[1Z0-1067-21] Exam Eva

You have been asked to ensure that in-transit communication between an Oracle Cloud Infrastructure (OCI) compute instance and an on-premises server (192.168.10.10/32) is encrypted. The instances communicate using HTTP. The OCI Virtual Cloud Network (VCN) is connected to the on-premises network by two separate connections: a Dynamic IPsec VPN tunnel and a FastConnect virtual circuit. No static configuration has been added.
What solution should you recommend? (Choose the best answer.)
A. The instances will communicate by default over IPsec VPN, which ensures data is encrypted in-transit.
B. Advertise a 192.168.10.10/32 route over the VPN.
C. Advertise a 192.168.10.10/32 router over the FastConnect.
D. The instances will communicate by default over the FastConnect private virtual circuit, which ensures data is encrypted in-transit.

You have created a group for several auditors. You assign the following policies to the group:

What actions are the auditors allowed to perform within your tenancy? (Choose the best answer.)
A. The Auditors can view resources in the tenancy.
B. Auditors are able to create new instances in the tenancy.
C. The Auditors are able to delete resource in the tenancy.
D. Auditors are able to view all resources in the compartment.

You have a web application running on Oracle Cloud Infrastructure (OCI) that lets users log in with a username and password. You notice that an attacker has tried to use SQL comment `--" to alter the database query, remove the password check and log in as a user. You decide to prevent any future attacks.
Which of the following OCI services or features would you choose to safeguard your application? (Choose the best answer.)
A. Network Security Group
B. Data Safe
C. Web Application Framework (WAF)
D. Vault

One of the compute instances that you have deployed on Oracle Cloud Infrastructure (OCI) is malfunctioning. You have created a console connection to remotely troubleshoot it.
Which two statements about console connections are TRUE? (Choose two.)
A. It is not possible to use VNC console connections to connect to Bare Metal Instances.
B. VNC console connection uses SSH port forwarding to create a secure connection from your local system to the VNC server attached to your instance’s console.
C. It is not possible to connect to the serial console to an instance running Microsoft Windows, however VNC console connection can be used.
D. For security purpose, the console connection will not let you edit system configuration files.
E. If you do not disconnect from the session, your serial console connection will automatically be terminated after 24 hours.

You have created an Autonomous Data Warehouse (ADW) service in your company’s Oracle Cloud Infrastructure (OCI) tenancy and you now have to load historical data into it. size from ..... (1)
A. Create Auth token, use it to create an object storage credential by executing DBMS_CLOUD.CREATE_CREDENTIAL, using the web console upload the CSV files to an OCI object storage bucket, create the tables in the ADW database and then execute DBMS_CLOUD.COPY_DATA ..
B. Create the tables ........
C. Create Auth token, use it to create an object storage credential by executing DBMS_CLOUD.CREATE_CREDENTIAL, using OCI CLI upload the CSV files to an OCI object storage bucket, create the tables in the ADW database and then execute Data Pump Import ...
D. Create Auth token, use it to create an object storage credential by executing DBMS_CLOUD.CREATE_CREDENTIAL, using OCI CLI upload the CSV files to an OCI object storage bucket, create the tables in the ADW database and then execute DBMS_CLOUD.COPY_DATA for

You are using the Oracle Cloud Infrastructure Command Line Interface to launch a Linux virtual machine. You enter the following command (with correct values for all parameters):

The command fails.
Which is NOT a valid parameter in this command? (Choose the best answer.)
A. -t <tenancy_id>
B. --image-id <image_id>
C. -- shape “<shape_name>”
D. -c <compartment_id>
E. -- subnet-id <subnet_id>

You have received an email from your manager to provision (...) be re-used.
Which CLI command can be used in this situation? (Choose the best answer.)
A. oci resource-manager stack create --tenancy-id <tenancy_OCID> \ --config-source prod.zip --variables file://variables.json \ --display-name Production stack build \ --description Creating new Production environment
B. oci resource-manager stack update --compartment-id <compartment_OCID> \ --config-source prod.zip --variables file://variables.json \ --display-name €Production stack build€ \ --description Creating new Production environment
C. oci resource-manager stack create --compartment-id <compartment_OCID> \ --config-source prod.zip --variables file://variables.json \ --display-name Production stack build \ --description Creating new Production environment
D. oci resource-manager stack update --tenancy-id <tenancy_OCID> \ --config-source prod.zip --variables file://variables.json \ --display-name €Production stack build€ \ --descr

You are asked to deploy a new application that has been designed to scale horizontally. The business stakeholders have asked that the application be deployed in us-phoenix-1.
Normal usage requires 2 OCPUs. You expect to have few spikes during the week, that will require up to 4 OCPUs, and a major usage uptick at the end of each month that will require 8 OCPUs.
(Choose the best answer.)
A. Create an instance pool with a VM.Standard2.2 shape instance configuration. Setup the autoscaling configuration to use 2 availability domains and have a minimum of 2 instances, to handle the weekly spikes, and a maximum of 4 instances.
B. Create an instance with 1 OCPU shape. Use the Resize Instance action to scale up to a larger shape when more resources are needed.
C. Create an instance with 1 OCPU shape. Use a CLI script to clone it when more resources are needed.
D. Create an instance pool with a VM.Standard2.1 shape instance configuration. Setup the autoscaling configuration to use 2 availability

You have been asked to set up connectivity between a client’s on-premises network and Oracle Cloud Infrastructure (OCI). The requirements are:
✑ Low latency: The applications are financial and require low latency connectivity into OCI.
✑ Consistency: The application isn’t tolerant of performance variation.
The client wants to implement the above with as low a cost as possible, while meeting all of the requirements. What should you suggest? (Choose the best answer.)
A. Provision FastConnect with a single private virtual circuit, and run an IPsec VPN tunnel over the top of this virtual circuit.
B. Provision FastConnect with a single public virtual circuit.
C. Provision a site-to-site IPsec VPN between your on-premises network and your virtual cloud network (VCN) using VPN Connect.
D. Provision FastConnect with a single private virtual circuit.
E. Provision FastConnect with a single public virtual circuit, and run an IPsec VPN tunnel over the top of this virtual circuit

Which two statements about the Oracle Cloud Infrastructure (OCI) Command Line Interface (CLI) are TRUE? (Choose two.)
A. You can run CLI commands from inside OCI Regions only.
B. You can filter CLI output using the JMESPath query option for JSON.
C. The CLI provides an automatic way to connect with instances provisioned on OCI.
D. The CLI allows you to use the Python language to interact with OCI APIs.
E. The CLI provides the same core functionality as the Console, plus additional commands.

You have a Linux compute instance located in a public subnet in a VCN which hosts a web application. The security list attached to subnet containing the compute instance has the following stateful ingress rule.

The Route table attached to the Public subnet is shown below. You can establish an SSH connection into the compute instance from the internet.

However, you are not able to connect to the web server using your web browser.
Which step will resolve the issue? (Choose the best answer.)
A. In the route table, add a rule for your default traffic to be routed to NAT gateway.
B. In the security list, add an ingress rule for port 80 (http).
C. In the security list, remove the ssh rule.
D. In the route table, add a rule for your default traffic to be routed to Service Gateway.

Your company recently adopted a hybrid cloud architecture which requires them to migrate some of their on-premises web applications to Oracle Cloud Infrastructure (OCI). You created a Terraform template which automatically provisions OCI resources such as compute instances, load balancer, and a database instance. (....) following error:
Service error: NotAuthorizedOrNotFound. shape VM.Standard2.4 not found. http status code: 404
(....)VM.Standard2.4 instance shapes available in your tenancy. You edit the Terraform script and replace the shape with VM.Standard2.2
Which option would you recommend to re-run the terraform command to have required OCI resources provisioned with the least effort? (Choose the best answer.)
A. terraform plan -target=oci_database_db_system.db_system
B. terraform apply -auto-approve
C. terraform refresh -target=oci_database_db_system.db_system
D. terraform apply -target=oci_database_db_system.db_system

You have been monitoring your company’s applications running in Oracle Cloud Infrastructure (OCI) and notice that the application is using OCI Traffic Management service. This service uses a traffic steering policy to distribute the DNS traffic based on subnet addresses in a rule set.
Which steering policy is in use in this particular case? (Choose the best answer.)
A. Load Balancing policy
B. Geolocation steering
C. ASN steering policy
D. IP Prefix steering

You have the following compartment structure within your company’s Oracle Cloud Infrastructure (OCI) tenancy:

You want to create a policy in the root compartment to allow SystemAdmins to manage VCNs only in CompartmentC.
Which policy is correct? (Choose the best answer.)
A. Allow group SystemAdmins to manage virtual-network-family in compartment CompartmentB:CompartmentC
B. Allow group SystemAdmins to manage virtual-network-family in compartment Root
C. Allow group SystemAdmins to manage virtual-network-family in compartment CompartmentA:CompartmentB:CompartmentC
D. Allow group SystemAdmins to manage virtual-network-family in compartment CompartmentC

Which option contains the essential components of the Oracle Cloud Infrastructure Notifications service? (Choose the best answer.)
A. An ALARM with a name unique across the tenancy, a SUBSCRIPTION, and a METRIC with the measurement of interest.
B. A TOPIC with a name unique across the tenancy, a SUBSCRIPTION, and a MESSAGE where content is published.
C. A TOPIC with a name unique across the compartment, a SUBSCRIPTION, and a MESSAGE where content is published.
D. An ALARM with a name unique across the compartment, a SUBSCRIPTION, and a METRIC with the measurement of interest.

You run a large global application with 90% of customers based in the US and Canada. You want to be able to test a new feature and allow a small percentage of users to access the new version of your application.
What Oracle Cloud Infrastructure Traffic Management steering policy should you utilize? (Choose the best answer.)
A. Load Balancer
B. IP Prefix steering
C. ASN steering
D. Geolocation steering

Which two statements are TRUE about Object Storage data security and encryption in Oracle Cloud Infrastructure (OCI)? (Choose two.)
A. Client-side encryption is managed by the customer.
B. Data needs to be decrypted on the client side before retrieving it.
C. OCI Vault Management is used by default to provide data security.
D. All traffic to and from Object Storage service is encrypted using TLS.
E. A VPN connection to OCI is required to ensure secure data transfer to an object storage bucket.

You are using Oracle Cloud Infrastructure (OCI) console to set up an alarm on a budget to track your OCI spending.
Which two are valid targets for creating a budget in OCI? (Choose two.)
A. Select group as the type of target for your budget.
B. Select Tenancy as the type of target for your budget.
C. Select user as the type of target for your budget.
D. Select Cost-Tracking Tags as the type of target for your budget.
E. Select Compartment as the type of target for your budget.

Your application is using an Object Storage bucket named app-data in the namespace vision, to store both persistent and temporary data. Every week all the temporary data should be deleted to limit the storage consumption.
Currently you need to navigate to the Object Storage page using the web console, select the appropriate bucket to view all the objects and delete the temporary ones.
To simplify the task you have configured the application to save all the temporary data with /temp prefix. You have also decided to use the Command Line Interface (CLI) to perform this operation.
What is the command you should use to speed up the data cleanup? (Choose the best answer.)
A. oci os object delete -ns vision -bn app-data --prefix /temp
B. oci os object bulk-delete -ns vision -bn app-data --prefix /temp --force
C. oci objectstorage bulk-delete -ns vision -bn app-data --prefix /temp --force
D. oci os object delete app-data in vision where prefix = /temp

Your company has restructured its HR departments. As part of this change, you also need to re-organize Compartment Team_x needs to be moved under a new parent compartment, Project_B
(....)
Policy1: Allow group G1 to manage instance-family in compartment HR:Project_A
Policy2: Allow group G2 to manage instance-family in compartment HR:Project_B
Which two statements describe the impacts after the compartment Team_x is moved? (Choose two.)
A. Group G2 can now manage instance-families in compartment Project_B and compartment Team_X
B. Group G1 can now manage instance-families in compartment Project_A, compartment Project_B and compartment Team_X
C. Group G1 can now manage instance-families in compartment Project_A but not in compartment Team_x
D. Group G2 can now manage instance-families in compartment Project_A but not in compartment Team_x
E. Group G2 can now manage instance-families in compartment Project_B, compartment Project_A and compartment Team_X

You have been contracted by a local e-commerce company to assist with enhancing their online shopping application. (...) (Choose the best answer.)
A. Create a load balancer policy in the Traffic Management service. Configure one answer for each site. Set the answer for the primary site with a weight of 10 and the answer for the secondary site with a weight of 100.
B. Create a new A record in DNS that points to the public load balancer at the secondary site. Create a CNAME for the sub-domain failover that will resolve to the new A record. Inform customers to prepend the website URL with failover if the primary site is unavailable.
C. Create a failover policy in the Traffic Management service. Set the IP address of the public load balancer for the primary site in answer pool 1. Set the IP address of the public load balancer for the secondary site in answer pool 2. Define a health check to monitor both sites.
D. Deploy a new load balancer in the primary region. Create one backend set for

You have recently been asked to take over management of your company’s infrastructure provisioning efforts, utilizing Terraform v0.12 to provision and manage infrastructure resources in Oracle Cloud Infrastructure (OCI). For the past few days the development environments have been failing to provision. Terraform returns the following error:

You locate the related code block in the Terraform config and find the following:

Which correction should you make to solve this issue? (Choose the best answer.)
A. Place a command at the end of line 16
B. Modify line 15 to be the following: tcp_options = {min = "22”, max = “22”)
C. Modify line 15 to be the following: tcp_options { min = “22” max = “22” }
D. Replace the curly braces ‘{ }’ in lines 11 and 16 with square braces ‘[ ]’

Here is a partial code from a Terraform template written for Oracle Cloud Infrastructure (OCI):

What operation(s) does it perform? (Choose the best answer.)
A. Provides object read and write access for an OCI Object Storage bucket.
B. Creates a pre-authenticated request for objects in an OCI Object Storage bucket.
C. Creates a URL to provide access to an OCI Object Storage bucket for managing objects.
D. Creates a lifecycle policy for an OCI Object Storage bucket for moving data to Archival storage at a specified time.

Your customer is running a set of compute instances inside a private subnet to manage their workloads on Oracle Cloud Infrastructure (OCI) tenancy. You have set up auto scaling feature to provide consistent performance to their end users during period of high demand.
Which step should be met for auto scaling to work? (Choose the best answer.)
A. OS Management Service agent (OSMS) must be installed on the instances.
B. Audit logs for the instances should be enabled.
C. Service Gateway should be setup to allow instances to send metrics to monitoring service.
D. Monitoring for the instances should not be enabled.

You are working with Terraform on your laptop and have been tasked with spinning up multiple compute instances in Oracle Cloud Infrastructure (OCI) for a project. In addition, you are also required to collect IP addresses of provisioned instances and write them to a file and save it in your laptop.
Which specific Terraform functionality can help accomplish this task? (Choose the best answer.)
A. Terraform modules
B. Terraform remote state
C. Terraform local-exec
D. Terraform remote-exec

You have created a geolocation steering policy in the Oracle Cloud Infrastructure (OCI) Traffic Management service, with this configuration:

What happens to requests that originate in Africa? (Choose the best answer.)
A. The traffic will be forwarded at the same time to both Pool 1 and Pool 2.
B. The traffic will be dropped.
C. The traffic will be forwarded randomly to any of the pools mentioned in the rules.
D. The traffic will be forwarded to Pool 1. If Pool 1 is not available, then it will be forwarded to Pool 2.

One of your development teams has asked for your help to standardize the creation of several compute instances that must be provisioned each day of the week.
You initially write several Command Line Interface (CLI) commands with all appropriate configuration parameters to achieve this task later determining this method lacks flexibility.
Which command generates a JSON-based template that Oracle Cloud Infrastructure (OCI) CLI can use to provision these instances on a regular basis? (Choose the best answer.)
A. oci compute instance create --generate-cli-skeleton
B. oci compute instance launch --generate-cli-skeleton
C. oci compute provision-instance --generate-full-command-json-input
D. oci compute instance launch --generate-full-command-json-input

A developer has created a file system in Oracle Cloud Infrastructure (OCI) File Storage service. She launches an Oracle Linux compute instance and successfully mounts the file system from the instance.
She then tries writing to the file system from the compute instance using the following command: touch /mnt/yourmountpoint/helloworld
But gets an error message:
touch: cannot touch ‘/mnt/yourmountpoint/helloworrld’: Permission denied
Which is a reason for this error? (Choose the best answer.)
A. ‘touch’ command is not available in Oracle Linux by default.
B. Service limits or quota for file system writes have been breached.
C. User is not part of any OCI Identity and Access Management group with write permissions to File Storage service.
D. User is connecting as the default Oracle Linux user ‘opc’ instead of ‘root’ user.

You have recently joined a startup company and quickly find that nobody is tracking the amount of money spent on Oracle Cloud Infrastructure (OCI). Seeing an opportunity to help save money you begin creating a solution to better track the cost of resources provisioned by each individual on the team.
Which option allows you to identify excessive spend across all resources in your tenancy? (Choose the best answer.)
A. Use the Python SDK to write a custom application that will monitor the Audit log. Look for CREATE events and configure the application to send you an email each time a new resource is created.
B. Create a tag namespace named BILLING with a Tag Key named CostCenter. Tag each of your resources with this Tag Key and the correct value.
C. Use the Events Service and create rules that will act when a new Object Storage bucket or Compute Instance has been created. Have the rule email you each time one of these events occurs.
D. Create a budget for each compartment that will send a

You have been asked to review a network design for Oracle Cloud Infrastructure (OCI) by a major client. The client’s IT team needs to provision two Virtual Cloud Networks (VCNs) for a major application. The application uses a large number of virtual machine instances. Additionally, in the future, a VCN peering will be required to allow connectivity between the VCNs.
Which of the following are valid IP ranges to consider? (Choose the best answer.)
A. 10.0.0.0/30 and 192.168.0.0/30
B. 10.0.0.0/8 and 11.0.0.0/8
C. 10.0.8.0/21 and 10.0.16.0/22
D. 10.0.0.0/16 and 10.0.64.0/24

You have created the following JSON file to specify a lifecycle policy for one of your object storage buckets:

How will this policy affect the objects that are stored in the bucket? (Choose the best answer.)
A. Objects with the prefix ‘LOGS’ will be retained for 120 days and then deleted permanently.
B. Objects containing the name prefix LOGS will be automatically migrated from standard Storage to Archive storage 30 days after the creation date. The object will be deleted 120 days after creation.
C. The objects with prefix €LOGS€ will be deleted 30 days after creation date.
D. Objects containing the name prefix LOGS will be automatically migrated from standard Storage to Archive storage 30 days after the creation date. The object will be migrated back to standard Storage 120 days after creation.

You have set an alarm to be generated when the CPU usage of a specified instance is greater than 10%. In the alarm behavior view below you notice that the critical condition happened around 23:30. You were expecting a notification after 1 minute, however, the alarm firing state did not begin until 23:33.

What should you change to fix it? (Choose the best answer.)
A. Change the alarm’s metric interval to 1.
B. Change the alarm condition to be greater than 3%.
C. Change the notification topic that you previously associated with the alarm.
D. Change the alarm’s trigger delay minutes value to 1.

You have ordered two FastConnect connections that provide a high availability connection architecture between your on-premises data center and Oracle Cloud Infrastructure (OCI). You want to run these connections in an ACTIVE/PASSIVE architecture.
How can you accomplish this? (Choose the best answer.)
A. Decrease the prefix length of AS for the FastConnect you want to use as PASSIVE connection.
B. Enable BGP on the FastConnect that you want as the ACTIVE connection.
C. Use AS PATH prepending with your routes.
D. Adjust one of the connections to have a higher ASN.

The boot volume on your Oracle Linux instance has run out of space. Your application has crashed due to a lack of swap space, forcing you to increase the size of the boot volume.
Which step should NOT be included in the process used to solve the issue? (Choose the best answer.)
A. Reattach the boot volume and restart the instance.
B. Attach the resized boot volume to a second instance as a data volume; extend the partition and grow the file system in the resized boot volume.
C. Stop the instance and detach the boot volume.
D. Resize the boot volume by specifying a larger value than the boot volume’s current size.
E. Create a RAID 0 configuration to extend the boot volume file system onto another block volume.

You launched a Linux compute instance to host the new version of your company website via Apache Httpd server on HTTPS (port 443). The instance is created in a public subnet along with other instances. The default security list associated to the subnet is:

(...)
Which action would you take to accomplish the task? (Choose the best answer.)
A. Create a Network Security Group, add a stateful rule to allow ingress access on port 443 and associate it to the public subnet that hosts the company website.
B. In default security list, add a stateful rule to allow ingress access on port 443.
C. Create a new security list with a stateful rule to allow ingress access on port 443 and associate it to the public subnet.
D. Create a Network Security Group, add a stateful rule to allow ingress access on port 443 and associate it to the instance that hosts the company website.

You are using Oracle Cloud Infrastructure (OCI) services across several regions: us-phoenix-1, us-ashburn-1, uk-london-1 and ap-tokyo-1. You have create a separate administrator group for each region: PHX-Admins, ASH-Admins, LHR-Admins and NRT-Admins, respectively.
You want to restrict admin access to a specific region. E.g., PHX-Admins should be able to manage all resources in the us-phoenix-1 region only and not any other OCI regions.
What IAM policy syntax is required to restrict PHX-Admins to manage OCI resources in the us-phoenix-1 region only? (Choose the best answer.)
A. Allow group PHX-Admins to manage all-resources in tenancy where request.region= ‘phx’
B. Allow group PHX-Admins to manage all-resources in tenancy where request.permission= ‘phx’
C. Allow group PHX-Admins to manage all-resources in tenancy where request.target= ‘phx’
D. Allow group PHX-Admins to manage all-resources in tenancy where request.location= ‘phx’

You created an Oracle Linux compute instance through the Oracle Cloud Infrastructure (OCI) management console then immediately realize you forgot to add an SSH key file. You notice that OCI compute service provides instance console connections that supports adding SSH keys for a running instance. Hence, you created the console connection for your Linux server and activated it using the connection string provided. However, now you get prompted for a username and password to login.
(...)(Choose the best answer.)
A. You need to configure the boot loader to use ttyS0 as a console terminal on the VM.
B. You need to terminate the running instance and recreate it by providing the SSH key file.
C. You need to reboot the instance from the console, boot into the bash shell in maintenance mode, and add SSH keys for the opc user.
D. You need to modify the serial console connection string to include the identity file flag, -i to specify the SSH key to use.

You are launching a Windows server in your Oracle Cloud Infrastructure (OCI) tenancy. You provided a startup script during instance initialization, but it was not executed successfully.
What is a possible reason for this error? (Choose the best answer.)
A. Didn’t include anything in user_data.
B. Wrote a custom script which tried to install GPU drivers.
C. Ran a cloudbase-init script instead of cloud-init.
D. Specified a #directive on the first line of your script.

You have been asked to update the lifecycle policy for object storage using the Oracle Cloud Infrastructure (OCI) Command Line Interface (CLI).
Which command can successfully update the policy? (Choose the best answer.)
A. oci os object-lifecycle-policy delete -ns <object_storage_namespace> -bn <bucket_name>
B. oci os object-lifecycle-policy put -ns <object_storage_namespace> -bn <bucket_name>
C. oci os object-lifecycle-policy put -ns <object_storage_namespace> -bn <bucket_name> --items <json_formatted_lifecycle_policy>
D. oci os object-lifecycle-policy get -ns <object_storage_namespace> -bn <bucket_name>

Which statement about Oracle Cloud Infrastructure paravirtualized block volume attachments is TRUE? (Choose the best answer.)
A. Paravirtualized volumes may reduce the maximum IOPS performance for larger block volumes.
B. Paravirtualized is required to manage iSCSI configuration for virtual machine instances.
C. Paravirtualized volumes become immediately available on bare metal compute instances.
D. Paravirtualization utilizes the internal storage stack of compute instance OS and network hardware virtualization to access block volumes.

Multiple teams are sharing a tenancy in Oracle Cloud Infrastructure (OCI). You are asked to figure out an appropriate method to manage OCI costs.
Which is NOT a valid technique to accurately attribute costs to resources used by each team? (Choose the best answer.)
A. Create a Cost-Tracking tag. Apply this tag to all resources with team information. Use the OCI cost analysis tools to filter costs by tags.
B. Create separate compartment for each team. Use the OCI cost analysis tools to filter costs by compartment.
C. Create an Identity and Access Management (IAM) group for each team. Create an OCI budget for each group to track spending.
D. Define and use tags for resources used by each team. Analyze usage data from the OCI Usage Report which has detailed information about resources and tags.

You have been asked to investigate a potential security risk on your company’s Oracle Cloud Infrastructure (OCI) tenancy. You decide to start by looking through the audit logs for suspicious activity.
How can you retrieve the audit logs using the OCI Command Line Interface (CLI)? (Choose the best answer.)
A. oci audit event list --end-time $end-time --compartment-id $compartment-id
B. oci audit event list --start-time $start-time --compartment-id $compartment-id
C. oci audit event list --start-time $start-time --end-time $end-time --compartment-id $compartment-id
D. oci audit event list --start-time $start-time --end-time $end-time --tenancy-id $tenancy-id

Your deployment platform within Oracle Cloud Infrastructure (OCI) leverages a compute instance with multiple block volumes attached. There are multiple teams that use the same compute instance and have access to these block volumes. You want to ensure that no one accidentally deletes any of these block volumes.
You have started to construct the following IAM policy but need to determine which permissions should be used.
allow group DeploymentUsers to manage volume-family where ANY { request.permission != <???>, request.permission != <???>, request.permission != <???> }
Which permissions can you use in place of <???> in this policy? (Choose the best answer.)
A. VOLUME_DELETE, VOLUME_ATTACHMENT_DELETE, VOLUME_BACKUP_DELETE
B. VOLUME_ERASE, VOLUME_ATTACHMENT_ERASE, VOLUME_BACKUP_ERASE
C. ERASE_VOLUME, ERASE_VOLUME_ATTACHMENT, ERASE_VOLUME_BACKUP
D. DELETE_VOLUME, DELETE_VOLUME_ATTACHMENT, DELETE_VOLUME_BACKUP

You have a group of developers who launch multiple VM.Standard2.2 compute instances every day into the compartment dev. As a result, your OCI tenancy quickly hit the service limit for this shape. Other groups can no longer create new instances using VM.Standard2.2 shape.
Because of this, your company has issued a new mandate that the Dev compartment must include a quota to allow for use of only 20 VM.Standard2.2 shapes per Availability Domain. Your solution should not affect any other compartment in the tenancy.
Which quota statement should be used to implement this new requirement? (Choose the best answer.)
A. set compute quota vm-standard2-2count to 10 in compartment dev where request.region = us-phoenix-1
B. set compute quota vm-standard2-2-count to 20 in compartment dev
C. zero compute quotas in tenancy set compute quota vm-standard2-2-count to 20 in compartment dev
D. zero compute quotas in tenancy set compute quota vm-standard2-2-count to 20 in tenancy dev

You set up a bastion host in your VCN to only allow your IP address (140.19.2.140) to establish SSH connections to your Compute Instances that are deployed in a private subnet. The Compute Instances have an attached Network Security Group with a Source Type: Network Security Group (NSG), Source NSG: NSG-050504. (...)
However, after checking the bastion host logs, you discovered that there are IP addresses other than your own that can access your bastion host.
What is the root cause of this issue? (Choose the best answer.)
A. The Security List allows access to all IP address which overrides the Network Security Group ingress rules.
B. All compute instances associated with NSG-050504 are also able to connect to the bastion host.
C. The port 22 provides unrestricted access to 140.19.2.140 and to other IP address.
D. A netmask of /32 allows all IP address in the 140.19.2.0 network, other than your IP 140.19.2.140

You are asked to implement the disaster recovery (DR) and business continuity requirements for Oracle (...). Two OCI regions being used: a primary/source region and a DR/destination region. The requirements are:
• There should be a copy of data in the destination region to use if a region-wide disaster occurs in the source region
• Minimize costs
Which design will help you meet these requirements? (Choose the best answer.)
A. Clone block volumes. Use Object Storage lifecycle management to automatically move clone objects to Archive Storage. Copy Archive Storage buckets from source region to destination at regular intervals.
B. Clone block volumes. Copy block volume clones from source region to destination region at regular intervals.
C. Back up block volumes. Copy block volume backups from source region to destination region at regular intervals.
D. Back up block volumes. Use Object Storage lifecycle management to automatically move backup objects to Archive Storage. Copy Archive Stora

A subscriber (...) (1)
A. If OCI Notifications service does not receive an acknowledgement from a subscription endpoint, the service drops the message. Confirm that the subscriber is always online to receive messages to help debug the issue.
B. If OCI Notifications service does not receive an acknowledgement from a subscription endpoint, check the NumberOfNotificationFailed metric through the OCI Monitoring service for failed messages. Copy these messages to an OCI Object Storage bucket. Make sure the subscriber has the required credentials to access this bucket to help debug the issue.
C. If OCI Notifications service does not receive an acknowledgement from a subscription endpoint, the service tries to redeliver messages for up to one day. Make sure that the subscriber is online at least once a day to
D. If OCI Notifications service does not receive an acknowledgement from a subscription endpoint, the service tries to redeliver messages for up to two hours. Configure an alarm on the

Which technique does NOT help you get the optimal performance out of the Oracle Cloud Infrastructure (OCI) File Storage service? (Choose the best answer.)
A. Limit access to the same Availability Domain (AD) as the File Storage service where possible.
B. Serialize operations to the file system to access consecutive blocks as much as possible.
C. Right size compute instances from where file system is accessed based on their network capacity.
D. Increase concurrency by using multiple threads, multiple clients, and multiple mount targets.

What is a key benefit of using Oracle Cloud Infrastructure’s Resource Manager for your Terraform provisioning and management activities? (Choose the best answer.)
A. You can use Resource Manager to apply patches to all existing Oracle Linux interfaces in a specified compartment.
B. Resource Manager has administrative privileges by design. Even if your IAM user does not have access, you can leverage Resource Manager to provision new resources to any compartment in the Tenancy.
C. You can use Resource Manager to identify and maintain an inventory of all Compute and Database instances across your tenancy.
D. Resource Manager manages to Terraform state file for your infrastructure and locks the file so that only one job at a time can run on a given stack.

Recently, your e-commerce web application has been receiving significantly more traffic than usual. Users are reporting they often encounter a 503 Service Error when trying to access your site. Sometimes the site is very slow.
(...)configured to allow 20 compute instances. Currently, 14 compute instances have been provisioned by the instance pool. You also confirm that current CPU utilization across all hosts exceeds the scale-out threshold you set in your auto-scaling policy. However, the instance pool is not provisioning any new instances.
What can you check to determine why the application is NOT functioning properly? (Choose the best answer.)
A. Verify that the new offer feature code did not introduce any performance bugs.
B. Verify that the database is accessible.
C. Verify that the compute resource quota has not been exceeded.
D. Verify that the Quality Assurance team is not currently performing load-testing against production.

You have a 750 MIB file in an Oracle Cloud Infrastructure (OCI) Object Storage bucket. You want to download the file in multiple parts to speed up the download using the OCI CLI. You also want to configure each part size to be 128 MIB.
Which is the correct OCI CLI command for this operation? (Choose the best answer.)
A. oci os object get -ns my-namespace -bn my-bucket --name my-large-object --multipart-download-threshold 750 -- parallel-download-count 128
B. oci os object download -ns my-namespace -bn my-bucket --name my-large-object --multipart-download-threshold 750 -- parallel-download-count 128
C. oci os object download -ns my-namespace -bn my-bucket --name my-large-object --resume-put --multipart-download- threshold 500 --part-size 128
D. oci os object get -ns my-namespace -bn my-bucket --name my-large-object --multipart-download-threshold 500 --part- size 128

Security Testing Policy describes when and how you may conduct certain types of security testing of Oracle Cloud Services, including vulnerability and penetration tests, as well as tests involving data scraping tools.
What does Oracle allow as part of this testing? (Choose the best answer.)
A. Customers are allowed to use their own testing and monitoring tools.
B. Customers can simulate DoS attack scenarios as long as it’s restricted to the customer’s own environment.
C. Customers can validate that their network resources are isolated from other customer resources.
D. Customers are allowed to test Oracle Cloud Infrastructure (OCI) hardware related to resources in their tenancy.

You are working as a Cloud Operations Administrator for your company. They have different Oracle Cloud Infrastructure (OCI) tenancies for development and production workloads. Each tenancy has resources in two regions - uk-london-1 and eu-frankfurt-1. You are asked to manage all resources and to automate all the tasks using OCI Command Line Interface (CLI).
Which is the most efficient method to manage multiple environments using OCI CLI? (Choose the best answer.)
A. Use OCI CLI profiles to create multiple sets of credentials in your config file, and reference the appropriate profile at runtime.
B. Create environment variables for the sets of credentials that align to each combination of tenancy, region, and environment.
C. Run oci setup config to create new credentials for each environment every time you want to access the environment.
D. Use different bash terminals for each environment.

Your team implemented a SaaS application that requires a whole system deployment for each new customer. The infrastructure provisioning is already automated via Terraform, and now you have been asked to develop an Ansible playbook to centralize configuration file management and deployment.
What is the most effective way to ensure your playbooks are utilizing up-to-date and accurate inventory? (Choose the best answer.)
A. Export an inventory list from the Oracle Cloud Infrastructure Web console.
B. Export an inventory list using Terraform apply command.
C. Implement a Command Line Interface script to list all the resources and run it within Ansible to generate a dynamic inventory list.
D. Download the dynamic inventory script provided by Oracle Cloud Infrastructure and include it in the playbook invocation command.

An insurance company has contracted you to help automate their application business continuity plan. They have the application running in eu-frankfurt-1 (...)How can you automate the failover process? (Choose the best answer.)
A. Create a Health Check that evaluates both regional endpoints. Create a Traffic Management Steering policy with Failover type and associate it with the Health Check.
B. Create a Traffic Management Steering policy with Load Balancer type and add both eu-frankfurt-1 and uk-london-1 endpoints. Attach the Traffic Management Steering policy to the A record.
C. Provision a Load Balancer in Frankfurt and associate it with the A record in DNS. Create a backend set with backend servers from both eu-frankfurt-1 and uk- london-1 regions.
D. Create a Traffic Management Steering policy and attach it to a backend servers from both eu-frankfurt-1 and uk-london-1 regions.

You are a Cloud Operations administrator who has recently joined a new department. You have created 10 Terraform stacks using Oracle Cloud Infrastructure (OCI) resource manager. Each stack creates a different set of resources in OCI for your development team.
What determines the cost of these Terraform stacks?
A. The cost for each stack will be higher for pay as you go (PAYG) than for monthly flex billing.
B. The length of time it takes to build each resource using these Terraform stacks.
C. Resource manager stacks are free but you are charged for the resources they create.
D. The number of lines of text in your Terraform configuration files.

Several development teams in your company have each provided with a budget and a dedicated compartment to be used for testing purpose you are asked to help them to control the cost and avoid any overspending.
What should you do?
A. Configure a quota for each compartment to prevent provisioning of any bare metal instance.
B. Contact Oracle support and ask them to associate the monthly budget with the Service Limits in every region for which your tenancy is subscribed. The tenancy administrator will receive an alert email from Oracle when the limit is reached.
C. Associate a Budget Tag to each resource with monthly budget amount and use that information to prepare a weekly report to send to each team.
D. Associate a Budget Tag to each compartment with the monthly budget amount and set an alert rule to notify the developer’s teams when they reached a specific percentage of the budget

You have created several block volumes in the us-phoenix-1 region in a specific compartment. The compartment can be identified by the following Oracle Cloud Infrastructure (OCI) unique identifier, or ocid1.compartment.oc1.phx..exampleuniquelD. Your manager has asked you to leverage the OCI monitoring service and write a metric query showing all read IOPS at a one-minute interval, filtered to this compartment and aggregated for the maximum.
Which metric query will you create?
A. IopsWrite[lm]{compartmentId=Hocidl.compartment.ocl.phx..exampleuniquelD"}.mean()
B. IopsRead[lm]{compartmentId="ocldl.compartment.ocl.phx..exampleuniquelD"}.max()
C. IopsRead[lm]{compartmentId="ocidl.compartment.ocl.phx..exampleuniquelD"}.grouplng().max()
D. IopsRead[lm]{compartmentId = "odd 1.compartment.ocl.phx..exampleuniquelD"}.grouping().mean()

You have been brought In to help secure an existing application that leverages Object Storage buckets to distribute content. (...)data must be rotated every 30 days.
Which design option will meet these requirements?
A. Use Pre-Authenticated request, even though there will be multiple URLs this will provide better security.
B. Create a private bucket only to share the data.
C. Create a new group and map users to this group, create a IAM policy providing access to Object Storage service only to this group. Users can then simply login to OCI console and retrieve needed flies.
D. Create multiple bucket and classify them as Public and Private. Use public bucket for non-sensitive data and private bucket for sensitive data.

You are system administrator at a retail company. You Just received a ticket stating that the
account team is unable to access an internal application. The application is running behind an Oracle
Cloud Infrastructure (OCI) Public Load Balancer and is using a compute instance pool with autoscaling
enabled. You noticed some deleted items In the Audit Log while troubleshooting.
Which resource deletion could have caused this Issue?

A. The Route Table rules associated with the subnet within the Virtual Cloud Network (VCN)
B. An Object Storage bucket containing transaction log backups
C. NAT Gateway and the Route Table associated with the Virtual Cloud Network (VCN)
D. Internet Gateway and the Route Table associated with the Virtual Cloud Network (VCN)

You have been tasked with allocating an identity to one of your compute instances that needs to
retrieve and process static files that are stored in an Object Storage bucket. After creating a
dynamic group with a matching rule that specifies the OCID of the compute instance, you
discover that the API calls are failing.
Which step should you take to resolve this issue?

A. Create IAM policies to permit users in these groups to make API calls against Oracle Cloud
Infrastructure services.
B. Initial credentials must be initialized using OCI console for the Instance in dynamic group. This
can be a bulk operation.
C. Create IAM policies to permit instances in these groups to make API calls against Oracle
Cloud Infrastructure services.
D. Once instances are in dynamic group no additional steps are required.

To take advantage of cloud agility and burst computing capability, ABC Automobiles have
extended their data center to a Virtual Cloud Network (VCN). In Oracle Cloud Infrastructure's
(OCI) us-phoenlx-1 region. They have several members in their Cloud Operations (CloudOps)
team that need I access the OCI management console. The security administrator does not want
to create new IAM users and credentials that would then need to be distributed to each CloudOps
member.
Which option will help solution architect meet the needs for CloudOps?
A. Use an existing SAML 2.0 compliant identity provider (IdP) to grant CloudOps members federated access to OCI Console via the OCI single sign-on (SSO) endpoint.
B. Use Web Identity Federation to retrieve an AuthToken to enable CloudOps members to sign into the OCI Console.
C. Use OAuth 2.0 to retrieve temporary credentials to enable your CloudOps members to sign into the OCI Console.
D. Use on-premises SAML2.0 compliant identity provider (IdP) to retriev

As the operations administrator for your company's Oracle Cloud Infrastructure (OCI), you have
been entrusted the task of ensuring that data being accessed by the application is encrypted.
Your application portfolio Includes both Virtual Machine (VM) and Bare Metal (BM) database
systems.
Which method should you use to achieve encryption of data in-transit?
A. Configure backup encryption for RMAN backup sets before transferring data
B. Native Oracle Net Services encryption and integrity capabilities
C. Key Store/Wallet service for on the fly encryption of data in transit
D. Data is encrypted at rest using TDE and no additional encryption is needed

An organization wants to extend their existing on-premises data centers to the Oracle Cloud
Infrastructure (OC1) us-phoenix-1 region. In order to achieve It, they have created an IPSec VPN
connection between their Customer-Premises Equipment (CPE) and Dynamic Routing
Gateway (DRG) on.

How can you make this connection highly available (HA)?

A. Add another Dynamic Routing gateway In a different Availability Domain and create another IPSec VPN connection.
B. Add another Customer-Premises Equipment (CPE) and create second IPSec VPN connection with the same Dynamic Routing Gateway (DRG).
C. Create a NAT Gateway and route all traffic through a NAT Gateway, which is highly available component.
E. Add another Dynamic Routing Gateway in a different Availability Domain, and create another IPSec VPN connection with another Customer Premises Equipment (CPE).

1. Where are the Oracle Cloud Infrastructure block volume backups stored?
A. In a File Storage
B. In another block volume in a different region
C. In the Object Storage
D. In another block volume in the same region

2. You are using Terraform to create a sandbox environment for the development team. This environment consists of an Oracle Cloud Infrastructure virtual cloud network, two compute resources, and a database instance. As part of the Terraform configuration, you need to run a script on the two compute instances that will configure the connection to the database. Which Terraform feature should you leverage to accomplish this task?
A. The instance data source
B. The local-exec provisioner
C. The Oracle Cloud Infrastructure provider
D. The remote-exec provisioner

3. Which two statements are true about Object Storage replication?
(Choose all correct answers)
A. After a replication policy is created, the destination bucket is read/write by default.
B. Replication overwrites any object in the destination bucket that has the same name as an object in the source bucket.
C. It protects from regional outages and helps in disaster recovery.
D. Objects uploaded to a source are synchronously replicated to the destination bucket.

4. What is the Oracle Cloud Infrastructure Command Line Interface used for?
A. automating simple, repeatable actions
B. managing application configuration
C. creating complex application architecture
D. managing application deployment

5. Which Oracle Cloud Infrastructure Service allows customers to configure routing policies for serving intelligent responses to DNS queries?
A. Route Tables
B. Health Check
C. Load Balancer
D. Traffic Management

6. Which three are valid use cases for using Oracle Cloud Infrastructure cost-tracking tags? (Choose all correct answers)
A. set up budgets based on resources grouped by tags
B. set up autoscaling policies based on tags
C. filter projected costs based on tags
D. track resource usage based on tags

7. The backups for a block volume are triggered every week and retained for four weeks. Additional ones are created every month, which are retained for twelve months. Which Automated policy is configured for this backup?
A. Gold
B. Bronze
C. Custom
D. Silver

8. Which statement is FALSE regarding multipart uploads?
A. Multipart uploads are initiated by making a CreateMultipart Upload REST API call.
B. A commit is performed after all object parts are uploaded.
C. Uploads cannot be restarted if they fail due to a network issue.
D. Multipart uploads are performed to upload objects larger than 100 MiB

9. How can you provide user access to an existing compartment in Oracle Cloud Infrastructure?
A. by adding users to a compartment. All users in the compartment will have access to the resources in the compartment
B. by granting access directly to the user when the user is created
C. by granting users access to the compartment when the compartment is created
D. by adding users to a group and defining a policy to provide group access to the compartment

10. Which service intercepts HTTP/S traffic and passes them through a set of filters and rules to protect against attack streams?
A. Vault
B. WAF
C. IAM
D. Cloud Guard

11. Which three can leverage the Oracle Cloud Infrastructure Traffic Management Service?
(Choose all correct answers)
A. Controlled migration from a data center to Oracle Cloud Infrastructure
B. Steering traffic to other cloud providers and enterprise data centers
C. Steering internal traffic between two Virtual Cloud Networks
D. Serving different responses for internal users and external users

12. Which three tasks can be done using Ansible?
(Choose all correct answers)
A. Audit
B. Workflow automation
C. Analytics
D. Application deployment

13. A working Linux instance stops responding. Which is the correct way to troubleshoot the issue?
A. Terminate the instance.
B. Change the ssh keys.
C. Create an instance console connection and check the console logs
D. Check query performance.

14. Which statement is true about the Oracle Cloud Infrastructure audit logs retention period?
A. You can configure log retention for up to 365 days.
B. The log retention duration cannot be changed.
C. You can configure log retention for 60 days.
D. You can configure log retention for any duration of time.

15. If the traffic does not flow correctly, which three might cause issues in the IPSec connection?
(Choose all correct answers)
A. Incorrect protocol configured for the listener
B. Overlapping CIDRs
C. Multiple SPIs with policy-based tunnels
D. An inconsistent ping result from on-premises to the Oracle Cloud Infrastructure device

16. Which action do you need to perform to push a new image to the Oracle Cloud Infrastructure (OCI) Registry?
A. Generate a public private key pair to authenticate via Docker CLI.
B. Generate an API signing key to complete the authentication via Docker CLI.
C. Generate an auth token to complete the authentication via Docker CLI.
D. Assign an OCI-defined tag via OCI CLI to the image.

17. All the backend server health status indicators report OK, but the load balancer does not pass traffic on a listener. What are two possible causes of this issue?
(Choose all correct answers)
A. The compute instance does not have the correct ssh-key assigned.
B. Health check is misconfigured.
C. Listeners are configured to listen on the wrong port.
D. Listeners are using the wrong protocol.

18. Which Traffic Management Steering Policy dynamically routes traffic requests based on the originating IP prefix?
A. DNS Steering
B. IP Prefix Steering
C. Failover
D. Geolocation

19. What is the default location of the file created to organize the servers managed by Ansible?
A. /etc/ansible/config/hosts
B. /etc/ansible/hosts
C. /etc/ansible/systems
D. /etc/hosts

20. You have created the following JSON file to '[
{
""action"": ""ARCHIVE"",
""is-enabled"": true,
""name"": ""ArchiveAfter30Days"",
""object-name-filter"": {
""inclusion-prefixes"": [
""documents""
]
},
""time-amount"": 30,
(,,,,,,,,,)
A. Objects containing the name prefix “documents” will automatically be moved from Standard Object Storage to Archive Storage 30 days after the date of creation, but because of policy error will have to be manually deleted after 180 days.
B. Objects containing the name prefix “documents” will automatically be moved from Standard Object Storage to Archive Storage 30 days after the date of creation.
C. Objects containing the name prefix “documents” will automatically be moved from Standard Object Storage to Archive Storage 30 days after the date of creation. Other objects will be deleted after 180 days.
D. Objects containing the name prefix “documents” will automatically be moved from Standard Object Storage to Archive Storage after 30 days and then dele

21. What is used to automate copying block volume backups from one region to another seamlessly?
A. Silver backup policy
B. User-defined backup policy
C. Bronze backup policy
D. Gold backup policy

22. Which Oracle Cloud Infrastructure Service monitors endpoints across a hybrid infrastructure?
A. Health Checks
B. Monitoring
C. Notifications
D. Logging

23. Which three are components of a Monitoring Query Language expression?
(Choose all correct answers)
A. alarm
B. metric
C. interval
D. statistics

24. Which three SDKs are supported on Oracle Cloud Infrastructure?
(Choose all correct answers)
A. Go
B. Java
C. TypeScript
D. C#
E. R

25. Which three are typical responses from WAF?
(Choose all correct answers)
A. Audit log the request
B. An error page due to a blocked request
C. Allow the request to pass
D. Redirect the request

26. Which alarm state is seen if the alarm metric is no longer being emitted?
A. Cancelled
B. Suspended
C. Reset
D. Firing

27. What is the most secure place to store secret keys on Oracle Cloud Infrastructure?
A. Cloud Guard
B. Vault
C. Config files
D. Code Files

28. A user is unable to mount a file system to access the data from a local data center via VPN.
What is causing the issue?
A. The instance is in a different region.
B. A mount point has been created.
C. Port 111 is allowed as a stateful ingress rule.
D. The NFS client is installed.

29. What is the difference between service limits and compartment quotas?
A. Both service limits and compartment quotas are identical.
B. Service limits can be increased by administrators, while compartment quotas cannot
C. Service limits are set by Oracle, while compartment quotas are set by administrators.
D. Service limits are the limits on the overall billing, while compartment quotas are limits for a specific resource.

30. Which two statements are true about the Oracle Cloud Infrastructure Cost Analysis Tool?
(Choose all correct answers)
A. Costs can be filtered by Compartment, Date, and Service Limit.
B. Costs can be filtered by Date, Tags, and Compartments.
C. The tool can be accessed by all users.
D. The tool can only be accessed by members of the ADMINISTRATOR group.

31. What is the measurement related to the health, capacity, or performance of a given resource called?
A. Metadata
B. Metric
C. Dimension
D. Namespace

32. Which three Terraform actions can be executed against a Stack in the Resource Manager?
(Choose all correct answers)
A. Destroy
B. Plan
C. Create
D. Apply

33. Which Oracle Cloud Infrastructure service enables you to set up communication channels to publish messages using topics and subscriptions?
A. Alarm
B. Notification
C. Broadcast
D. Monitoring

34. Which two options show the correct scope for setting up Oracle Cloud Infrastructure budgets?
(Choose all correct answers)
A. Namespace
B. Compartment
C. User-defined tag
D. Tenancy
E. Cost-tracking tag

35. Which three algorithms are supported by Vault?
(Choose all correct answers)
A. ECDSA
B. RSA
C. EDSCA
D. AES

36. To better manage resource utilization in your environment, you have decided to create alerts that notify your team each time a new compute instance is created. Which two resources do you need to create to accomplish this task?
(Choose all correct answers)
A. Create a new subscription in the Notification Service to subscribe to all Event Service rules.
B. Create a new metrics query in the Monitoring Service with the metric namespace “oci_computeagent” and the dimension name “resourceId”.
C. Create a new topic in the Notifications Service and subscribe your email address to the topic.
D. Create a rule in the Event Service that is activated by the Instance - Launch End event type.
E. Create a new instance pool and assign an autoscaling policy to create additional instances when the aggregate CPU utilization exceeds 80%.

37. You are an admin for an Oracle Cloud Infrastructure tenancy and you are using the Monitoring Service to monitor your team’s cloud resource usage.
Which is true regarding the Monitoring Service?
A. Metric and alarm data are accessible via the Console only.
B. You can publish only default metrics to the Monitoring Service and not the custom metrics.
C. You cannot create alarms with nested queries.
D. The Monitoring Service uses metrics to monitor resources and alarms to notify about metrics.

1. You recently joined the Site Reliability team at a new company and found out that their most heavily used application uses immutable instances within the Web tier. During a cursory review of the monitoring dashboard, you notice that 1 of the 11 instances appears to be unhealthy.
Which action would you perform first to resolve this issue?
A. Connect to the server via SSH and view the contents of the /var/log/messages file.
B. Stop the instance, wait for 5 minutes, and then start the instance back up.
C. Create a clone of the instance.
D. Terminate the instance and replace it using the appropriate image.

2. Which statements are true about using Ansible on OCI? (Choose three)
(Choose all correct answers)
A. The task sequence in your Ansible Playbook does not matter.
B. You can use Ansible to create and destroy OCI resources, such as compute instances and load balancers.
C. Ansible will evaluate dependencies and execute tasks in the most effective sequence.
D. You can use Ansible to collect billing and usage data for your OCI tenancy.
E. You can use Ansible to execute a shell command on a collection of hosts.
F. You can use Ansible to restart Apache on all web servers as defined in inventory.

3. Which is NOT a supported SDK on Oracle Cloud Infrastructure?
A. Ruby SDK
B. PHP SDK
C. Python SDK
D. Java SDK
E. Go SDK

4. Examine the command:
oci os ns get
Why would you need to execute this command?
A. to check the connectivity to OCI
B. to configure the OCI CLI
C. to display the operating system details
D. to configure the cloud shell

5. Your team recently deployed a custom Java application to a collection of 10 OCI Compute instances. The application is used only for 10 hours each day. To save money, you devise a plan to stop the instances at the end of the day when they are no longer needed, and start them each morning shortly before they will be used.
Which would be the easiest method to implement this plan?
A. Use Terraform.
B. Start and stop resources in the OCI Management Console each day.
C. Write a custom application using the Java SDK.
D. Use the OCI Command Line Interface.

1. Which statement is true about Object Storage replication?
A. Replication creates a copy of any object with the same name in the destination bucket.
B. Objects uploaded to a source are synchronously replicated.
C. After the replication is enabled, the destination bucket becomes read-only.
D. Replication is not supported in the object storage.

2. Which statement is true about attaching a volume to multiple instances?
A. It can be attached to up to 16 instances in read-only mode.
B. It does not provide coordination for concurrent reads.
C. It can be attached only to up to eight instances in read/write mode.
D. It can be attached to multiple instances in read-only mode only.
E. It can be attached only in read-only or read/write mode; cannot be changed once attached.

3. At which level is versioning defined in object storage?
A. Availability Domain level
B. visibility level
C. fault domain level
D. bucket level

4. You are managing two applications that consist of multiple compute instances with multiple block volumes. You want to create backups of block volumes efficiently.
How would you do this?
A. Create on-demand backups of the block volumes.
B. Group together multiple block volumes into a volume group and create volume group backups.
C. Create clones of block volumes.
D. Create scripts to automate the backup of block volumes.

5. What are the advantages of using OS Management Service? (Choose two)
(Choose all correct answers)
A. It enables you to manage updates and patches for the operating system on OCI instances.
B. It manages only Linux-based instances.
C. It removes common vulnerabilities.
D. It enables you to manage the instances of different operating systems in a group.

1. In which scenarios does the load balancer health status prove helpful? (Choose two)
(Choose all correct answers)
A. VCN network security groups or security list blocks traffic.
B. IPSec or FastConnect connection is not configured properly.
C. Route tables are not configured properly to connect to a compute.
D. VCN is not configured properly.

2. Which is a common error when connecting to a compute using SSH at the client side?
A. permission error for the private key
B. password mismatch
C. VCN not configured properly
D. permission error for the public key

3. Which are the types of instance console connections? (Choose two)
(Choose all correct answers)
A. Remote console connections
B. OCI console connections
C. Serial console connections
D. VNC console connections

4. What are the various statuses returned by Health check? (Choose two)
(Choose all correct answers)
A. CONNECT_FAILED
B. CONNECTION_FAILED
C. IO_CONNECT_ERROR
D. INVALID_STATUS_CODE

5. Which is a common error during block storage multi attach?
A. Block volume is shared by more than eight instances.
B. Block volume is not configured in shareable mode.
C. Block volume is configured in read/write mode.
D. Block boot volume is configured as non-shareable.

1. Which statements are true about OCI Audit service? (Choose three)
A. It retains the audit logs by default for 365 days.
B. It logs all calls to API endpoints.
C. It is supported by all OCI services.
D. It records only the API activity.
E. It records only the action and response of the API activity.

2. What is the retention period for Audit logs by default?
A. 60 days
B. 180 days
C. 90 days
D. 365 days

3. Which resources can be managed by using the OCI Vault service? (Choose three)
backup files
A. keys
B. vaults
C. secrets
D. audit logs

4. Which are the various algorithms supported by OCI Vault Service? (Choose three)
A. ECDSA
B. PKCS1
C. RSAES
D. RSA
E. AES

5. Which statements are true about Web Application Firewall (WAF)? (Choose two)
A. It blocks HTTPS requests only and responds with an error page.
B. It intercepts HTTP/S traffic and passes it through a set of rules.
C. It intercepts HTTP traffic only and filters it against the set rules applied.
D. It protects from attacks over the web application.

1. Which are the various alarm states of the alarm feature in the Monitoring service? (Choose three)
A. Suspended
B. Snooze
C. Triggered
D. Firing
E. Reset
F. Ringing

2. In which scenarios can OCI Notifications service be used? (Choose three)
A. to get notified when alarms are fired
B. to get notified of the resources consumed in the tenancy
C. to publish a message
D. to get notified when event rules are triggered
E. to get notified of unauthorized login or access

3. Which are the different ways to access monitoring service? (Choose four)
A. OCI Resource Manager
B. REST API
C. SDK
D. Terraform
E. Ansible
F. OCI Console

4. Which statement is true about the Monitoring service?
A. You cannot create alarms with nested queries.
B. The Monitoring service uses metrics to monitor resources and alarms to notify about metrics.
C. Metric and alarm data is accessible only via the Console.
D. You can publish only default metrics to the Monitoring service, not custom metrics.

5. Which statements are true about the OCI Notifications service? (Choose two)
A. It enables you to set up communication channels for publishing messages.
B. It uses metrics to broadcast notifications to subscribers.
C. It broadcasts messages to distributed components in a publish-subscribe pattern.
D. It monitors resources and sends notification alerts to subscribers.

1. Which can be used for setting up Oracle Cloud Infrastructure (OCI) budgets? (Choose two)
A. cost-tracking tag
B. user-defined tag
C. namespace
D. tenancy
E. compartment

2. Which reports would you use to analyze the spending in the Oracle Cloud Infrastructure tenancy?
A. Cost reports
B. Spend reports
C. OCI Consumption reports
D. Usage reports

3. Which of the following are covered in end-to-end SLAs? (Choose three)
A. availability
B. manageability
C. performance
D. support
E. reliability

4. Which are the different Pricing models available? (Choose three)
A. License Included
B. Yearly Flex
C. Monthly Flex
D. Pay As You Go
E. Bring Your Own License

5. Which are the various factors that impact pricing? (Choose three)
A. services consumed
B. data transfer
C. selection of the OCI region
D. type of resource
E. selection of Availability Domains for high availability

Which function CANNOT be performed using Terraform in OCI?
A. Provisioning
B. Multicloud
C. Monitoring
D. Destroy
E. Manage

You have been hired to manage OCI. One of the first tasks is to launch new instances at scale. This can be done form the console, however you want to replicate this to multiple regions. What process would help this task?
A. Launch a VM shape form the console, and then an create instance configuration.
B. Create script using OCI CLI that will launch an instance, create the instance configuration, and then migrate the image to the secondary region.
C. Launch a VM shape from the console, and create a custom image.
D. Clone the block volume of the current VM shape

Q3: Performance Tuning and Troubleshooting
Identify the requirement for implementing Block storage Multi Attach feature in OCI?
A. Configure Service gateway
B. All volume attachments must be configured as exclusive
C. Compute instances must be in same availability domain
D. All volume attachment must be configured as read-write

A VCN has four instances in one of its public subnet and all four instances can access the internet. You create another public subnet, associate it with the same security list as the other public subnet, and create an instance in the subnet. Upon testing, you are not able to access the new instance via SSH from the public internet. Which of the following is the most likely reason?
A. You need to attach a NAT Gateway to this subnet.
B. Create a service gateway to allow traffic connectivity with the internet.
C. Associate the route table with its default route to the internet gateway of your VCN.
D. Associate the route table with its default route to the service gateway.

Q5: Managing Cost
How will you control and monitor how much block storage can be consumed in a compartment, control and monitor?
A. Use the right IAM policies.
B. Use Limits and Quotas.
C. Configure the max size for block volumes.
D. Set up security zones.

Q6: Managing Cost
One of the new projects at the company has been going over budget every month. You have been tasked with creating an alert and reducing cost on this project. When looking in OCI, you notice that the test environment is running VM standard2.24. Per CPU usage, you find it's only at 10%. First thing you do is tell the developers to reduce the shape. Then you set the quota limits in the account.
What would the quota policy look like to lock this compartment to only smaller shapes?
A. zero compute quotas in tenancy, set compute quota vm-standard2-4-count to 10 in tenancy.
B. set compute quota vm-2-4-count to 10 in compartment test.
C. zero computer quotas in tenancy, set compute quota vm-standard2-1-count to 10 in compartment test where request.region = us-phoenix-1.
D. zero compute quotas in tenancy, set compute quota vm-standard2-1-count to 10 in compartment.name = test.

Q7: Security and Compliance
Identify the two correct statements when moving compartments to another compartment in OCI?
A. The destination compartment must have the same levels.
B. The destination parent compartment must be empty.
C. The destination compartment cannot have pre-existing child compartment with the same name.
D. Policy statements can be edited by OCI automatically under certain conditions.
E. All policies have to be dropped and recreated after a move is successful.

Q8: Security and Compliance
Identify the three core functionality of OCI Audit service?
A. Automatically record calls to OCI service API endpoints.
B. Stops unauthorized actions by users.
C. Terraform and Ansible calls are not audited.
D. Create audit logs to perform diagnostics.
E. Log retention is changeable.

Q9: Monitoring and Alerting
Identify which component is optional part of MQL expression for monitoring service in OCI?
A. Metric
B. Interval
C. Grouping function
D. Statistics

Q10: Monitoring and Alerting
After creating a new three-tier web application, you want to gain insight into performance. You have decided to implement monitoring on the application. The first one that is set up is for oCPU of the VM shape. The alarm states >60% CPU notify PagerDuty + Email for 1 minute. You start seeing emails filling up your inbox.
What is the first step to take to stop this?
A. Delete the alarm as it is sending too many emails.
B. Adjust the alarm threshold to >80%CPU and remove PagerDuty + Email.
C. Delete the alarm and create a new one with >70%CPU
D. First suppress the alarm and then make adjustments to the configuration.

Q11: Data Retention and Archival
A third party has requested access to Audit logs from OCI for the last one month. How will you fulfill this request without granting direct access to audit logs in OCI?
A. You can export these logs to a zip file and then give it to the auditors.
B. You have to submit a service request to Oracle Support.
C. You can export these logs to object storage and then grant access to object storage.
D. Auditors can use REST APIs for these logs which bypasses authentication.

Q12: Data Retention and Archival
A third party has requested access to data stored in OCI Object Storage Bucket so your Object Storage administrator creates a pre-authenticated request (PAR) for it. Which two statements about PAR are correct?
A. PARs have expiration date which determines the length of the time the PAR stays active. Once a PAR expires, it can no longer be used.
B. You cannot delete a bucket that has PAR associated with it.
C. If permissions of the user who creates the PAR change - such that they no longer have access to the bucket - it will not affect the functionality of the PAR.
D. You can extend the expiration date of PAR.
E. You will not be able to create a PAR on the public bucket.

Q13: Designing for Cloud-Scale Agility
You have been asked to design and manage a three-tier web application. The application will need to scale to meet the customer’s needs as they regular release promotions on the site.
What are the service or features you will need to create the setup?
A. Custom image, Load Balancer, and Instance configuration.
B. Autoscaling, Instance configuration, and Load Balancer.
C. Instance and Load Balancer.
D. Autoscaling and VM shape.

Q14: Designing for Cloud-Scale Agility
Which three features in an OCI can help with application performance in Hybrid Cloud configurations?
A. Load Balancers.
B. FastConnect.
C. Archive Object Storage.
D. Number of instances.
E. IAM policy.