• Barajar
    Activar
    Desactivar
  • Alphabetizar
    Activar
    Desactivar
  • Frente Primero
    Activar
    Desactivar
  • Ambos lados
    Activar
    Desactivar
  • Leer
    Activar
    Desactivar
Leyendo...
Frente

Cómo estudiar sus tarjetas

Teclas de Derecha/Izquierda: Navegar entre tarjetas.tecla derechatecla izquierda

Teclas Arriba/Abajo: Colvea la carta entre frente y dorso.tecla abajotecla arriba

Tecla H: Muestra pista (3er lado).tecla h

Tecla N: Lea el texto en voz.tecla n

image

Boton play

image

Boton play

image

Progreso

1/10

Click para voltear

Rango de Cartas a estudiar

a través

10 Cartas en este set

  • Frente
  • Atrás
You have been asked to ensure that in-transit communication between an Oracle Cloud Infrastructure (OCI) compute instance and an on-premises server (192.168.10.10/32) is encrypted. The instances communicate using HTTP. The OCI Virtual Cloud Network (VCN) is connected to the on-premises network by two separate connections: a Dynamic IPsec VPN tunnel and a FastConnect virtual circuit. No static configuration has been added.

What solution should you recommend? (Choose the best answer.)

A. The instances will communicate by default over IPsec VPN, which ensures data is encrypted in-transit.
B. Advertise a 192.168.10.10/32 route over the VPN.
C. Advertise a 192.168.10.10/32 router over the FastConnect.
D. The instances will communicate by default over the FastConnect private virtual circuit, which ensures data is encrypted in-transit.
Correct Answer: B
Reference:
Creo que es B, otros ponen D
On FastConnect, the transit data is not encrypted...Question is that the data has to be encrypted during the transit..
Also it is said that no static routes are added. So with both the FC and the IPSec VPN being in place, the FC will overtake the IPSec VPN because there are no static routes provided.
So,if you provide a static route to the IPSec connection, the traffic flows thru the IPSec VPN in which the data in transit is encrypted by default. Hence, answer is B.
https://www.oracle.com/cloud/networking/fastconnect-faq.html
https://docs.oracle.com/en-us/iaas/Content/Network/Tasks/transitrouting.htm
Can I use FastConnect and an IPsec VPN to the same VCN simultaneously?
Yes. You can provision FastConnect and an IPSec VPN simultaneously. Typically, you would set up FastConnect as the primary path and the IPSec VPN as a backup path via the internet. The FastConnect path will always be preferred when available, unless you add more
You have created a group for several auditors. You assign the following policies to the group:

What actions are the auditors allowed to perform within your tenancy? (Choose the best answer.)
A. The Auditors can view resources in the tenancy.
B. Auditors are able to create new instances in the tenancy.
C. The Auditors are able to delete resource in the tenancy.
D. Auditors are able to view all resources in the compartment.
(Esta pregunta tiene 3 líneas de código que pone Allow group)

Correct Answer: A
Reference:
https://docs.oracle.com/en-us/iaas/Content/Identity/Concepts/policies.htm#Verbs
https://docs.oracle.com/en-us/iaas/Content/Identity/policyreference/auditpolicyreference.htm#Details_for_the_Audit_Service
https://docs.oracle.com/en-us/iaas/Content/Identity/Concepts/commonpolicies.htm#top
You have a web application running on Oracle Cloud Infrastructure (OCI) that lets users log in with a username and password. You notice that an attacker has tried to use SQL comment `--" to alter the database query, remove the password check and log in as a user. You decide to prevent any future attacks.
Which of the following OCI services or features would you choose to safeguard your application? (Choose the best answer.)
A. Network Security Group
B. Data Safe
C. Web Application Framework (WAF)
D. Vault
Correct Answer: D

Reference:

WAF is web Application Firewall NOT Framework

Si en el examen pone Web Application Firewall la correcta sería la C
One of the compute instances that you have deployed on Oracle Cloud Infrastructure (OCI) is malfunctioning. You have created a console connection to remotely troubleshoot it.

Which two statements about console connections are TRUE? (Choose two.)

A. It is not possible to use VNC console connections to connect to Bare Metal Instances.

B. VNC console connection uses SSH port forwarding to create a secure connection from your local system to the VNC server attached to your instance’s console.

C. It is not possible to connect to the serial console to an instance running Microsoft Windows, however VNC console connection can be used.

D. For security purpose, the console connection will not let you edit system configuration files.

E. If you do not disconnect from the session, your serial console connection will automatically be terminated after 24 hours
Correct Answer: B, E

Reference: https://docs.oracle.com/en-us/iaas/Content/Compute/References/serialconsole.htm
You have created an Autonomous Data Warehouse (ADW) service in your company’s Oracle Cloud Infrastructure (OCI) tenancy and you now have to load historical data into it.

A. Create Auth token, use it to create an object storage credential by executing DBMS_CLOUD.CREATE_CREDENTIAL, using the web console
B. Create the tables in the ADW database and then execute SQL*Loader for each CSV file to load the contents into the corresponding ADW database table.
C.Create Auth token, use it to create an object storage credential by executing DBMS_CLOUD.CREATE_CREDENTIAL, using OCI CLI upload the CSV files to an OCI object storage bucket, create the tables in the ADW database and then execute Data Pump Import
D.Create Auth token, use it to create an object storage credential by executing DBMS_CLOUD.CREATE_CREDENTIAL, using OCI CLI upload the CSV files to an OCI object storage bucket, create the tables in the ADW database and then execute DBMS_CLOUD.COPY_DATA for each CSV file to copy the content
Correct Answer: D
Reference:
https://docs.oracle.com/en-us/iaas/Content/Object/Tasks/usingmultipartuploads.htm

Create Credentials and Copy Data into an Existing Table (oracle.com)
Load Data from Local Files Using SQL*Loader (oracle.com)

Create Credentials and Load Data Pump Dump Files into an Existing Table (oracle.com)
You are using the Oracle Cloud Infrastructure Command Line Interface to launch a Linux virtual machine. You enter the following command (with correct values for all parameters):

The command fails.
Which is NOT a valid parameter in this command? (Choose the best answer.)
A. -t <tenancy_id>
B. --image-id <image_id>
C. -- shape “<shape_name>”
D. -c <compartment_id>
E. -- subnet-id <subnet_id>
a
a
a
a
a
a
a
a