1z0-1072-23 Practice Exam Questions with Answers Oracle Cloud Infrastructure 2023 Architect Associate Certification

Export your current image in the QCOW2 format and copy to an Object Storage bucket. Import it as a custom image. Select emulated mode to ensure compatibility with legacy drivers. The explanation is that QCOW2 is one of the supported formats for importing custom images to OCI. Custom images are images that you can create from your own on-premises or cloud servers and use them to launch instances in OCI. To import a custom image, you need to export your current image in a supported format, copy it to an Object Storage bucket, and then import it as a custom image using the OCI console or API. When you import a custom image, you can choose between native mode or emulated mode. Native mode offers better performance but requires compatible drivers and firmware. Emulated mode offers better compatibility but lower performance.

Cloud Agent Plugin and Service Connectors are two features of OCI that can help collect logs from on-premises instances and archive them into OCI Object Storage. Cloud Agent Plugin is a component of the OCI Logging service that can be installed on any Linux or Windows instance to collect logs and send them to OCI. Service Connectors are components of the OCI Service Connector Hub that can transfer data between different OCI services, such as Logging and Object Storage. The other options are not relevant for this requirement. References: [Cloud Agent Plugin], [Service Connectors]

Premium is the IAM Identity Domain type that you should create if you want a full-featured IDaaS solution that helps you manage workforce authentication and access to all of your Oracle and non-Oracle applications. Premium Identity Domain provides users with access to Oracle Identity Cloud Service, which is an IDaaS solution that offers identity management, single sign-on, multifactor authentication, identity governance, and integration with third-party applications. The other options are not IAM Identity Domain types that provide a full-featured IDaaS solution. References: [Identity Domains], [Oracle Identity Cloud Service]

Internet Gateway, NAT Gateway, and Service Gateway are three gateways that are created automatically when creating a VCN with the VCN wizard. An Internet Gateway allows public traffic between the VCN and the internet. A NAT Gateway allows private traffic from the VCN to access the internet without exposing the VCN resources to incoming internet connections. A Service Gateway allows private traffic from the VCN to access OCI services such as Object Storage, Email Delivery, and Notifications. The other options are not created automatically by the VCN wizard, but can be added manually later if needed. References: [VCN Wizard], [Gateways]

Attaching a block volume to an instance in a different availability domain is not a valid action within the OCI Block Volume service. A block volume can only be attached to an instance in the same availability domain. The other options are valid actions that can be performed with the Block Volume service. References: [Block Volume Actions]

According to the Oracle Cloud Guard documentation1, Cloud Guard is a cloud native service that helps customers monitor, identify, achieve, and maintain a strong security posture on Oracle Cloud. Use the service to examine your Oracle Cloud Infrastructure resources for security weakness related to configuration, and your Oracle Cloud Infrastructure operators and users for risky activities. Upon detection, Cloud Guard can suggest, assist, or take corrective actions, based on your configuration.

Therefore, option A and option E are correct ways that Cloud Guard helps improve the overall security posture for your tenancy. Option B is incorrect because Cloud Guard does not allow you to centrally manage encryption keys. That is the function of the Vault service2. Option C is incorrect because Cloud Guard does not prevent you from creating misconfigurations on your resources in OCI. It only detects and reports them, and optionally takes corrective actions. Option D is incorrect because Cloud Guard does not mask sensitive data and monitor security controls on your Oracle databases. That is the function of the Data Safe service3.

Exadata Virtual Machine is not a valid option for an OCI compute shape. Exadata Virtual Machine is a deployment option for Exadata Cloud Service or Exadata Cloud@Customer, which are services that provide dedicated Exadata infrastructure for running Oracle databases in OCI. Exadata Virtual Machine allows you to create multiple virtual machines on each Exadata compute node and isolate them from each other using Oracle VM technology. The valid options for OCI compute shapes are:

• Bare Metal: A bare metal instance is a physical server that gives you direct access to the underlying hardware and full isolation from other tenants.
• Dedicated Virtual Machine Host: A dedicated virtual machine host is a physical server that hosts only your virtual machine instances and no other tenant’s instances.
• Virtual Machine: A virtual machine instance is a virtual server that runs on a shared physical server with other tenants’ instances.
• Burstable: A burstable instance is a virtual machine instance that has a baseline utilization of either 12% or 50% of each CPU core and can burst above the baseline when needed.

 From the version 1 menu on the OCI console, select “Promote to Current”. The explanation is that when you promote a secret version to current, it becomes the latest version of the secret and is used by default when you access the secret. This way, you can rollback to a previous version of the secret without creating a new version.

The explanation is that shielded instances are VM instances that have additional security features to protect them from low-level threats, such as rootkits and bootkits that can infect the firmware and operating system and are difficult to detect. Shielded instances use verified boot, which ensures that only trusted software components are executed during the boot process. Shielded instances also use virtual trusted platform module (vTPM), which provides a secure storage for encryption keys and certificates. Shielded instances are available for Oracle Linux 8 platform images with VM.Standard2.* shapes.

File systems use Oracle-managed keys by default. Customer can encrypt data in their file system using their own Vault encryption key. The explanation is that File Storage Service encrypts all data at rest using AES-256 encryption algorithm. By default, File Storage Service uses Oracle-managed keys to encrypt and decrypt data. However, you can also use your own Vault encryption key to encrypt data in your file system. To do so, you need to create a key in Vault and associate it with your file system when you create or update it.