Oracle Oracle Certifications 1Z0-1115-23 Questions & Answers

• Question 31:

  Which database system is NOT available in Oracle Database Service for Azure?

  A. Autonomous Database on shared Exadata infrastructure

  B. Base Database using Oracle Enterprise Edition or Oracle Standard Edition 2 databases

  C. Oracle Exadata Database

  D. Autonomous Database on dedicated Exadata infrastructure

  Correct Answer: D

  Oracle Database Service for Azure offers the following products:

  Oracle Exadata Database: You can provision flexible Exadata systems that allow you to add database compute servers and storage servers to your system at any time after provision-ing.

  Autonomous Database on shared Exadata infrastructure: Autonomous Database pro-vides an easy-to-use, fully autonomous database that scales elastically, delivers fast query performance, and requires no database administration. Base

  Database: Using OracleDB for Azure, you can deploy Oracle Enterprise Edition or Oracle Standard Edition 2 databases on virtual machine DB systems. You can deploy single-node systems or 2-node RAC systems.

  MySQL Database with HeatWave: MySQL Database Service is a fully managed Oracle Cloud native service available through OracleDB for Azure. It is developed, managed, and supported by the MySQL team in Oracle. Optionally, you can

  add a HeatWave cluster to a MySQL DB system. HeatWave is a distributed, scalable, shared-nothing, in-memory, hybrid columnar, query processing engine designed for extreme performance. Hence, "Autonomous Database on dedicated

  Exadata infrastructure" is NOT available and hence the CORRECT ANSWER.

• Question 32:

  To achieve high availability in a 2-node RAC DB System in Oracle Cloud Infrastructure, what would you use to distribute your nodes to provide database instance fault isolation?

  A. Availability Domains

  B. Remote region

  C. Fault Domains

  D. Local region

  Correct Answer: C

  A fault domain is a grouping of hardware and infrastructure within an availability domain. Fault domains provide anti-affinity: they let you distribute your instances so that the instances are not on the same physical hardware within a single availability domain. To control the placement of your compute instances, bare metal DB system instances, or virtual machine DB system instances, you can optionally specify the fault domain for a new instance or instance pool at launch time.

• Question 33:

  What is the primary purpose of the MySQL Database Service HeatWave option in Oracle Cloud Infrastructure (OCI)?

  A. To ensure high availability and fault tolerance

  B. To enable seamless database migration from on-premises to OCI

  C. To offer a serverless MySQL deployment

  D. To provide a distributed in-memory query accelerator

  Correct Answer: D

  HeatWave is an in-memory query accelerator developed for Oracle MySQL Database Service. It's a massively parallel, hybrid, columnar, query-processing engine with state-of- art algorithms for distributed query processing which provide very high performance for queries.

• Question 34:

  What is the purpose of identity federation in the context of OracleDB for Azure?

  A. To link Azure subscriptions to your OCI tenancy

  B. To allow users to log in to the OCI Console using the same Azure credentials

  C. To enable bidirectional communication between applications in the Azure tenancy and the database resources in OracleDB for Azure

  D. To provide a way for customers to manage database resources in OracleDB for Azure without using the OCI Console

  Correct Answer: B

  Azure users log into OracleDB for Azure using their Azure credentials, and OracleDB for Azure streams much of the day-to-day operational data from the OracleDB for Azure managed OCI data-bases to Azure Application Insights and Azure Log Analytics. Because of this, Azure developers spend most of their time in Azure. In some instances, an OracleDB for Azure user must log into the OCI Console to perform specific tasks that aren't enabled or available in OracleDB for Azure today. To make this process easier, Az-ure customers setup identity federation between the Azure and OCI tenancies. With this in place, authorized users use a single set of credentials, their Azure credentials, to log into Azure and OCI

• Question 35:

  Which is a database service that CANNOT be provisioned in the Oracle Public Cloud?

  A. Autonomous Database on Dedicated Infrastructure

  B. Exadata Database Service on Shared Infrastructure

  C. Autonomous Database on Shared Infrastructure

  D. Exadata Database Service on Dedicated Infrastructure

  Correct Answer: B

• Question 36:

  

  What Azure admin roles are required for an Azure user to use the fully-automated onboarding op-tion for OracleDB for Azure?

  A. Network Contributor, Security Reader, User Access Administrator, or Virtual Machine Contributor

  B. Application Administrator, Cloud Application Administrator, Privileged Role Adminis- trator, or Global Administrator

  C. Key Vault Administrator, Log Analytics Contributor, or Security Manager

  D. Resource Group Contributor, Subscription Contributor, Backup Contributor, or Stor-age Account Contributor

  Correct Answer: B

  The automated onboarding process requires that the Azure user onboarding to OracleDB for Az-ure have at least one of the following admin roles:

  Application Administrator, Cloud Application Administrator, Privileged Role Administrator, or Global Administrator.

  Reference: Fully-Automated Onboarding (oracle.com)

• Question 37:

  What is the primary purpose of an Oracle Cloud Infrastructure Identity Domain?

  A. Create isolated networks for resources within the tenancy for enhanced security.

  B. Define the roles and privileges assigned to a user or group of users within the tenancy.

  C. Provide a centralized location for storing and managing user credentials and access.

  D. Establish a secure, private connection between the tenancy and other Oracle Cloud ser- vices.

  Correct Answer: C

  Oracle Cloud Infrastructure (OCI) Identity Domain is the access control plane for Oracle Cloud. An identity domain is a container for managing users and roles, federating and provisioning of users, secure application integration through Oracle Single Sign-On (SSO) configuration, and SAML and OAuth based Identity Provider administration.

• Question 38:

  Which is true regarding fully automated and guided onboarding for the OracleDB for Azure ser-vice?

  A. Fully automated onboarding requires more permissions to be granted than guided onboarding.

  B. An Azure user who completes guided onboarding cannot log in to the OracleDB for Azure portal.

  C. Guided onboarding is simpler and faster than fully automated onboarding.

  D. An Azure user who completes fully automated onboarding can log in to the OracleDB for Azure portal, but cannot deploy and provision databases.

  Correct Answer: A

  The fully-automated onboarding option for OracleDB for Azure is faster and more convenient than the guided account linking. Hence the option "Guided onboarding is simpler and faster than fully automated onboarding" is NOT TRUE. When the automated configuration finishes, OracleDB for Azure is fully operational. The Azure user that completed onboarding can login and use the OracleDB for Azure portal to deploy and provision databases for use in their Azure environment. Hence the option "An Azure user who completes fully automated onboarding can log in to the OracleDB for Azure portal, but cannot de-ploy and provision databases" is NOT TRUE. If you used the guided onboarding process, the user who completed onboarding can login to the OracleDB for Azure portal, but not really do anything there. Before users can do anything produc-tive using OracleDB for Azure, you must first complete configuration steps for each user or user group. Hence the option "An Azure user who completes guided onboarding cannot log in to the Or-acleDB for Azure portal" is NOT TRUE. Now, let's look at the only option left which is "Fully automated onboarding requires more permis-sions to be granted than guided onboarding". This option is TRUE as the automated onboarding process requires that the Azure user onboarding to OracleDB for Azure have at least one of the fol-lowing admin roles: Application Administrator, Cloud Application Administrator, Privileged Role Administrator, or Global Administrator. Guided onboarding is provided for customers who do not want to grant OracleDB for Azure all the Azure permissions required for fully automated onboard-ing. Hence this is the correct answer.

• Question 39:

  What should you do to prepare your Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN) for potential security risks when connected to a Microsoft Azure VNet?

  A. Allow all traffic from the Azure VNet without restrictions.

  B. Limit all inbound and outbound traffic from the Azure VNet to expected and well-defined traffic.

  C. Remove all OCI security rules.

  D. Disable the connection between Azure VNet and OCI VCN.

  Correct Answer: B

  Controlling Traffic Flow Over the Connection Even if a connection has been established between your VCN and VNet, you can control the packet flow over the connection with route tables in your VCN. For example, you can restrict traf-fic to only specific subnets in the VNet. Controlling the Specific Types of Traffic Allowed It's important that you ensure that all outbound and inbound traffic with the VNet is intended or expected and well defined. Implement Azure network security group and Oracle security rules that explicitly state the types of traffic one cloud can send to the other and accept from the other.

• Question 40:

  An enterprise has a workload running in a VNet in Microsoft Azure and a database running in a VCN in Oracle Cloud Infrastructure. The enterprise wants to set up a private, secure, and isolated network connection between the two clouds to enable traffic flow between the workload and the database. Which option can be used to achieve this requirement?

  A. Use public internet to establish connectivity between the Microsoft Azure VNet and the OCI VCN.

  B. Use Azure VPN and Oracle FastConnect to establish a private and secure tunnel be- tween the Azure VNet and the OCI VCN.

  C. Use Azure Private Link to create a private connection between the workload and the database.

  D. Use Azure ExpressRoute and Oracle FastConnect to create a private interconnection between the Azure VNet and the OCI VCN.

  Correct Answer: D

  As per the question, the keywords are "The enterprise wants to set up a private, secure, and isolat-ed network connection between the two clouds" Use public internet to establish connectivity between the Microsoft Azure VNet and the OCI VCN - INCORRECT as this option won't provide private, secure and isolated connection. Use Azure VPN and Oracle FastConnect to establish a private and secure tunnel between the Azure VNet and the OCI VCN is INCORRECT as it won't provide a isolated connection. Use Azure Private Link to create a private connection between the workload and the database is INCORRECT as Azure Private Link enables you to access Azure PaaS Services (for example, Azure Storage and SQL Database) and Azure hosted customer- owned/partner services over a pri-vate endpoint in your virtual network. Use Azure ExpressRoute and Oracle FastConnect to create a private interconnection between the Azure VNet and the OCI VCN. is CORRECT. To create an integrated multi- cloud experience, Microsoft and Oracle offer direct interconnection between Azure and Oracle Cloud Infrastructure (OCI) through ExpressRoute and FastConnect. Through the ExpressRoute and FastConnect inter-connection, customers can experience low latency, high throughput, private direct connectivity be-tween the two clouds.