Free Access Oracle.1Z0-1072-20.v2022-02-05.q104 Practice Test (Page 19)

Question 86

You created a virtual cloud network (VCN) with three private subnets. Two of the subnets contain application servers and the third subnet contains a DB System. The application requires a shared file system so you have provisioned one using the file storage service (FSS).
You also created the corresponding mount target in one of the application subnets. The VCN security lists are properly configured so that both application servers and the DB system can access the file system. The security team determines that the DB System should have read-only access to the file system.
What change should you make to satisfy this requirement?

A.Modify the security list associated with the subnet where the mount target resides. Change the ingress rules corresponding to the DB System subnet to be stateless.

B.Create an instance principal for the DB System. Write an Identity and Access Management (IAM) policy that allows the instance principal read-only access to the file storage service.

C.Connect via SSH to one of the application servers where the file system has been mounted. Use the Unix command chmod to change permissions on the file system directory, allowing the database user read only access.

D.Create an NFS export option that allows READ_ONLY access where the source is the CIDR range of the DB System subnet.

Question 87

Which two statements are true about encryption on Oracle Cloud Infrastructure (OCI)? (Choose two.)

A.By default, object storage and block storage are encrypted at rest.

B.A customer is responsible for data encryption in all services of OCI.

C.By default, DB Systems offers an encrypted database.

D.By default, NVMe drives are encrypted but the block volume service is not.

Question 88

Which two resources reside exclusively in a single Oracle Cloud Infrastructure Availability Domain? (Choose two.)

A.Identity and Access Management Groups

B.Object Storage

C.Web Application Firewall policy

D.Block volume

E.Compute instance

Question 89

You have created a public subnet in a VCN, and your public subnet has a Route Table, a Security List, and an Internet Gateway. However, none of the compute instances can connect to the Internet.
Which two are possible reasons for the connectivity issue? (Choose two.)

A.There is no Dynamic Routing Gateway (DRG) associated with the VCN.

B.The Route Table has no default route for routing traffic to the Internet Gateway.

C.There is no stateful ingress rule in the Security List associated with the public subnet.

D.There is no stateful egress rule in the Security List associated with the public subnet.

Correct Answer: B,D

Explanation
An internet gateway as an optional virtual router that connects the edge of the VCN with the internet. To use the gateway, the hosts on both ends of the connection must have public IP addresses for routing. Connections that originate in your VCN and are destined for a public IP address (either inside or outside the VCN) go through the internet gateway. Connections that originate outside the VCN and are destined for a public IP address inside the VCN go through the internet gateway.
Working with Internet Gateways
You create an internet gateway in the context of a specific VCN. In other words, the internet gateway is automatically attached to a VCN. However, you can disable and re-enable the internet gateway at any time.
Compare this with a dynamic routing gateway (DRG), which you create as a standalone object that you then attach to a particular VCN. DRGs use a different model because they're intended to be modular building blocks for privately connecting VCNs to your on-premises network.
For traffic to flow between a subnet and an internet gateway, you must create a route rule accordingly in the subnet's route table (for example, destination CIDR = 0.0.0.0/0 and target = internet gateway). If the internet gateway is disabled, that means no traffic will flow to or from the internet even if there's a route rule that enables that traffic. For more information, see Route Tables.
For the purposes of access control, you must specify the compartment where you want the internet gateway to reside. If you're not sure which compartment to use, put the internet gateway in the same compartment as the cloud network. For more information, see Access Control.
You may optionally assign a friendly name to the internet gateway. It doesn't have to be unique, and you can change it later. Oracle automatically assigns the internet gateway a unique identifier called an Oracle Cloud ID (OCID). For more information, see Resource Identifiers.
To delete an internet gateway, it does not have to be disabled, but there must not be a route table that lists it as a target.
AS per compute instances can connect to the Internet so you use egress no ingress

Question 90

You have provisioned an Autonomous Data Warehouse (ADW) database with 16 enabled OCPUs and need to configure the consumer group for your application.
Which two are true when deciding the number of sessions for each application? (Choose two.)

A.The MEDIUM and LOW consumer group can run up to 16 concurrent SQL statements if HIGH consumer group has 0 SQL statements

B.The HIGH consumer group can run up to 16 concurrent SQL statements as long as MEDIUM and LOW consumer groups have 0 SQL statements

C.The MEDIUM consumer group can run 20 concurrent SQL statements when HIGH consumer group has
0 SQL statements

D.The HIGH consumer group can run up to 16 concurrent SQL statements in addition to 32 concurrent SQL statements in MEDIUM and LOW consumer group each

E.The HIGH consumer group can run 3 concurrent SQL statements when MEDIUM consumer group has
0 SQL statements

Other Version: 2116Oracle.1Z0-1072-20.v2022-07-18.q113; 84Oracle.Exams4sures.1Z0-1072-20.v2021-12-01.by.abbott.116q.pdf

Latest Upload: 117Oracle.1Z0-1057-23.v2025-09-10.q47; 150Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 162TheSecOpsGroup.CNSP.v2025-09-08.q20; 220CFAInstitute.ESG-Investing.v2025-09-08.q173; 155PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 145Salesforce.Data-Architect.v2025-09-05.q216; 139Adobe.AD0-E605.v2025-09-05.q50; 183Nutanix.NCP-MCI-6.10.v2025-09-05.q55; 114Oracle.1z0-591.v2025-09-05.q104

Question 86

Question 87

Question 88

Question 89

Question 90

Download PDF File