Oracle Cloud Infrastructure 2023 Cloud Operations Professional 是由 Oracle 官方舉辦的認證考試，在業界具有高度公信力，也是許多企業篩選人才的重要依據。想在 2026 年取得這張證照，Fast2test 的 1z0-1067-23 題庫（89 題）會是你值得信賴的備考夥伴。

Oracle 1z0-1067-23 考試概覽:

Oracle 1z0-1067-23 考試大綱主題:

Oracle Cloud Infrastructure 2023 Cloud Operations Professional 考生最常問的問題

最新的 Oracle Cloud 1z0-1067-23 免費考試真題：

問題 #1

Security Testing Policy describes when and how you may conduct certain types of security testing of Oracle Cloud Services, including vulnerability and penetration tests, as well as tests involving data scraping tools.
What does Oracle allow as part of this testing? (Choose the best answer.)

A. Customers are allowed to test Oracle Cloud Infrastructure (OCI) hardware related to resources in their tenancy.
B. Customers can validate that their network resources are isolated from other customer resources.
C. Customers can simulate DoS attack scenarios as long as it restricted to the customer own environment.
D. Customers are allowed to use their own testing and monitoring tools.

問題 #2

You are asked to investigate a potential security risk on your company Oracle Cloud Infrastructure (OCI) tenancy. You decide to start by looking through the audit logs for suspicious activity. How can you retrieve the audit logs using the OCI Command Line Interface (CLI)? (Choose the best answer.)

A. oci audit event list --start-time $start-time -compartment-id $compartment-id
B. oci audit event list --end-time $end-time -compartment-id $compartment-id
C. oci audit event list --start-time $start-time -end-time $end time -tenancy-id $tenancy id
D. oci audit event list --start-time $start-time -end-time $end-time -compartment-id $com-partment-id

問題 #3

Your deployment platform within Oracle Cloud Infrastructure (OCI) leverages a compute instance with multiple block volumes attached. There are multiple teams that use the same compute instance and have access to these block volumes. You want to ensure that noone accidentally deletes any of these block volumes. You have started to construct the following IAM policy but need to determine which permissions should be used.
allow group DeploymentUsers to manage volume-family where ANY { request.permission != <???>, request.permission != <???>, request.permission != <???> } Which permissions can you use in place of <???> in this policy? (Choose the best answer.)

A. VOLUME_ERASE, VOLUME_ATTACHMENT_ERASE, VOL-UME_BACKUP_ERASE
B. VOLUME_DELETE, VOLUME_ATTACHMENT_DELETE, VOL-UME_BACKUP_DELETE
C. ERASE_VOLUME, ERASE_VOLUME_ATTACHMENT, ERASE_VOLUME_BACKUP
D. DELETE_VOLUME, DELETE_VOLUME_ATTACHMENT, DE-LETE_VOLUME_BACKUP

問題 #4

You have created the following JSON file to specify a lifecycle policy for one of your object storage buckets:

How will this policy affect the objects that are stored in the bucket? (Choose the best answer.)

A. Objects containing the name prefix LOGS will be automatically migrated from standard Storage to Archive storage 30 days after the creation date. The object will be mi-grated back to standard Storage
120 days after creation.
B. The objects with prefix LOGS will be deleted 30 days after creation date.
C. Objects with the prefix LOGS will be retained for120 days and then deleted permanently.
D. Objects containing the name prefix LOGS will be automatically migrated from standard Storage to Archive storage 30 days after the creationdate. The object will be deleted 120 days after creation.

問題 #5

You have a Linux compute instance located in a public subnet in a VCN which hosts a web application. The security list attached to subnet containing the compute instance has the following stateful ingress rule.

The Route table attached to the Public subnet is shown below.You can establish an SSH connection into the compute instance from the internet. However, you are not able to connect to the web server using your web browser.

Which step will resolve the issue? (Choose the best answer.)

A. In the route table, add a rule for your default traffic to be routed to service gateway.
B. In the security list, add an ingress rule for port 80 (http).
C. In the route table, add a rule for your default traffic to be routed to NAT gateway.
D. In the security list, remove the ssh rule.

問題與答案：