Online Access Free 1z0-1067-24 Practice Test

As a cloud operations engineer responsible for a Rails application on multiple compute instances in an OCI subnet your database team recently provided you with a new config/database. yml file to direct Rails to use a new database back end. You need to update this file on each compute instance and restart Rails in a rolling fashion.
Which tool is best suited for this task?

• A.OCI CLI
• B.Ansible
• C.Terraform
• D.Oracle Cloud Agent

You have a Linux compute instance located in a public subnet in a VCN which hosts a web application. The security list attached to subnet containing the compute instance has the following stateful ingress rule.

The Route table attached to the Public subnet is shown below. You can establish an SSH connection into the compute instance from the internet. However, you are not able to connect to the web server using your web browser.

Which step will resolve the issue? (Choose the best answer.)

• A.In the security list, remove the ssh rule.
• B.In the route table, add a rule for your default traffic to be routed to NAT gateway.
• C.In the route table, add a rule for your default traffic to be routed to service gateway.
• D.In the security list, add an ingress rule for port 80 (http).

You are using Oracle Cloud Infrastructure (OCI) services across several regions: us-phoenix-1, us-ashburn-1, uk-london-1 and ap-tokyo-1. You have creates a separate administrator group for each region: PHX-Admins, ASH-Admins, LHR-Admins and NRT-Admins, respectively. You want to restrict admin access to a specific region. E.g., PHX-Admins should be able to manage all resources in the us phoenix-1 region only and not any other OCI regions. What IAM policy syntax is required to restrict PHX-Admins to manage OCI resources in the us-phoenix-1 region only? (Choose the best answer.)

• A.Allow group PHX-Admins to manage all-resources in tenancy where re-guest.target='us-phoenix-1'
• B.Allow group PHX-Admins to manage all-resources in tenancy where re-guest.location='us-phoenix-1'
• C.Allow group PHX-Admins to manage all-resources in tenancy where re-guest.region='us-phoenix-1'
• D.Allow group PHX-Admins to manage all-resources in tenancy where re-guest.permission= 'us-phoenix-1'

You set up a bastion host in your VCN to only allow your IP address (140.19.2.140) to establish SSH connections to your Compute Instances that are deployed in a private subnet. The Compute Instances have an attached Network Security Group with a Source Type: Network Security Group (NSG), Source NSG: NSG-050504. To secure the bastion host, you added the following ingress rules to its Network Security Group:
However, after checking the bastion host logs, you discovered that there are IP addresses other than your own that can access your bastion host. What is the root cause of this issue? (Choose the best answer.)

• A.The Security List allows access to all IP address which overrides the Network Security Group ingress rules.
• B.All compute instances associated with NSG-050504 are also able to connect to the bastion host.
• C.The port 22 provides unrestricted access to 140.19.2.140 and to other IP address.
• D.A netmask of /32 allows all IP address in the 140.19.2.0 network, other than your IP 140.19.2.140

You have a 750 MIB file in an Oracle Cloud Infrastructure (OCI) Object Storage bucket. You want to download the file in multiple parts to speed up the download using the OCI CLI. You also want to configure each part size to be 128 MIB. Which is the correct OCI CLI command for this operation? (Choose the best answer.)

• A.oci os object download -ns my-namespace -bn my-bucket --name my-large-object --resume-put --multipart-download-threshold 500 --part-size 128
• B.oci os object download -ns my-namespace -bn my-bucket --name my-large-object --multipart-download-threshold 750 --parallel-download-count 128
• C.oci os object get -ns my-namespace -bn my-bucket --name my-large-object --multipart-download-threshold 750 --parallel-download-count 128
• D.oci os object get -ns my-namespace -bn my-bucket --name my-large-object --multipart-download-threshold 500 --part-size 128