Instant Access Oracle.1Z0-1072-20.v2022-08-15.q112 Actual Practice Test Engine for Free (Page 15)

Question 66

You have launched a compute instance running Oracle database in a private subnet in the Oracle Cloud Infrastructure US East region. You have also created a Service Gateway to back up the data files to OCI Object Storage in the same region. You have modified the security list associated with the private subnet to allow traffic to the Service Gateway, but your instance still cannot access OCI Object Storage. How can you resolve this issue?

A.Add a stateful rule that enables ingress HTTPS (TOP port 443) traffic to 001 Object Storage in the security list associated with the private subnet
B.Add a stateful rule that enables egress HTTPS (TCP port 443) traffic to OCI Object Storage in the security list associated with the private subnet
C.Add a rule in the Route Table associated with the private subnet with Target type as "Service Gateway" and destination service as all IAD services in the Oracle Service Network.'
D.Use the default Security List, which has ports open for OCI Object Storage

Question 67

For what business need should you use Database Cloud Service (DBCS) instead of Oracle database on a compute instance?

A.to implement Oracle RAC for high availability
B.to bring your own license on a compute service
C.to build an Oracle database on a compute service
D.to lower license and infrastructure cost

Question 68

A customer has launched a compute Instance in the Virtual Cloud Network (VCN), which has an Internet gateway, a service gateway, a default security lists and a default route table. Customer has opened up Port 22 in the security lists attached to the compute instance subnet, however is still unable to connect to compute instances using ssh.
Which option would remedy this situation?

A.Modify the route table associated with the VCN subnet in which the instance resides. Add a following route to the route table.
Destination CIDR: 0.0.0.0/0
Target: Internet Gateway (IGW)
B.Modify the security list associated with the VCN subnet in which the instance resides. Add a stateful egress rule to allow icmp traffic in addition to the port 22.
C.Modify the route table associated with the VCN subnet in which the instance resides. Add a following route to the route table.
Destination CIDR: 0.0.0.0/0
Target: Dynamic Routing Gateway (DRG)
D.Modify the route table associated with the VCN subnet in which the instance resides. Add a following route to the route table.
Destination CIDR: 0.0.0.0/0
Target: Service Gateway (SGW)

Question 69

You created a public subnet and an internet gateway in your virtual cloud network (VCN) of Oracle Cloud Infrastructure. The public subnet has an associated route table and security list. However, after creating several compute instances in the public subnet, none can reach the Internet.
Which two are possible reasons for the connectivity issue? (Choose two.)

A.The route table has no default route for routing traffic to the internet gateway.
B.There is no stateful egress rule in the security list associated with the public subnet.
C.There is no dynamic routing gateway (DRG) associated with the VCN.
D.There is no stateful ingress rule in the security list associated with the public subnet.
E.A NAT gateway is needed to enable the communication flow to internet.

Correct Answer: A,B

An internet gateway as an optional virtual router that connects the edge of the VCN with the internet. To use the gateway, the hosts on both ends of the connection must have public IP addresses for routing. Connections that originate in your VCN and are destined for a public IP address (either inside or outside the VCN) go through the internet gateway. Connections that originate outside the VCN and are destined for a public IP address inside the VCN go through the internet gateway.
Working with Internet Gateways
You create an internet gateway in the context of a specific VCN. In other words, the internet gateway is automatically attached to a VCN. However, you can disable and re-enable the internet gateway at any time. Compare this with a dynamic routing gateway (DRG), which you create as a standalone object that you then attach to a particular VCN. DRGs use a different model because they're intended to be modular building blocks for privately connecting VCNs to your on-premises network.
For traffic to flow between a subnet and an internet gateway, you must create a route rule accordingly in the subnet's route table (for example, destination CIDR = 0.0.0.0/0 and target = internet gateway). If the internet gateway is disabled, that means no traffic will flow to or from the internet even if there's a route rule that enables that traffic. For more information, see Route Tables.
For the purposes of access control, you must specify the compartment where you want the internet gateway to reside. If you're not sure which compartment to use, put the internet gateway in the same compartment as the cloud network. For more information, see Access Control.
You may optionally assign a friendly name to the internet gateway. It doesn't have to be unique, and you can change it later. Oracle automatically assigns the internet gateway a unique identifier called an Oracle Cloud ID (OCID). For more information, see Resource Identifiers.
To delete an internet gateway, it does not have to be disabled, but there must not be a route table that lists it as a target.
AS per compute instances can connect to the Internet so you use egress no ingress

Question 70

You have an Oracle Cloud Infrastructure (OCI) load balancer distributing traffic via an evenly-weighted round robin policy to your back-end web servers. You notice that one of your web servers is receiving more traffic than other web servers.
How can you resolve this to make sure traffic is evenly distributed across all back-end webservers?

A.Disable cookie-based session persistence on your backend set.
B.Change keep-alive setting between the load balancer and backend server.
C.Disable SSL configuration associated with your backend set.
D.Create separate listeners for each backend web server.

Question 66

Question 67

Question 68

Question 69

Question 70

Download PDF File