Oracle 1Z0-1067-21 Exam Dumps

You are using Oracle Cloud Infrastructure (OCI) services across several regions: us-phoenix-1, usashburn-1, uk-london-1 and ap-tokyo-1. You have creates a separate administrator group for each region: PHX-Admins, ASH-Admins, LHR-Admins and NRT-Admins, respectively.

You want to restrict admin access to a specific region. E.g., PHX-Admins should be able to manage all resources in the us-phoenix-1 region only and not any other OCI regions.

What IAM policy syntax is required to restrict PHX-Admins to manage OCI resources in the us-phoenix-1 region only? (Choose the best answer.)

A. Allow group PHX-Admins to manage all-resources in tenancy where request.region= ‘phx’

B. Allow group PHX-Admins to manage all-resources in tenancy where request.permission= ‘phx’

C. Allow group PHX-Admins to manage all-resources in tenancy where request.target= ‘phx’

D. Allow group PHX-Admins to manage all-resources in tenancy where request.location= ‘phx’

You set up a bastion host in your VCN to only allow your IP address (140.19.2.140) to establish SSH connections to your Compute Instances that are deployed in a private subnet. The Compute Instances have an attached Network Security Group with a Source Type: Network Security Group (NSG), Source NSG: NSG-050504. To secure the bastion host, you added the following ingress rules to its Network Security Group:

However, after checking the bastion host logs, you discovered that there are IP addresses other than your own that can access your bastion host.

What is the root cause of this issue? (Choose the best answer.)

A. The Security List allows access to all IP address which overrides the Network Security Group ingress rules.

B. All compute instances associated with NSG-050504 are also able to connect to the bastion host.

C. The port 22 provides unrestricted access to 140.19.2.140 and to other IP address.

D. A netmask of /32 allows all IP address in the 140.19.2.0 network, other than your IP 140.19.2.140

An insurance company has contracted you to help automate their application business continuity plan. They have the application running in eu-frankfurt-1 as the primary site and uk-london-1 as a disaster recovery site. Normally they have a DNS A record associated with the IP address of the primary endpoint in eu-frankfurt-1. In the event of a disaster, they use OCI DNS Zone Management to update the A record and replace it with the IP address of the endpoint in uk-londond-1.

How can you automate the failover process? (Choose the best answer.)

A. Create a Health Check that evaluates both regional endpoints. Create a Traffic Management Steering policy with Failover type and associate it with the Health Check.

B. Create a Traffic Management Steering policy with Load Balancer type and add both eu-frankfurt-1 and uk-london-1 endpoints. Attach the Traffic Management Steering policy to the A record.

C. Provision a Load Balancer in Frankfurt and associate it with the A record in DNS. Create a backend set with backend servers from both eu-frankfurt-1 and uk-london-1 regions.

D. Create a Traffic Management Steering policy and attach it to a backend servers from both eu-frankfurt1 and uk-london-1 regions.