Oracle Oracle Certifications 1Z0-997 Questions & Answers

• Question 21:

  A global media organization is working on a project which lets users upload their videos on their site. After upload is complete, the video should be automatically processed by an Al algorithm. The algorithm will try to recognize actions in the videos so that it can be used to show related advertisements in future. The development team wants to focus on writing Al code and don't want to worry about underlying infrastructure for high-availability, scalability, security and monitoring. Which OCI services should you recommend for this project?

  A. Use OCI Events service for triggering automatic processing of video, Oracle Container Engine for Kubernetes (OKE) and OCI Digital Assistant

  B. Use Oracle Container Engine for Kubernetes (OKE) for deployment of Al Code, OCI Notifications and Object Storage

  C. Use OCI Resource Manager to manage the underlying infrastructure, OCI Functions and OCI Events service.

  D. Use Object Storage for storing videos, OCI Events service and OCI Functions

  Correct Answer: D

  Oracle Functions is a fully managed, multi-tenant, highly scalable, on-demand, Functions-as-a- Service platform. It is built on enterprise-grade Oracle Cloud Infrastructure and powered by the Fn Project open source engine. Use Oracle Functions (sometimes abbreviated to just Functions) when you want to focus on writing code to meet business needs. The serverless and elastic architecture of Oracle Functions means there's no infrastructure administration or software administration for you to perform. You don't provision or maintain compute instances, and operating system software patches and upgrades are applied automatically. Oracle Functions simply ensures your app is highly-available, scalable, secure, and monitored. With Oracle Functions, you can write code in Java, Python, Node, Go, and Ruby (and for advanced use

• Question 22:

  A new International hacktivfst group based in London, launched a wide scale cyber attacks Including SQL Injection and Cross-Site Scripting (XSS) across multiple websites which are hosted in Oracle Cloud Infrastructure (OCI). As an IT consultant, you must configure a Web Application Firewall (WAF) to protect these website against the attacks. How should you configure your WAF to protect the website against those attacks?

  A. Enable an Access Rule that contains XSS Filters Categories and SQL Filters Categories.

  B. Enable a Protection Rule to block the attacks based on HTTP Headers that contain XSS and SQL strings.

  C. Enable a Protection Rule that contains XSS Filters Categories and SQL Filters Categories.

  D. Enable an Access Rule to block the IP Address range from London.

  E. Enable a Protection Rule to block requests that came from London.

  Correct Answer: A

• Question 23:

  Which three options are available to migrate an Oracle database 12.x from an on-premises environment to Oracle Cloud Infrastructure (OCI)?

  A. Leverage OCI Storage Gateway asynchronous database migration option.

  B. Use Oracle Data Pump Export/Import to migrate the database.

  C. Configure RMAN cross-platform transportable tablespace backup sets.

  D. Setup OCI schema and data transfer tool with Bare Metal DB Systems as the target.

  E. Create a backup of your on-premises database In OCI DB Systems.

  Correct Answer: BCE

  https://docs.cloud.oracle.com/en-us/iaas/Content/Database/Tasks/mig-onprembackup.htm

• Question 24:

  You are trying to delete a compartment. The delete operation is falling and you need to troubleshoot the

  problem.

  Which step should NOT be considered when troubleshooting this issue?

  A. Verify that there are no policies In the root compartment that reference the compartment you are trying to delete.

  B. Verify that you have removed all resources from the compartment.

  C. Make sure you have at least one more compartment in your tenancy other than the root compartment.

  D. Search for resources in the compartment for each region that your tenancy is subscribed to.

  Correct Answer: A

• Question 25:

  You are working with a social media company as a solution architect. The media company wants to collect and analyze large amounts of data being generated from their websites and social media feeds to gain insights and continuously improve the user experience. In order to meet this requirement, you have developed a microservices application hosted on Oracle Container Engine for Kubernetes. The application will process the data and store the result to an Autonomous Data Warehouse (ADW) instance. Which Oracle Cloud Infrastructure (OCI) service can you use to collect and process a large volume of unstructured data in real time?

  A. OCI Events

  B. OCI Streaming

  C. OCI Resource Manager

  D. OCI Notifications

  Correct Answer: B

• Question 26:

  An Oracle Cloud Infrastructure (OCI) Public Load Balancer's SSL certificate is expiring soon. You noticed

  the Load Balancer is configured with SSL Termination only. When the certificate expires, data traffic can

  be interrupted and security compromised.

  What steps do you need to take to prevent this situation?

  A. Add the new SSL certificate to the Load Balancer, update backend servers to work with a new certificate and edit listeners so they can use the new certificate bundle.

  B. Add the new SSL certificate to the Load Balancer, update listeners and backend sets so they can use the new certificate bundle.

  C. Add the new SSL certificate to the Load Balancer and implement end to end SSL so it can encrypt the traffic from clients all the way to the backend servers.

  D. Add the new SSL certificate to the Load Balancer and update backend servers to use the new certificate bundle.

  E. Add the new SSL certificate to the Load Balancer and update listeners to use the new certificate bundle.

  Correct Answer: A

• Question 27:

  You are working as a solution architect with a global automotive provider who is looking to create a multi-cloud solution They want to run their application tier in Microsoft Azure while utilizing the Oracle DB Systems In the Oracle Cloud Infrastructure (OCI). What is the most fault tolerant and secure solution for this customer?

  A. Create an Oracle database in OCI Virtual Cloud Network (VCN) and connect to the application tier running In Microsoft Azure over the Internet.

  B. Create a FastConnect virtual circuit and choose Microsoft Azure from the list of providers available to setup Network connectivity between application tier running in Microsoft Azure Virtual Network and Oracle Databases running In OCI Virtual Cloud (VCN)

  C. Use OCI Virtual Cloud Network remote peering connection to create connectivity among application tier running in Microsoft Azure Virtual Network and Oracle Databases running in OCI Virtual Cloud Network (VCN).

  D. Create a VPN connection between the application tie, running in Azure Virtual Network and Oracle Databases running In OCI Virtual Cloud Network (VCN).

  Correct Answer: C

  Oracle and Microsoft have created a cross-cloud connection between Oracle Cloud Infrastructure and Microsoft Azure in certain regions. This connection lets you set up cross-cloud workloads without the traffic between the clouds going over the internet. you can connect your VNet and VCN so that traffic that uses private IP addresses goes over the crosscloud connection. For example, the following diagram shows a VNet that is connected to a VCN. Resources in the VNet are running a .NET application that access an Oracle database that runs on Database service resources in the VCN. The traffic between the application and database uses a logical circuit that runs on the cross-cloud connection between Azure and Oracle Cloud Infrastructure. The two virtual networks must belong to the same company and not have overlapping CIDRs. The connection requires you to create an Azure ExpressRoute circuit and an Oracle Cloud Infrastructure FastConnect virtual circuit.

• Question 28:

  You are the Solution Architect that designed this Oracle Cloud Infrastructure (OCI) compartment layout for your organization:

  

  The development team has deployed quite a few instances under 'Compute' Compartment and the operations team needs to list the Instances under the same compartment for their testing. Both teams, development and operations are part of a group called 'Eng-group' You have been looking for an option to allow the operations team to list the instances without access any confidential information or metadata of resources. Which IAM policy should you write based on these requirements?

  A. Allow group Eng-group to inspect instance-family in compartment Dev-Team:Compute and attach the policy to `Engineering' Compartment

  B. Allow group Eng-group to inspect instance-family in compartment Dev-Team: Compute and attach the policy to 'SysTest Team' Compartment

  C. Allow group Eng-group to read instance-family in compartment Compute and attach the policy to 'Engineering' Compartment.

  D. Allow group Eng-group to read instance-family in compartment Dev-Team-.Compute and attach the policy to'Dev-Team'

  Correct Answer: A

  Policy Attachment When you create a policy you must attach it to a compartment (or the tenancy, which is the root compartment). Where you attach it controls who can then modify it or delete it. If you attach it to the tenancy (in other words, if the policy is in the root compartment), then anyone with access to manage policies in the tenancy can then change or delete it. Typically that's the Administrators group or any similar group you create and give broad access to. Anyone with access only to a child compartment cannot modify or delete that policy. When you attach a policy to a compartment, you must be in that compartment and you must indicate directly in the statement which compartment it applies to. If you are not in the compartment, you'll get an error if you try to attach the policy to a different compartment. Notice that attachment occurs during policy creation, which means a policy can be attached to only one compartment. Policies and Compartment Hierarchies a policy statement must specify the compartment for which access is being granted (or the tenancy). Where you create the policy determines who can update the policy. If you attach the policy to the compartment or its parent, you can simply specify the compartment name. If you attach the policy further up the hierarchy, you must specify the path. The format of the path is each compartment

• Question 29:

  A large financial services company has used 2 types of Oracle DB Systems. In Oracle Cloud Infrastructure

  (OCI) to store user dat.

  One is running on a VM.Standard2.8 shape and the other on a VM.Standard 2.4 shape.

  As business grows, data is growing rapidly on both the databases and performance is also degrading.

  The company wants to address this problem with a viable and economical solution.

  As the solution architect for that company you have suggested that they move their databases to

  Autonomous Transaction Processing Serverless (ATP-S) database.

  Which two factors should you consider before you arrived at that recommendation?

  A. You verified that ATP S supports the database features and options currently being used by the 2 databases.

  B. Validate that ATP-S will support the storage and processing requirements for the 2 databases over the life cycle of the business applications.

  C. Confirm that ATP-S allows customers to compress tablespaces to reduce storage costs

  D. Upon provisioning, ATP-S automatically scales up CPU to meet the application's processing requirements.

  Correct Answer: AB

  Not all features present in Oracle Database Enterprise Edition are available in ATP, and some some Oracle Database features are restricted, for example, database features designed for administration are not available. so you need to validate it first, You can find a complete list of the features that are not supported, https://docs.oracle.com/en/cloud/paas/atp-cloud/atpug/experienced-database-users.html#GUID58EE6599-6DB4-4F8E-816D-0422377857E5 Also, you must specify the initial storage required for your database but ADB is elastic, so it is possible to grow or shrink your database as needed.

• Question 30:

  You are working as a cloud consultant for a major media company. In the US and your client requested to

  consolidate all of their log streams, access logs, application logs, and security logs into a single system.

  The client wants to analyze all of their logs In real-time based on heuristics and the result should be

  validated as well. This validation process requires going back to data samples extracted from the last 8

  hours.

  What approach should you take for this scenario?

  A. Create an auto scaling pool of syslog-enabled servers using compute instances which will store the logs In Object storage, then use map reduce jobs to extract logs from Object storage, and apply heuristics on the logs.

  B. Create a bare-metal instance big enough to host a syslog enabled server to process the logs and store logs on the locally attached NVMe SSDs for rapid retrieval of logs when needed.

  C. Set up an OCI Audit service and ingest all the API arils from Audit service pragmatically to a client side application to apply heuristics and save the result in an OCI Object storage.

  D. Stream all the logs and cloud events of Events service to Oracle Streaming Service. Build a client process that will apply heuristics on the logs and store them in an Object Storage.

  Correct Answer: D

  The Oracle Cloud Infrastructure Streaming service provides a fully managed, scalable, and durable storage solution for ingesting continuous, high-volume streams of data that you can consume and process in real time. Streaming can be used for messaging, ingesting high-volume data such as application logs, operational telemetry, web click-stream data, or other use cases in which data is produced and processed continually and sequentially in a publish-subscribe messaging model. Streaming Usage Scenarios Here are some of the many possible uses for Streaming: Metric and log ingestion: Use the Streaming service as an alternative for traditional file-scraping approaches to help make critical operational data more quickly available for indexing, analysis, and visualization. Messaging: Use Streaming to decouple components of large systems. Streaming provides a pull/bufferbased communication model with sufficient capacity to flatten load spikes and the ability to feed multiple consumers with the same data independently. Key-scoped ordering and guaranteed durability provide reliable primitives to implement various messaging patterns, while high

  Infrastructure and apps event processing: Use Streaming as a unified entry point for cloud components to report their life cycle events for audit, accounting, and related activities.