Oracle 1Z0-1072-20 問題集

質問 1：
Which two statements are true about an Oracle Cloud Infrastructure object storage bucket? (Choose two.)
A. You can associate a bucket with multiple compartments
B. You cannot change a bucket from private to public after it is created
C. You cannot edit or append data to an object, but you can replace the entire object
D. You can associate a bucket with only a single compartment
正解：C,D
解説: (Topexam メンバーにのみ表示されます)

質問 2：
You need to set up instance principals so that an application running on an instance can call Oracle Cloud Infrastructure (OCI) public services, without the need to configure user credentials.
A developer in your team has already configured the application built using an OCI SDK to authenticate using the instance principals provider.
Which is NOT a necessary step to complete this set up?
A. Deploy the application and the SDK to all the instances that belong to the dynamic group.
B. Create a dynamic group with matching rules to specify which instances you want to allow to make API calls against services.
C. Create a policy granting permissions to the dynamic group to access services in your compartment or tenancy.
D. Generate Auth Tokens to enable instances in the dynamic group to authenticate with APIs.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 3：
You have an external facing web server running in the Oracle Cloud Infrastructure (OCI) London region. You are notified that customers in North America and Australia are facing high latency while connecting to your web server.
Which services are available on OCI that can help you get current latency statistics to your web server from these markets?
A. Use the Internet Intelligence tool. Run tests using the web server's public IP address and review traceroute details from different vantage points
B. Setup an IPsec VPN with customers in those markets and check latency over that connection
C. Setup a FastConnect with customers in those markets and check latency over that connection
D. Use DNS Zone Management service to check latency over that connection
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 4：
What does Terraform use to create, manage, and manipulate infrastructure resources?
A. resources
B. provider
C. instances
D. provisioner
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 5：
You have created a virtual cloud network (VCN) with three private subnets. Two of the subnets contain application servers and the third subnet contains a DB System. The application requires a shared file system so you have provisioned one using the file storage service (FSS). You also created the corresponding mount target in one of the application subnets. The VCN security lists are properly configured so that both application servers and the DB System can access the file system. The security team determines that the DB System should have read-only access to the file system.
What change would you make to satisfy this requirement?
A. Connect via SSH to one of the application servers where the file system has been mounted. Use the Unix command chmod to change permissions on the file system directory, allowing the database user read only access.
B. Create an NFS export option that allows READ_ONLY access where the source is the CIDR range of the DB System subnet.
C. Modify the security list associated with the subnet where the mount target resides. Change the ingress rules corresponding to the DB System subnet to be stateless.
D. Create an instance principal for the DB System. Write an Identity and Access Management (IAM) policy that allows the instance principal read-only access to the file storage service.
正解：B
解説: (Topexam メンバーにのみ表示されます)