1z0-1067 Oracle Cloud Infrastructure 2019 Cloud Operations Associate - Practice Questions

Question 4

Your company has restructured its HR departments. As part of this change, you also need to re-organize compartments within Oracle Cloud Infrastructure (OCI) to align them to the company's new organizational structure. The following change is required:

Comportment Team_x needs to be moved under a new parent compartment, Project_B

The tenancy has the following policies defined for compartments Project_A and Project_B: Policy1 Allow group G1 to manage instance-family in compartment HR:Project_A

Policy2 Allow group G2 to manage instance-family in compartment HR:Project_B Which two statements describe the impacts after the compartment Team_x is moved?

Select all that apply, then click Submit answer.

○
Group G2 can now manage instance-families in compartment Project_B compartment Project_A and compartment Team_x
○
Group G1 can now manage instance-families in compartment Project_A but not in compartment Team_x
○
Group G1 can now manage instance-families in compartment project_A,compartment project_B and compartment Team_x
○
Group G2 can now manage instance-families in compartment Project_B and compartment Team_x
○
Group G2 can now manage instance-families in compartment Project_A but not in compartment Team_x

Question 5

Which three statements ate true about Object Storage data security and encryption In Oracle Cloud Infrastructure (OCI)?

Select all that apply, then click Submit answer.

○
OCI Key Management is used by default to provide data security.
○
Client-side encryption is managed by the customer.
○
A VPN connection to OCI is required to ensure secure data transfer to an object storage bucket.
○
All traffic to and from Object Storage service is encrypted using TLS.
○
Server side encryption uses per-object keys which are managed by Oracle.

Reference / correct answer:

Client-side encryption is managed by the customer.

All traffic to and from Object Storage service is encrypted using TLS.

Server side encryption uses per-object keys which are managed by Oracle.

All data in Object Storage is encrypted at rest by using AES-256. Encryption is on by default and cannot be turned off. Each object is encrypted with its encryption key, and the object encryption keys are encrypted with a master encryption key. In addition, customers can use client-side encryption to encrypt objects with their encryption keys before storing them in Object Storage buckets. An available option for customers is to use the Amazon S3 Compatibility API, along with client-side object encryption support available in AWS SDK for Java.

Data in transit between customer clients (for example, SDKs and CLIs) and Object Storage public endpoints is encrypted with TLS 1.2 by default. FastConnect public peering allows on-premises access to Object Storage to go over a private network, rather than the public internet.

Oracle Cloud Infrastructure Key Management is a managed service the enables you, the customer, to manage and control AES symmetric keys used to encrypt your data-at-rest. Keys are stored in a FIPS 140-2, Level

3- certified, Hardware Security Module (HSM) that is durable and highly available. The Key Management service is integrated with many Oracle Cloud Infrastructure services, including Block Volumes, File Storage, Oracle Container Engine for Kubernetes, and Object Storage.

Use the Key Management service if you need to store your Master Encryption Keys in an HSM to meet governance and regulatory compliance requirements or when you want more control over the cryptoperiod of the encryption keys used for your data.

When you store your data with Oracle Cloud Infrastructure Block Volumes, File Storage Service, and Object Storage and don’t use Key Management, your data is protected using encryption keys that are securely stored and controlled by Oracle.

Question 6

You are using the Oracle Cloud Infrastructure Command Line Interface to launch a Linux virtual machine.

You enter the following command (with correct values for all parameters):

The command fails.

Which is NOT a valid parameter in this command?

Select an option, then click Submit answer.

○
--shape ""
○
-t
○
-c
○
--image-id
○
--subnet-id

Reference / correct answer:

-t

There's no tenancy_id as a option in oci compute instance launch command. oci compute instance launch [OPTIONS]

--availability-domain [text]

The availability domain of the instance.

--compartment-id, -c [text]

The OCID of the compartment.

--shape [text]

The shape of an instance. The shape determines the number of CPUs, amount of memory, and other resources allocated to the instance.

--display-name [text]

A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.

--image-id [text]

The OCID of the image used to boot the instance. This is a shortcut for specifying an image source via the

--source-details complex JSON parameter. If this parameter is provided, you cannot provide the

--source-details or --source-boot-volume-id parameters.

--ssh-authorized-keys-file [filename]

A file containing one or more public SSH keys to be included in the ~/.ssh/authorized_keys file for the default user on the instance.

--subnet-id [text]

The OCID of the subnet where the VNIC attached to this instance will be created. and more options,

https://docs.cloud.oracle.com/en-us/iaas/tools/oci-cli/2.10.1/oci_cli_docs/cmdref/compute/instance/launch.html

1z0-1067 – Oracle Cloud Infrastructure 2019 Cloud Operations Associate