Free Oracle 1Z0-1067 Exam Dumps Questions & Answers

You have shared your Oracle Cloud Infrastructure (OCI) tenancy with a group of developers in your organization by creating a compartment called developer. You are an administrator in the tenancy with privileges to modify IAM policies. Developers need privileges to configure Federation to a Single Sign-On (SSO).
m would you give them permissions to complete their task In the most secure manner?

• A.Create a new policy with the following statements:
  Allow any-user to manage identity-providers in tenancy a-developer
  Allow any-user to manage groups in tenancy
• B.Create a group called IdPAdmins. Assign the following IAM policy statement:
  Allow group IdPAdmins to manage identity-providers in tenancy
  Allow group IdPAdmins to manage groups in tenancy
• C.Create a group called Developers. Set up the following IAM policy:
  Allow group Developers to manage identity-providers in compartment a-developer Allow group Developers to manage groups in compartment
• D.Create a group called IdPAdmins. Assign the following IAM policy statement:
  Allow group IdPAdmins to manage identity-providers in compartment
  Allow group IdPAdmins to manage groups in compartment

You are using Oracle Cloud Infrastructure (0C1) services across several regions: us-phoenlx-1, us-ashburn-1, uk-london-1 and ap-tokyo-1. You have created a separate administrator group for each region: PHX-Admins, ASH-Admins, LHR-Admins and NRT-Admins, respectively.
u want to restrict admin access to a specific region. E.g., PHX-Admins should be able to manage all resources in the us-phoenlx-1 region only and riot any other OCI regions.
What IAM policy syntax is required to restrict PHX-Admins to manage OCI resources in the us-phoenix-1 region only?
A)

B)

C)

D)

• A.Option A
• B.Option D
• C.Option C
• D.Option B

You created an Oracle Linux compute Instance through the Oracle Cloud Infrastructure (OCI) management console then immediately realize you add an SSH key file. You notice that OCI compute service provides instance console connections that supports adding SSH keys for a running Instance. Hence, you created the console connection for your Linux server and activated it using the connection string provided. However, now you get' prompted for a username and password to login.
What option should you recommend to add the SSH key to your running Instance, while minimizing the administrative overhead?

• A.You need to configure the boot loader to use ttyS0 as a console terminal on the VM.
• B.You need to reboot the instance from the console, boot into the bash shell In maintenance mode, and add SSH keys for the open user.
• C.You need to terminate the running instance and recreate it by providing the SSH key file.
• D.You need to modify the serial console connection string to include the identity file flag, -i to specify the SSH key to use.

You are working as a Cloud Operations Administrator for your company. They have different Oracle Cloud Infrastructure (OCI) tenancies for development and production workloads. Each tenancy has resources in two regions - uk-london-1 and eu-frankfurt-1. You are asked to manage all resources and to automate all the tasks using OCI Command Line Interface (CLI).
Which is the most efficient method to manage multiple environments using OCI CLI?

• A.Create environment variables for the sets of credentials that align to each combination of tenancy, region, and environment.
• B.Use OCI CLI profiles to create multiple set of credentials in your config file, and reference the appropriate profile at runtime.
• C.Run OCI setup config to create new credentials for each environment every time you want to access the environment.
• D.Use different bash terminals for each environment.

You have been brought In to help secure an existing application that leverages Object Storage buckets to distribute content. The data is currently being shared from public buckets and the security team Is not satisfied with this approach. They have stated that all data must be stored In storage buckets. Your application should be able to provide secure access to the dat a. The URL that is provided for access to the data must be rotated every 30 days.
Which design option will meet these requirements?

• A.Create a private bucket only to share the data.
• B.Create a new group and map users to this group, create a IAM policy providing access to Object Storage service only to this group. Users can then simply login to OCI console and retrieve needed flies.
• C.Use Pre-Authenticated request, even though there will be multiple URLs this will provide better security.
• D.Create multiple bucket and classify them as Public and Private. Use public bucket for non-sensitive data and private bucket for sensitive data.