Oracle Cloud Infrastructure 2020 Cloud Operations Associate : 1Z0-1067-20 valid dump

Which three statements ate true about Object Storage data security and encryption In Oracle Cloud Infrastructure (OCI)?

• A. All traffic to and from Object Storage service is encrypted using TLS.
• B. OCI Key Management is used by default to provide data security.
• C. Server side encryption uses per-object keys which are managed by Oracle.
• D. Client-side encryption is managed by the customer.
• E. A VPN connection to OCI is required to ensure secure data transfer to an object storage bucket.

You are tasked with creating a group called volumeBackcupAdmins to manage only block volume backups.
Which of the following set of policy/policies would you need to write to meet this requirement?
A)

B)

C)

D)

• A. Option A
• B. Option D
• C. Option C
• D. Option B

You have been tasked with allocating an identity to one of your compute instances that needs to retrieve and process static files that are stored in an Object Storage bucket. After creating a dynamic group with a matching rule that specifies the OCID of the compute instance, you discover the that API calls are failing.
Which step should you take to resolve this issue?

• A. Initial credentials must be initialized using OCI console for the Instance in dynamic group. This can be a bulk operation.
• B. Once instances are in dynamic group no additional steps are required.
• C. Create IAM policies to permit users in these groups to make API calls against Oracle Cloud Infrastructure services.
• D. Create IAM policies to permit instances in these groups to make API calls against Oracle Cloud Infrastructure services.

An organization wants to extend their existing on-premises data centers to the Oracle Cloud Infrastructure (OC1) us-phoenix-1 region. In order to achieve It, they have created an IPSec VPN connection between their Customer-Premises Equipment(CPE) and Dynamic Routing Gateway(DRG) on How can you make this connection highly available (HA)?

• A. Add another Dynamic Routing Gateway in a different Availability Domain, and create another IPSec VPN connection with another Customer Premises Equipment (CPE).
• B. Add another Dynamic Routing gateway In a different Availability Domain and create another IPSec VPN connection.
• C. Add another Customer-Premises Equipment (CPE) and create second IPSec VPN connection with the same Dynamic Routing Gateway (DRG).
• D. Create a NAT Gateway and route all traffic through a NAT Gateway, which is highly available component.

You want an instance in your compartment to make API calls to other services within Oracle Cloud Infrastructure without storing credentials in a configuration file.
What do you need to do?

• A. No action is required. By default, all VM instances are created with an Instance Principal
• B. Instances cannot access services outside their compartment
• C. Create appropriate matching rules in the Dynamic Group to create an Instance Principal
• D. VM instances are treated as users. Create a user and assign the user to that VM instance