Oracle 1Z0-1067-24 Quiz 1 Topic 1 Questions 1-5

Question: 1

You are using a load balancer to distribute traffic to an autoscaling instance pool running an HTTP application. You want to periodically check if all compute instances in the pool, including the new instances provisioned by autoscaling. are responding on TCP port 80.

How can you achieve this?

ACreate an HTTP monitor on port 80 in the OCI Health Checks service.

BCreate an alarm in the OCI Monitoring service.

CDeploy Management Agents via the Oracle Cloud Agent to monitor HTTP on port 80

DCreate a load balancer health check for HTTP on port 80.
Topic 2, Hands-on Performance Based

Show Answer

Question: 2

You set up a bastion host in your Virtual Cloud Network (VCN) to allow only your IP ad-dress (140.19.2.140) to establish SSH connections with your compute instances that are deployed in a private subnet. The compute instances have an attached Network Security Group (NSG) with a Source Type: Network Security Group (NSG), Source NSG: NSG-050504. To secure the bastion host, you add the following ingress rules to its NSG: Type: All TCP Proto-col: TCP Port Range: 22 Source: 140.19.2.140/32 Type: All TCP Protocol: TCP Port Range: 22 Source: NSG-050504 However, when you check the bastion host logs, you discover that there are IP addresses other than your own that can access your bastion host. What is the root cause of this issue?

AThe port 22 provides unrestricted access to 140.19.2.140 and to other IP addresses.

BAll compute instances associated with NSG-050504 are also able to connect to the bastion host.

CThe security list allows access to all IP addresses that override the NSG ingress rules.

DA netmask of /32 allows all IP addresses in the140.19.2.0 network, other than your IP 140.19.2.140.

Show Answer

Question: 3

You have a Linux compute instance located in a public subnet in a VCN which hosts a web application. The security list attached to subnet containing the compute instance has the following stateful ingress rule.

q3_1Z0-1067-24

The Route table attached to the Public subnet is shown below. You can establish an SSH connection into the compute instance from the internet. However, you are not able to connect to the web server using your web browser.

q3_1Z0-1067-24

Which step will resolve the issue? (Choose the best answer.)

AIn the security list, remove the ssh rule.

BIn the security list, add an ingress rule for port 80 (http).

CIn the route table, add a rule for your default traffic to be routed to service gateway.

DIn the route table, add a rule for your default traffic to be routed to NAT gateway.

Show Answer

Question: 4

You have been monitoring your company applications running in Oracle Cloud Infra-structure (OCI) and notice that the application is using OCI Traffic Management service. This service uses a traffic steering policy to distribute the DNS traffic based on subnet addresses in a rule set. Which steering policy is in use in this particular case? (Choose the best answer.)

ALoad Balancing policy

BASN steering policy

CGeolocation steering

DIP Prefix steering

Show Answer

Question: 5

Your company hosts an application on many compute instances in the same subnet in OCI. You have an Ansible playbook to ensure that all instances have the latest versions of dependencies installed.

Which three are required to run the playbook in OCI Cloud Shell?

AAn Ansible agent on each target compute instance

BA network route from the Cloud Shell VM to each of the target compute instances

CA service principal with appropriate permissions to access the instances

DA hosts file on the Cloud Shell VM containing all of the IP addresses of the target instances

EAn SSH key pair, where the private key is available on the Cloud Shell VM and the public key is in the outhorized_keys file in each of the compute instances

Show Answer

Oracle 1Z0-1067-24 Quiz:1 Topic:1 Questions:1-5