Oracle Oracle Certifications 1Z0-1085-22 Questions & Answers

• Question 61:

  Which is NOT part of the Oracle Cloud Always Free eligible resources that you can provision in your tenancy?

  A. Fast Connect (1 Gbps public peering)

  B. Autonomous Database (up to two database instances)

  C. Block Volume (up to 100 GB total storage)

  D. Load Balancing (one load balancer)

  Correct Answer: A

  For more information on Always Free Resources refer below official documentation page https:// docs.cloud.oracle.com/enus/iaas/Content/FreeTier/resourceref.htm?Highlight=%20Always%20free OCI FastConnect is not offered

  as part of the Free tier:

  

  Reference: https://www.oracle.com/in/cloud/free/

• Question 62:

  Which service level agreement type is NOT offered by Oracle Cloud Infrastructure Compute service?

  A. Data Plane

  B. Performance

  C. Application Plane

  D. Control Plane

  Correct Answer: C

  Oracle offers several different service level agreements as defined in this section (Service Level Agreements).Service level agreements range from least restrictive (data plane) to more restrictive (control plane) to most restrictive (performance). Reference: https://www.oracle.com/assets/paas-iaas-pub-cld-srvs-pillar-4021422.pdf

• Question 63:

  Which statement about Oracle Cloud Infrastructure (OCI) shared security model is true?

  A. You are responsible for managing security controls within the physical OCI network.

  B. You are not responsible for any aspect of security in OCI.

  C. You are responsible for securing all data that you place in OCI D. You are responsible for securing the hypervisor within OCI Compute service.

  Correct Answer: C

  Oracle Cloud Infrastructure offers best-in-class security technology and operational processes to secure its enterprise cloud services. However, for you to securely run your workloads in Oracle Cloud Infrastructure, you must be aware of your security and compliance responsibilities. By design, Oracle provides security of cloud infrastructure and operations (cloud operator access controls, infrastructure security patching, and so on), and you are responsible for securely configuring your cloud resources. Security in the cloud is a shared responsibility between you and Oracle. In a shared, multi-tenant compute environment, Oracle is responsible for the security of the underlying cloud infrastructure (such as data-center facilities, and hardware and software systems) and you are responsible for securing your workloads and configuring your services (such as compute, network, storage, and database) securely. In a fully isolated, single-tenant, bare metal server with no Oracle software on it, your responsibility increases as you bring the entire software stack (operating systems and above) on which you deploy your applications. In this environment, you are responsible for securing your workloads, and configuring your services (compute, network, storage, database) securely, and ensuring that the software components that you run on the bare metal servers are configured, deployed, and managed securely. More specifically, your and Oracle's responsibilities can be divided into the following areas: Identity and Access Management (IAM): As with all Oracle cloud services, you should protect your cloud access credentials and set up individual user accounts. You are responsible for managing and reviewing access for your own employee accounts and for all activities that occur under your tenancy. Oracle is responsible for providing effective IAM services such as identity management, authentication, authorization, and auditing. Workload Security: You are responsible for protecting and securing the operating system and application layers of your compute instances from attacks and compromises. This protection includes patching applications and operating systems, operating system configuration, and protection against malware and network attacks. Oracle is responsible for providing secure images that are hardened and have the latest patches. Also, Oracle makes it simple for you to bring the same third-party security solutions that you use today. Data Classification and Compliance: You are responsible for correctly classifying and labeling your data and meeting any compliance obligations. Also, you are responsible for auditing your solutions to ensure that they meet your compliance obligations. Host Infrastructure Security: You are responsible for securely configuring and managing your compute (virtual hosts, containers), storage (object, local storage, block volumes), and platform (database configuration) services. Oracle has a shared responsibility with you to ensure that the service is optimally configured and secured. This responsibility includes hypervisor security and the configuration of the permissions and network access controls required to ensure that hosts can communicate correctly and that devices are able to attach or mount the correct storage devices. Network Security: You are responsible for securely configuring network elements such as virtual networking, load balancing, DNS, and gateways. Oracle is responsible for providing a secure network infrastructure. Client and Endpoint Protection: Your enterprise uses various hardware and software systems, such as mobile devices and browsers, to access your cloud resources. You are responsible for securing all clients and endpoints that you allow to access Oracle Cloud Infrastructure services. Physical Security: Oracle is responsible for protecting the global infrastructure that runs all of the services offered in Oracle Cloud Infrastructure. This infrastructure consists of the hardware, software, networking, and facilities that run Oracle Cloud Infrastructure services.

  Reference: https://www.oracle.com/a/ocom/docs/oracle-cloud-infrastructure-security-architecture.pdf

• Question 64:

  A new customer has logged into Oracle Cloud Infrastructure (OCI) as an administrator for the first time. The admin would like to deploy Infrastructure into a region other then their home region. What is the first Stop they must take in order to accomplish this task?

  A. Use API endpoints to create resources in the desired region.

  B. Navigate to the desired region and begin creating resources.

  C. Subscribe to the desired region.

  D. File a service request for access to each additional region.

  Correct Answer: C

  When you sign up for Oracle Cloud Infrastructure, Oracle creates a tenancy for you in one region. This is your home region. Your home region is where your IAM resources are defined. When you subscribe to another region, your IAM resources are available in the new region, however, the master definitions reside in your home region and can only be changed there. When you subscribe your tenancy to a new region, all the policies from your home region are enforced in the new region. If you want to limit access for groups of users to specific regions, you can write policies to grant access to specific regions only. Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Identity/Tasks/managingregions.htm

  To create an instance in another region, perform these preliminary steps:

  1.

  Extend your subscription to another region.

  2.

  Federate Oracle Identity Cloud Service (IDCS) from the new region with Oracle Cloud Infrastructure

  (OCI).

  Also, when you purchase these services or sign up for a free promotion, you typically choose the data

  region closest to your location to access them. This becomes your primary data region. However, if

  required, you can extend your subscription to other geographical regions (within the same cloud account)

  and use the services there.

  Reference:

  https://docs.oracle.com/en/cloud/paas/content-cloud/administer/create-instance-oracle-cloud- console.html

• Question 65:

  Which describes a key benefit of using Oracle Cloud Infrastructure (OCI)?

  A. With OCI, you can only run Java based workloads on bare metal.

  B. With OCI, you can run only cloud-native workloads.

  C. Only bare metal workloads are supported on OCI.

  D. OCI offers consistent performance with a predictable pricing model.

  Correct Answer: D

  https://www.oracle.com/in/cloud/pricing.html

  -

  OCI offers consistent performance with a predictable pricing model - is the best suited answer.

  -

  Only bare metal workloads are supported in OCI - False, since you can work with VMs etc too

  -

  With OCI, you can run cloud native workloads - False, since you can work with on-premise by connecting it to OCI too.

  -

  With OCI, you can only run Java based workloads on bare metal - False since Java is not the only programming language supported by OCI.

• Question 66:

  According to Shared security model, which two are a customer's responsibilities in Oracle Cloud Infrastructure (OCI)?

  A. Physical security of OCI data center facilities

  B. Virtual Machine hypervisor

  C. Local NVMe data persistence

  D. Customer data

  E. Object Storage data durability

  Correct Answer: DE

  Customer and Oracle's responsibilities can be divided into the following areas: Physical Security: Oracle is responsible for protecting the global infrastructure that runs all of the services offered in Oracle Cloud Infrastructure. This infrastructure consists of the hardware, software, networking, and facilities that run Oracle Cloud Infrastructure services. Identity and Access Management (IAM): As with all Oracle cloud services, you should protect your cloud access credentials and set up individual user accounts. You are responsible for managing and reviewing access for your own employee accounts and for all activities that occur under your tenancy. Oracle is responsible for providing effective IAM services such as identity management, authentication, authorization, and auditing. Workload Security: You are responsible for protecting and securing the operating system and application layers of your compute instances from attacks and compromises. This protection includes patching applications and operating systems, operating system configuration, and protection against malware and network attacks. Oracle is responsible for providing secure images that are hardened and have the latest patches. Also, Oracle makes it simple for you to bring the same third-party security solutions that you use today. Data Classification and Compliance: You are responsible for correctly classifying and labeling your data and meeting any compliance obligations. Also, you are responsible for auditing your solutions to ensure that they meet your compliance obligations. Host Infrastructure Security: You are responsible for securely configuring and managing your compute (virtual hosts, containers), storage (object, local storage, block volumes), and platform (database configuration) services. Oracle has a shared responsibility with you to ensure that the service is optimally configured and secured. This responsibility includes hypervisor security and the configuration of the permissions and network access controls required to ensure that hosts can communicate correctly and that devices are able to attach or mount the correct storage devices. Network Security: You are responsible for securely configuring network elements such as virtual networking, load balancing, DNS, and gateways. Oracle is responsible for providing a secure network infrastructure. Client and Endpoint Protection: Your enterprise uses various hardware and software systems, such as mobile devices and browsers, to access your cloud resources. You are responsible for securing all clients and endpoints that you allow to access Oracle Cloud Infrastructure services.

  Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Security/Concepts/security_overview.htm

• Question 67:

  Oracle cloud Infrastructure is compliant with which three industry standards?

  A. SOC 1 Type 2 and SOC 2 Type 2 attestations

  B. NERC Critical Infrastructure Protection Standards

  C. Health Insurance Portability and Accountability Act (HIPAA)

  D. ISO 27001:2013 certification

  E. Health Care Compliance Association (HCCA)

  Correct Answer: ACD

  Here is the official list of all industry standards that OCI complies with : https://www.oracle.com/in/cloud/ cloud-infrastructure-compliance/

• Question 68:

  What does Oracle's Payment Card Industry Data Security Standard (PCI DSS) attestation of compliance provide to customers?

  A. Customers can use these services for workloads that provides validation of card holder transaction but only as 3rd party

  B. Customers can use these services for workloads that process, or transmit cardholder data but not store it.

  C. Customers can use these services for workloads to process applications for credit card approval securely.

  D. Customers can use these services for workloads that store, process, or transmit cardholder data.

  Correct Answer: D

  The Payment Card Industry Data Security Standard (PCI DSS) is a global set of security standard designed to encourage and enhance cardholder data security and promote the adoption of consistent data security measures around the technical and operational components related to cardholder data. Oracle has successfully completed a Payment Card Industry Data Security Standard (PCI DSS) audit and received an Attestation of Compliance (AoC) covering several Oracle Cloud Infrastructure services and the Oracle RightNow Service Cloud Service. As a PCI Level 1 Service Provider, customers can now use these services for workloads that store, process or transmit cardholder data.

  Reference: https://www.oracle.com/cloud/cloud-infrastructure-compliance/

• Question 69:

  Which is NOT available to you whenever Oracle Cloud Infrastructure creates or resolves an incident?

  A. Twitter notifications

  B. Text Message notifications

  C. Email notifications

  D. Webhook notifications

  Correct Answer: A

  The Oracle Cloud Infrastructure Notifications service broadcasts messages to distributed components through a publish-subscribe pattern, delivering secure, highly reliable, low latency and durable messages for applications hosted on Oracle Cloud Infrastructure and externally. Use Notifications to get notified when event rules are triggered or alarms are breached, or to directly publish a message. Messages sent out as email by the Oracle Cloud Infrastructure Notifications service are processed and delivered through Oracle resources

  Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Notification/Concepts/notificationoverview.htm

• Question 70:

  Which feature allows you to logically group and isolate your Oracle Cloud Infrastructure resources?

  A. Tenancy

  B. Identity and Access Management Groups

  C. Compartments

  D. Availability Domain

  Correct Answer: C

  COMPARTMENT A collection of related resources. Compartments are a fundamental component of

  Oracle Cloud Infrastructure for organizing and isolating your cloud resources. You use them to clearly

  separate resources for the purposes of measuring usage and billing, access (through the use of policies),

  and isolation (separating the resources for one project or business unit from another).

  A common approach is to create a compartment for each major part of your organization.

  User Group can use some resources in the compartment like network resources also they can't create it

  depend on the policy that assigned Remember, a compartment is a logical grouping, not a physical one

  Reference:

  https://docs.cloud.oracle.com/en-us/iaas/tools/oci-cli/2.9.8/oci_cli_docs/cmdref/iam/compartment.html