This page was exported from Exam for engine [ http://blog.test4engine.com ] Export date:Mon Nov 18 4:15:32 2024 / +0000 GMT ___________________________________________________ Title: [Q14-Q35] Verified 1Z0-1085-21 dumps Q&As - Pass Guarantee Exam Dumps Test Engine [2022] --------------------------------------------------- Verified 1Z0-1085-21 dumps Q&As - Pass Guarantee Exam Dumps Test Engine [2022] 1Z0-1085-21 dumps and 100 unique questions QUESTION 14Which statement is true for an oracle cloud Infrastructure (OCI) compute instance?  Compute instance always get a public IP address  Compute instance does not use a boot volume  Compute instance cannot leverage auto scaling feature  Compute instance always get a private IP address ExplanationWhen you create an instance, the instance is automatically attached to a virtual network interface card (VNIC) in the cloud network’s subnet and given a private IP address from the subnet’s CIDR. You can let the IP address be automatically assigned, or you can specify a particular address of your choice. The private IP address lets instances within the cloud network communicate with each other.QUESTION 15Which security service allows single sign on to identity providers?  Web Application Firewall  Data Safe  MFA  Federation Federation* Enterprises use an identity provider IdP to manage user login/passwords and to authentications* When someone in your company wants to use OCI Console , they must sign in with a user login and password.* Your administrators can federate with a supported IdP so that each employee can use an existing login and password (and not create a new set to use OCI)* Federated users choose which IdP to use for sign in, and then they’re redirected to that IdP’s sign in experience for authentication* After entering their login and password, they are authenticated by the IdP and redirected to the OCI ConsoleQUESTION 16What purpose does an Oracle Cloud Infrastructure (OCI) Dynamic Routing Gateway serve?  Enables OCI compute instances to connect to an on-premises environment.  Enables OCI compute instances to connect to the internet.  Enables OCI compute instances to be reached from the internet.  Enables OCI compute instances to privately connect to OCI object storage. QUESTION 17Your IT team has created a web-based marketing site that needs to be protected against internet threats including Cross-Site Scripting (XSS) and SQL Injection. Which Oracle Cloud Infrastructure (OCI) security service should they use?  Web Application Firewall  Bastion  Vault  Vulnerability Scanning QUESTION 18What is the frequency of OCI usage report generation?  Weekly  Monthly  Annually  Daily ExplanationA usage report is a comma-separated value (CSV) file that can be used to get a detailed breakdown of resourcesin Oracle Cloud Infrastructure for audit or invoice reconciliation.The usage report is automatically generated daily, and is stored in an Oracle-owned Object Storage bucket. It contains one row per each Oracle Cloud Infrastructure resource (such as instance, Object Storage bucket, VNIC) per hour along with consumption information, metadata, and tags. Usage reports generally contain 24 hours of usage data, although occasionally a usage report may contain late-arriving data that is older than 24 hours.Usagereports are retained for one year.QUESTION 19Compute instances depend on which of these OCI services? (Choose two.)  Load Balancer Service  Virtual Cloud Network  Raw Storage Service  Block Volume  Archive Object Storage Reference: https://www.oracle.com/a/ocom/docs/cloud-training-compute-services.pdf#page=8QUESTION 20Which threeservices Integrate with Oracle Cloud Infrastructure (OCI) Key Management?  Functions  Block Volume  Object Storage  Auto Scaling  Identity and Access Management  File Storage ExplanationDATA ENCRYPTIONProtect customer data at-rest andin-transit in a way that allows customers to meet their security and compliance requirements for cryptographic algorithms and key management The Oracle Cloud Infrastructure Block Volume service always encrypts all block volumes, boot volumes, and volume backups at rest by using the Advanced Encryption Standard (AES) algorithm with 256-bit encryption.By default all volumes and their backups are encrypted using the Oracle-provided encryption keys. Each time a volume is cloned or restored from a backup the volume is assigned a new unique encryption key.The File Storage service encrypts all file system and snapshot data at rest. By default all file systems are encrypted using Oracle-managed encryption keys. You have the option to encrypt all of your file systems using the keys that you own and manage using the Vault service.Object Storage employs 256-bit Advanced Encryption Standard (AES-256) to encrypt object data on the server. Each object is encrypted with its own data encryption key. Data encryption keys are always encrypted with a master encryption key that is assigned to the bucket. Encryption is enabled by default and cannot be turned off. By default, Oracle manages the master encryption key.QUESTION 21Which capability enables you to search, purchase, and start using software in your Oracle Cloud Infrastructure (OCI) tenancy?  Container Registry  Resource Manager  OS Management  Marketplace QUESTION 22you are analyzing your Oracle Cloud Infrastructure (OCI) usage with Cost Analysis tool in OCI Console.Which is not a default feature of the tool?  Filter costs by applications  Filter costs by compartments  Filter costs by tags  Filter costs by date ExplanationYou can filter Costs Analysis Tools by following three waysTo filter costs by datesTo filter costs by tagsTo filter costs by compartmentsQUESTION 23Which statement about OCI shared security model is true?  You are not responsible for any aspect of security in OCI  You are responsible for securing the hypervisor within OCI Compute service  You are responsible for managing security controls within the physical OCI network  You are responsible for securing all data that you place in OCI Reference: https://docs.oracle.com/en-us/iaas/Content/Security/Concepts/security_overview.htm#ariaid-title4QUESTION 24Which three statements are correct about Oracle Cloud Infrastructure Compartments? (Choose all correct answers)  Compartments can be used for authentication services.  Resources inside the compartments cannot be moved to another compartment.  Compartments are logical entities.  Each compartment is local to a region.  Compartments can be nested.  Compartments can have sub-compartments. QUESTION 25Which gateway can be used to provide internet access to an Oracle Cloud infrastructure compute instance in a private subnet?  Service Gateway  Internet Gateway  Dynamic Routing Gateway  NAT Gateway This topic describes how to set up and manage a Network Address Translation (NAT) gateway. A NAT gateway gives cloud resources without public IP addresses access to the internet without exposing those resources to incoming internet connections. You can add a NAT gateway to your VCN to give instances in a private subnet access to the internet. Instances in a private subnet don’t have public IP addresses.With the NAT gateway, they can initiate connections to the internet and receive responses, but not receive inbound connections initiated from the internet. NAT gateways are highly available and support TCP, UDP, and ICMP ping traffic. Reference: https://docs.cloud.oracle.com/en- us/iaas/Content/Network/Tasks/NATgateway.htm?Highlight=NAT%20gatewayQUESTION 26Which VCN Gateway can be used to connect to the Public OCI services?  Internet Gateway  Dynamic Routing Gateway  Service Gateway  NAT Gateway Reference: https://docs.oracle.com/en-us/iaas/Content/Network/Tasks/servicegateway.htm#ariaid- title1QUESTION 27Which of these are features of OCI Compute Service? (Choose two.)  Only used by database service  One size fits all workloads  Offers VM and Bare Metal Options  Custom images are not supported  Offers various instance sizes for workloads Reference: https://docs.oracle.com/en-us/iaas/Content/Compute/Concepts/computeoverview.htm#ariaid-title1QUESTION 28In what two ways does Oracle Cloud Infrastructure (OCI) offer industry leading price-performance?(Choose two.)  OCI backs performance claims with Service Level Agreements.  OCI does not over subscribe CPU, but only memory.  With OCI, pricing is low and predictable across all regions and services.  OCI leverages advanced encryption that results in fast performance.  OCI hypervisor provides industry leading performance. Reference: https://www.oracle.com/cloud/pricing.htmlhttps://www.brightworkresearch.com/oracle/2019/02/21/does-oracles-bare-metal-outperform-awss- bare-metal/QUESTION 29Which SLA type is not offered by Oracle Cloud Infrastructure compute service?  Data Plane  Performance Plane  Service Plane  Control Plane ExplanationService Plane is NOT an SLA provided by OCI. See the table below:QUESTION 30You have a mission-critical application which requires to be globally available atall times.Which deployment strategy should you adopt?  Use multiple Fault Domains In each Availability Domain in each Region.  Use multiple Availability Domains In one Region.  Use multiple Fault Domains In one Region.  Use multiple Fault Domainsin any Availability Domain in multiple Regions. ExplanationOracle Cloud Infrastructure is hosted in regions and availability domains. A region is a localized geographic area, and an availability domain is one or more data centers located within a region. Aregion is composed of one or more availability domains.Regions are independent of other regions and can be separated by vast distances-across countries or even continents.Availability domains are isolated from each other, fault tolerant, and very unlikely to fail simultaneously.Because availability domains do not share infrastructure such as power or cooling, or the internal availability domain network, a failure at one availability domain within a region is unlikely to impact the availability of the others within the same region.Fault domain is a grouping of hardware and infrastructure within an availability domain. Each availability domain contains three fault domains. Fault domains provide anti-affinity: they let you distribute your instances so thatthe instances are not on the same physical hardware within a single availability domain. A hardware failure or Compute hardware maintenance event that affects one fault domain does not affect instances in other fault domains. In addition, the physical hardware in a fault domain has independent and redundant power supplies, which prevents a failure in the power supply hardware within one fault domain from affecting other fault domains.QUESTION 31Which is NOT covered by Oracle Cloud Infrastructure (OCI) Service Level Agreement (SLA)?  Manageability  Performance  Reliability  Availability Explanationhttps://www.oracle.com/assets/paas-iaas-pub-cld-srvs-pillar-4021422.pdf Enterprises demand more than just availability from their cloud infrastructure. Mission-critical workloads also require consistent performance, and the abilityto manage, monitor, and modify resources running in the cloud at any time. Only Oracle offers end-to-end SLAs covering performance, availability, manageability of services.QUESTION 32Which global security standard is used by OCI to set out requirements and best practices for a systematic approach to managing company and customer information based on periodic security risk assessments which covers the planning, implementation, monitoring, and improvement of an Information Security Management System. ?  ISO 27001:2013  HIPAA  ISO 27017:2015  ISO 27018:2014 ISO/IEC 27001:2013 is an international standard that covers the planning, implementation, monitoring, and improvement of an Information Security Management System. Reference:https://www.oracle.com/cloud/cloud-infrastructure-compliance/QUESTION 33A customer wants to use Oracle Cloud Infrastructure (OCI) for storing application backups which can be stored based on business needs.Which OCI storageservice can be used to meet the requirement?  File Storage  Block Volume  Archive Storage  Object Storage (standard) ExplanationOracle Cloud Infrastructure offers two distinct storage class tiers to address the need for both performant, frequently accessed “hot” storage, and less frequently accessed “cold” storage. Storage tiers help you maximize performance where appropriate and minimize costs where possible.1) Use Object Storage for data to which you need fast, immediate, and frequent access. Dataaccessibility and performance justifies a higher price to store data in the Object Storage tier.2) Use Archive Storage for data to which you seldom or rarely access, but that must be retained and preserved for long periods of time. The cost efficiency ofthe Archive Storage tier offsets the long lead time required to access the data. For more information, see Overview of Archive Storage.The Oracle Cloud Infrastructure Object Storage service is an internet-scale, high-performance storage platform that offers reliable and cost-efficient data durability. The Object Storage service can store an unlimited amount of unstructured data of any content type, including analytic data and rich content, like images and videos.With Object Storage, you can safely and securely store or retrieve data directly from the internet or from within the cloud platform. Object Storage offers multiple management interfaces that let you easily manage storage at scale. The elasticity of the platform lets you start small and scale seamlessly, without experiencing any degradation in performance or service reliability.Object Storage is a regional service and is not tied to any specific compute instance. You can access data from anywhere inside or outside the context of the Oracle CloudInfrastructure, as long you have internet connectivity and can access one of the Object Storage endpoints. Authorization and resource limits are discussed later in this topic.Object Storage also supports private access from Oracle Cloud Infrastructure resources in a VCN through a service gateway. A service gateway allows connectivity to the Object Storage public endpoints from private IP addresses in private subnets. For example, you can back up DB systems to an Object Storage bucket over the Oracle Cloud Infrastructure backbone instead of over the internet. You can optionally use IAM policies to control which VCNs or ranges of IP addresses can access Object Storage. See Access to Oracle Services:Service Gateway for details.Object Storage is Always Free eligible. For more informationabout Always Free resources, including additional capabilities and limitations, see Oracle Cloud Infrastructure Free Tier.The following list summarizes some of the ways that you can use Object Storage.QUESTION 34You store multiple versions of objects in a bucket, but your IT team has asked you to delete any previous object versions 120 days after the object version transitions from the latest version to a previous version. Which Oracle Cloud Infrastructure (OCI) Object Storage feature can be used for this purpose?  Object Lifecycle Management  Multipart Uploads  Pre-Authenticated Requests  Retention Rules QUESTION 35Which Oracle Cloud Infrastructure storage service can provide a shared file system across multiple compute instances?  file Storage  Local NVMe  Object Storage  Archive storage ExplanationOracle Cloud Infrastructure File Storage service provides a durable, scalable, secure, enterprise-grade network file system. You can connect to a File Storage service file system from any bare metal, virtual machine, or container instance in your Virtual Cloud Network (VCN). You can also access a file system from outside the VCN using Oracle Cloud Infrastructure FastConnect and Internet Protocol security (IPSec) virtual private network (VPN).Large Compute clusters of thousands of instances can use the File Storage service for high-performance shared storage. Storage provisioning is fully managed and automatic as your use scales from a single byte to exabytes withoutupfront provisioning. Loading … 1Z0-1085-21 Dumps for Pass Guaranteed - Pass 1Z0-1085-21 Exam: https://www.test4engine.com/1Z0-1085-21_exam-latest-braindumps.html --------------------------------------------------- Images: https://blog.test4engine.com/wp-content/plugins/watu/loading.gif https://blog.test4engine.com/wp-content/plugins/watu/loading.gif --------------------------------------------------- --------------------------------------------------- Post date: 2022-10-13 10:17:25 Post date GMT: 2022-10-13 10:17:25 Post modified date: 2022-10-13 10:17:25 Post modified date GMT: 2022-10-13 10:17:25