1z0-1072-20 Free Practice Test

- (Exam Topic 1)
Which two statements about Oracle Cloud Infrastructure File Storage Service are accurate? (Choose two.)

1. A. Customer can encrypt the communication to a mount target via export options.
2. B. Mount targets use Oracle-managed keys by default.
3. C. File systems use Oracle-managed keys by default.
4. D. Customer can encrypt data in their file system using their own Vault encryption key.
5. E. Communication with file systems in a mount target is encrypted via HTTPS.

Correct Answer: BD
Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/File/Concepts/filestorageoverview.htm

- (Exam Topic 1)
As a solution architect, you are showcasing the Oracle Cloud Infrastructure (OCI) Object Storage feature about Object Versioning to a customer.
Which statement is true in regards to OCI Object Storage Versioning?

1. A. Object versioning does not provide data protection against accidental or malicious object update,overwrite, or deletion.
2. B. By default, object versioning is disabled on a bucket.
3. C. A bucket that is versioning-enabled can have only and always will have a latest version of the object in the bucket.
4. D. Objects are physically deleted from a bucket when versioning is enabled.

Correct Answer: A
Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Object/Tasks/usingversioning.htm

- (Exam Topic 1)
A customer has launched a compute Instance in the Virtual Cloud Network (VCN), which has an Internet gateway, a service gateway, a default security lists and a default route table. Customer has opened up Port 22 in the security lists attached to the compute instance subnet, however is still unable to connect to compute instances using ssh.
Which option would remedy this situation?

1. A. Modify the route table associated with the VCN subnet in which the instance reside
2. B. Add a following route to the route table.Destination CIDR: 0.0.0.0/0 Target: Internet Gateway (IGW)
3. C. Modify the security list associated with the VCN subnet in which the instance reside
4. D. Add a stateful egress rule to allow icmp traffic in addition to the port 22.
5. E. Modify the route table associated with the VCN subnet in which the instance reside
6. F. Add a following route to the route table.Destination CIDR: 0.0.0.0/0Target: Dynamic Routing Gateway (DRG)
7. G. Modify the route table associated with the VCN subnet in which the instance reside
8. H. Add a following route to the route table.Destination CIDR: 0.0.0.0/0 Target: Service Gateway (SGW)

Correct Answer: A
You create an internet gateway in the context of a specific VCN. In other words, the internet gateway is automatically attached to a VCN. However, you can disable and re-enable the internet gateway at any time.
For traffic to flow between a subnet and an internet gateway, you must create a route rule accordingly in the subnet's route table (for example, destination CIDR = 0.0.0.0/0 and target = internet gateway). If the internet gateway is disabled, that means no traffic will flow to or from the internet even if there's a route rule that enables that traffic.
For the purposes of access control, you must specify the compartment where you want the internet gateway to reside. If you're not sure which compartment to use, put the internet gateway in the same compartment as the cloud network.

- (Exam Topic 2)
Which storage service is used on OCI for a Data Transfer Service job?

1. A. An instance with enough storage to accommodate the job
2. B. An object bucket
3. C. A File System service instance
4. D. Block Volume

Correct Answer: B
https://docs.cloud.oracle.com/en-us/iaas/Content/DataTransfer/Concepts/overview.htm

- (Exam Topic 2)
When terminating a compute instance, which statement is true?

1. A. The instance needs to be stopped first, and then terminated.
2. B. The boot volume is always deleted.
3. C. All block volumes attached to the instance are terminated.
4. D. Users can preserve the boot volume associated with the instance.

Correct Answer: D
You can permanently terminate (delete) instances that you no longer need. Any attached VNICs and volumes are automatically detached when the instance terminates. Eventually, the instance's public and private IP addresses are released and become available for other instances. By default, the instance's boot volume is deleted when you terminate the instance, however you can preserve the boot volume associated with the instance, so that you can attach it to a different instance as a data volume, or use it to launch a new instance.