Oracle 1z0-1067-23 問題集

質問 1：
The general syntax for an IAM policy is: Allow <identity_domain_name>/<subject> to <verb>
<resource-type> in <location> where <conditions> Which two are valid values for <lo-cation>?
A. security-zone MyZone
B. tenancy
C. region us-phoenix-1
D. availability-domain aBCD:us-phoenix-1
E. compartment MyCompartment
正解：B,E

質問 2：
You have created the following JSON file to specify a lifecycle policy for one of your object storage buckets:

How will this policy affect the objects that are stored in the bucket? (Choose the best answer.)
A. Objects containing the name prefix LOGS will be automatically migrated from standard Storage to Archive storage 30 days after the creation date. The object will be mi-grated back to standard Storage
120 days after creation.
B. Objects with the prefix LOGS will be retained for120 days and then deleted permanently.
C. Objects containing the name prefix LOGS will be automatically migrated from standard Storage to Archive storage 30 days after the creationdate. The object will be deleted 120 days after creation.
D. The objects with prefix LOGS will be deleted 30 days after creation date.
正解：C

質問 3：
Which TWO statements are NOT true regarding Block Storage Volume Resize in Oracle Cloud Infrastructure (OCI)? (Choose two.)
A. Volumes may not have attachments added or removed during resize.
B. Volume size can be either increased or decreased.
C. Volumes may not be resized if there is a prior resize or an ongoing cloning operation
D. Volumes may only be resized if there is a backup pending.
正解：B,D

質問 4：
You run a large global application with 90% of customers based in the US and Canada. You want to be able to test a new feature and allow a small percentage of users to access the new version of yourapplication. What Oracle Cloud Infrastructure Traffic Management steering policy should you utilize? (Choose the best answer.)
A. ASN steering
B. Geolocation steering
C. Load Balancer
D. IP Prefix steering
正解：C

質問 5：
You set up a bastion host in your VCN to only allow your IP address (140.19.2.140) to establish SSH connections to your Compute Instances that are deployed in a private subnet. The Compute Instances have an attached Network Security Group with a Source Type: Network Security Group (NSG), Source NSG:
NSG-050504. To secure the bastion host, you added the following ingress rules to its Network Security Group:
However, after checking the bastion host logs, you discovered that there are IP addresses other than your own that can access your bastion host. What is the root cause of this issue? (Choose the best answer.)
A. The Security List allows access to all IP address which overrides the Network Security Group ingress rules.
B. All compute instances associated with NSG-050504 are also able to connect to the bastion host.
C. The port 22 provides unrestricted access to 140.19.2.140 and to other IP address.
D. A netmask of /32 allows all IP address in the 140.19.2.0 network, other than your IP 140.19.2.140
正解：B