1z0-1072-20

1z0-1072-20 practice questions, page 2 of 3, with answer review and explanations.

Question 6

You need to set up instance principals so that an application running on an instance can call Oracle Cloud Infrastructure (OCI) public services, without the need to configure user credentials. A developer in your team has already configured the application built using an OCI SDK to authenticate using the instance principals provider. Which is NOT a necessary step to complete this set up?

  1. Create a dynamic group with matching rules to specify which instances you want to allow to make API calls against services.
  2. Generate Auth Tokens to enable instances in the dynamic group to authenticate with APIs.
  3. Create a policy granting permissions to the dynamic group to access services in your compartment or tenancy.
  4. Deploy the application and the SDK to all the instances that belong to the dynamic group.

Question 7

You have been asked to create an Identity and Access Management (IAM) user that will authenticate to Oracle Cloud Infrastructure (OCI) API endpoints. This user must not be given credentials that would allow them to log into the OCI console. Which two authentication options can you use? (Choose two.)

  1. SSL certificate
  2. API signing key
  3. SSH key pair
  4. PEM Certificate file
  5. Auth token

Question 8

You work for a health insurance company that stores a large number of patient health records in an Oracle Cloud Infrastructure (OCI) Object Storage bucket named "HealthRecords". Each record needs to be securely stored for a period of 5 years for regulatory compliance purposes and cannot be modified, overwritten or deleted during this time period. What can you do to meet this requirement?

  1. Create an OCI Object Storage Lifecycle Policies rule to archive objects in the HealthRecords bucket for five years.
  2. Create an OCI Object Storage time-bound Retention Rule on the HealthRecords bucket for five years. Enable Retention Rule Lock on this bucket.
  3. Enable encryption on the HealthRecords bucket using your own vault master encryption keys.
  4. Enable versioning on the HealthRecords bucket.

Question 9

Which two components cannot be deleted in your Oracle Cloud Infrastructure Virtual Cloud Network? (Choose two.)

  1. Service gateway
  2. Default security list
  3. Routing gateway
  4. Default route table
  5. Default subnet

Question 10

A financial firm is designing an application architecture for its online trading platform that must have high availability and fault tolerance. Their solutions architect configured the application to use an Oracle Cloud Infrastructure Object Storage bucket located in the US West (us-phoenix-1) region to store large amounts of financial data. The stored financial data in the bucket must not be affected even if there is an outage in one of the Availability Domains or a complete region. What should the architect do to avoid any costly service disruptions and ensure data durability?

  1. Create a new Object Storage bucket in another region and configure lifecycle policy to move data every 5 days.
  2. Create a lifecycle policy to regularly send data from Standard to Archive storage.
  3. Copy the Object Storage bucket to a block volume.
  4. Create a replication policy to send data to a different bucket in another OCI region.