Oracle Oracle Certifications 1Z0-997-22 Questions & Answers

• Question 101:

  A fast growing E-commerce company has deployed their online shopping application on Oracle Cloud Infrastructure. The application was deployed on compute instances with Autoscaling configuration for application servers fronted by a load balancer and OCI Autonomous Transaction Processing (ATP) in the backend. In order to promote their e- commerce platform 50% discount was announced on all the products for a limited period. During the day 1 of promotional period it was observed that the application is running slow and company's hotline is flooded with complaints.

  What could be two possible reasons for this situation?

  A. The health check on some of the backend servers has failed and the load balancer has taken those servers temporarily out of rotation.

  B. As part of Autoscaling, the load balancer shape has dynamically changed to a larger shape to handle more incoming traffic and the system was slow for a short time during this change.

  C. The health check on some of the backend servers has failed and the load balancer was rebooting these servers.

  D. Autoscaling has already scaled to the maximum number of instances specified in the configuration and there is no room for scaling further.

  Correct Answer: AD

• Question 102:

  You have an application running in Microsoft Azure and want to use Oracle Autonomous Data warehouse (ADW) instance for running business analytics.

  How can you build a secure solution for such a use-case?

  A. Connect the Oracle ADW in your VCN to the Microsoft Azure VNet over the internet.

  B. Create a software VPN connection between Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN) and Microsoft Azure Virtual Network (VNet) and connect the application with Oracle ADW instance.

  C. Setup an interconnect between OCI and Microsoft Azure using FastConnect and ExpressRoute. Use a Service Gateway in OCI Virtual Cloud Network to provide connectivity to the Oracle ADW instance for the application in Microsoft Azure VNet.

  D. Create a software Remote Peering Connection between Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN) and Microsoft Azure Virtual Network (VNet) and connect the application with Oracle ADW instance.

  Correct Answer: C

• Question 103:

  You have created compartment called Dev for developers. There are two IAM groups for developers: group-devl and group-dev2. You need to write an Identity and Access Management (IAM) policy to give users in these groups access to manage all resources in the compartment Dev.

  Which of the following IAM policy will accomplish this?

  A. Allow any-user to manage all resources in compartment Dev where request.group= /group-dev*/

  B. Allow group group-devl group-dev2 to manage all resources in compartment Dev

  C. Allow group /group-dev*/ to manage all resources in compartment Dev

  D. Allow any-user to manage all resources in tenancy where target.comparment= Dev

  Correct Answer: B

• Question 104:

  You are part of a project team working in the development environment created in OCI. You have realized that the CIDR block specified for one of the subnet in a VCN is not correct and want to delete the subnet. While deleting you are getting an error indicating that there are still resources that you must delete first. The error includes the OCID of the VNIC that is in the subnet.

  Which of the following action you will take to troubleshoot this issue?

  A. Use OCI CLI to call "GetVnic" operation to find out the parent resource of the VNIC

  B. Copy and Paste OCID of the VNIC in the search box of the OCI Console to find out the parent resource of the VNIC

  C. Use OCI CLI to delete the VNIC first and then delete the subnet

  D. Use OCI CLI to delete the subnet using --force option

  Correct Answer: A

  VCN, it must first be empty and have no related resources or attached gateways To delete a VCN's subnets, they must first be empty. Note: When you create one of the preceding resources, you specify a VCN and subnet for it. The relevant service creates at least one VNIC in the subnet and attaches the VNIC to the resource. The service manages the VNICs on your behalf, so they are not readily apparent to you in the Console. The VNIC enables the resource to communicate with other resources over the network. Although this documentation commonly talks about the resource itself being in the subnet, it's actually the resource's attached VNIC. If the subnet is not empty, you instead get an error indicating that there are still resources that you must delete first. The error includes the OCID of a VNIC that is in the subnet (there could be more, but the error returns only a single VNIC's OCID). You can use the Oracle Cloud Infrastructure command line interface (CLI) or another SDK or client to call the GetVnic operation with the VNIC OCID. The response includes the VNIC's display name. Depending on the type of parent resource, the display name can indicate which parent resource the VNIC belongs to. You can then delete that parent resource, or you can contact your administrator to determine who owns the resource. When the VNIC's parent resource is deleted, the attached VNIC is also deleted from the subnet. If there are remaining VNICs in the subnet, repeat the process of determining and deleting each parent resource until the subnet is empty. Then you can delete the subnet. For example, if you're using the CLI, use this command to get information about the VNIC. oci network vnic get --vnic-id

• Question 105:

  You are designing the network infrastructure for an application consisting of a web server (server-1) and a Domain Name Server (server-2) running in two different subnets inside the same Virtual Cloud Network (VCN) in Oracle Cloud Infrastructure (OCI). You have a requirement where your end users will access server-1 from the internet and server-2 from your customer's on-premises network. The on-premises network is connected to your VCN over a FastConnect virtual circuit.

  How should you design your routing configuration to meet these requirements?

  A. Configure a single routing table with two set of rules: one that has route to internet via an Internet Gateway and another that propagates specific routes for the on-premises network via a Dynamic Routing Gateway. Don't associate this routing table with any of the subnets in the VCN.

  B. Configure a single routing table with two set of rules: one that has route to internet via an Internet Gateway and another that propagate specific routes to the on-premises network via a Dynamic Routing Gateway. Associate the routing table with all the VCN subnets.

  C. Configure two routing tables: first one with a route to internet via an Internet gateway; associate this route table to the subnet containing server-1 .Configure the second route table to propagate specific routes to the on-premises network via a Dynamic Routing Gateway; associate this route table to subnet containing server-2.

  D. Configure two routing tables that have rules to route all traffic via a Dynamic Routing Gateway. Associate the two routing tables with all the VCN subnets.

  Correct Answer: C

• Question 106:

  You are tasked with migrating an online shopping website to Oracle Cloud Infrastructure (OCI) and decide to use a Load Balancer. You have configured the backend set with the round robin policy. During the testing phase, you noticed that users are losing items from their shopping carts when they navigate to different pages. How should you implement a solution to this problem?

  A. Set up a Traffic Management Steering Policy to redirect traffic to a different backend set that is deployed exclusively for the purpose of holding all Items placed in the shopping cart.

  B. Configure a set of path route rules that will route to different backend sets based on the URI requested by the customer's browser.

  C. Replace the round robin policy with least connections policy at the backend set.

  D. Set up session persistence at the Load Balancer backend set.

  Correct Answer: C

• Question 107:

  By copying block volume backups to another region at regular intervals, it makes it easier for you to rebuild applications and data in the destination region if a region-wide disaster occurs in the source region.

  Which IAM Policy statement allows the VolumeAdmins group to copy volume backups between regions?

  A. Allow group VolumeAdmins to use volumes in tenancy

  B. Allow group VolumeAdmins to copy volume' backups in tenancy

  C. Allow group VolumeAdmins to manage volume-family In tenancy

  D. Allow group VolumeAdmins to inspect volumes in tenancy

  Correct Answer: C

  The backups feature of the Oracle Cloud Infrastructure Block Volume service lets you make a point-intime snapshot of the data on a block volume.These backups can then be restored to new volumes either immediately after a backup or at a

  later time that you choose.

  You can copy block volume backups between regions using the Console, command line interface (CLI), SDKs, or REST APIs.

  To copy volume backups between regions, you must have permission to read and copy volume backups in the source region, and permission to create volume backups in the destination region.

  to do all things with block storage volumes, volume backups, and volume groups in all compartments with the exception of copying volume backups across regions. Allow group VolumeAdmins to manage volume-family in tenancy The

  aggregate resource type volume-family does not include the VOLUME_BACKUP_COPY permission, so to enable copying volume backups across regions you need to ensure that you include the third statement in that policy, which is:

  Allow group VolumeAdmins to use volume-backups in tenancy where request.permission='VOLUME _BACKUP_COPY'

• Question 108:

  You are building a highly available and fault tolerant web application deployment for your company. Similar application delayed by competitors experienced web site attack including DDoS which resulted in web server failing.

  You have decided to use Oracle Web Application Firewall (WAF) to implement an architecture which will provide protection against such attacks and ensure additional configuration will you need to implement to make sure WAF is protecting my web application 24?.

  Which additional configuration will you need to Implement to make sure WAF Is protecting my web application 24??

  A. Configure auto scaling policy and it to WAF instance.

  B. Configure Control Rules to send traffic to multiple web servers

  C. Configure multiple origin servers

  D. Configure new rules based on now vulnerabilities and mitigations

  Correct Answer: C

  Origin Management

  An origin is an endpoint (typically an IP address) of the application protected by the WAF.

  An origin can be

  an Oracle Cloud Infrastructure load balancer public IP address. A load balancer IP address can be used for

  high availability to an origin. Multiple origins can be defined, but only a single origin can be active for a WAF. You can set HTTP headers for outbound traffic from the WAF to the origin server. These name value pairs are then available to the

  application. Oracle Cloud Infrastructure Web Application Firewall (WAF) is a cloud-based, Payment Card Industry (PCI) compliant, global security service that protects applications from malicious and unwanted internet traffic.

  WAF can protect any internet facing endpoint, providing consistent rule enforcement across a customer's applications. WAF provides you with the ability to create and manage rules for internet threats including Cross-Site Scripting (XSS),

  SQL Injection and other OWASP- defined vulnerabilities. Unwanted bots can be mitigated while tactically allowed desirable bots to enter. Access rules can limit based on geography or the signature of the request.

  Distributed Denial of Service (DDoS)

  A DDoS attack is an often intentional attack that consumes an entity's resources, usually using a large number of distributed sources. DDoS can be categorized into either Layer 7 or Layer 3/4 (L3/4)

  A layer 7 DDoS attack is a DDoS attack that sends HTTP/S traffic to consume resources and hamper a website's ability to delivery content or to harm the owner of the site. The Web Application Firewall (WAF)

  service can protect layer 7 HTTP-based resources from layer 7 DDoS and other web application attack vectors.

• Question 109:

  A company runs a public-facing application that uses a Java-based web service via a RESTful API in their on-premises data center. Use of the API is expected to double with a new product launch. The business wants to migrate their application to Oracle Cloud Infrastructure (OCI) to meet the scale and reliability requirements. In order to achieve this, they will divert only 40% of the traffic to the new Apache Tomcat web servers running on OCI and serve the remaining 60% traffic through their on-premises infrastructure. Once the migration is complete and application works fine, they will divert all traffic to OCI. How can these requirements be met with the LEAST amount of effort?

  A. Use OCI Traffic management service with failover steering policy and distribute the traffic between OCI and on premises infrastructure.

  B. Use OCI Traffic management service with Load Balancing steering policy and distribute the traffic between OCI and on premises infrastructure.

  C. Use an OCI load Balancer and distribute the traffic between OCI and on premises infrastructure.

  D. Use VPN connectivity between on premises Infrastructure and OCI and create routing tables to distribute the traffic between them.

  Correct Answer: B

• Question 110:

  You are a DevOps engineer working for a high tech company, and are using Terraform to maintain your Oracle Cloud Infrastructure (OCI) resources. You have created a Terraform script that would create the infrastructure for deploying a web service. But want to tune in some settings within the OCI Instances using a shell script.

  How should you write your Terraform script to run the shell script on OCI instance?

  A. Use provisioner "remote-exec" in your code to run the shell script.

  B. Use provisioner "local-exec" in your code to run the shell script.

  C. Use resource "oci_core_instance" to create the instance and run the shell script.

  D. Use provisioner "oci-remote-exec" in your code to run the shell script.

  Correct Answer: A