Oracle 1Z0-1067-25 : Oracle Cloud Infrastructure 2025 Cloud Ops Professional

You have received an email from your manager to provision new resources on Oracle Cloud Infrastructure (OCI). When researching OCI, you determined that you should use OCI Resource Manager. Since this is a task that will be done multiple times for development, test, and production. You will need to create a command that can be re-used. Which CLI command can be used in this situation? (Choose the best answer.)

• A. oci resource-manager stack update --compartment-id <compartment_OCID> \ --config-source prod.zip --variables file://variables.json \ --display-name "Production stack build" \ --description Creating new Production environment
• B. oci resource-manager stack create --tenancy-id <tenancy_OCID> \ --config-source prod.zip --variables file://variables.json \ --display-name Production stack build \ --description Creating new Production environment
• C. oci resource-manager stack update --tenancy-id <tenancy_OCID> \ --config-source prod.zip --variables file://variables.json \ --display-name "Production stack build" \ --description Creating new Production environment
• D. oci resource-manager stack create --compartment-id <compartment_OCID> \ --config-source prod.zip --variables file://variables.json \ --display-name "Production stack build" \ --description Creating new Production environment

You are asked to investigate a potential security risk on your company Oracle Cloud Infrastructure (OCI) tenancy. You decide to start by looking through the audit logs for suspicious activity. How can you retrieve the audit logs using the OCI Command Line Interface (CLI)? (Choose the best answer.)

• A. oci audit event list --end-time $end-time -compartment-id $compartment-id
• B. oci audit event list --start-time $start-time -compartment-id $compartment-id
• C. oci audit event list --start-time $start-time -end-time $end-time -compartment-id $com-partment-id
• D. oci audit event list --start-time $start-time -end-time $end time -tenancy-id $tenancy id

You are using Oracle Cloud Infrastructure (OCI) services across several regions: us-phoenix-1, us-ashburn-1, uk-london-1 and ap-tokyo-1. You have creates a separate administrator group for each region: PHX-Admins, ASH-Admins, LHR-Admins and NRT-Admins, respectively. You want to restrict admin access to a specific region. E.g., PHX-Admins should be able to manage all resources in the us phoenix-1 region only and not any other OCI regions. What IAM policy syntax is required to restrict PHX-Admins to manage OCI resources in the us-phoenix-1 region only? (Choose the best answer.)

• A. Allow group PHX-Admins to manage all-resources in tenancy where re-guest.target='us-phoenix-1'
• B. Allow group PHX-Admins to manage all-resources in tenancy where re-guest.permission= 'us-phoenix-1'
• C. Allow group PHX-Admins to manage all-resources in tenancy where re-guest.region='us-phoenix-1'
• D. Allow group PHX-Admins to manage all-resources in tenancy where re-guest.location='us-phoenix-1'

You have been contracted by a local e-commerce company to assist with enhancing their online shopping application. The application is currently deployed in a single Oracle Cloud Infrastructure (OCI) region. The application utilizes a public load balancer, application servers in a private subnet, and a database in a separate, private subnet. The company would like to deploy another set of similar infrastructure in a different OCI region that will act as standby site. In the event of a failure at the primary site, all customers should be routed to the failover site automatically. After deploying the additional infrastructure within the second region, how should you configure automated failover requirements? (Choose the best answer.)

• A. Create a load balancer policy in the Traffic Management service. Configure one answer for each site. Set the answer for the primary site with a weight of 10 and the answer for the secondary site with a weight of 100.
• B. Deploy a new load balancer in the primary region. Create one backend set for the primary application servers and a second backend set for the standby application servers. Create a listener for the primary backend set with a timeout of 3 minutes. Create a listener for the secondary backend set with a timeout of 10 minutes.
• C. Create a new A record in DNS that points to the public load balancer at the secondary site. Create a CNAME for the sub-domain failover that will resolve to the new A rec-ord. Inform customers to prepend the website URL with failover if the primary site is unavailable.
• D. Create a failover policy in the Traffic Management service. Set the IP address of the public load balancer for the primary site in answer pool 1. Set the IP address of the public load balancer for the secondary site in answer pool 2. Define a health check to monitor both sites.

You launched a Linux compute instance to host the new version of your company website via Apache Httpd server on HTTPS (port 443). The instance is created in a public subnet along with other instances. The default security list associated to the subnet is:

• A. Create an NSG, add a stateful rule to allow ingress access on port 443, and associate it with the public subnet that hosts the company website.
• B. In the default security list, add a stateful rule to allow ingress access on port 443.
• C. You want to allow access to the company website from public internet without exposing websites eventually hosted on the other instances in the public subnet. Which action would you take to accomplish the task? (Choose the best answer.)
• D. Create a Network Security Group (NSG), add a stateful rule to allow ingress access on port 443, and associate it with the instance that hosts the company website.