OCI Architect 2022 Associate [1Z0-1072-21] - Practice Exam with complete solution

OCI Architect 2022 Associate [1Z0-1072-21] - Practice Exam with complete solution You want users of the NetworkAdmin group to manage a cloud network in any compartment of a tenancy. What must you allow the NetworkAdmi ...

OCI Architect 2022 Associate [1Z0-1072-21] - Practice Exam with complete solution You want users of the NetworkAdmin group to manage a cloud network in any compartment of a tenancy. What must you allow the NetworkAdmin group to do? A. Manage instance-family in compartment ABC. B. Use virtual-network-family in compartment XYZ. C. Manage network-catalog-listing in tenancy. D. Manage virtual-network-family in tenancy. -Answer- D Which Object Storage tier would you use for data that you need to access quickly, immediately, and frequently? A. Ultra-high performance tier B. Archive tier C. High performance tier D. Infrequent access tier E. Standard tier -Answer- E When triggered, an alarm sends an alarm message to the configured topic. In which service is the topic configured? A. Synchronization B. Notification C. Monitoring D. Management -Answer- B Which network security service allows you to separate the VCN's subnet architecture from your application security requirements? A. Flow logs B. Access control C. Security lists D. Network security group -Answer- D Which three statements are true about compartments? A. Compartments can be nested. B. You cannot control the type of resources that can be created within a compartment. C. One compartment can have resources from multiple regions. D. Multiple compartments can share a single resource. E. You can set a budget on a compartment such that you are notified as soon as the budget is exceeded. -Answer- A, B, E An instance running in a development compartment needs to make API calls to other OCI services. How can you achieve this without configuring user credentials or setting up a configuration file? A. The requirement cannot be achieved with configuring user credentials or setting up a configuration file. B. Create a dynamic group with matching rules to include your instance. C. Instances can automatically make calls to other OCI services; hence no configuration is needed. D. Create a dynamic group with matching rules to include your instance and write a policy for this dynamic group. -Answer- D Examine this policy: Allow group GroupMgr to manage volumes in tenancy where request.permission != 'VOLUME_DELETE' Which three actions can a user belonging to the GroupMgr group perform? A. Delete volumes. B. Move volumes. C. Update volumes. D. Create volumes. -Answer- B, C, D Which two statements are true about local VCN peering? A. It uses an Internet gateway. B. You can use a single DRG for local peering. C. The VCNs can be in different Oracle Cloud Infrastructure tenancies but in the same region. D. The two VCNs must have overlapping CIDRs. -Answer- B, C Which protocol is used by FastConnect? A. OSPF B. DNS routing C. BGP D. IPSec -Answer- C At which layer of the OSI model does a web application firewall help to filter traffic? A. Presentation layer B. Datalink layer C. Transport layer D. Application layer -Answer- D Which TWO statements are true about security lists? A. They are applied to a group of VNICs of your choice instead of all the VNICs in a given subnet. B. The default security list does not include a rule to allow ping requests. C. The default security list allows TCP traffic on destination port 22 (SSH) from authorized source IP addresses and any source port. D. Each subnet can have only one security list associated with it. -Answer- B, C What is the allowable VCN size range? A. /8 through /16 B. /0 through /32 C. /16 through /30 D. /8 through /24 -Answer- C Which Traffic Management Steering policy distributes DNS traffic to different endpoints based on the location of the end user? A. IP prefix steering B. Geolocation steering C. ASN steering D. Load balancer -Answer- B