Oracle Oracle Certifications 1Z0-997-20 Questions & Answers

• Question 141:

  A civil engineering company is running an online portal In which engineers can upload there constructions photos, videos, and other digital files.

  There is a new requirement for you to implement: the online portal must offload the digital content to an Object Storage bucket for a period of 72 hours. After the provided time limit has elapsed, the portal will hold all the digital content locally and wait for the next offload period.

  Which option fulfills this requirement?

  A. Create a pre-authenticated URL for the entire Object Storage bucket to read and list the content with an expiration of 72 hours.

  B. Create a pre authenticated URL lot each object that Is uploaded to the Object Storage bucket with an expiration of 72 hours.

  C. Create a Dynamic Group with matching rule for the portal compute Instance and grant access to the Object Storage bucket for 72 hours.

  D. Create a pre authenticated URL for the entire Object Storage bucket to write content with an expiration of 72 hours.

  Correct Answer: D

  Pre-authenticated requests provide a way to let users access a bucket or an object without having their own credentials, as long as the request creator has permission to access those objects.

  For example, you can create a request that lets operations support user upload backups to a bucket without owning API keys. Or, you can create a request that lets a business partner update shared data in a bucket without owning API keys.

  When creating a pre-authenticated request, you have the following options:

  You can specify the name of a bucket that a pre-authenticated request user has write access to and can upload one or more objects to.

  You can specify the name of an object that a pre-authenticated request user can read from, write to, or read from and write to.

  Scope and Constraints

  Understand the following scope and constraints regarding pre-authenticated requests:

  Users can't list bucket contents.

  You can create an unlimited number of pre-authenticated requests. There is no time limit to the expiration date that you can set. You can't edit a pre-authenticated request. If you want to change user access options in response to changing

  requirements, you must create a new pre-authenticated request. The target and actions for a pre-authenticated request are based on the creator's permissions. The request is not, however, bound to the creator's account login credentials. If

  the creator's login credentials change, a pre-authenticated request is not affected. You cannot delete a bucket that has a pre-authenticated request associated with that bucket or with an object in that bucket.

• Question 142:

  An insurance company is storing critical financial data in the OCI block volume. This volume is currently encrypted using oracle managed keys. Due to regulatory compliance, the customer wants to encrypt the data using the keys that they

  can control and not the keys which are controlled by Oracle.

  What of the following series of tasks are required to encrypt the block volume using customer managed keys?

  A. Create a vault, import your master encryption key into the vault, generate data encryption key, assign data encryption key to the block volume

  B. Create a master encryption key, create a data encryption key, decrypt the block volume using existing oracle managed keys, encrypt the block volume using the data encryption key

  C. Create a vault, create a master encryption key in the vault, assign this master encryption key to the block volume

  D. Create a master encryption key, create a new version of the encryption key, decrypt the block volume using existing oracle managed keys and encrypt using new version of the encryption key

  Correct Answer: C

  Oracle Cloud Infrastructure Vault lets you centrally manage the encryption keys that protect your data and the secret credentials that you use to securely access resources. You can use the Vault service to create and manage the following resources: Vaults Keys Secrets Vaults securely store master encryption keys and secrets that you might otherwise store in configuration files or in code. The Vault service lets you create vaults in your tenancy as containers for encryption keys and secrets. If needed, a virtual private vault provides you with a dedicated partition in a hardware security module (HSM), offering a level of storage isolation for encryption keys that's effectively equivalent to a virtual independent HSM.

• Question 143:

  You are tasked with backing up your data using Oracle Cloud Infrastructure Block Volume service.

  When you are finalizing your block volume backup schedule, which of the following two are valid considerations for your backup plan? (Choose Two)

  A. Number of stored backups: How many backups you need to keep available and the deletion schedule for those you no longer need.

  B. Governance: Tagging of backups so you can capture backup related API calls through the Audit service.

  C. Frequency: How often you want to back up your data.

  D. Location: Determine the Object Store Bucket where the backups will be stored.

  E. Encryption: Whether to use your own key to encrypt your volume backups.

  Correct Answer: AC

• Question 144:

  Which of the two options are true for an autonomous database in dedicated infrastructure deployment? (Choose two.)

  A. You can modify maintenance schedule of the AVM after provisioning, to match your organization maintenance schedules.

  B. The new resource model consists of autonomous exadata infrastructure, autonomous container database and autonomous database.

  C. Unlike autonomous database in shared infrastructure, you can customize the maintenance schedule of the autonomous databases in dedicated infrastructure in OCI public cloud.

  D. The new resource model consists of exadata infrastructure, autonomous Exadata VM cluster, autonomous container database.

  E. Network selection, License model and certificate management are resources configured at AVM level.

  Correct Answer: DE

• Question 145:

  Which of the following is NOT a good use case for the Oracle Cloud Infrastructure (OCI) Streaming service?

  A. Meeting compliance requirements for data to remain unchanged over a long time, so that it can be retrieved for audit purposes.

  B. Messaging with a pull-based communication model and the ability to feed multiple consumers with the same data independently.

  C. Ingesting metric and log data to help make critical operational data more quickly available for indexing, analysis, and visualization.

  D. Providing a unified entry point for cloud components to report their life cycle events for audit, accounting, and related activities.

  Correct Answer: A

• Question 146:

  An organization has its IT infrastructure in a hybrid setup with an on-premises environment and an Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN) in the us-phonix-1 region. The on-premise applications communications with compute instances inside the VPN over a hardware VPN connection. They are looking to implement an Intrusion detected and Prevention (IDS/IPS) system for their OCI environment. This platform should have the ability to scale to thousands of compute of instances running inside the VCN. How should they architect their solution on OCI to achieve this goal?

  A. Set up an OCI Private Load Balance! and configure IDS/IPS related health checks at TCP and/or HTTP level to inspect traffic

  B. Configure each host with an agent that collects all network traffic and sends that traffic to the IDS/IPS platform to inspection

  C. There Is no need to implement an IPS/IDS system as traffic coming over IPSec VPN tunnels Is already encrypt

  D. Configure autoscaling on a compute Instance pool and set vNIC to promiscuous mode to called traffic across the vcn and send it IDS/IPS platform for inspection.

  Correct Answer: B

  in Transit routing through a private IP in the VCN you set up an instance in the VCN to act as a firewall or intrusion detection system to filter or inspect the traffic between the on- premises network and Oracle Services Network.

  The Networking service lets you implement network security functions such as intrusion detection,

  application-level firewalls In fact, the IDS model can be host-based IDS (HIDS) or network- based IDS (NIDS). HIDS is installed at a host to periodically monitor specific system logs for patterns of intrusions. In contrast, an NIDS sniffs the

  traffic to analyze suspicious behaviors. A signature-based NIDS (SNIDS) examines the traffic for patterns of known intrusions. SNIDS can quickly and reliably diagnose the attacking techniques and security holes without generating an overwhelming number of false alarms because SNIDS relies on known signatures.

  However, anomaly-based NIDS (ANIDS) detects unusual behaviors based on statistical methods. ANIDS

  could detect symptoms of attacks without specific knowledge of details. However, if the training data of the

  normal traffic are inadequate, ANIDS may generate a large number of false alarms.

• Question 147:

  Which three scenarios are suitable for the Oracle Infrastructure (OCI) Autonomous transaction Processing Server less (ATP-S) deployment?

  A. well established, online auction marketplace is running an application where there is database usage 24? but also has peaks of activity that the hard to predict when the peaks happen, the total activities may reach 3 times the normal activity level

  B. A small startup is deploying a new application fen eCommerce and it requires database to store customers' transactions the team b of what the load will look like since it is a new application.

  C. A midsize company is considering migrating its legacy on premises MongoDB database to Oracle Cloud Infrastructure (OCI). The database has significantly higher workloads on weekends than weekdays

  D. A developer working on an Internal project needs to use a database during work hours but doesn't need It during nights or weekends. the project budget requires her to keep costs low.

  E. A manufacturing company is running Oracle E-Business Suite application on premises. They are looking to move this application to OCI and they want to use a managed database offering for their database tier.

  Correct Answer: ABD

  MongoDB is a cross-platform document-oriented database program. Classified as a NoSQL database program, MongoDB uses JSON-like documents with schema, so the best to be migrated to Oracle NoSQL Database. https://blogs.oracle.com/nosql/migrate-mongodb-data-to-oracle-nosql-database Autonomous transaction Processing Serverless (ATP-S) isn't supported yet for EBS database

• Question 148:

  Which of the following is NOT a good use case for using the functionality available in the Oracle Cloud Infrastructure (OCI) Events service?

  A. Publish all events in a specific compartment to Oracle Streaming service for later analysis.

  B. Triggers Function using Oracle Functions when new files are uploaded in an OCI Object Storage bucket.

  C. Publish a notification when long lived tasks complete, such as OCI Autonomous Database backup completion.

  D. Capture Monitoring Alarms and invoke Autoscaling of compute instances.

  E. Trigger a notification when a function completes its execution.

  Correct Answer: D

• Question 149:

  You have two Virtual Cloud Networks (VCN) that need to be peered. The set up is as follows:

  The VCNs are in different tenancies.

  Peering has to be via Local Peering Gateway (LPG) because one of the VCNs needs to be added to an existing Hub and Spoke configuration that consists of a hub and two spokes.

  There is a CIDR overlap. The VCN that serves as the Hub VCN has a 172.19.0.0/16 CIDR prefix. The other VCN to be added as a Spoke VCN has a 172.19.128.0/17 CIDR prefix.

  The other two spokes have 10.0.0.0/16 and 192.168.0.0/16 prefixes, respectively.

  What is a possible solution to this problem?

  A. Use Dynamic Routing Gateway (DRG) instead.

  B. Add another CIDR prefix to the VCN that is integrating with the Hub and Spoke and does not overlap. Use that CIDR for the LPG connection.

  C. Review the subnets in the hub VCN. If they all have the third octet under 128, change the VCN prefix to /17.

  D. Review the subnets in the hub VCN. If they all have the third octet above 128, change the VCN prefix to /17.

  E. Review all subnets in the hub VCN. If one of them has the third octet at 128, change the VCN prefix to /17.

  Correct Answer: B

• Question 150:

  A global retailer has decided to re-design its e-commerce platform to have a micro-services architecture. They would like to decouple application architecture into smaller, independent services using Oracle Cloud Infrastructure (OCI). They have decided to use both containers and servers technologies to run these application instances.

  Which option should you recommend to build this new platform?

  A. Install a kubernetes cluster on OCI and use OCI event service.

  B. Use Oracle Container Engine for kubernetes, OCI Registry and OCI Functions.

  C. Use OCI Resource Manager to automate compute Instances provisioning and use OCI Streaming service.

  D. Use OCI functions, OCI object storage and OCI event service.

  Correct Answer: B

  Oracle Functions is a fully managed, multi-tenant, highly scalable, on-demand, Functions- as-a-Service platform. It is built on enterprise-grade Oracle Cloud Infrastructure and powered by the Fn Project open source engine. Use Oracle Functions (sometimes abbreviated to just Functions) when you want to focus on writing code to meet business needs.

  

  Oracle Cloud Infrastructure Container Engine for Kubernetes is a fully-managed, scalable, and highly available service that you can use to deploy your containerized applications to the cloud. Use Container Engine for Kubernetes (sometimes abbreviated to just OKE) when your development team wants to reliably build, deploy, and manage cloud-native applications. You specify the compute resources that your applications require, and Container Engine for Kubernetes provisions them on Oracle Cloud Infrastructure in an existing OCI tenancy.