1z0-1067 Oracle Cloud Infrastructure 2019 Cloud Operations Associate - Practice Questions

Question 1

Which three statements are true about Object Storage data security and encryption in Oracle Cloud Infrastructure (OCI)?

Select all that apply, then click Submit answer.

○
OCI Key Management is used by default to provide data security.
○
Server side encryption uses per-object keys which are managed by Oracle.
○
All traffic to and from Object Storage service is encrypted using TLS.
○
A VPN connection to OCI is required to ensure security data transfer to an object storage bucket.
○
Client-side encryption is managed by the customer.

Reference / correct answer:

Server side encryption uses per-object keys which are managed by Oracle.

All traffic to and from Object Storage service is encrypted using TLS.

Client-side encryption is managed by the customer.

All data in Object Storage is encrypted at rest by using AES-256. Encryption is on by default and cannot be turned off. Each object is encrypted with its encryption key, and the object encryption keys are encrypted with a master encryption key. In addition, customers can use client-side encryption to encrypt objects with their encryption keys before storing them in Object Storage buckets. An available option for customers is to use the Amazon S3 Compatibility API, along with client-side object encryption support available in AWS SDK for Java.

Data in transit between customer clients (for example, SDKs and CLIs) and Object Storage public endpoints is encrypted with TLS 1.2 by default. FastConnect public peering allows on-premises access to Object Storage to go over a private network, rather than the public internet.

Oracle Cloud Infrastructure Key Management is a managed service the enables you, the customer, to manage and control AES symmetric keys used to encrypt your data-at-rest. Keys are stored in a FIPS 140-2, Level

3- certified, Hardware Security Module (HSM) that is durable and highly available. The Key Management service is integrated with many Oracle Cloud Infrastructure services, including Block Volumes, File Storage, Oracle Container Engine for Kubernetes, and Object Storage.

Use the Key Management service if you need to store your Master Encryption Keys in an HSM to meet governance and regulatory compliance requirements or when you want more control over the cryptoperiod of the encryption keys used for your data.

When you store your data with Oracle Cloud Infrastructure Block Volumes, File Storage Service, and Object Storage and don’t use Key Management, your data is protected using encryption keys that are securely stored and controlled by Oracle.

Question 2

Which two configuration formats does Terraform support? (Choose two.)

Select all that apply, then click Submit answer.

○
JSON
○
XML
○
YAML
○
HCL

Question 3

Which three must be configured for a load balancer to accept incoming traffic? (Choose three)

Select all that apply, then click Submit answer.

○
a back-end server
○
a back end set
○
a listener
○
a security list that is open on a listener port
○
a certificate

1z0-1067 – Oracle Cloud Infrastructure 2019 Cloud Operations Associate