Oracle Cloud Infrastructure 2020 Architect Associate (1Z0-1072-20) Free Practice Test

Question 1

What is the maximum number of security lists that can be associated with a subnet?

A. two

B. four

C. three

D. five

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

Which statement is true about cloning a volume?

A. You need to detach a volume before cloning from it.

B. You can change the block volume size when cloning a volume.

C. A cloned volume is the same as a snapshot that has a dependency on the source volume.

D. You can create a clone for a volume across regions.

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

You have two line of business operations (LOB1, LOB2) leveraging Oracle Cloud Infrastructure. LOB1 is deployed in VCN1 in the OCI US East region, while LOB2 is deployed in VCN2 in the US West region. You need to peer VCN1 and VCN2 for disaster recovery and data backup purposes. To ensure you can utilize the OCI Virtual Cloud Network remote peering feature, which CIDR ranges should be used?

A. VCN1 (10.0.0.0/16) and VCN2 (10.0.1.0/24)

B. VCN1 (172.16.1.0/24) and VCN2 (172.16.1.0/27)

C. VCN1 (10.0.0.0/16) and VCN2 (172.16.0.0/16)

D. VCN1 (192.168.0.0/16) and VCN2 (192.168.1.0/27)

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

Which of the following statements is true about the Oracle Cloud Infrastructure (OCI) Object Storage serverside encryption?

A. Encryption of data encryption keys with a master encryption key is optional.

B. Encryption is enabled by default and cannot be turned off.

C. Each object in a bucket is always encrypted with the same data encryption key.

D. Customer-provided encryption keys are always stored in OCI Vault service.

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

In Oracle Cloud Infrastructure Container Engine for Kubernetes (OKE), what does a Replica Set do?

A. It maintains a stable set of replica Pods running at any given time.

B. It exposes an application running on a set of Pods.

C. It provides declarative updates for Pods.

D. It ensures that all Nodes run a copy of a Pod.

Correct Answer: B

Question 6

A new employee has just started working for your company. You create an Oracle Cloud Infrastructure user account for this employee, following which they are able to log in, but still cannot create any resources.
What should you do to resolve this?

A. Send the employee API Signing Keys to log in.

B. Delete the account and create another one.

C. Make sure that the employee is logging in to the Oracle Cloud Infrastructure account from your corporate network only.

D. Add the employee to a group with policies to grant access to relevant resources.

Correct Answer: D

Question 7

Which three load-balancing policies can be used with a back end set? (Choose three.)

A. CPU Utilization

B. Weighted Round Robin

C. IP Hash

D. Throughput

E. Least Connections

Correct Answer: B,C,E

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 8

You have two NFS clients running in two different subnets within the same Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN). You have created a shared file system for the two NFS clients who want to connect to the same file system, but you want to restrict one of the clients to have READ access while the other has READ/Write access. Which OCr feature would you leverage to meet this requirement?

A. Use VCN security rules to control access for the NFS clients

B. Use File Storage NFS Export Options to control access for the NFS clients

C. Use NFS security to control access for the NES clients

D. Use OCI Identity Access Management to control access for the NFS clients

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 9

You have an application server running in a public subnet on a compute instance in US West (us-phoenix-1) region of Oracle Cloud Infrastructure (OCI). The data sitting on this instance needs to be copied to OCI Object storage bucket available in the same region without traversing over the internet. To enable the connectivity between the instance and Object Storage, you created a service gateway with service CIDR of all Object Storage in us-phoenix-1 enabled. You also modified the security rules to allow the desired traffic.
However, when you tried sending the data to the Object Storage bucket, you notice that the data is going over the internet and not via the service gateway.
What could be the possible reason for this behavior?

A. Identity and Access Management (IAM) policies restrict the access to the object storage bucket

B. The service gateway created in the VCN resides in a different availability domain

C. The security list associated with the subnet has an egress rule that allows all traffic to be forwarded to a destination CIDR 0.0.0.0/0

D. The route table associated with the subnet has no route rule where the destination is object storage service

Correct Answer: D

Welcome to TestSimulate

Oracle Cloud Infrastructure 2020 Architect Associate (1Z0-1072-20) Free Practice Test