Oracle Oracle Certifications 1Z0-1085-20 Questions & Answers

• Question 41:

  A customer wants to deploy a customized e commerce Web application using multiple virtual machines, block storage, databases, load balancer and web application firewall. What cloud model can be used to host this application?

  A. Software as a Service (SaaS)

  B. Platform as a Service (PaaS)

  C. Anything as a Service (XaaS)

  D. Infrastructure as a Service (IaaS)

  Correct Answer: D

  https://www.oracle.com/cloud/what-is-iaas/

  What Is IaaS?

  Infrastructure as a service (IaaS) is a type of cloud service model in which computing resources are hosted

  in the cloud. Businesses can use the IaaS model to shift some or all of their use of on- premises or

  colocated data center infrastructure to the cloud, where it is owned and managed by a cloud provider.

  These infrastructure elements can include compute, network, and storage hardware as well as other

  components and software. In the IaaS model, the cloud provider owns and operates the hardware and software and also owns or leases the data center. When you have an IaaS solution, you rent the resources like compute or storage, provision them when needed, and pay for the resources your organization consumes. For some resources such as compute, you'll pay for the resources you use. For others such as storage, you'll pay for capacity.

  How Does IaaS Work? In a typical IaaS model, a business--which can be of any size--consumes services like compute, storage, and databases from a cloud provider. The cloud provider offers those services by hosting hardware and software in the cloud. The business will no longer need to purchase and manage its own equipment, or space to host the equipment, and the cost will shift to a pay-as-you-go model. When the business needs less, it pays for less. And when it grows, it can provision additional computing resources and other technologies in minutes. In contrast, in a traditional on-premises scenario, a business manages and maintains its own data center. The business must invest in servers, storage, software, and other technologies, and hire an IT staff or contractors to purchase, manage, and upgrade all the equipment and licenses. The data center has to be built to meet peak demand, even though sometimes workloads decline and those resources stand idle. Conversely, if the business grows quickly, the IT department might struggle to keep up. Reference: https://www.oracle.com/in/cloud/what-is-iaas/

• Question 42:

  After Signing up for a new Oracle cloud Infrastructure tenancy, what would you subscribe to in order to deploy infrastructure and services in different parts of the world?

  A. Availability Domain

  B. Fault Domains

  C. Pay as you go pricing

  D. Region

  Correct Answer: D

  Oracle Cloud Infrastructure is hosted in regions and availability domains. A region is a localized geographic area, and an availability domain is one or more data centers located within a region. A region is composed of one or more availability domains. Most Oracle Cloud Infrastructure resources are either region-specific, such as a virtual cloud network, or availability domain-specific, such as a compute instance. Traffic between availability domains and between regions is encrypted. Availability domains are isolated from each other, fault tolerant, and very unlikely to fail simultaneously. Because availability domains do not share infrastructure such as power or cooling, or the internal availability domain network, a failure at one availability domain within a region is unlikely to impact the availability of the others within the same region. The availability domains within the same region are connected to each other by a low latency, high bandwidth network, which makes it possible for you to provide high-availability connectivity to the internet and on-premises, and to build replicated systems in multiple availability domains for both high-availability and disaster recovery. Oracle is adding multiple cloud regions around the world to provide local access to cloud resources for our customers. To accomplish this quickly, we've chosen to launch regions in new geographies with one availability domain. As regions require expansion, we have the option to add capacity to existing availability domains, to add additional availability domains to an existing region, or to build a new region. The expansion approach in a particular scenario is based on customer requirements as well as considerations of regional demand patterns and resource availability. For any region with one availability domain, a second availability domain or region in the same country or geo-political area will be made available within a year to enable further options for disaster recovery that support customer requirements for data residency where they exist. Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/General/Concepts/regions.htm

• Question 43:

  Which Oracle Cloud Infrastructure service can you use to assess user security of your Oracle databases?

  A. Oracle Data Safe

  B. Oracle Data Guard

  C. Audit Vault and Database Firewall option for Oracle Database Enterprise Edition

  D. Audit Service

  Correct Answer: A

  Oracle Data Safe is a unified control center for your Oracle databases which helps you understand the sensitivity of your data, evaluate risks to data, mask sensitive data, implement and monitor security controls, assess user security, monitor user activity, and address data security compliance requirements.

  Whether you're using an Autonomous Database or an Oracle DB system, Oracle Data Safe delivers

  essential data security capabilities as a service on Oracle Cloud Infrastructure.

  Reference:

  https://docs.cloud.oracle.com/en-us/iaas/data-safe/doc/oracle-data-safe-overview.html

• Question 44:

  Which Oracle Cloud Infrastructure storage service can provide a shared file system across multiple compute instances?

  A. file Storage

  B. Local NVMe

  C. Object Storage

  D. Archive storage

  Correct Answer: A

  Oracle Cloud Infrastructure File Storage service provides a durable, scalable, secure, enterprise-grade network file system. You can connect to a File Storage service file system from any bare metal, virtual machine, or container instance in your Virtual Cloud Network (VCN). You can also access a file system from outside the VCN using Oracle Cloud Infrastructure FastConnect and Internet Protocol security (IPSec) virtual private network (VPN). Large Compute clusters of thousands of instances can use the File Storage service for high- performance shared storage. Storage provisioning is fully managed and automatic as your use scales from a single byte to exabytes without upfront provisioning.

  Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/File/Concepts/filestorageoverview.htm

• Question 45:

  Which two security capabilities are offered by Oracle Cloud Infrastructure?

  A. Always on data encryption for data-at-rest.

  B. Certificate Management service

  C. Captcha

  D. Key Management service

  E. Managed Active Directory service

  Correct Answer: AD

  Oracle Cloud Infrastructure's security approach is based on seven core pillars. Each pillar has multiple solutions designed to maximize the security and compliance of the platform and to help customers to improve their security posture. High Availability: Offer fault-independent data centers that enable high-availability scale-out architectures and are resilient against network attacks, ensuring constant uptime in the face of disaster and security attack. Customer Isolation: Allow customers to deploy their application and data assets in an environment that commits full isolation from other tenants and Oracle's staff. Data Encryption: Protect customer data at-rest and in-transit in a way that allows customers to meet their security and compliance requirements with respect to cryptographic algorithms and key management. Security Controls: Offer customers effective and easy-to-use application, platform, and network security solutions that allow them to protect their workloads, have a secure application delivery using a global edge network, constrain access to their services, and segregate operational responsibilities to reduce the risk associated with malicious and accidental user actions. Visibility: Offer customers comprehensive log data and security analytics that they can use to audit and monitor actions on their resources, allowing them to meet their audit requirements and reduce security and operational risk. Secure Hybrid Cloud: Enable customers to use their existing security assets, such as user accounts and policies, as well as third-party security solutions, when accessing their cloud resources and securing their data and application assets in the cloud. Verifiably Secure Infrastructure: Follow rigorous processes and use effective security controls in all phases of cloud service development and operation. Demonstrate adherence to Oracle's strict security standards through third- party audits, certifications, and attestations. Help customers demonstrate compliance readiness to internal security and compliance teams, their customers, auditors, and regulators. Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Security/Concepts/security_overview.htm

• Question 46:

  Which offers the lowest pricing for storage (per GB)?

  A. Oracle Cloud Infrastructure Object Storage (standard tier)

  B. Oracle Cloud Infrastructure Block Volume

  C. Oracle Cloud Infrastructure Archive Storage

  D. Oracle Cloud Infrastructure File Storage

  Correct Answer: C

  Oracle Cloud Infrastructure Archive Storage is the lowest pricing for storage (per GB) Reference: https://www.oracle.com/cloud/storage/pricing.html

  

  

  Archive storage as seen above is the cheapest! Reference: https://www.oracle.com/cloud/storage/pricing.html

• Question 47:

  What two statements regarding the Virtual Cloud Network (VCN) are true?

  A. A single VCN can contain both private and public Subnets.

  B. VCN is a regional resource that span across all the Availability Domains in a Region.

  C. You can only create one VCN per region.

  D. The VCN is the IPSec-based connection with a remote on premises location.

  E. VCN is a global resource that span across all the Regions

  Correct Answer: AB

  When you work with Oracle Cloud Infrastructure, one of the first steps is to set up a virtual cloud network (VCN) for your cloud resources. VIRTUAL CLOUD NETWORK (VCN) : A virtual, private network that you set up in Oracle data centers. It closely resembles a traditional network, with firewall rules and specific types of communication gateways that you can choose to use. A VCN resides in a single Oracle Cloud Infrastructure region and covers a single, contiguous IPv4 CIDR block of your choice. See Allowed VCN Size and Address Ranges. The terms virtual cloud network, VCN, and cloud network are used interchangeably in this documentation. For more information, see VCNs and Subnets. SUBNETS : Subdivisions you define in a VCN (for example, 10.0.0.0/24 and 10.0.1.0/24). Subnets contain virtual network interface cards (VNICs), which attach to instances. Each subnet consists of a contiguous range of IP addresses that do not overlap with other subnets in the VCN. You can designate a subnet to exist either in a single availability domainavailability domain or across an entire region (regional subnets are recommended). Subnets act as a unit of configuration within the VCN: All VNICs in a given subnet use the same route table, security lists, and DHCP options (see the definitions that follow). You can designate a subnet as either public or private when you create it. Private means VNICs in the subnet can't have public IP addresses. Public means VNICs in the subnet can have public IP addresses at your discretion. See Access to the Internet.

  Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Network/Concepts/overview.htm

• Question 48:

  Which Oracle Cloud Infrastructure (OCI) database solution will be most economical for a customer looking to have the elasticity of the cloud with minimal administration and maintenance effort for their DBA team?

  A. OCI Bare Metal DB Systems

  B. OCI Virtual Machine DB Systems

  C. OCI Exadata DB Systems.

  D. OCI Autonomous Database

  Correct Answer: C

  Exadata DB systems allow you to leverage the power of Exadata within the Oracle Cloud Infrastructure. An Exadata DB system consists of a base system, quarter rack, half rack, or full rack of compute nodes and storage servers, tied together by a high-speed, low-latency InfiniBand network and intelligent Exadata software. You can configure automatic backups, optimize for different workloads, and scale up the system to meet increased demands. Oracle now offers the Zero Downtime Migration service, a quick and easy way to move on-premises Oracle Databases and Oracle Cloud Infrastructure Classic databases to Oracle Cloud Infrastructure. You can migrate databases to the following types of Oracle Cloud Infrastructure systems: Exadata, Exadata Cloud@Customer, bare metal, and virtual machine. Zero Downtime Migration leverages Oracle Active Data Guard to create a standby instance of your database in an Oracle Cloud Infrastructure system. You switch over only when you are ready, and your source database remains available as a standby. Use the Zero Downtime Migration service to migrate databases individually or at the fleet level. See Move to Oracle Cloud Using Zero Downtime Migration for more information. Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Database/Concepts/exaoverview.htm

• Question 49:

  What is a key benefit of Oracle Cloud Infrastructure (OCI) Virtual Machine DB Systems?

  A. Support for RAC DB systems

  B. No need to create database Indices

  C. Automated backups to OCI Block Volume

  D. Automated disaster recovery

  Correct Answer: A

  There are two types of DB systems on virtual machines: A 1-node virtual machine DB system consists of one virtual machine. A 2-node virtual machine DB system consists of two virtual machines. (RAC) A virtual machine DB system database uses Oracle Cloud Infrastructure block storage instead of local storage. You specify a storage size when you launch the DB system, and you can scale up the storage as needed at any time. For 1-node virtual machine DB systems, Oracle Cloud Infrastructure provides have a "fast provisioning" option that allows you to create your DB system using Logical Volume Manager as your storage management software. Oracle Cloud Infrastructure offers single-node DB systems on either bare metal or virtual machines, and 2-node RAC DB systems on virtual machines. If you need to provision a DB system for development or testing purposes, then a special fast provisioning single-node virtual machine system is available. You can manage these systems by using the Console, the API, the Oracle Cloud Infrastructure CLI, the Database CLI (DBCLI), Enterprise Manager, Enterprise Manager Express, or SQL Developer.

  

  Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Database/Concepts/overview.htm

• Question 50:

  Which is NOT considered a security resource within Oracle Cloud Infrastructure?

  A. Network Security Group

  B. Web Application Firewall

  C. File Storage Service

  D. Security Lists

  Correct Answer: C

  Oracle Cloud Infrastructure File Storage service provides a durable, scalable, secure, enterprise-grade network file system. You can connect to a File Storage service file system from any bare metal, virtual machine, or container instance in your Virtual Cloud Network (VCN). You can control the access of the file system from FSS by applying some security rules and others but the services it self not related to security but it related to shared storage Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/File/Concepts/filestorageoverview.htm