reference the appropriate profile at runtime.

You have created several block volumes in the us-phoenix-1 region in a specific compartment. The compartment can be identified by the following Oracle Cloud Infrastructure (OCI) unique identifier, or ocid1.compartment.oc1.phx..exampleuniquelD Your manager has asked you to leverage the OCI monitoring service and write a metric query showing all read IOPS at a one-minute interval, filtered to this compartment and aggregated for the maximum.
Which metric query will you create?

• A.IopsWrite[lm]{compartmentId=Hocidl.compartment.ocl.phx..exampleuniquelD"}.mean()
• B.IopsRead[lm]{compartmentId = "odd 1.compartment.ocl.phx..exampleuniquelD"}.grouping().mean()
• C.IopsRead[lm]{compartmentId="ocldl.compartment.ocl.phx..exampleuniquelD"}.max()
• D.IopsRead[lm]{compartmentId="ocidl.compartment.ocl.phx..exampleuniquelD"}.grouplng().max()

You have been asked to investigate a potential security risk on your company's Oracle Cloud Infrastructure (OCI) tenancy. You decide to start by looking through the audit logs for suspicious activity.
How can you retrieve the audit logs using the OCI Command Line Interface (CLI)?

• A.oci audit event list --start-time $start-time --end-time $end-time --tenancy-id $tenancy-id
• B.oci audit event list --start-time $start-time --compartment-id $compartment-id
• C.oci audit event list --start-time $start-time --end-time $end-time --compartment-id $compartment-id
• D.oci audit event list --end-time $end-time --compartment-id $compartment-id