Online Access Free 1z0-1072-21 Practice Test

Which two statements about file storage service (FSS) are accurate? (Choose two.)

• A.FSSleverages UNIX user group and permission checking for file access security
• B.Encryption of file system in FSS is optional
• C.Security lists can be used asa virtual firewall to prevent an instance from mounting an FSS mount target within the same subnet
• D.Data in transit to an FSS mount target is encrypted
• E.Identity and Access Management (IAM) controls which file systems are mountable by which instances

You have two NFS clientsrunning in two different subnets within the same Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN). You have created a shared file system for the two NFS clients who want to connect to the same file system, but you want to restrict one of the clients to have READ access while the other has READ/Write access. Which OCr feature would you leverage to meet this requirement?

• A.Use OCI Identity Access Management to control access for the NFS clients
• B.Use VCN security rules to control access for the NFS clients
• C.Use File Storage NFS Export Options to control access for the NFS clients
• D.Use NFS security to control access for the NES clients

You have an application deployed in Oracle Cloud Infrastructure running only in the Phoenix region. You were asked to create a disaster recovery (DR)plan that will protect against the loss of critical data. The DR site must be at least 500 miles from your primary site and data transfer between the two sites must not traverse the public Internet.
Which is the recommended disaster recovery plan?

• A.Create a DR environment in Ashburn. Associate a dynamic routing gateway (DRG) with the VCN in each region and configure an IPsec VPN connection between the two regions.
• B.Create a DR environment in Ashburn. Associate a DRG with the VCN in each region and create a remote peering connection between the two VCNs.
• C.Create a DR environment in Ashburn and provision a FastConnect virtual circuit using DRG between the regions.
• D.Create a new virtual cloud network (VCN) in the Phoenix region and create a subnet in one availability domain (AD) that is not currently being used by your production systems. Establish VCN peering between the production and DR sites.

Your organization has deployed a large, complex application across multiple compute instances in Oracle Cloud Infrastructure (OCI). These compute instances also have block volume storage attached to them. You want tocreate a time consistent backup of these block volume storage.
Which implementation strategy should be used?

• A.Group volumes in a volume group firstand then use available scripts in OCI
• B.Group volumes in a volume group and create a manual backup of the volume group
• C.Use scripts available in OCI to backup block volume storage
• D.Create a manual backup of each volume

Your company is moving an Internet-facing, 2-tier web application into Oracle Cloud Infrastructure. The application must have a highly availablearchitecture.
Which two design options would you consider? (Choose two.)

• A.Place all web servers behind a public load balancer.
• B.Configure a Dynamic Route Gateway in your VCN and make it highly available.
• C.Configure a NAT instance in your Virtual Cloud Network (VCN). Create a route rule by using the private IP of the NAT instance as a route target for all the private subnets in your VCN.
• D.Create an Internet Gateway and attach it to your VCN. Deploy public load balancer nodes into two Available Domains.