1Z0-1067-21 무료 덤프문제 온라인 액세스

You are working as a Cloud Operations Administrator for your company. They have different Oracle Cloud Infrastructure (OCI) tenancies for development and production workloads. Each tenancy has resources in two regions - uk-london-1 and eu-frankfurt-1. You are asked to manage all resources and to automate all the tasks using OCI Command Line Interface (CLI).
Which is the most efficient method to manage multiple environments using OCI CLI? (Choose the best answer.)

• A.Run oci setup config to create new credentials for each environment every time you want to access the environment.
• B.Use OCI CLI profiles to create multiple sets of credentials in your config file, and reference the appropriate profile at runtime.
• C.Use different bash terminals for each environment.
• D.Create environment variables for the sets of credentials that align to each combination of tenancy, region, and environment.

Which two statements are TRUE about Object Storage data security and encryption in Oracle Cloud Infrastructure (OCI)? (Choose two.)

• A.Data needs to be decrypted on the client side before retrieving it.
• B.All traffic to and from Object Storage service is encrypted using TLS.
• C.OCI Vault Management is used by default to provide data security.
• D.Client-side encryption is managed by the customer.
• E.A VPN connection to OCI is required to ensure secure data transfer to an object storage bucket.

Multiple teams are sharing a tenancy in Oracle Cloud Infrastructure (OCI). You are asked to figure out an appropriate method to manage OCI costs.
Which is NOT a valid technique to accurately attribute costs to resources used by each team? (Choose the best answer.)

• A.Create separate compartment for each team. Use the OCI cost analysis tools to filter costs by compartment.
• B.Create a Cost-Tracking tag. Apply this tag to all resources with team information. Use the OCI cost analysis tools to filter costs by tags.
• C.Define and use tags for resources used by each team. Analyze usage data from the OCI Usage Report which has detailed information about resources and tags.
• D.Create an Identity and Access Management (IAM) group for each team. Create an OCI budget for each group to track spending.

You have a Linux compute instance located in a public subnet in a VCN which hosts a web application. The security list attached to subnet containing the compute instance has the following stateful ingress rule.

The Route table attached to the Public subnet is shown below. You can establish an SSH connection into the compute instance from the internet. However, you are not able to connect to the web server using your web browser.

Which step will resolve the issue? (Choose the best answer.)

• A.In the security list, remove the ssh rule.
• B.In the route table, add a rule for your default traffic to be routed to service gateway.
• C.In the route table, add a rule for your default traffic to be routed to NAT gateway.
• D.In the security list, add an ingress rule for port 80 (http).

You set up a bastion host in your VCN to only allow your IP address (140.19.2.140) to establish SSH connections to your Compute Instances that are deployed in a private subnet. The Compute Instances have an attached Network Security Group with a Source Type: Network Security Group (NSG), Source NSG: NSG-050504. To secure the bastion host, you added the following ingress rules to its Network Security Group:

However, after checking the bastion host logs, you discovered that there are IP addresses other than your own that can access your bastion host.
What is the root cause of this issue? (Choose the best answer.)

• A.The Security List allows access to all IP address which overrides the Network Security Group ingress rules.
• B.All compute instances associated with NSG-050504 are also able to connect to the bastion host.
• C.A netmask of /32 allows all IP address in the 140.19.2.0 network, other than your IP 140.19.2.140
• D.The port 22 provides unrestricted access to 140.19.2.140 and to other IP address.