Oracle Oracle Certifications 1Z0-997-20 Questions & Answers

• Question 101:

  A2Z corporation is into e-commerce business and is the choice of millions for the best offers it launches. It has a rich set of intelligent applications that runs 24x7 and are very critical to their business.

  Continuous infrastructure management and maintenance, rise in customer base and workloads, have made them to think of migrating all workloads to cloud. They have selected Oracle Cloud Infrastructure for migrating both their application

  and database workload.

  You, as an oracle pre-sales consultant has been asked to provide complete migration strategy for their source database workloads which includes oracle and MSSQL. They are particularly concerned about their oracle databases which

  cannot afford any downtime. They would be establishing fast connect from their data center to oracle data center to avoid any network impact. Their oracle database is around 90TB and MSSQL is around 10TB.

  How would you propose the safe migration of customer database while meeting their availability requirement?

  A. Propose the use of zero-downtime migration tool for oracle database and use combination of SQL Developer and Oracle SQL Loader for MSSQL migration

  B. Propose the use of Oracle datapump for oracle databases and SQL Developer for MSSQL database

  C. Propose the use of zero-downtime migration tool for oracle database and use combination of SQL Developer and Oracle GoldenGate for MSSQL migration

  D. Propose the use of Oracle GoldenGate to perform zero downtime migration for both MSSQL and Oracle source databases

  Correct Answer: C

• Question 102:

  You have an application running in Microsoft Azure and want to use Oracle Autonomous Data warehouse (ADW) instance for running business analytics.

  How can you build a secure solution for such a use-case?

  A. Connect the Oracle ADW in your VCN to the Microsoft Azure VNet over the internet.

  B. Create a software VPN connection between Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN) and Microsoft Azure Virtual Network (VNet) and connect the application with Oracle ADW instance.

  C. Setup an interconnect between OCI and Microsoft Azure using FastConnect and ExpressRoute. Use a Service Gateway in OCI Virtual Cloud Network to provide connectivity to the Oracle ADW instance for the application in Microsoft Azure VNet.

  D. Create a software Remote Peering Connection between Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN) and Microsoft Azure Virtual Network (VNet) and connect the application with Oracle ADW instance.

  Correct Answer: C

• Question 103:

  You are tasked with migrating an online shopping website to Oracle Cloud Infrastructure (OCI) and decide to use a Load Balancer. You have configured the backend set with the round robin policy. During the testing phase, you noticed that users are losing items from their shopping carts when they navigate to different pages. How should you implement a solution to this problem?

  A. Set up a Traffic Management Steering Policy to redirect traffic to a different backend set that is deployed exclusively for the purpose of holding all Items placed in the shopping cart.

  B. Configure a set of path route rules that will route to different backend sets based on the URI requested by the customer's browser.

  C. Replace the round robin policy with least connections policy at the backend set.

  D. Set up session persistence at the Load Balancer backend set.

  Correct Answer: C

• Question 104:

  A fast growing E-commerce company has deployed their online shopping application on Oracle Cloud Infrastructure. The application was deployed on compute instances with Autoscaling configuration for application servers fronted by a load balancer and OCI Autonomous Transaction Processing (ATP) in the backend. In order to promote their e- commerce platform 50% discount was announced on all the products for a limited period. During the day 1 of promotional period it was observed that the application is running slow and company's hotline is flooded with complaints.

  What could be two possible reasons for this situation?

  A. The health check on some of the backend servers has failed and the load balancer has taken those servers temporarily out of rotation.

  B. As part of Autoscaling, the load balancer shape has dynamically changed to a larger shape to handle more incoming traffic and the system was slow for a short time during this change.

  C. The health check on some of the backend servers has failed and the load balancer was rebooting these servers.

  D. Autoscaling has already scaled to the maximum number of instances specified in the configuration and there is no room for scaling further.

  Correct Answer: AD

• Question 105:

  By copying block volume backups to another region at regular intervals, it makes it easier for you to rebuild applications and data in the destination region if a region-wide disaster occurs in the source region.

  Which IAM Policy statement allows the VolumeAdmins group to copy volume backups between regions?

  A. Allow group VolumeAdmins to use volumes in tenancy

  B. Allow group VolumeAdmins to copy volume' backups in tenancy

  C. Allow group VolumeAdmins to manage volume-family In tenancy

  D. Allow group VolumeAdmins to inspect volumes in tenancy

  Correct Answer: C

  The backups feature of the Oracle Cloud Infrastructure Block Volume service lets you make a point-intime snapshot of the data on a block volume.These backups can then be restored to new volumes either immediately after a backup or at a

  later time that you choose.

  You can copy block volume backups between regions using the Console, command line interface (CLI), SDKs, or REST APIs.

  To copy volume backups between regions, you must have permission to read and copy volume backups in the source region, and permission to create volume backups in the destination region.

  to do all things with block storage volumes, volume backups, and volume groups in all compartments with the exception of copying volume backups across regions. Allow group VolumeAdmins to manage volume-family in tenancy The

  aggregate resource type volume-family does not include the VOLUME_BACKUP_COPY permission, so to enable copying volume backups across regions you need to ensure that you include the third statement in that policy, which is:

  Allow group VolumeAdmins to use volume-backups in tenancy where request.permission='VOLUME _BACKUP_COPY'

• Question 106:

  You are designing the network infrastructure for an application consisting of a web server (server-1) and a Domain Name Server (server-2) running in two different subnets inside the same Virtual Cloud Network (VCN) in Oracle Cloud Infrastructure (OCI). You have a requirement where your end users will access server-1 from the internet and server-2 from your customer's on-premises network. The on-premises network is connected to your VCN over a FastConnect virtual circuit.

  How should you design your routing configuration to meet these requirements?

  A. Configure a single routing table with two set of rules: one that has route to internet via an Internet Gateway and another that propagates specific routes for the on-premises network via a Dynamic Routing Gateway. Don't associate this routing table with any of the subnets in the VCN.

  B. Configure a single routing table with two set of rules: one that has route to internet via an Internet Gateway and another that propagate specific routes to the on-premises network via a Dynamic Routing Gateway. Associate the routing table with all the VCN subnets.

  C. Configure two routing tables: first one with a route to internet via an Internet gateway; associate this route table to the subnet containing server-1 .Configure the second route table to propagate specific routes to the on-premises network via a Dynamic Routing Gateway; associate this route table to subnet containing server-2.

  D. Configure two routing tables that have rules to route all traffic via a Dynamic Routing Gateway. Associate the two routing tables with all the VCN subnets.

  Correct Answer: C

• Question 107:

  A company runs a public-facing application that uses a Java-based web service via a RESTful API in their on-premises data center. Use of the API is expected to double with a new product launch. The business wants to migrate their application to Oracle Cloud Infrastructure (OCI) to meet the scale and reliability requirements. In order to achieve this, they will divert only 40% of the traffic to the new Apache Tomcat web servers running on OCI and serve the remaining 60% traffic through their on-premises infrastructure. Once the migration is complete and application works fine, they will divert all traffic to OCI. How can these requirements be met with the LEAST amount of effort?

  A. Use OCI Traffic management service with failover steering policy and distribute the traffic between OCI and on premises infrastructure.

  B. Use OCI Traffic management service with Load Balancing steering policy and distribute the traffic between OCI and on premises infrastructure.

  C. Use an OCI load Balancer and distribute the traffic between OCI and on premises infrastructure.

  D. Use VPN connectivity between on premises Infrastructure and OCI and create routing tables to distribute the traffic between them.

  Correct Answer: B

• Question 108:

  You are building a highly available and fault tolerant web application deployment for your company. Similar application delayed by competitors experienced web site attack including DDoS which resulted in web server failing.

  You have decided to use Oracle Web Application Firewall (WAF) to implement an architecture which will provide protection against such attacks and ensure additional configuration will you need to implement to make sure WAF is protecting my web application 24?.

  Which additional configuration will you need to Implement to make sure WAF Is protecting my web application 24??

  A. Configure auto scaling policy and it to WAF instance.

  B. Configure Control Rules to send traffic to multiple web servers

  C. Configure multiple origin servers

  D. Configure new rules based on now vulnerabilities and mitigations

  Correct Answer: C

  Origin Management

  An origin is an endpoint (typically an IP address) of the application protected by the WAF.

  An origin can be

  an Oracle Cloud Infrastructure load balancer public IP address. A load balancer IP address can be used for

  high availability to an origin. Multiple origins can be defined, but only a single origin can be active for a WAF. You can set HTTP headers for outbound traffic from the WAF to the origin server. These name value pairs are then available to the

  application. Oracle Cloud Infrastructure Web Application Firewall (WAF) is a cloud-based, Payment Card Industry (PCI) compliant, global security service that protects applications from malicious and unwanted internet traffic.

  WAF can protect any internet facing endpoint, providing consistent rule enforcement across a customer's applications. WAF provides you with the ability to create and manage rules for internet threats including Cross-Site Scripting (XSS),

  SQL Injection and other OWASP- defined vulnerabilities. Unwanted bots can be mitigated while tactically allowed desirable bots to enter. Access rules can limit based on geography or the signature of the request.

  Distributed Denial of Service (DDoS)

  A DDoS attack is an often intentional attack that consumes an entity's resources, usually using a large number of distributed sources. DDoS can be categorized into either Layer 7 or Layer 3/4 (L3/4)

  A layer 7 DDoS attack is a DDoS attack that sends HTTP/S traffic to consume resources and hamper a website's ability to delivery content or to harm the owner of the site. The Web Application Firewall (WAF)

  service can protect layer 7 HTTP-based resources from layer 7 DDoS and other web application attack vectors.

• Question 109:

  You are a DevOps engineer working for a high tech company, and are using Terraform to maintain your Oracle Cloud Infrastructure (OCI) resources. You have created a Terraform script that would create the infrastructure for deploying a web service. But want to tune in some settings within the OCI Instances using a shell script.

  How should you write your Terraform script to run the shell script on OCI instance?

  A. Use provisioner "remote-exec" in your code to run the shell script.

  B. Use provisioner "local-exec" in your code to run the shell script.

  C. Use resource "oci_core_instance" to create the instance and run the shell script.

  D. Use provisioner "oci-remote-exec" in your code to run the shell script.

  Correct Answer: A

• Question 110:

  You have decided to migrate your application to Oracle Cloud Infrastructure and use Oracle Functions to deploy your microservices.

  Which monitoring metrics are available to help you calculate your total cost for using Oracle Functions per month? (Choose Two)

  A. Amount of RAM used by your functions.

  B. Length of time a function runs.

  C. Number of times a function is invoked.

  D. Amount of storage used by your functions.

  E. Network bandwidth used by your functions.

  Correct Answer: BC