Oracle 1z0-1067-22 Value Pack (Frequently Bought Together)

You are using Oracle Cloud Infrastructure (OCI) services across several regions: us-phoenix-1, us-ashburn-1, uk-london-1 and ap-tokyo-1. You have creates a separateadministrator group for each region: PHX-Admins, ASH-Admins, LHR-Admins and NRT-Admins, respectively.
You want to restrict admin access to a specific region. E.g., PHX-Admins should be able to manage all resources in the us-phoenix-1 region only and not any other OCI regions.
What IAM policy syntax is required to restrict PHX-Admins to manage OCI resources in the us-phoenix-1 region only? (Choose the best answer.)

• A. Allow group PHX-Admins to manage all-resources in tenancy where request.location= 'phx'
• B. Allow group PHX-Admins to manage all-resources in tenancy where request.target= 'phx'
• C. Allow group PHX-Admins to manage all-resources in tenancy where request.permission= 'phx'
• D. Allow group PHX-Admins to manage all-resources in tenancy where request.region= 'phx'

You have been asked to set up connectivity between a client's on-premises network and Oracle Cloud Infrastructure (OCI). The requirements are:
Low latency: The applications are financial and require low latency connectivity intoOCI. Consistency: The application isn't tolerant of performance variation.
Performance: The communications link needs to support up to 1.25 Gbps.
Encryption: The communications link needs to encrypt any data in transit between the on-premises network and OCI Virtual Cloud Network (VCN).
The client wants to implement the above with as low a cost as possible, while meeting all of the requirements.
What should you suggest? (Choose the best answer.)

• A. Provision a site-to-site IPsec VPN between your on-premises network and your virtual cloud network (VCN) using VPNConnect.
• B. Provision FastConnect with a single private virtual circuit.
• C. Provision FastConnect with a single public virtual circuit, and run an IPsec VPN tunnel over the top of this virtual circuit.
• D. Provision FastConnect with a single private virtualcircuit, and run an IPsec VPN tunnel over the top of this virtual circuit.
• E. Provision FastConnect with a single public virtual circuit.

You have a Linux compute instance located in a public subnet in a VCN which hosts a web application. The security list attached to subnet containing the compute instance has the following stateful ingress rule.

The Route table attached to the Public subnet is shown below. You can establish an SSH connection into the computeinstance from the internet. However, you are not able to connect to the web server using your web browser.

Which step will resolve the issue? (Choose the best answer.)

• A. In the route table, add a rule for your default traffic to be routed to service gateway.
• B. In the security list, add an ingress rule for port 80 (http).
• C. In the security list, remove the ssh rule.
• D. In the route table, add a rule for your default traffic to be routed to NAT gateway.

You set up a bastion host in your VCN to only allow your IP address (140.19.2.140) to establish SSH connections to your Compute Instances that are deployed in a private subnet. The Compute Instances have an attached Network Security Group with a Source Type: Network Security Group (NSG), Source NSG:
NSG-050504. To secure the bastion host, you added the following ingress rules to its Network Security Group:

However, after checking the bastion host logs, you discovered that there areIP addresses other than your own that can access your bastion host.
What is the root cause of this issue? (Choose the best answer.)

• A. Allcompute instances associated with NSG-050504 are also able to connect to the bastion host.
• B. The port 22 provides unrestricted access to 140.19.2.140 and to other IP address.
• C. The Security List allows access to all IP address which overrides the Network Security Group ingress rules.
• D. A netmask of /32 allows all IP address in the 140.19.2.0 network, other thanyour IP 140.19.2.140

You have been contracted by a local e-commerce company to assistwith enhancing their online shopping application. The application is currently deployed in a single Oracle Cloud Infrastructure (OCI) region. The application utilizes a public load balancer, application servers in a private subnet, and a database in a separate, private subnet.
The company would like to deploy another set of similar infrastructure in a different OCI region that will act as standby site. In the event of a failure at the primary site, all customers should be routed to the failover site automatically.
After deploying the additional infrastructure within the second region, how should you configure automated failover requirements? (Choose the best answer.)

• A. Create a failover policy in the Traffic Management service. Set the IP address of the public load balancerfor the primary site in answer pool 1. Set the IP address of the public load balancer for the secondary site in answer pool 2. Define a health check to monitor both sites.
• B. Deploy a new load balancer in the primary region. Create one backend set for theprimary application servers and a second backend set for the standby application servers. Create a listener for the primary backend set with a timeout of 3 minutes. Create a listener for the secondary backend set with a timeout of 10 minutes.
• C. Create a new A record in DNS that points to the public load balancer at the secondary site. Create a CNAME for the sub-domain failover that will resolve to the new A record. Inform customers to prepend the website URL with failover if the primary site is unavailable.
• D. Create a load balancer policy in the Traffic Management service. Configure one answerfor each site. Set the answer for the primary site with a weight of 10 and the answer for the secondary site with a weight of 100.