1z0-1072-22 Oracle Cloud Infrastructure 2022 Architect Associate - Practice Questions

Question 4 (Exam Set A)

Which two statements are true about the Oracle Cloud Infrastructure Object Storage Service? (Choose two.)

Select all that apply, then click Submit answer.

○
It provides higher IOPS than Block Storage.
○
It can be directly attached or detached from a compute instance.
○
Data is stored redundantly only in a single AD.
○
Data is stored redundantly across multiple availability domains (ADs) in a multi-AD region.
○
It provides strong consistency.

Reference / correct answer:

Data is stored redundantly across multiple availability domains (ADs) in a multi-AD region.

It provides strong consistency.

STRONG CONSISTENCYWhen a read request is made, Object Storage always serves the most recent copy of the data that was written to the system.DURABILITYObject Storage is a regional service. Data is stored redundantly across multiple storage servers. Object Storage actively monitors data integrity using checksums and automatically detects and repairs corrupt data. Object Storage actively monitors and ensures data redundancy. If a redundancy loss is detected, Object Storage automatically creates more data copies. For more details about Object Storage durability, see the Oracle Cloud Infrastructure Object Storage FAQ.CUSTOM METADATAYou can define your own extensive metadata as key-value pairs for any purpose. For example, you can create descriptive tags for objects, retrieve those tags, and sort through the data. You can assign custom metadata to objects and buckets using the Oracle Cloud Infrastructure CLI or SDK. See Software Development Kits and Command Line Interface for details.ENCRYPTIONObject Storage employs 256-bit Advanced Encryption Standard (AES-256) to encrypt object data on the server. Each object is encrypted with its own key. Data encryption keys are encrypted with a master encryption key that is frequently rotated. Encryption is enabled by default and cannot be turned off.

Question 5 (Exam Set A)

Which two parameters are required in a back end set’s HTTP health check? (Choose two.)

Select all that apply, then click Submit answer.

○
response body
○
URL path
○
timeout
○
port
○
status code

Question 6 (Exam Set B)

Which two statements are true about Oracle Cloud Infrastructure IPSec VPN Connect?

Select all that apply, then click Submit answer.

○
Each OCI IPSec VPN consists of multiple redundant IPSec tunnels
○
OCI IPSec VPN tunnel supports only static routes to route traffic
○
OCI IPSec VPN can be configured in tunnel mode only
○
OCI IPSec VPN can be configured in trans port mode only

Reference / correct answer:

Each OCI IPSec VPN consists of multiple redundant IPSec tunnels

OCI IPSec VPN can be configured in tunnel mode only

VPN Connect provides a site-to-site IPSec VPN between your on-premises network and your virtual cloud network (VCN). The IPSec protocol suite encrypts IP traffic before the packets are transferred from the source to the destination and decrypts the traffic when it arrives.

On general, IPSec can be configured in the following modes:

Transport mode: IPSec encrypts and authenticates only the actual payload of the packet, and the header information stays intact.

Tunnel mode (supported by Oracle): IPSec encrypts and authenticates the entire packet. After encryption, the packet is then encapsulated to form a new IP packet that has different header information.

Oracle Cloud Infrastructure supports only the tunnel mode for IPSec VPNs.

Each Oracle IPSec VPN consists of multiple redundant IPSec tunnels. For a given tunnel, you can use either Border Gateway Protocol (BGP) dynamic routing or static routing to route that tunnel's traffic. More details about routing follow.

IPSec VPN site-to-site tunnels offer the following advantages:

Public internet lines are used to transmit data, so dedicated, expensive lease lines from one site to another aren't necessary.

The internal IP addresses of the participating networks and nodes are hidden from external users.

The entire communication between the source and destination sites is encrypted, significantly lowering the chances of information theft.

1z0-1072-22 – Oracle Cloud Infrastructure 2022 Architect Associate