1z0-1072-21 Oracle Cloud Infrastructure 2021 Architect Associate Exam

 

Earn associated certifications
Passing this exam is required to earn these certifications. Select each certification title below to view full requirements.

Oracle Cloud Infrastructure 2021 Certified Architect Associate

Format: Multiple Choice
Duration: 90 Minutes
Exam Price: Rs.40,575
Number of Questions: 60
Passing Score: 65 %
Validation: This exam is validate against Cloud Infrastructure 2021 Certified Architect Associate
Prepare to pass exam: 1Z0-1072-21

The Oracle Cloud Infrastructure 2021 Architect Associate exam is designed for individuals who possess a strong foundation knowledge in architecting infrastructure using Oracle Cloud Infrastructure services. This certification covers topics such as: Launching Bare Metal and Virtual Compute Instances, Instantiating a Load Balancer, Using Advanced Database features (Dataguard, BYOL, Data encryption, RAC, and EXADATA), Advanced Networking Concepts, Architecting Best Practices for HA and Security, Identity and Access Management, Networking, Compute, and Storage. This certification validates deep understanding of OCI services to spin up infrastructure and provides a competitive edge in the industry. Up-to-date OCI training and hands-on experience are recommended. This certification is available to all candidates.

Take recommended training
Complete one of the courses below to prepare for your exam (optional):
Oracle Cloud Infrastructure Learning Subscription

In the subscription:
Additional Preparation and Information
A combination of Oracle training and hands-on experience (attained via labs and/or field experience) provides the best preparation for passing the exam.

Review exam topics

Compute
Choosing the right compute
Compute Instance Configuration
Automatic scaling configuration
Description of OCI Computing Image Options
OS management description and configuration

Network
Implementation and management of virtual cloud networks
Public and Private Subnet Descriptions
Public and private IP addresses and virtual NIC descriptions
Virtual cloud network routing configuration
Security list and network security group configuration
Implementation and management of VCN connections
Understanding VCN connection options
Site-to-site VPN configuration
Fastconnect description
Configuring local and remote peering
DNS and traffic management configuration
Public and Private DNS Zone Descriptions
Traffic management configuration
Load balancing description
layer-7 Load balancer description and configuration
layer-4 Network load balancer description and configuration

Storage
Deploy and manage block storage
Understanding the performance layer of block volumes
Deploy block and boot volumes
Volume group, backup, clone configuration
Object storage configuration and management
Understanding the object storage layer
Object storage security description
Object storage versioning, lifecycle management, and maintenance rule implementation
File storage implementation and management
File storage configuration
File storage security description

Database
Understanding database options
Autonomous Database Configuration
DB system configuration and management
MySQL and NoSQL Database Services Description

Observation and Management
Understanding the observation and management platform
Monitoring configuration and alarm settings
Logging configuration

Identity and Access Management
Understanding AuthN and AuthZ
Compartment implementation
Implementation of conditional and extended policies
Configuring dynamic group and tag-based access control

Security
Understanding security services
Configuring Data Guard, Security Zones and Security Advisors
Vulnerability Scan and Web Application Firewall Configuration
OCI Vault Description and Configuration

Examkingdom Oracle 1z0-1072-21 Exam Brain dump pdf , Certkingdom Oracle 1z0-1072-21 Brain Dumps PDF

Best Oracle 1z0-1072-21 Certification, Oracle 1z0-1072-21 Brain Dumps Training at certkingdom.com

Question 1:
Which two statements are true about data guard service on DB Systems in Oracle Cloud Infrastructure (OCI)? (Choose two.)

A. Data guard implementation requires two DB Systems, one running the primary database on a virtual machine and the standby database running on bare metal
B. Data guard configuration on the OCI is limited to a virtual machine only
C. Data guard implementation requires two DB Systems, one containing the primary database and one containing the standby database
D. Both DB Systems must use the same VCN, and port 1521 must be open.

Correct Answer: C,D

Explanation
An Oracle Data Guard implementation requires two DB systems, one containing the primary database and one containing the standby database. When you enable Oracle Data Guard for a virtual machine DB system database, a new DB system with the standby database is created and associated with the primary database. For a bare metal DB system, the DB system with the database that you want to use as the standby must already exist before you enable Oracle Data Guard.

Requirement details are as follows:
• Both DB systems must be in the same compartment.
• The DB systems must be the same shape type (for example, if the shape of the primary database is a virtual
machine, then the shape of the standby database can be any other virtual machine shape).

• If your primary and standby databases are in different regions, then you must peer the virtual cloud networks (VCNs) for each database.

• Configure the security list ingress and egress rules for the subnets of both DB systems in the Oracle Data Guard association to enable TCP traffic to move between the applicable ports. Ensure that the rules you create are stateful (the default).
Additional Reading:

Question 2:
Which two options are available when configuring DNS resolution for your virtual cloud network?
(Choose two.)

A. Google DNS servers
B. custom resolver
C. Internet and virtual cloud network (VCN) resolver
D. Internet and custom resolver

Correct Answer: B,C

Explanation
By default. the Internet and VCN Resolver does not let instances resolve the hostnames of hosts in your onpremises network connected to your VCN by Site-to-Site VPN or FastConnect. That functionality can be achieved either by using a custom resolver or by configuring the VCN's private DNS resolver.


Question 3:
Where do you find the tnsnames.ora for your Autonomous Data Warehouse (ADW) database?

A. You are automatically prompted to download the tnsnames.ora file upon creation of the ADW database
B. You can download tnsnames.ora from Oracle Cloud Infrastructure web console under ADW details page
C. The tnsnames.ora file is included in credentials.zip file that you download from service console of ADW
D. The ADW database will place the tnsnames.ora file in an object storage bucket

Correct Answer: C

Explanation
To download client credentials from the Autonomous Transaction Processing Service Console:
• From the Service Console click the Administration link.
• Click Download Client Credentials (Wallet).
• On the Download Client Credentials (Wallet) page, enter a wallet password in the Password field and confirm the password in the Confirm Password field. The password must be at least 8 characters long and must include at least 1 letter and either 1 numeric character or 1 special character. This password protects the downloaded Client

Credentials wallet.
• Click Download to save the client security credentials zip file. By default the filename is: Wallet_databasename.zip. You can save this file as any filename you want. You must protect this file to prevent
unauthorized database access.

The zip file includes the following:
• tnsnames.ora and sqlnet.ora: Network configuration files storing connect descriptors and SQL*Net client side configuration.
• cwallet.sso and ewallet.p12: Auto-open SSO wallet and PKCS12 file. PKCS12 file is protected by the wallet password provided in the UI.
• keystore.jks and truststore.jks: Java keystore and truststore files. They are protected by the wallet password provided while downloading the wallet.
• ojdbc.properties: Contains the wallet related connection property required for JDBC connection. This should be in the same path as tnsnames.ora.

Question 4:
Which statement is TRUE about cloning a volume?

A. You need to detach a volume before cloning from it
B. You can change the block volume size when cloning a volume
C. You can create a clone for a volume across regions
D. A cloned volume is the same as a snapshot that has a dependency on the source volume

Correct Answer: B

Explanation
You can create a clone from a volume using the Block Volume service. Cloning enables you to make a copy of an existing block volume without needing to go through the backup and restore process. Since the clone is a copy of the source volume it will be the same size as the source volume unless you specify a larger volume size when you create the clone.

If you want to clone the block volume to a larger size volume, check Custom Block Volume Size (GB) and then specify the new size. You can only increase the size of the volume, you cannot decrease the size. If you clone the block volume to a larger size volume, you need to extend the volume's partition.

Question 5:
A company currently uses Microsoft Active Directory as its identity provider. The company recently purchased Oracle Cloud Infrastructure (OCI) to leverage the cloud platform for its test and development
operations. As the administrator, you are now tasked with giving access only to developers so that they can start creating resources in their OCI accounts. Which step will you perform to achieve this requirement?

A. Federate all Microsoft Active Directory groups with OCI to allow users to use their existing credentials
B. Create a group for developers on OCI, export all the developers from Microsoft Active Directory, and then import them into the Identity and Access Management (IAM) group
C. Create a new user account for each user, and then create policies to provide access to developers
D. Create a group for developers on OCI and map the group to a similar group in Microsoft Active Directory during the federation process

Correct Answer: D

Explanation
Your organization can have multiple Active Directory accounts (for example, one for each division of the organization). You can federate multiple Active Directory accounts with Oracle Cloud Infrastructure, but each federation trust that you set up must be for a single Active Directory account.

To federate with Active Directory, you set up a trust between Active Directory and Oracle Cloud Infrastructure. To set up this trust, you perform some steps in the Oracle Cloud Infrastructure Console and some steps in Active Directory Federation Services.

Prerequisites
• You have installed and configured Microsoft Active Directory Federation Services for your organization.
• You have set up groups in Active Directory to map to groups in Oracle Cloud Infrastructure.