Oracle Oracle Certifications 1Z0-997-22 Questions & Answers

• Question 41:

  You are using the Oracle Cloud Infrastructure (OCI) OS Management service to manage updates and patches for the Oracle Linux 8 environments on your compute instances in OCI. You have verified that the OS Management Service Agent (osms-agent) is installed and running properly in the instances.

  One of the compute instances is not getting the updates from OS Management Service. You use the following command to validatethatyourinstance cannot reach the OS Management Ingestion service by running curl https://ingestion.osms.

  .oci.oraclecloud.com/

  Which Is NOT a possible reason for this issue?

  A. The instance Is in a private subnet with a NAT gateway.

  B. The instance is in a private subnet with a privateendpointwith security rules configured to access the OS Managementingestion service

  C. The instance is in a private subnet with a service gatewaythat uses the All Services in Oracle Services Network CIDR label.

  D. The Instance is in a publicsubnet with an Internet gateway.

  Correct Answer: B

• Question 42:

  A large financial company has a web application hosted in their on-premises data center. They are migrating their application to Oracle Cloud Infrastructure (OCI) and require no downtime while the migration is on-going. In order to achieve this, they have decided to divert only 30% of the application works fine, they divert all traffic to OCI.

  As a solution architect working with this customer, which suggestion should you provide them?

  A. Use OCI Traffic management with failover steering policy and distribute the traffic between OC1 and on premises infrastructure.

  B. Use OCI Traffic management with Load Balancing steering policy and distribute the traffic between OCI and on premises infrastructure.

  C. Use an OCI load Balancer and distribute the traffic between OCI and on premises infrastructure.

  D. Use VPN connectivity between on premises Infrastructure and OCI, and create routing tables to distribute the traffic between them.

  Correct Answer: B

  Traffic Management Steering Policies can account for health of answers to provide failover capabilities, provide the ability to load balance traffic across multiple resources, and account for the location where the query was initiated to provide a simple, flexible and powerful mechanism to efficiently steer DNS traffic.

• Question 43:

  You are working as a cloud consultant for a major media company. In the US and your client requested to consolidate all of their log streams, access logs, application logs, and security logs into a single system.

  The client wants to analyze all of their logs In real-time based on heuristics and the result should be validated as well. This validation process requires going back to data samples extracted from the last 8 hours.

  What approach should you take for this scenario?

  A. Create an auto scaling pool of syslog-enabled servers using compute instances which will store the logs In Object storage, then use map reduce jobs to extract logs from Object storage, and apply heuristics on the logs.

  B. Create a bare-metal instance big enough to host a syslog enabled server to process the logs and store logs on the locally attached NVMe SSDs for rapid retrieval of logs when needed.

  C. Set up an OCI Audit service and ingest all the API arils from Audit service pragmatically to a client side application to apply heuristics and save the result in an OCI Object storage.

  D. Stream all the logs and cloud events of Events service to Oracle Streaming Service. Build a client process that will apply heuristics on the logs and store them in an Object Storage.

  Correct Answer: D

  The Oracle Cloud Infrastructure Streaming service provides a fully managed, scalable, and durable storage solution for ingesting continuous, high-volume streams of data that you can consume and process in real time. Streaming can be used for messaging, ingesting high- volume data such as application logs, operational telemetry, web click-stream data, or other use cases in which data is produced and processed continually and sequentially in a publish-subscribe messaging model. Streaming Usage Scenarios Here are some of the many possible uses for Streaming: Metric and log ingestion: Use the Streaming service as an alternative for traditional file- scraping approaches to help make critical operational data more quickly available for indexing, analysis, and visualization. Messaging: Use Streaming to decouple components of large systems. Streaming provides a pull/bufferbased communication model with sufficient capacity to flatten load spikes and the ability to feed multiple consumers with the same data independently. Key-scoped ordering and guaranteed durability provide reliable primitives to implement various messaging patterns, while high throughput potential allows for such a system to scale well. Web/Mobile activity data ingestion: Use Streaming for capturing activity from websites or mobile apps (such as page views, searches, or other actions users may take). This information can be used for realtime monitoring and analytics, as well as in data warehousing systems for offline processing and reporting. Infrastructure and apps event processing: Use Streaming as a unified entry point for cloud components to report their life cycle events for audit, accounting, and related activities.

• Question 44:

  A global media organization is working on a project which lets users upload their videos on their site. After upload is complete, the video should be automatically processed by an Al algorithm. The algorithm will try to recognize actions in the videos so that it can be used to show related advertisements in future. The development team wants to focus on writing Al code and don't want to worry about underlying infrastructure for high-availability, scalability, security and monitoring.

  Which OCI services should you recommend for this project?

  A. Use OCI Events service for triggering automatic processing of video, Oracle Container Engine for Kubernetes (OKE) and OCI Digital Assistant

  B. Use Oracle Container Engine for Kubernetes (OKE) for deployment of Al Code, OCI Notifications and Object Storage

  C. Use OCI Resource Manager to manage the underlying infrastructure, OCI Functions and OCI Events service.

  D. Use Object Storage for storing videos, OCI Events service and OCI Functions

  Correct Answer: D

  Oracle Functions is a fully managed, multi-tenant, highly scalable, on-demand, Functions- as-a-Service platform. It is built on enterprise-grade Oracle Cloud Infrastructure and powered by the Fn Project open source engine. Use Oracle Functions (sometimes abbreviated to just Functions) when you want to focus on writing code to meet business needs. The serverless and elastic architecture of Oracle Functions means there's no infrastructure administration or software administration for you to perform. You don't provision or maintain compute instances, and operating system software patches and upgrades are applied automatically. Oracle Functions simply ensures your app is highly-available, scalable, secure, and monitored. With Oracle Functions, you can write code in Java, Python, Node, Go, and Ruby (and for advanced use cases, bring your own Dockerfile, and Graal VM). You can then deploy your code, call it directly or trigger it in response to events, and get billed only for the resources consumed during the execution.

  You can create automation based on state changes for your Oracle Cloud Infrastructure resources by using event types, rules, and actions. When the function is executing inside the container, the function can read from and write to other resources and services running in the same subnet (for example, Database as a Service). The function can also read from and write to other shared resources (for example, Object Storage), and other Oracle Cloud Services.

• Question 45:

  You are advising the database administrator responsible for managing non-production environment for Oracle Autonomous Database running on Oracle Cloud Infrastructure. You need to help the database administrator ensure that the non-production environments have a copy of the current data from the production environment in a manner that is most time-efficient.

  Which method should you recommend? (Choose the best answer.)

  A. Take a full database backup of the production Autonomous database and create the non-production database from it.

  B. Create a metadata clone of the production Autonomous Database and create the non- production database from it.

  C. Create a full clone of the production Autonomous Database and create the non- production database from it.

  D. Take a Data Pump export of the production Autonomous database and import into the non-production database.

  Correct Answer: C

  Explanation: https://www.oracle.com/database/technologies/datawarehouse-bigdata/adb- faqs.html

• Question 46:

  You are responsible for a web application deployed on a set of compute VM instances in Oracle Cloud Infrastructure (OCI). Your application stores data on block volumes.

  In production, the business requirement is a Recovery Point Objective (RPO) of two hours and that data should be recoverable in case of a regional failure.

  How would you meet the RPO requirement in the event of a failure?

  A. Create a user-defined storage backup policy and attach a schedule of type "Hourly" and automatically copy to another region. Apply this policy to a volume group containing the block volumes.

  B. Store hourly block volume backups to an NVMe device attached to a compute instance in a different Availability Domain (AD).

  C. Configure your application to use synchronous primary-secondary data replication between ADs.

  D. Set up cross-region volume replication to replicate the block volumes to a different OCI region.

  Correct Answer: C

• Question 47:

  Which of the following features is NOT supported by Oracle Cloud Infrastructure Multi- factor authentication (MFA)?

  A. Only the user can enable MFA for their own account.

  B. Members of the Administrators group can disable MFA for other users.

  C. Users can disable MFA for their own accounts.

  D. Members of the Administrators group can enable MFA for other users.

  Correct Answer: D

• Question 48:

  You are the Solution Architect that designed this Oracle Cloud Infrastructure (OCI) compartment layout for your organization:

  

  The development team has deployed quite a few instances under 'Compute' Compartment and the operations team needs to list the Instances under the same compartment for their testing. Both teams, development and operations are part of a group called 'Eng-group'

  You have been looking for an option to allow the operations team to list the instances without access any confidential information or metadata of resources.

  Which IAM policy should you write based on these requirements?

  A. Allow group Eng-group to inspect instance-family in compartment Dev-Team:Compute and attach the policy to `Engineering' Compartment

  B. Allow group Eng-group to inspect instance-family in compartment Dev-Team: Compute and attach the policy to 'SysTest Team' Compartment

  C. Allow group Eng-group to read instance-family in compartment Compute and attach the policy to 'Engineering' Compartment.

  D. Allow group Eng-group to read instance-family in compartment Dev-Team-.Compute and attach the policy to'Dev-Team'

  Correct Answer: C

  Policy Attachment When you create a policy you must attach it to a compartment (or the tenancy, which is the root compartment). Where you attach it controls who can then modify it or delete it. If you attach it to the tenancy (in other words, if the policy is in the root compartment), then anyone with access to manage policies in the tenancy can then change or delete it. Typically that's the Administrators group or any similar group you create and give broad access to. Anyone with access only to a child compartment cannot modify or delete that policy. When you attach a policy to a compartment, you must be in that compartment and you must indicate directly in the statement which compartment it applies to. If you are not in the compartment, you'll get an error if you try to attach the policy to a different compartment. Notice that attachment occurs during policy creation, which means a policy can be attached to only one compartment. Policies and Compartment Hierarchies a policy statement must specify the compartment for which access is being granted (or the tenancy). Where you create the policy determines who can update the policy. If you attach the policy to the compartment or its parent, you can simply specify the compartment name. If you attach the policy further up the hierarchy, you must specify the path. The format of the path is each compartment name (or OCID) in the path, separated by a colon: :: . . . to allow action to compartment Compute so you need to set the compartment PATH as per where you attach the policy as below examples if you attach it to Root compartment you need to specify the PATH as following Engineering:Dev-Team:Compute if you attach it to Engineering compartment you need to specify the PATH as following Dev-Team:Compute if you attach it to Dev-Team or Compute compartment you need to specify the PATH as following Compute Note : in the Policy inspect verb that give the Ability to list resources, without access to any confidential information or user-specified metadata that may be part of that resource.

• Question 49:

  You have been asked to implement a bespoke financial application in Oracle Cloud Infrastructure using virtual machine instances controlled by Autoscaling across multiple Availability Domains. The application stores transaction logs, intermediate transaction data, and audit data and needs to store this on a persistent, durable data store accessible from all of the application servers. The application requires the file system to be mounted in the /audit folder on the Linux file system. The system needs to tolerate the failure of two or more Fault Domains and still maintain data integrity. The solution should be as low maintenance as possible.

  What storage architecture should you suggest?

  A. Use locally attached NVMe instances and configure RAID 0 replication between servers.

  B. Implement a single instance and install an NFS server, configure and create an NFS share, and mount this as /audit on the application instances.

  C. Store the data on Oracle Object Storage mounted at the /audit mount point on all the Linux instances using the default mount options.

  D. Use File Storage Service(FSS). Configure FSS to operate from all Availability Domains the application servers operate in and mount the file system in the /audit folder.

  Correct Answer: D

• Question 50:

  You have been asked to create a mobile application which will be used for submitting orders by users of a popular E-Commerce site. The application is built to work with Autonomous Transaction Processing - Serverless (ATP-S) database as the backend and HTML5 on Oracle Application Express as the front end. During the peak usage of the application you notice that the application response time is very slow. ATP-S database is deployed with 3 CPU cores and 1 TB of memory.

  Which two options are expensive or impractical ways to improve the application response times?

  A. Identify the maximum memory capacity needed for peak times and scale the memory for the ATP-S database to that number. ATP-S will scale the memory down when not needed.

  B. Use the Machine Learning (ML) feature of the ATP-S database iteratively to tune the SQL queries used by the application.

  C. Scale up CPU core count and memory during peak times.

  D. Enable auto scaling for CPU cores on ATP-S database.

  E. Identify the maximum CPU capacity needed for peak times and scale the CPU core count for the ATP-S database to that number. ATP-S will scale the CPU core count down when not needed.

  Correct Answer: CE