Question 1

As a solutions architect of the Oracle Cloud Infrastructure (OCI) tenancy, you have been asked to provide members of the CloudOps group the ability to view and retrieve monitoring metrics, but only for all monitoring-enabled compute instances. Which policy statement would you define to grant this access?

Options :

A : Allow group CloudOps to read metrics in tenancy where tar-get.metrics.namespace='oci_computeagent'

B : Allow group CloudOps to read compute-metrics in tenancy

C : Allow group CloudOps to read metrics in tenancy where tar-get.metrics.monitoring='oci_computeagent'

D : Restricting monitoring access only to compute instances metrics is not possible.

Answer: A

Question 2

An insurance company has contracted you to help automate their application business continuity plan. They have the application running in eu-frankfurt-1 as the primary site and uk-london-1 as a disaster recovery site. Normally they have a DNS A record associated with the IP address of the primary endpoint in eu- frankfurt-1. In the event of a disaster, they use OCI DNS Zone Management to update the A record and replace it with the IP address of the end-point in uk- londond-1. How can you automate the failover process? (Choose the best answer.)

Options :

A : Create a Health Check that evaluates both regional endpoints. Create a Traffic Management Steering policy with Failover type and associate it with the Health Check.

B : Provision a Load Balancer in Frankfurt and associate it with the A record in DNS. Create a backend set with backend servers from both eu-frankfurt-1 and uk- london-1 regions.

C : Create a Traffic Management Steering policy with Load Balancer type and add both eu-frankfurt-1 and uk-london-1 endpoints. Attach the Traffic Management Steering policy to the A record.

D : Create a Traffic Management Steering policy and attach it to a backend servers from both eu-frankfurt1 and uk-london-1 regions.

Answer: A

Question 3

All the developers in a DevOps team are using the same compartment called 'devops'. There are two IAM groups: 'group-devs' and 'group-ops'. Which of the following IAM policy will give users in both these groups access to manage all resources in the compartment?

Options :

A : Allow group group-dev, group-ops to manage all resources in compartment devops.

B : Allow group /group*/ to manage all resources in compartment devops.

C : Allow any-user to manage all resources in compartment devops where any {re-quest.group=group-dev, group-ops}.

D : Allow any-user to manage all resources in compartment devops where request.group= /group*/.

Answer: A

Question 4

You have a Terraform configuration that includes a VCN and three compute instances in the VCN. The configuration also includes a cloud-init script for each compute instance. You upload the configuration to OCI Resource Manager and run an apply job. Which option correctly describes the order of execution, assuming the configuration does not model explicit dependencies?

Options :

A : Resource Manager provisions the VCN, then the compute instances one at a time. Terraform does not wait for the cloud-init script of each instance to complete before proceeding to the next instance.

B : Resource Manager provisions the VCN, then all compute instances in parallel.

C : Resource Manager provisions the VCN, then the compute instances one at a time. Terraform waits for the cloud-init script of each instance to complete before proceeding to the next instance.

D : Resource Manager provisions the resources from top to bottom in the configuration file.

Answer: B

Question 5

You have been asked to review a network design for Oracle Cloud Infrastructure (OCI) by a major client. The client IT team needs to provision two Virtual Cloud Networks (VCNs) for a major application. The application uses a large number of virtual machine instances. Additionally, in the future, a VCN peering will be required to allow connectivity between the VCNs. Which of the following are valid IP ranges to consider? (Choose the best answer.)

Options :

A : 10.0.0.0/16 and 10.0.64.0/24

B : 10.0.0.0/8 and 11.0.0.0/8

C : 10.0.8.0/21 and 10.0.16.0/22

D : 10.0.0.0/30 and 192.168.0.0/30

Answer: C