Oracle Oracle Certifications 1Z0-997-20 Questions & Answers

• Question 111:

  A retailer bank is currently hosting their mission critical customer application on-premises. The application has a standard 3 tier architecture -4 application servers process the incoming traffic and store application data in an Oracle Exadata Database Server. The bank has recently has service disruption to other inter applications to they are looking to avoid this issue for their mission critical Customer Application.

  Which Oracle Cloud Infrastructure services should you recommend as part of the DR solution?

  A. OCI DNS Service' Public Load Balancer, Oracle Database Cloud Backup Service, Object Storage Service, Oracle Bare Metal Cloud Service, Oracle Bare Metal Cloud Service with GoldenGate, OCI Container Engines for Kubernetes, Oracle IPSec VPN

  B. OCI Traffic Management, Private Load Balancer, Compute instances distributed across multiple Availability Domains and/or Fault Domains, Exadata Cloud Service with Data Guard, Oracle FastConnect, Object Storage, Database Cloud backup module

  C. OCI Traffic Management, Public toad Balancer, Compute Instances distributed across multiple Availability Domains and/or Vault domains. Exadata Cloud Service with Data Guard, Oracle FastConnect, Object Storage, Database cloud backup module

  D. OCI DNS Service, Load Balancer as a service using Public Load Balancer distributing traffic Compute Instance across multiple regions, Oracle RAC Database using Virtual Machines, Remote Peering connecting two VCNs in different regions. Exadata Cloud Service with GoldenGate FastConnect, Object Storage, Database Cloud backup module.

  Correct Answer: C

  OCI Traffic Management Steering Policies can account for health of answers to provide failover capabilities, provide the ability to load balance traffic across multiple resources, and account for the location where the query was initiated to provide a simple, flexible and powerful mechanism to efficiently steer DNS traffic. Public Load Balancer Accepts traffic from the internet using a public IP address that serves as the entry point for incoming traffic. Load balancing service creates a primary load balancer and a standby load balancer, each in a different availability domain

• Question 112:

  You are creating an Oracle Cloud Infrastructure Dynamic Group. To determine the members of this group you are defining a set of matching rules.

  Which of the following are the supported variables to define conditions in the matching rules? (Choose Two)

  A. instance.compartment.id -the OCID of the compartment where the instance resides.

  B. instance.tenancy.id -the OCID of the tenancy where the instance resides.

  C. tag...value -the tag namespace and tag key.

  D. iam.policy.id - the OCID of the IAM policy to apply to the group.

  Correct Answer: AC

• Question 113:

  A customer has a Virtual Machine instance running in their Oracle Cloud Infrastructure tenancy. They realized that they wrongly picked a smaller shape for their compute instance. They are reaching out to you to help them fix the issue.

  Which of the below options is best recommended to suggest to the customer?

  A. OCI doesn't allow such an operation.

  B. Change the shape of instance without reboot, but stop all the applications running on instance beforehand to prevent data corruption.

  C. Delete the running instance and spin up a new instance with the desired shape.

  D. Change the shape of the virtual machine instance using the Change Shape feature available in the console.

  Correct Answer: D

• Question 114:

  A digital marketing company is planning to host a website on Oracle Cloud Infrastructure (OCI) and leverage OCI Container Engine for Kubernetes (OKE). These web servers will make API calls to access OCI Object Storage to store all images uploaded by users.

  For security purposes, you must ensure that the credentials used by the web server to allow access to OCI Object Storage are not stored in the compute instance.

  What solution results in an implementation with the least-effort for this scenario?

  A. Configure the credentials to use Transparent Data Encryption (TDE) to automatically allow the web server to make API calls to the OCI Object Storage.

  B. Configure the credentials using OCI Registry (OCIR) to automatically connect with OKE allowing the web server to make API calls to the OCI Object Storage.

  C. Configure the credentials using OCI Vault to allow an instance to make API calls and grant access to OCI Object Storage.

  D. Configure the credentials using Instance Principals to allow the web server to make API calls to the OCI Object Storage.

  Correct Answer: D

• Question 115:

  To serve web traffic for a popular product, your cloud engineer has provisioned four BM.Standard2.52 instances, event spread across two availability domains in the us-asburn- 1 region: LoadBalancer is used to deliver the traffic across instances.

  After several months, the product grows even more popular and you need additional compute capacity. As a result, an engineer provisioned two additional VM.Standard2.8 instances.

  You register the two VM. Standard2. 8 Instances with your load Balancer Backend sot and quickly find that the VM Standard2.8 Instances running at 100% of CPU utilization but the BM.Standard2 .52 instances have significant CPU capacity that's unused.

  Which option is the most cost effective and uses instances capacity most effectively?

  A. Configure your Load Balance, with weighted round robin policy to distribute traffic to the compute instances, with more weight assigned to bare metal instances.

  B. Configure Autoscaling instance pool with LoadBalancer to add up to 3 more BM.Standard2.52 Instances when triggered. Shut off VM.Standard2.8 instances.

  C. Route traffic to BM.Standard2.52 and VM Standard2.8 instances directly using DNS and Health Checks. Shut off the load Balances.

  D. Configure LoadBalancer with two VM Standard2.8 instances and use Autoscalling Instant pool to add up to two additional VM instances. Shut off BM.Standard2.52 instances.

  Correct Answer: A

  Customer have 4 BM.Standard2.52 and After several months he need additional compute capacity customer find The VM Standard2.8 Instances running at 100% of CPU utilization but the BM.Standard2 .52 instances have significant CPU capacity that unused. so the customer need to check the Load balance policy to make sure the 4 BM and VM is utilize correctly

• Question 116:

  You have to migrate your application to Oracle Cloud Infrastructure (OCI). The database is constantly being updated and needs to be online without interruptions. How can you transition the database to OCI without interrupting its use?

  A. It is impossible to migrate without interruption.

  B. Use an on-premises database with two-way synchronization to a cloud-based database and allow clients to connect to either databases.

  C. Use an on-premises database with one-way synchronization to a cloud-based database and allow clients to connect only to the cloud database.

  D. Use an on-premises database with one-way synchronization to a cloud-based database and allow clients to connect only to the on-premises database until it is synchronized.

  Correct Answer: D

• Question 117:

  You are tasked with building a highly available, fault tolerant web application for your current employer. The security team is concerned about an increase in malicious web- based attacks across the internet and asked what you can do to add a higher level of security to the website.

  How should you architect the solution on Oracle Cloud Infrastructure (OCI) to meet all requirements defined by your organization? (Choose the best answer.)

  A. Deploy at least 3 web application servers, each in a different fault domain, using a regional private subnet. Place a public load balancer in a regional public subnet and create a backend set for all of the web application servers. Deploy a Web Application Firewall (WAF) and configure the load balancer public IP address as the origin.

  B. Deploy at least 3 web application servers, each in a different fault domain, using a regional private subnet. Place a public load balancer in a regional public subnet and create a backend set for all of the web application servers. Create a Geolocation steering policy in Traffic Management and add an answer pool that directs to the public IP address of the load balancer. Configure a global catch-all rule to use this answer pool.

  C. Deploy at least 3 web application servers, each in a different fault domain, using a regional public subnet. Ensure that each web application server is assigned a public IP address. Deploy a Web Application Firewall (WAF) and configure one Origin for each public IP address.

  D. Deploy at least 3 web application servers, each in a different fault domain, using a regional public subnet. Use the OCI Traffic Management service to create a load balancing policy that will resolve DNS evenly between all web servers.

  Correct Answer: A

• Question 118:

  Your customer has gone through a recent reorganization. As part of this change, they are organizing their Oracle Cloud Infrastructure (OCI) compartment structure to align with the company's new organizational structure. (Refer to the exhibit)

  

  They have made the following change:

  Compartment A is moved, and its new parent compartment is compartment Dev.

  Policy defined in compartment A: Allow group G1 to manage instance-family in compartment A

  Policy defined in root compartment: Allow group admins to manage instance-family in compartment Ops: Test: A

  After the compartment move, which action will provide users of group G1 and admins with similar privileges as before the move?

  A. Define the following policy in compartment Dev: Allow group G1 to manage instance-family in compartment A

  B. Define the following policies in compartment Dev: Allow group G1 to manage instance-family in compartment A Allow group admins to manage instance-family in compartment Ops: Dev: A

  C. Define the following policy in compartment: Dev: Allow group admins to manage instance-family in compartment Ops: Dev: A

  D. Mo change in any policy statement is required as all the policies associated with a compartment being moved is automatically updated

  Correct Answer: A

• Question 119:

  You are working as a security consultant with a global insurance organization which is using Microsoft Azure Active Directory (AD) as identity provided to manager user login/passwords. When a user logs in to Oracle Cloud infrastructure (OCI) console, it should get authenticated by Azure AD.

  Which set of steps are required to configure at OCI side in order to get it enabled

  A. Setup Azure AD as an Enterprise Application, map Azure AD users and groups and policies to OCI groups and users

  B. Setup Azure AD as an Identity Provider, Import users and groups from Azure AD to OCI, set up IAM policies to govern access to Azure AD groups

  C. Setup Azure AD as an Enterprise Application, configure OCI for single sign-on, map Azure AD groups to OCI groups, set up the IAM policies to govern access to Azure AD groups

  D. Setup Azure AD as an Identity Provider, map Azure AD groups to OCI groups, set up the IAM policies to govern access to Azure AD groups

  Correct Answer: D

  Federating with Microsoft Azure Active Directory

  To federate with Azure AD, you set up Oracle Cloud Infrastructure as a basic SAML single sign-on application in Azure AD. To set up this application, you perform some steps in the Oracle Cloud Infrastructure Console and some steps in

  Azure AD. Following is the general process an administrator goes through to set up the federation. Details for each step are given in the next section. In Oracle Cloud Infrastructure, download the federation metadata document. In Azure AD,

  set up Oracle Cloud Infrastructure Console as an enterprise application. In Azure AD, configure the Oracle Cloud Infrastructure enterprise application for single sign-on.

  In Azure AD, set up the user attributes and claims. In Azure AD, download the Azure AD SAML metadata document. In Azure AD, assign user groups to the application. In Oracle Cloud Infrastructure, set up Azure AD as an identity provider.

  In Oracle Cloud Infrastructure, map your Azure AD groups to Oracle Cloud Infrastructure groups.

  In Oracle Cloud Infrastructure, set up the IAM policies to govern access for your Azure AD groups.

  Share the Oracle Cloud Infrastructure sign-in URL with your user

• Question 120:

  An online Stock trading application is deployed to multiple Availability Domains in the us phoenix-1 region. Considering the high volume of transactions that the trading application handles, the company has hired you to ensure that the data stored by the application available, and disaster resilient. In the event of failure, the Recovery lime Objective (UK)) must be less than 2 hours to meet regulator requirements.

  Which Disaster Recovery strategy should be used to achieve the RTO requirement In the event of system failure?

  A. Configure hourly block volumes backups through the Storage Gateway service.

  B. Configure hourly block volumes backups using the Oracle Cloud Infrastructure (OCI) Command Line Interface (CLI)

  C. Store hourly block volumes backup to NVMe device under a compute instance and generate a custom Image every 5 minutes.

  D. Configure your application to use synchronous master slave data replication between Availability Domains.

  Correct Answer: B

  You can use the CLI, REST APIs, or the SDKs to automate, script, and manage volume backups and their lifecycle. Planning Your Backup The primary use of backups is to support business continuity, disaster recovery, and long- term archiving requirements. When determining a backup schedule, your backup plan and goals should consider the following: Frequency: How often you want to back up your data. Recovery time: How long you can wait for a backup to be restored and accessible to the applications that use it. The time for a backup to complete varies on several factors, but it will generally take a few minutes or longer, depending on the size of the data being backed up and the amount of data that has changed since your last backup. Number of stored backups: How many backups you need to keep available and the deletion schedule for those you no longer need. You can only create one backup at a time, so if a backup is underway, it will need to complete before you can create another one. For details about the number of backups you can store