Weekend Special Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: buysanta

Exact2Pass Menu

Question # 4

Scenario: 2  (Oracle Cloud-init and AutoScaling: Use cloud-init to Configure Apache on Instances in an Autoscaling Instance Pool)

Scenario Description:  (Hands-On Performance Exam Certification)

You're deploying an Apache-based web application on OCI that requires horizontal autoscaling.

To  configure instances upon provisioning, write a cloud-init script for  Oracle Linux 8 that installs and enables Apache (httpd), and opens the  firewall for HTTP on TCP port 80. Create an instance configuration and  include the cloud-init script in it. Use this instance configuration to  create an instance pool and autoscaling configuration.

Pre-Configuration:

To fulfill this requirement, you are provided with the following:

Access to an OCI tenancy, an assigned compartment, and OCI credentials

A  VCN Cloud-Init Challenge VCN with an Internet gateway and a public  subnet. The security list for the subnet allows ingress via TCP ports 22  and 80 (SSH and HTTP). The route table forwards all egress to the  Internet gateway.

Access to the OCI Console

Required IAM policies

An SSH key pair for the compute instance

Public Key https://objectstorage.us-ashburn-1.oraclecloud.com/n/tenancyname/b/PBT_Storage/o/PublicKey.pub

Private Key https://objectstorage.us-ashburn-1.oraclecloud.com/n/tenancyname/b/PBT_Storage/o/PKey.key

Note: Throughout your exam, ensure to use assigned Compartment , User Name , and Region.

Complete the following tasks in the provisioned OCI environment:

Task 1(a): Develop the cloud-init Script:

Task 1(b): Use cloud-init to Configure Apache on Instances in an Autoscaling Instance Pool:

Full Access
Question # 5

Scenario: 3  (Use the OCI CLI to Work with Object Storage from a Compute Instance)

Scenario Description:  (Hands-On Performance Exam Certification)

Your  company runs a web application in OCI that generates log files. You  want to upload these files to OCI Object Storage to meet data retention  requirements. Some files need to be retained indefinitely, whereas  others can be deleted after 30 days. Use the OCI CLI to  create bucket and upload the log directory and create a lifecycle  policy rule to delete temporary files after 30 days.

Pre-Configuration:

To fulfill this requirement, you are provided with the following:

Access to an OCI tenancy, an assigned compartment, and OCI credentials

A compute instance with OCI CLI installed and a set of files in ~/dir_to_upload to use

Access to the OCI Console

Required IAM policies

Assumptions:

Perform the tasks by using the OCI CLI on the compute instance.

Use instance principal authentication for all CLI commands; the instance has been given the policies necessary.

Connect to the compute instance using Cloud Shell’s private networking and the provided SSH key.

An SSH key pair has been provided to you for the compute instance.

Private Key https://objectstorage.us-ashburn- 1.oraclecloud.com/n/tenancyname/b/PBT_Storage/o/PKey.key

Note: Throughout your exam, ensure to use assigned Compartment , User Name  and Region.

Complete the following tasks in the provisioned OCI environment:

Task 1: Create a Bucket in Object Storage

Task 2: Upload a Directory’s Contents to Object Storage

Task 3: Add a Lifecycle Policy to the Bucket

Full Access
Question # 6

Scenario: 1  (Create a reusable VCN Configuration with Terraform)

Scenario Description:  (Hands-On Performance Exam Certification)

You’ll  launch and destroy a VCN and subnet by creating Terraform automation  scripts and issuing commands in Code Editor. Next, you’ll download those  Terraform scripts and create a stack by uploading them into Oracle  Cloud Infrastructure Resource Manager.

You’ll then use that service to  launch and destroy the same VCN and subnet.

In this scenario, you will:

a. Create a Terraform folder and file in Code Editor.

b. Create and destroy a VCN using Terraform.

c. Create and destroy a VCN using Resource Manager.

Full Access
Question # 7

Which two statements are TRUE about Object Storage data security and encryption in Oracle Cloud Infrastructure (OCI)? (Choose two.)

A.

Data needs to be decrypted on the client side before retrieving it.

B.

Client-side encryption is managed by the customer.

C.

A VPN connection to OCI is required to ensure secure data transfer to an object storage bucket.

D.

All traffic to and from Object Storage service is encrypted using TLS.

E.

OCI Vault Management is used by default to provide data security.

Full Access
Question # 8

You have a web application running on Oracle Cloud Infrastructure (OCI) that lets users log in with a username and password. You notice that an attacker has tried to use SQL comment to alter the database query, remove the password check and log in as a user. You decide to prevent any future attacks. Which of the following OCI services or features would you choose to safeguard your application? (Choose the best answer.)

A.

Data Safe

B.

Web Application Framework (WAF)

C.

Vault

D.

Network Security Group

Full Access
Question # 9

You have been monitoring your company applications running in Oracle Cloud Infra-structure (OCI) and notice that the application is using OCI Traffic Management service. This service uses a traffic steering policy to distribute the DNS traffic based on subnet addresses in a rule set. Which steering policy is in use in this particular case? (Choose the best answer.)

A.

Load Balancing policy

B.

ASN steering policy

C.

Geolocation steering

D.

IP Prefix steering

Full Access
Question # 10

The general syntax for an IAM policy is: Allow / to in where Which two are valid values for ?

A.

tenancy

B.

availability-domain aBCD:us-phoenix-1

C.

compartment MyCompartment

D.

security-zone MyZone

E.

region us-phoenix-1

Full Access
Question # 11

When creating an alarm query in Oracle Cloud Infrastructure (OCI) Monitoring, which of the following statement is NOT valid?

A.

You must specify Trigger rule (threshold or absence).

B.

You must specify an interval

C.

You must specify Statistic

D.

You must specify a Metric

E.

You must specify Resource Group

Full Access
Question # 12

All the developers in a DevOps team are using the same compartment called 'devops'. There are two IAM groups: 'group-devs' and 'group-ops'. Which of the following IAM policy will give users in both these groups access to manage all resources in the compartment?

A.

Allow group group-dev, group-ops to manage all resources in compartment devops.

B.

Allow group /group*/ to manage all resources in compartment devops.

C.

Allow any-user to manage all resources in compartment devops where any {re-quest.group=group-dev,group-ops}.

D.

Allow any-user to manage all resources in compartment devops where request.group= /group*/.

Full Access
Question # 13

You have been asked to set up connectivity between a client on-premises network and Oracle Cloud Infrastructure (OCI). The requirements are:

✑ Low latency: The applications are financial and require low latency connectivity into OCI. ✑ Consistency: The application is not tolerant of performance variation.

✑ Performance: The communications link needs to support up to 1.25 Gbps.

✑ Encryption: The communications link needs to encrypt any data in transit between the on-premises network and OCI Virtual Cloud Network (VCN). The client wants to implement the above with as low a cost as possible, while meeting all of the requirements. What should you suggest? (Choose the best answer.)

A.

Provision a site-to-site IPsec VPN between your on-premises network and your virtual cloud network (VCN) using VPN Connect.

B.

Provision FastConnect with a single public virtual circuit, and run an IPsec VPN tunnel over the top of this virtual circuit.

C.

Provision FastConnect with a single private virtual circuit, and run an IPsec VPN tunnel over the top of this virtual circuit.

D.

Provision FastConnect with a single public virtual circuit.

E.

Provision FastConnect with a single private virtual circuit.

Full Access
Question # 14

You launched a Linux compute instance to host the new version of your company website via Apache Httpd server on HTTPS (port 443). The instance is created in a public subnet along with other instances. The default security list associated to the subnet is:

A.

You want to allow access to the company website from public internet without exposing websites eventually hosted on the other instances in the public subnet. Which action would you take to accomplish the task? (Choose the best answer.)

B.

Create an NSG, add a stateful rule to allow ingress access on port 443, and associate it with the public subnet that hosts the company website.

C.

Create a Network Security Group (NSG), add a stateful rule to allow ingress access on port 443, and associate it with the instance that hosts the company website.

D.

In the default security list, add a stateful rule to allow ingress access on port 443.

Create a new security list with a stateful rule to allow ingress access on port 443 and associate it with the public subnet.

Full Access