Oracle Oracle Certifications 1Z0-997-22 Questions & Answers

• Question 91:

  You are creating a compute instance using Oracle Cloud Infrastructure (OCI) Console. You decide to use Oracle provided image for the compute instance launch. Which option is TRUE when using Oracle provided images?

  A. On Windows images, custom user data scripts are executed using cloud-init to perform various tasks such as enabling GPU support.

  B. Oracle provided images do not support the ability to supply a custom metadata during instance launch.

  C. For a Linux based image, access to host over the internet is permitted only via SSH protocol and all other remote access is disabled.

  D. If you choose a non-Windows image, the only way to download and update packages is by running apt or yum commands.

  Correct Answer: C

  Explanation: https://blogs.oracle.com/developers/post/working-with-oracle-cloud- infrastructure-custom-compute-images https://docs.oracle.com/en-us/iaas/Content/Compute/Tasks/managingcustomimages.htm

• Question 92:

  A manufacturing company is planning to migrate their on-premises database to OCI and has hired you for the migration. Customer has provided following information regarding their existing onpremises database:

  Database version, host operating system and version, database character set, storage for data staging, acceptable length of system outage.

  What additional information do you need from customer in order to recommend a suitable migration method? Choose two

  A. Elapsed time since database was last patched

  B. On-premises host operating system and version

  C. Number of active connections

  D. Data types used in the on-premises database

  E. Top 5 longest running queries

  Correct Answer: BD

  Not all migration methods apply to all migration scenarios. Many of the migration methods apply only if specific characteristics of the source and destination databases match or are compatible. Moreover, additional factors can affect which method you choose for your migration from among the methods that are technically applicable to your migration scenario. Some of the characteristics and factors to consider when choosing a migration method are: On-premises database version Database service database version On-premises host operating system and version On-premises database character set Quantity of data, including indexes Data types used in the on-premises database Storage for data staging Acceptable length of system outage Network bandwidth

• Question 93:

  Your company developed a function that needs to access the Oracle Database to inject some data to it at runtime. You are tasked to move this function to the

  Oracle Cloud Infrastructure (OCI) and use Oracle Functions and access Oracle Autonomous Database. You created a Dockerfile below to run this function, however, you are getting this error "cx_Oracle.DatabaseError: ORA""12560: TNS:protocol adapter error".

  

  What should you do to make sure that Oracle Functions can run this Dockerfile properly? (Choose the best answer.)

  A. Add these two lines to your Dockerfile: groupadd """"gid 1000 fn andand \ adduser """"uid 1000 """"gid fn fn

  B. Use """"privileged flag while running the Docker container to add runtime privilege

  C. Use """"cap""add=ALL flag while running the Docker container to add runtime capability

  D. You ned to run this Container as root, so add this line: USER root

  Correct Answer: A

  https://docs.cloud.oracle.com/en-us/iaas/Content/Functions/Tasks/functionsrunningasunprivileged.htm

• Question 94:

  Which of the below options is true regarding Oracle Cloud Infrastructure's load balancing service?

  A. You can dynamically change the load balancer shape to handle more incoming traffic.

  B. The public load balancer applies a floating public IP address to the primary load balancer.

  C. When you create a private load balancer, the service requires 2 or more subnets to host both the primary and standby load balancers.

  D. A public load balancer is Availability Domain specific in scope.

  Correct Answer: B

• Question 95:

  An E-commerce company which sells computers, tablets, and other electronics items has recently decided to move all of their on-premises infrastructure to Oracle Cloud Infrastructure (OCI). One of their on-premises application is running on an NGINX server and the Oracle Database is running in a 2 node Oracle Real Application Clusters (RAC) configuration.

  They cannot afford to have any application down time when they do the migration.

  What is an effective mechanism to migrate the customer application to OCI and set up regular automated backups?

  A. Launch a compute instance and run an NGINX server to host the application. Deploy a 2 node VM DB Systems with Oracle RAC enabled. Import the on-premises database to OCI VM DB Systems using Oracle Data Pump and then enable automatic backups.

  B. Launch a compute instance for both the NGINX application server and the database server. Attach block volumes on the database server compute instance and enable backup policy to backup the block volumes.

  C. Launch a compute instance and run an NGINX server to host the application. Deploy Exadata Quarter Rack, enable automatic backups and import the database using Oracle Data Pump.

  D. Launch a compute instance and run an NGINX server to host the application. Deploy a 2 node VM DB Systems with Oracle RAC enabled. Setup Oracle GoldenGate to synchronize data from their on-premises database to OCIVM Database. Export and Import the on- premises database to OCIVM DB Systems using Oracle Data Pump, apply the GoldenGate trail files to sync up the OCI database with the on-premises database. Enable automatic backups for the OCIVM database and then cutoverthe application from on-premises to OCI.

  Correct Answer: D

• Question 96:

  You developed a microservices-based application that runs on Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE). It has multiple endpoints that needs to be exposed to the public internet.

  What is the most cost-effective way to expose multiple application endpoints without adding complexity to the application?

  A. Use NodePort service type in Kubernetes for each of your service endpoint and use node's public IP address to access the applications.

  B. Use separate load balancer instance for each service, but use the 100 Mbps load balancer option.

  C. Deploy an Ingress Controller and use it to expose each endpoint with its own routing endpoint.

  D. Use ClusterIP service type in Kubernetes for each of your service endpoint and use a load balancer to expose the endpoints.

  Correct Answer: C

• Question 97:

  Your security team has informed you that there are a number of malicious requests for your web application coming from a set of IP addresses originating from a country in Europe.

  Which of the following methods can be used to mitigate these type of unauthorized requests?

  A. Web Application Firewall policy using access control rules

  B. Deny rules in Virtual Cloud Network Security Group for the specific set of IP addresses.

  C. Delete Internet Gateway from Virtual Cloud Network.

  D. Deny rules in Virtual Cloud Network Security Lists for the specific set of IP addresses.

  Correct Answer: A

• Question 98:

  A digital marketing company is planning to host a website on Oracle Cloud Infrastructure (OCI) and leverage OCI Container Engine for Kubernetes (OKE). The web server will make API calls to access OCI Object Storage to store all images uploaded by users.

  For security purposes, your manager instructed you to ensure that the credentials used by the web server to allow access not stored locally on the compute instance.

  What solution results in an Implementation with the least effort for this scenario?

  A. Configure the credentials using Instance Principal to allow the web server to make API calls to OCl Object Storage

  B. Configure the credentials using OCI Registry (OC1R) which will automatically connect with OKE allowing the web server to make API calls to OCI Object Storage.

  C. Configure the credentials to use Transparent Data Encryption (TDE) which will automatically allow the web server to make API calls to OCl Object Storage.

  D. Configure the credentials using OCI Key Management to allow an instance to make API calls and grant access to OCl Object Storage.

  Correct Answer: A

• Question 99:

  A2Z corporation is into e-commerce business and is the choice of millions for the best offers it launches. It has a rich set of intelligent applications that runs 24x7 and are very critical to their business.

  Continuous infrastructure management and maintenance, rise in customer base and workloads, have made them to think of migrating all workloads to cloud. They have selected Oracle Cloud Infrastructure for migrating both their application

  and database workload.

  You, as an oracle pre-sales consultant has been asked to provide complete migration strategy for their source database workloads which includes oracle and MSSQL. They are particularly concerned about their oracle databases which

  cannot afford any downtime. They would be establishing fast connect from their data center to oracle data center to avoid any network impact. Their oracle database is around 90TB and MSSQL is around 10TB.

  How would you propose the safe migration of customer database while meeting their availability requirement?

  A. Propose the use of zero-downtime migration tool for oracle database and use combination of SQL Developer and Oracle SQL Loader for MSSQL migration

  B. Propose the use of Oracle datapump for oracle databases and SQL Developer for MSSQL database

  C. Propose the use of zero-downtime migration tool for oracle database and use combination of SQL Developer and Oracle GoldenGate for MSSQL migration

  D. Propose the use of Oracle GoldenGate to perform zero downtime migration for both MSSQL and Oracle source databases

  Correct Answer: C

• Question 100:

  You are the security architect for a medium sized e-commerce company that runs all of their applications in Oracle Cloud Infrastructure (OCI). Currently, there are 14 unique applications, each deployed and secured in their own compartment. The Operations team has procured a new monitoring tool that will be deployed throughout the OCI ecosystem. Their requirement is to deploy one management node into each compartment.

  Currently, the Operations team Identity and Access Management (IAM) group has the following policy: allow group OpsTeam to READ all-resources in tenancy

  Once the new monitoring nodes are deployed, the Operations team may need to stop, start, or reboot them occasionally.

  What is the most efficient solution to allow the Operations team to fully manage the monitoring nodes, without allowing them to alter other resources across the tenancy?

  A. In each of the 14 compartments, create a new policy with the following statement: allow group OpsTeam to manage instance-family in compartment XXX where XXX is the name of the compartment where you are creating the policy.

  B. Create a new policy in the root compartment with the following policy statement: allow group OpsTeam to manage instance-family in tenancy where ANY (request.operation ?`UpdateInstance', request.operation ?`InstanceAction')

  C. Tag all the monitoring nodes with the defined tag AllPolicy:AllowAccess:OpsTeam and write the following IAM policy: allow group OpsTeam to manage instance-family in tenancy where target.resource.tag.AllPolicy.AllowAccess ? `OpsTeam'

  D. Tag all the monitoring nodes with the free-form tag AllowAccess:OpsTeam and write the following IAM policy: allow group OpsTeam to manage instance-family in tenancy where target.resource.tag.AllowAccess = `OpsTeam'

  Correct Answer: A