Oracle Oracle Certifications 1Z0-997 Questions & Answers

• Question 41:

  You are a solutions architect for a global health care company which has numerous data centers around the globe. Due to the ever growing data that your company is storing, you were Instructed to set up a durable, cost effective solution to archive you data from your existing on-premises tape based backup Infrastructure to Oracle Cloud Infrastructure (OCI). What is the most-effective mechanism to Implement this requirement?

  A. Use the File Storage Service in OCI and copy the data from your existing tape based backup to the shared file system

  B. Setup an on premises OCI Storage Gateway which will back up your data to OCI Object Storage Archive tier.(Correct)

  C. Setup an on premises OCI Storage Gateway which will back up your data to OCI object Storage Standard tier. Use Object Storage life cycle policy management to move any data older than 30 days from Standard to Archive tier.

  D. Setup an on-promises OCI Storage Gateway which will back up your data to OCI Object Storage Standard

  E. Setup fastConnect to connect your on premises network to your OCI VCN and use rsync tool to copy your data to OCI Object Storage Archive tier.

  Correct Answer: B

  Oracle Cloud Infrastructure offers two distinct storage tiers for you to store your unstructured data. Use the Object Storage Standard tier for data to which you need fast, immediate, and frequent access. Use the Archive Storage service's Archive tier for data that you access infrequently, but which must be preserved for long periods of time. Both storage tiers use the same manageable resources (for example, objects and buckets). The difference is that when you upload a file to Archive Storage, the object is immediately archived. Before you can access an archived object, you must first restore the object to the Standard tier. you can use Storage Gateway to move files to Oracle Cloud Infrastructure Archive Storage as a cost effective backup solution. You can move individual files and compressed or uncompressed ZIP or TAR archives. Storing secondary copies of data is an ideal use case for Storage Gateway.

• Question 42:

  You are designing the network infrastructure for two application servers: appserver-1 and appserver- 2 running in two different subnets inside the same Virtual Cloud Network (VCN) Oracle Cloud Infrastructure (OCI). You have a requirement where your end users will access appserver-1 from the internet and appserver-2 from the on-premises network. The on-premises network is connected to your VCN over a FastConnect virtual circuit. How should you design your routing configuration to meet these requirements?

  A. Configure a single routing table (Route Table-1) that has two set of rules. One that has route to internet via the internet Gateway and another that propagate specific routes for the on-premise network via the Dynamic Routing Gateway.

  Associate the routing table with all the VCN subnets.

  B. Configure a single routing table (Routing Table-1) that has two set of rules: one that has route to internet via the Internet Gateway and another that propagates specific routes for the on-premises network via Dynamic Routing Gateway (DRG). Associate the routing table with the VCN.

  C. Configure two routing tables: Route Table-1 that has a route to internet via the Internet gateway.Associate this route table to the subnet containing appserver-1. Route Table-2 that propagate specific routes for the on-premises network via the Dynamic Routing Gateway (DRG) Associate this route table to subnet containing appserver-2.

  D. Configure two routing table (Route table-1 Route Table-2) that have rule to route all traffic via the Dynamic Routing Gateway (DRG) Associate the two routing tables with all the VCN subnets.

  Correct Answer: C

• Question 43:

  An automobile company wants to deploy their CRM application for Oracle Database on Oracle Cloud Infrastructure (OC1) DB Systems for one of major clients. In compliance with the Business Continuity Program of the client, they need to provide a Recovery Point objective (RPO) of 24 hours and a Recovery time objective (RTO) of 24 hours and Recovery Time Objective (RTO) of 1 hour. The CRM application should be available oven in me event that an entire on Region is down. Which approach Is the most suitable and cost effective configuration for this scenario?

  A. Deploy a 1 node VM Oracle database in one region and replicate the database to a 1 node VM Oracle database in another region using a manual setup and configuration of Oracle Data Guard.

  B. Deploy a 2 node Virtual Machine (VM) Oracle RAC database in one region and replicate the database to a 2 node VM Oracle RAC database in another region using a manual setup and

  C. Deploy a 1 node VM Oracle database in one region. Manual Configure a Recovery Manager (RMAN) database backup schedule to take hourly database backups. Asynchronously copy the database backups to object storage in another OCI region, If the primary OCI region is unavailable launch a new 1 new VM Database in the other OCI region restore the production database from the backup.

  D. Deploy an Autonomous Transaction Processing (Serverless) database in one region and replicate it to an Autonomous Transaction Processing (Serverless) database in another region Oracle GoldenGate.

  Correct Answer: A

  You can configure the Autonomous Database instance as a target database for Oracle GoldenGate. But You can't set up Oracle Autonomous Database as a source database for Oracle GoldenGate. Recovery Point objective (RPO) of 24 hours and Recovery Time Objective (RTO) of 1 hour

  -

  To provision new VM and restore the production database from the backup on object storage, will exceed the RTO 1 hour

  -

  You can create the standby DB system in a different availability domain from the primary DB system for availability and disaster recovery purposes. With Data Guard and switchover/failover can meet RTO 1 hour.

  -

  RAC Database is not required in this solution. Standalone will be most suitable and cost effective

• Question 44:

  A hospital in Austin has hosted its web based medical records portal entirely In Oracle cloud Infrastructure (OCI) using Compute Instances for its web-tier and DB system database for its data tier. To validate compliance with Health Insurance Portability and Accountability (HIPAA), the security professional to check their systems it was found that there are a lot of unauthorized coming requests coming from a set of IP addresses originating from a country in Southeast Asia. Which option can mitigate this type of attack?

  A. Block the attacking IP address by creating by Network Security Group rule to deny access to the compute Instance where the web server Is running

  B. Block the attacking IP address by implementing a OCI Web Application Firewall policy using Access Control Rules

  C. Mitigate the attack by changing the Route fable to redirect the unauthorized traffic to a dummy Compute instance

  D. Block the attacking IP address by creating a Security List rule to deny access to the subnet where the web server Is running

  Correct Answer: B

  WAF can protect any internet facing endpoint, providing consistent rule enforcement across a customer's applications. WAF provides you with the ability to create and manage rules for internet threats including Cross-Site Scripting (XSS), SQL Injection and other OWASP-defined vulnerabilities. Unwanted bots can be mitigated while tactically allowed desirable bots to enter. Access rules can limit based on geography or the signature of the request. As a WAF administrator you can define explicit actions for requests that meet various conditions. Conditions use various operations and regular expressions. A rule action can be set to log and allow, detect, or block requests

• Question 45:

  Multiple departments In your company use a shared Oracle Cloud Infrastructure (OCI) tenancy to Implement their projects. You are in charge of managing the cost of OCI resources in the tenancy and need to obtain better Insights Into department's usage. Which three options can you implement together to accomplish this?

  A. Create a budget that matches your commitment amount and an alert at 100 percent of the forecast

  B. Set up a consolidated budget tracking lags to analyze costs in ,1 granular manner

  C. Set up different compartments for each department then track and analyze cost per compartment

  D. Use the billing cost tracking report to analyze costs

  E. Set up a tag default that automatically applies tags to all specified resources created In a compartment

  then use these tags for cost analysis.

  Correct Answer: ACE

  budgets You can use budgets to track costs in your tenancy. After creating a budget for a compartment, you can set up alerts that will notify you if a budget is forecast to be exceeded or if spending surpasses a certain amount. OCI Cost Analysis Visualization tools Help understand spending patterns at a glance Filter costs by Date, Tags and Compartments Frend lines show how spending patterns are changing To use Cost Analysis you must be a member of the Administrators group

  

• Question 46:

  A large London based eCommerce company is running Oracle DB System Virtual RAC database on Oracle Cloud Infrastructure (OCI) for their eCommerce application activity. They are launching a new product soon, which is expected to sell in large quantities all over the world. The application architecture should have minimal cost, no data loss, no performance impacts during the database backup windows and should have minimal downtime.

  A. Launch a new VM RAC database in another availability domain, launch a compute instance, deploy Oracle GoldenGate on it and then configure it to replicate the data from the eCommerce Database over to the new RAC database using GoldenGate. Take backups from the new VM RAC database.

  B. Turn off automated backups from the eCommerce database, implement Oracle Data Guard with the Standby database deployed on another availability domain, take backups from the standby database.

  C. Launch a new VM RAC database in another availability domain, launch a compute instance, deploy Oracle GoldenGate on it and then configure bi-directional replication from the eCommerce Database over to the new VM RAC database using GoldenGate. Take backups from the new VM RAC database.

  D. Turn off automatic backups from the eCommerce database, implement Oracle Active Data Guard with the standby database deployed on another availability domain, and take backups from the standby database.

  Correct Answer: C

  Active Data Guard or GoldenGate are used for disaster recovery when fast recovery times or additional levels of data protection are required. And offload queries and backup to standby system. Oracle GoldenGate to support a disaster recovery site is to have a working bi-directional data flow, from the primary system to the live-standby system and vice versa.

  DataGuard and Automatic Backup You can enable the Automatic Backup feature on a database with the standby role in a Data Guard association. However, automatic backups for that database will not be created until it assumes the primary role.

• Question 47:

  After performing maintenance on an Oracle Linux compute instance the system is returned to a running state You attempt to connect using SSH but are unable to do so. You decide to create an instance console connection to troubleshoot the issue. Which three tasks would enable you to connect to the console connection and begin troubleshooting?

  A. Use SSH to connect to the public: IP address of the compute Instance and provide the console connection OCID as the username.

  B. edit the Linux boot menu to enable access to console.

  C. Use SSH to connect to the service endpoint of the console connection service

  D. Reboot the compute instance using the Oracle Cloud Infrastructure (OCI) Management Console

  E. Upload an API signing key for console connection authentication.

  F. Stop the compute Instance using the Oracle cloud Infrastructure (OCI) Command Line interface (CLI).

  Correct Answer: BCD

  The Oracle Cloud Infrastructure Compute service provides console connections that enable you to

  remotely troubleshoot malfunctioning instances, such as:

  An imported or customized image that does not complete a successful boot.

  A previously working instance that stops responding.

  the steps to connect to console and troubleshoot the OS Issue 1- Before you can connect to the serial

  console you need to create the instance console connection. Open the navigation menu. Under Core

  Infrastructure, go to Compute and click Instances.

  Click the instance that you're interested in.

  Under Resources, click Console Connections.

  Click Create Console Connection.

  Upload the public key (.pub) portion for the SSH key. You can browse to a public key file on your computer

  or paste your public key into the text box.

  Click Create Console Connection.

  When the console connection has been created and is available, the status changes to ACTIVE.

  2- Connecting to the Serial Console

  you can connect to the serial console by using a Secure Shell (SSH) connection to the service endpoint

  of the console connection service

  Open the navigation menu. Under Core Infrastructure, go to Compute and click Instances.

  Click the instance that you're interested in.

  Under Resources, click Console Connections.

  Click the Actions icon (three dots), and then click Copy Serial Console Connection for Linux/Mac. Paste

  the connection string copied from the previous step to a terminal window on a Mac OS X or Linux system, and then press Enter to connect to the console. If you are not using the default SSH key or ssh-agent, you can modify the serial console connection

  Press Enter again to activate the console. 3- Troubleshooting Instances from Instance Console Connections To boot into maintenance mode Reboot the instance from the Console. When the reboot process starts, switch back to the terminal window, and you see Console messages start to appear in the window. As soon as you see the GRUB boot menu appear, use the up/down arrow key to stop the automatic boot process, enabling you to use the boot menu. In the boot menu, highlight the top item in the menu, and type e to edit the boot entry. In edit mode, use the down arrow key to scroll down through the entries until you reach the line that starts with either linuxefi for instances running Oracle Autonomous Linux 7.x or Oracle Linux 7.x, or kernel for instances running Oracle Linux 6.x. At the end of that line, add the following: init=/bin/bash Reboot the instance from the terminal window by entering the keyboard shortcut CTRL+X.

• Question 48:

  A cost conscious fashions design company which sells bags, clothes, and other luxury items has recently decided to more all of the their on-premises infrastructure Oracle Cloud Infrastructure (OCI), One of their on-premises application is running on an NGINX server and the Oracle Database is running in a 2 node Oracle Real Application Clusters (RAC) configuration. Based on cost considerations, what is an effective mechanism to migrate the customer application to OCI and set up regular automated backups?

  A. Launch a compute Instance and run a NGINX server to host the application. Deploy a 2 node VM DB Systems with oracle RAC enabled import the on premises database to OCI VM DB Systems using oracle Data Pump and then enable automatic backups.

  B. Launch a compute Instance and run an NGINX server to host the application. Deploy Exadata Quarter Rack, enable automatic backups and import the database using Oracle Data Pump.

  C. Launch a compute Instance for both the NGINX application server and the database server. Attach block volumes on the database server compute instance and enable backup policy to backup the block volumes.

  D. Launch a Compute instance and run a NGINX Server to host the application. Deploy a 2 node VM DB Systems with Oracle RAC enabled Import the on premises database to OCI VM DB Systems using data pump and then enable automatic backup- Also, enable Oracle Data Guard on the database server

  Correct Answer: A

  Based on cost considerations will exclude the Exadata. and there's no need for Data Guard Cost Estimator https://www.oracle.com/cloud/cost-estimator.html

  

• Question 49:

  All three Data Guard Configuration are fully supported on Oracle Cloud infrastructure (OCI). You want to deploy a maximum availability architecture (MAA) for database workload. Which option should you consider while designing your Data Guard configuration to ensure best RTO and PRO without causing any data loss?

  A. Configure "Maximum Protection" mode which provides zero data loss If the primary database fails.

  B. Configure "Maximum Performance" mode In SYNC mode between two availability domains (same region) which provides, the highest level of data protection that is possible without affecting the performance of the primary database.

  C. Configure ''Maximum Scalability" mode which provides the highest level of scalability without compromising the availability of the primary database.

  D. Configure ''Maximum Availability" mode in SYNC mode between two availability domains (same

  Correct Answer: D

  https://docs.cloud.oracle.com/en-us/iaas/Content/Resources/Assets/whitepapers/best-practices- for-dr-onoci.pdf All three Data Guard configurations are fully supported on Oracle Cloud Infrastructure. However, because of a high risk of production outage, we don't recommend using the maximum protection mode for your Data Guard configuration. We recommend using the maximum availability mode in SYNC mode between two availability domains (same region), and using the maximum availability mode in ASYNC mode between two regions. This architecture provides you the best RTO and RPO without causing any data loss. We recommend building this architecture in daisy-chain mode: the primary database ships redo logs to the first standby database in another availability domain in SYNC mode, and then the first standby database ships the redo logs to another region in ASYNC mode. This method ensures that your primary database is not doing the double work of shipping redo logs, which can cause performance impact on a production workload.

  

  This configuration offers the following benefits: No data loss within a region. No overhead on the production database to maintain standbys in another region. Option to configure lagging on the DR site if needed for business reasons. Option to configure multiple standbys in different regions without any additional overhead on the

  production database. A typical use case is a CDN application Bottom of Form

• Question 50:

  You are building a highly available and fault tolerant web application deployment for your company. Similar application delayed by competitors experienced web site attack including DDoS which resulted in web server failing. You have decided to use Oracle Web Application Firewall (WAF) to implement an architecture which will provide protection against such attacks and ensure additional configuration will you need to implement to make sure WAF is protecting my web application 24?. Which additional configuration will you need to Implement to make sure WAF Is protecting my web application 24??

  A. Configure auto scaling policy and it to WAF instance.

  B. Configure Control Rules to send traffic to multiple web servers

  C. Configure multiple origin servers

  D. Configure new rules based on now vulnerabilities and mitigations

  Correct Answer: C

  Origin Management An origin is an endpoint (typically an IP address) of the application protected by the WAF. An origin can be an Oracle Cloud Infrastructure load balancer public IP address. A load balancer IP address can be used for high availability to an origin. Multiple origins can be defined, but only a single origin can be active for a WAF. You can set HTTP headers for outbound traffic from the WAF to the origin server. These name value pairs are then available to the application. Oracle Cloud Infrastructure Web Application Firewall (WAF) is a cloud-based, Payment Card Industry (PCI) compliant, global security service that protects applications from malicious and unwanted internet traffic. WAF can protect any internet facing endpoint, providing consistent rule enforcement across a customer's applications. WAF provides you with the ability to create and manage rules for internet threats including Cross-Site Scripting (XSS), SQL Injection and other OWASP-defined vulnerabilities. Unwanted bots can be mitigated while tactically allowed desirable bots to enter. Access rules can limit based on geography or the signature of the request. Distributed Denial of Service (DDoS) A DDoS attack is an often intentional attack that consumes an entity's resources, usually using a large number of distributed sources. DDoS can be categorized into either Layer 7 or Layer 3/4 (L3/4) A layer 7 DDoS attack is a DDoS attack that sends HTTP/S traffic to consume resources and hamper a website's ability to delivery content or to harm the owner of the site. The Web Application Firewall (WAF) service can protect layer 7 HTTP-based resources from layer 7 DDoS and other web application attack vectors.