Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Oracle Exam 1Z0-1067-23 Topic 8 Question 15 Discussion

Actual exam question for Oracle's 1Z0-1067-23 exam
Question #: 15
Topic #: 8
[All 1Z0-1067-23 Questions]

An insurance company has contracted you to help automate their application business continuity plan. They have the application running in eu-frankfurt-1 as the primary site and uk-london-1 as a disaster recovery site. Normally they have a DNS A record associated with the IP address of the primary endpoint in eu- frankfurt-1. In the event of a disaster, they use OCI DNS Zone Management to update the A record and replace it with the IP address of the end-point in uk- londond-1. How can you automate the failover process? (Choose the best answer.)

Show Suggested Answer Hide Answer
Suggested Answer: A

Task 1

Write a policy statement to enable Network-Admins to create and destroy network-related resources, such as VCNs, subnets, gateways, and so on in the Network compartment.

Solution- Policy Statement:

allow Network-Admins to manage virtual-network-family in compartment Common-Infra:Network

Task 2

Write policy statements to enable E-Comm-Admins to provision and destroy compute instances in the E-Comm compartment by using networking resources in the Network compartment.[Write one policy per given text box]

Solution- Policy Statement:

allow E-Comm-Admins to manage instance-family in compartment Applications:E-Commallow E-Comm-Admins to use virtual-network-family in compartment Common-Infra:Network

Task 3

Write a policy statement to enable SCM-Admins to provision, destroy, and back up block volumes in the SCM compartment---but only in Phoenix and London.

Solution- Policy Statement:

allow SCM-Admins to manage volume-family in compartment Applications:SCM where any{request.region='phx',request.region='lhr'}


Contribute your Thoughts:

Nenita
10 months ago
And add: 'allow group SCM-Admins to manage block-family in compartment SCM where request.region='uk-london-1''. That covers both regions.
upvoted 0 times
...
Gracie
10 months ago
Those look good. For Task 3, would it be: 'allow group SCM-Admins to manage block-family in compartment SCM where request.region='uk-phoenix-1''?
upvoted 0 times
...
Mozell
11 months ago
Makes sense. For Task 2, maybe something like: 'allow group E-Comm-Admins to manage instance-family in compartment E-Comm'? And: 'allow group E-Comm-Admins to use virtual-network-family in compartment Network'?
upvoted 0 times
...
Rosenda
11 months ago
For Task 1, I think we need: 'allow group Network-Admins to manage virtual-network-family in compartment Network'.
upvoted 0 times
...
Corrina
11 months ago
Yeah, it's challenging. So many details and compartments.
upvoted 0 times
...
Gail
1 years ago
This IAM policy question seems tough. Anyone else feeling the same?
upvoted 0 times
...

Save Cancel
az-700  pass4success  az-104  200-301  200-201  cissp  350-401  350-201  350-501  350-601  350-801  350-901  az-720  az-305  pl-300  

Warning: Cannot modify header information - headers already sent by (output started at /pass.php:70) in /pass.php on line 77