Q51. As a solution architect, you designed the network infrastructure of a three-tier web application on Oracle Cloud Infrastructure (OCI) and the back-end database servers are put in a private subnet. One of your database administrators requests to have private access to OCI Object Storage service.A. Predefined values
B. Free-form tags
C. Tag variables
D. Defined tags
E. Cost-tracking tags
F. Default tags
Answer: B, D
Q52. A customer launched a compute instance in the Virtual Cloud Network (VCN), which has an internet gateway, a service gateway, a default security lists and a default route table. The customer opened up Port 22 in the security lists attached to the compute instance subnet, however is still unable to connect to compute instances using SSH.How should you fulfill this request?
A. Add a new route rule to the private subnet route table to route default traffic to the internet gateway.
B. Attach a public IP address to the instances in the private subnet, and then add a new route rule to the private subnet route table to route default traffic to the internet gateway.
C. Create a dynamic routing gateway (DRG) and attach it to your virtual cloud network (VCN). Add a default route rule to the private subnets route table and set the target as DRG.
D. Create a service gateway, add a new route rule to the private subnet route table that uses Object Storage as target type.
Answer: D
Q53. Your customer is using an Oracle Cloud Infrastructure (OCI) compartment named Production that hosts several resources such as compute instances, DB Systems and File Systems. Each resource in the Production compartment is tagged. The customer's security team wants to restrict access to DB Systems to only the authorized group of DBAs.Which action can resolve this issue?
A. Modify the security list associated with the VCN subnet in which the instance resides. Add a stateful egress rule to allow ICMP traffic in addition to the port 22.
B. Modify the route table associated with the VCN subnet in which the instance resides. Add a following route to the route table: Destination CIDR: 0.0.0.0/0 Target: Service Gateway (SGW)
C. Modify the route table associated with the VCN subnet in which the instance resides. Add a following route to the route table: Destination CIDR: 0.0.0.0/0 Target: Dynamic Routing Gateway (DRG)
D. Modify the route table associated with the VCN subnet in which the instance resides. Add a following route to the route table: Destination CIDR: 0.0.0.0/0 Target: Internet Gateway (IGW)
Answer: D
Q54. You have multiple applications installed on a compute instance and these applications generate a large amount of log files. These log files must reside on the boot volume for a minimum of 15 days. Any log files age over 15 days shouldn't be on boot volume but still must be retained for at least 60 days. The 60-day retention requirement is causing an issue with available disk space.Which OCI Tagging capability can be used to meet this requirement?
A. Tags Defaults with predefined values
B. Tag Defaults
C. Cost-Tracking Tags
D. Tag-based Access Control
Answer: D
Q55. You have an application server running in a public subnet on a compute instance in US West (us-phoenix-1) region of Oracle Cloud Infrastructure (OCI). The data sitting on this instance needs to be copied to OCI Object Storage Bucket available in the same region without traversing over the internet. To enable the connectivity between the instance and Object Storage, you created a Service Gateway with service CIDR of all Object Storage in us-phoenix-1 enabled. You also modified the security rules to allow the desired traffic.What are two Oracle recommended methods to retain the log files for 60 days without filling up the boot volume? (Choose TWO.)
A. Terminate the instance while preserving the boot volume. Create a new instance from the boot volume and select a DenseIO shape to take advantage of local NVMe storage.
B. Resize the boot volume of the instance.
C. Create and attach a block volume to the compute instance and copy the log files.
D. Create an object storage bucket and use a script that runs daily to move log files older than 15 days to the bucket.
E. Write a custom script to remove the log files on a daily basis and free up the space on the boot volume.
Answer: B, D
However, when you tried sending the data to the Object Storage bucket, you notice that the data is going over the internet and not via the service gateway. What could be the possible reason for this behavior?
A. Identity and Access Management (IAM) policies restrict the access to the object storage bucket.
B. The service gateway created in the VCN resides in a different availability domain.
C. The security list associated with the subnet has an egress rule that allows all traffic to be forwarded to a destination CIDR 0.0.0.0/0.
D. The route table associated with the subnet has no route rule where the destination is object storage service.
Answer: D