Oracle Cloud Infrastructure 2025 Cloud Ops Professional

Question 1

You have a web application running on Oracle Cloud Infrastructure (OCI) that lets users log in with a username and password. You notice that an attacker has tried to use SQL comment to alter the database query, remove the password check and log in as a user. You decide to prevent any future attacks. Which of the following OCI services or features would you choose to safeguard your application? (Choose the best answer.)

A. Vault

B. Web Application Framework (WAF)

C. Network Security Group

D. Data Safe

Correct Answer: B

Question 2

The general syntax for an IAM policy is: Allow <identity_domain_name>/<subject> to <verb> <resource-type> in <location> where <conditions> Which two are valid values for <verb>?

A. read

B. alter

C. destroy

D. manage

E. create

Correct Answer: A,D

Question 3

Which statement about the Oracle Cloud Infrastructure (OCI) instance console connection is TRUE?

A. It does not let you reset the SSH key

B. It does not let you edit the configuration files needed to recover the instance

C. It does not let you use the boot menu during the reboot process

D. It does not let you execute the sized-limit script.

Correct Answer: C

Question 4

Recently, your e-commerce web application has been receiving significantly more traffic than usual. Users are reporting they often encounter a 503 Service Error when trying to access your site. Sometimes the site is very slow. You check your instance pool configuration to con-firm that the maximum number of instances is configured to allow 20 compute instances. Currently, 14 compute instances have been provisioned by the instance pool. You also confirm that current CPU utilization across all hosts exceeds the scale-out threshold you set in your auto-scaling policy. However, the instance pool is not provisioning any new instances. What can you check to determine why the application is NOT functioning properly? (Choose the best answer.)

A. Verify that the compute resource quota has not been exceeded.

B. Verify that the database is accessible.

C. Verify that the Quality Assurance team is not currently performing load-testing against production.

D. Verify that the new offer feature code did not introduce any performance bugs.

Correct Answer: A

Question 5

You run a large global application with 90% of your customers based in the US and Canad a. You want to test a new feature and allow a small percentage of users to access the new version of your application. Which Oracle Cloud Infrastructure (OCI) Traffic Management steering policy should you utilize?

A. ASN steering

B. Load Balancer

C. IP Prefix steering

D. Geolocation steering

Correct Answer: B

Question 6

The boot volume on your Oracle Linux instance has run out of space. Your application has crashed due to a lack of swap space, forcing you to increase the size of the boot volume. Which step should NOT be included in the process used to solve the issue? (Choose the best answer.)

A. Reattach the boot volume and restart the instance.

B. Resize the boot volume by specifying a larger value than the boot volume current size.

C. Stop the instance and detach the boot volume.

D. Attach the resized boot volume to a second instance as a data volume; extend the partition and grow the file system in the resized boot volume.

E. Create a RAID 0 configuration to extend the boot volume file system onto another block volume.

Correct Answer: E

Question 7

(CHK) Your company recently adopted a hybrid cloud architecture which requires them to migrate some of their on-premises web applications to Oracle Cloud Infrastructure (OCI). You created a Terraform template which automatically provisions OCI resources such as compute instances, load balancer, and a database instance. After running the stack using the terraform apply command, it successfully launched the compute instances and the load balancer, but it failed to create a new database instance with the following error: Service error: NotAuthorizedOrNotFound. shape VM.Standard2.4 not found. http status code: 404 You dis-covered that the resource quotas assigned to your compartment prevent you from using VM.Standard2.4 instance shapes available in your tenancy. You edit the Terraform script and replace the shape with VM.Standard2.2 Which option would you recommend to re-run the terraform command to have required OCI resources provisioned with the least effort? (Choose the best answer.)

A. terraform apply target=oci_database_db_system.db_system

B. terraform plan target=oci_database_db_system.db_system

C. terraform apply auto-approve

D. terraform refresh target=oci_database_db_system.db_system

Correct Answer: A

Question 8

You have a group of developers who launch multiple VM.Standard3.Flex compute in-stances every day into the compartment Dev. As a result, your Oracle Cloud Infrastructure (OCI) tenancy quickly hits the service limit for this shape, and other groups can no longer create new instances using the VM.Standard3.Flex shape. Therefore, your company issues a new mandate that the Dev compartment must include a quota that allows the use of only 20 VM.Standard3.Flex OCPUs per availability domain, without affecting any other compartment in the tenancy. Which quota statement would you use to implement this new requirement?

A. set compute-core quota standard3-core-count to 20 in compartment dev where re-quest.region = us-phoenix-1

B. set compute-core quota standard3-core-count to 20 in compartment dev

C. zero compute-core quotas in tenancy set compute-core quota standard3-core-count to 20 in tenancy dev

D. zero compute-core quotas in tenancy set compute-core quota standard3-core-count to 20 in compartment dev

Correct Answer: B

Question 9

Your team implemented a SaaS application that requires a whole system deployment for each new customer. The infrastructure provisioning is already automated via Terraform, and now you have been asked to develop an Ansible playbook to centralize configuration file management and deployment. What is the most effective way to ensure your playbooks are utilizing up-to-date and accurate inventory? (Choose the best answer.)

A. Download the dynamic inventory script provided by Oracle Cloud Infrastructure and include it in the playbook invocation command.

B. Export an inventory list using Terraform apply command.

C. Implement a Command Line Interface script to list all the resources and run it within Ansible to generate a dynamic inventory list.

D. Export an inventory list from the Oracle Cloud Infrastructure Web console.

Correct Answer: A

Question 10

You are using Oracle Cloud Infrastructure (OCI) services across several regions: us-phoenix-1, us-ashburn-1, uk-london-1 and ap-tokyo-1. You have creates a separate administrator group for each region: PHX-Admins, ASH-Admins, LHR-Admins and NRT-Admins, respectively. You want to restrict admin access to a specific region. E.g., PHX-Admins should be able to manage all resources in the us phoenix-1 region only and not any other OCI regions. What IAM policy syntax is required to restrict PHX-Admins to manage OCI resources in the us-phoenix-1 region only? (Choose the best answer.)

A. Allow group PHX-Admins to manage all-resources in tenancy where re-guest.location='us-phoenix-1'

B. Allow group PHX-Admins to manage all-resources in tenancy where re-guest.region='us-phoenix-1'

C. Allow group PHX-Admins to manage all-resources in tenancy where re-guest.permission= 'us-phoenix-1'

D. Allow group PHX-Admins to manage all-resources in tenancy where re-guest.target='us-phoenix-1'

Correct Answer: B

Oracle Cloud Infrastructure 2025 Cloud Ops Professional - 1Z0-1067-25 Exam Practice Test

Latest Update

Useful Links

Contact Us