Oracle 1Z0-1067-21 問題集

質問 1：
You are using Oracle Cloud Infrastructure (OCI) console to set up an alarm on a budget to track your OCI spending.
Which two are valid targets for creating a budget in OCI? (Choose two.)
A. Select group as the type of target for your budget.
B. Select Compartment as the type of target for your budget.
C. Select Tenancy as the type of target for your budget.
D. Select Cost-Tracking Tags as the type of target for your budget.
E. Select user as the type of target for your budget.
正解：B,D
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Your deployment platform within Oracle Cloud Infrastructure (OCI) leverages a compute instance with multiple block volumes attached. There are multiple teams that use the same compute instance and have access to these block volumes. You want to ensure that no one accidentally deletes any of these block volumes. You have started to construct the following IAM policy but need to determine which permissions should be used.
allow group DeploymentUsers to manage volume-family where ANY
{ request.permission != <???>, request.permission != <???>, request.permission !=
<???> }
Which permissions can you use in place of <???> in this policy? (Choose the best answer.)
A. DELETE_VOLUME, DELETE_VOLUME_ATTACHMENT, DELETE_VOLUME_BACKUP
B. VOLUME_ERASE, VOLUME_ATTACHMENT_ERASE, VOLUME_BACKUP_ERASE
C. ERASE_VOLUME, ERASE_VOLUME_ATTACHMENT, ERASE_VOLUME_BACKUP
D. VOLUME_DELETE, VOLUME_ATTACHMENT_DELETE, VOLUME_BACKUP_DELETE
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 3：
You created an Oracle Linux compute instance through the Oracle Cloud Infrastructure (OCI) management console then immediately realize you forgot to add an SSH key file. You notice that OCI compute service provides instance console connections that supports adding SSH keys for a running instance. Hence, you created the console connection for your Linux server and activated it using the connection string provided. However, now you get prompted for a username and password to login.
What option should you recommend to add the SSH key to your running instance, while minimizing the administrative overhead? (Choose the best answer.)
A. You need to configure the boot loader to use ttyS0 as a console terminal on the VM.
B. You need to terminate the running instance and recreate it by providing the SSH key file.
C. You need to reboot the instance from the console, boot into the bash shell in maintenance mode, and add SSH keys for the opc user.
D. You need to modify the serial console connection string to include the identity file flag, -i to specify the SSH key to use.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 4：
You have a Linux compute instance located in a public subnet in a VCN which hosts a web application. The security list attached to subnet containing the compute instance has the following stateful ingress rule.

The Route table attached to the Public subnet is shown below. You can establish an SSH connection into the compute instance from the internet. However, you are not able to connect to the web server using your web browser.

Which step will resolve the issue? (Choose the best answer.)
A. In the route table, add a rule for your default traffic to be routed to NAT gateway.
B. In the security list, remove the ssh rule.
C. In the route table, add a rule for your default traffic to be routed to service gateway.
D. In the security list, add an ingress rule for port 80 (http).
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 5：
You have been asked to investigate a potential security risk on your company's Oracle Cloud Infrastructure (OCI) tenancy. You decide to start by looking through the audit logs for suspicious activity.
How can you retrieve the audit logs using the OCI Command Line Interface (CLI)? (Choose the best answer.)
A. oci audit event list --end-time $end-time --compartment-id $compartment-id
B. oci audit event list --start-time $start-time --compartment-id $compartment-id
C. oci audit event list --start-time $start-time --end-time $end-time -- compartment-id $compartment-id
D. oci audit event list --start-time $start-time --end-time $end-time --tenancy-id
正解：C
解説: (Topexam メンバーにのみ表示されます)