Practice 1Z0-1072-23 Exam Online

Question 1

You need to set up instance principals so that an application running on an instance can call Oracle Cloud Infrastructure (OCI) public services, without the need to configure user credentials.

A developer in your team has already configured the application built using an OCI SDK to authenticate using the instance principals provider.

Which is NOT a necessary step to complete this set up?

A : Create a dynamic group with matching rules to specify which instances you want to allow to make API calls against services.

B : Generate Auth Tokens to enable instances in the dynamic group to authenticate with APIs.

C : Create a policy granting permissions to the dynamic group to access services in your compartment or tenancy.

D : Deploy the application and the SDK to all the instances that belong to the dynamic group.

Answer: B

Question 2

You wanted to allow DB-Admin group to manage backups only for Autonomous Data warehouse databases. Which policy do you write to achieve this?

A : allow group DB-Admins manage autonomous-backups in tenancy where target.workloadType='DW'

B : allow group DB-Admins manage autonomous-databases in tenancy where target.workloadType='DW'

C : allow group DB-Admins use autonomous-backups in tenancy where target.workloadType='DW'

D : allow group DB-Admins manage autonomous-databases in tenancy where target.workloadType='OLTP'

Answer: A

Question 3

As a solution architect, you are showcasing the Oracle Cloud Infrastructure (OCI) Object Storage feature about Object Versioning to a customer. Which statement is true in regards to OCI Object Storage Versioning?

A :

A bucket that is versioning-enabled can have only and always will have a latest version of the object in the bucket.

B : Objects are physically deleted from a bucket when versioning is enabled.

C : Object versioning does not provide data protection against accidental or malicious object update, overwrite, or deletion.

D : By default, object versioning is disabled on a bucket.

Answer: D

Question 4

Which two statements about Oracle Cloud Infrastructure File Storage Service are accurate? (Choose two.)

A : Customer can encrypt the communication to a mount target via export options.

B : Mount targets use Oracle-managed keys by default.

C : File systems use Oracle-managed keys by default.

D : Customer can encrypt data in their file system using their own Vault encryption key.

E : Communication with file systems in a mount target is encrypted via HTTPS.

Answer: B,D

Question 5

Your company has been running several small applications in Oracle Cloud Infrastructure and is planning a proof of concept (POC) to deploy PeopleSoft. If your existing resources are being maintained in the root compartment, what is the recommended approach for defining security for the upcoming POC?

A : Provision of all new resources into the root compartment. Use defined tags to separate resources that belong to different applications.

B : Create a new tenancy for the POC. Provision of all new resources into the root compartment. Grant appropriate permissions to create and manage resources within the root compartment.

C : Provision of all new resources into the root compartment. Grant permissions only allow for the creation and management of resources specific to the POC.

D : Create a new compartment for the POC and grant appropriate permissions to create and manage resources within the compartment.

Answer: D

Name:	Oracle Cloud Infrastructure 2023 Architect Associate
Exam Code:	1Z0-1072-23
Certification:	Oracle Cloud
Vendor:	Oracle
Total Questions:	608
Last Updated:	Apr 23, 2024

Oracle 1Z0-1072-23