An Oracle Cloud Infrastructure (OCI) Public Load Balancer's SSL certificate is expiring soon. You noticed the Load Balancer is configured with SSL Termination only. When the certificate expires, data traffic can be interrupted and security compromised. What steps do you need to take to prevent this situation?
-
A
Add the new SSL certificate to the Load Balancer, update backend servers to work with a new certificate and edit listeners so they can use the new certificate bundle.
-
B
Add the new SSL certificate to the Load Balancer, update listeners and backend sets so they can use the new certificate bundle.
-
C
Add the new SSL certificate to the Load Balancer and implement end to end SSL so it can encrypt the traffic from clients all the way to the backend servers.
-
D
Add the new SSL certificate to the Load Balancer and update backend servers to use the new certificate bundle.
-
E
Add the new SSL certificate to the Load Balancer and update listeners to use the new certificate bundle.
Reveal answer details
Close answer details
You are helping a customer troubleshoot a problem.
The customer has several Oracle Linux servers in Based on cost considerations, which option will fix this Issue?
-
A
Create a Public Load Balancer In front of the servers and add the servers to the Backend Set of the Public Load Balancer.
-
B
Create another Internet Gateway and configure it as route target for the private subnet.
-
C
Implement a NAT instance In the public subnet of the VCN and configure the NAT instance as the route target for the private subnet.
-
D
Create a NAT gateway in the VCN and configure the NAT gateway as the route target for the private subnet.
Reveal answer details
Close answer details
Question 3
Multiple choice
As a part of migration exercise for an existing on premises application to Oracle Cloud Infrastructure (OCT), yon ore required to transfer a 7 TB file to OCI Object Storage. You have decided to upload functionality of Object Storage. Which two statements are true?
-
A
Active multipart upload can be checked by listing all parts that have been uploaded, however It Is not possible to list information for individual object part in an active multipart upload
-
B
It is possible to spill this fileInto multiple parts using the APIs provided by Object Storage.
-
C
It is possible to split this file into multiple parts using rclone tool provided by Object Storage.
-
D
After initiating a multipart upload by making a CreateMultlPartUpload RESI API Call, the upload remains active until you explicitly commit it or abort.
-
E
Contiguous numbers need to be assigned for each part so that Object Storage constructs the object by ordering, part numbers in ascending order
Reveal answer details
Close answer details
Correct answersA, D
ExplanationYou can check on an active multipart upload by listing all parts that have been uploaded. (You cannot list information for an individual object part in an active multipart upload.) After you finish creating object parts, initiate a multipart upload by making a CreateMultipartUpload REST API call. Provide the object name and any object metadata. Object Storage responds with a unique upload ID that you must include in any requests related to this multipart upload. Object Storage also marks the upload as active. The upload remains active until you explicitly commit it or abort it.
Question 4
Multiple choice
After performing maintenance on an Oracle Linux compute instance the system is returned to a running state You attempt to connect using SSH but are unable to do so. You decide to create an instance console connection to troubleshoot the issue. Which three tasks would enable you to connect to the console connection and begin troubleshooting?
-
A
Use SSH to connect to the public: IP address of the compute Instance and provide the console connection OCID as the username.
-
B
edit the Linux boot menu to enable access to console.
-
C
Use SSH to connect to the service endpoint of the console connection service
-
D
Reboot the compute instance using the Oracle Cloud Infrastructure (OCI) Management Console
-
E
Upload an API signing key for console connection authentication.
-
F
Stop the compute Instance using the Oracle cloud Infrastructure (OCI) Command Line interface (CLI).
Reveal answer details
Close answer details
Correct answersB, C, D
ExplanationThe Oracle Cloud Infrastructure Compute service provides console connections that enable you to remotely troubleshoot malfunctioning instances, such as: An imported or customized image that does not complete a successful boot.
A previously working instance that stops responding. the steps to connect to console and troubleshoot the OS Issue 1- Before you can connect to the serial console you need to create the instance console connection. Open the navigation menu. Under Core Infrastructure, go to Compute and click Instances.
Click the instance that you're interested in.
Under Resources, click Console Connections.
Click Create Console Connection.
Upload the public key (.pub) portion for the SSH key. You can browse to a public key file on your computer or paste your public key into the text box.
Click Create Console Connection.
When the console connection has been created and is available, the status changes to ACTIVE. 2- Connecting to the Serial Console you can connect to the serial console by using a Secure Shell (SSH) connection to the service endpoint of the console connection service Open the navigation menu. Under Core Infrastructure, go to Compute and click Instances.
Click the instance that you're interested in.
Under Resources, click Console Connections.
Click the Actions icon (three dots), and then click Copy Serial Console Connection for Linux/Mac. Paste the connection string copied from the previous step to a terminal window on a Mac OS X or Linux system, and then press Enter to connect to the console. If you are not using the default SSH key or ssh-agent, you can modify the serial console connection Press Enter again to activate the console. 3- Troubleshooting Instances from Instance Console Connections To boot into maintenance mode Reboot the instance from the Console.
When the reboot process starts, switch back to the terminal window, and you see Console messages start to appear in the window. As soon as you see the GRUB boot menu appear, use the up/down arrow key to stop the automatic boot process, enabling you to use the boot menu. In the boot menu, highlight the top item in the menu, and type e to edit the boot entry. In edit mode, use the down arrow key to scroll down through the entries until you reach the line that starts with either linuxefi for instances running Oracle Autonomous Linux 7.x or Oracle Linux 7.x, or kernel for instances running Oracle Linux 6.x.
At the end of that line, add the following: init=/bin/bash Reboot the instance from the terminal window by entering the keyboard shortcut CTRL+X.
A hospital in Austin has hosted its web based medical records portal entirely In Oracle cloud Infrastructure (OCI) using Compute Instances for its web-tier and DB system database for its data tier. To validate compliance with Health Insurance Portability and Accountability (HIPAA), the security professional to check their systems it was found that there are a lot of unauthorized coming requests coming from a set of IP addresses originating from a country in Southeast Asia. Which option can mitigate this type of attack?
-
A
Block the attacking IP address by creating by Network Security Group rule to deny access to the compute Instance where the web server Is running
-
B
Block the attacking IP address by implementing a OCI Web Application Firewall policy using Access Control Rules
-
C
Mitigate the attack by changing the Route fable to redirect the unauthorized traffic to a dummy Compute instance
-
D
Block the attacking IP address by creating a Security List rule to deny access to the subnet where the web server Is running
Reveal answer details
Close answer details
Correct answerB
ExplanationWAF can protect any internet facing endpoint, providing consistent rule enforcement across a customer's applications.
WAF provides you with the ability to create and manage rules for internet threats including Cross-Site Scripting (XSS), SQL Injection and other OWASP-defined vulnerabilities. Unwanted bots can be mitigated while tactically allowed desirable bots to enter. Access rules can limit based on geography or the signature of the request.
As a WAF administrator you can define explicit actions for requests that meet various conditions.
Conditions use various operations and regular expressions. A rule action can be set to log and allow, detect, or block requests
A new International hacktivfst group based in London, launched a wide scale cyber attacks Including SQL Injection and Cross-Site Scripting (XSS) across multiple websites which are hosted in Oracle Cloud Infrastructure (OCI). As an IT consultant, you must configure a Web Application Firewall (WAF) to protect these website against the attacks. How should you configure your WAF to protect the website against those attacks?
-
A
Enable an Access Rule that contains XSS Filters Categories and SQL Filters Categories.
-
B
Enable a Protection Rule to block the attacks based on HTTP Headers that contain XSS and SQL strings.
-
C
Enable a Protection Rule that contains XSS Filters Categories and SQL Filters Categories.
-
D
Enable an Access Rule to block the IP Address range from London.
-
E
Enable a Protection Rule to block requests that came from London.
Reveal answer details
Close answer details
Question 7
Multiple choice
A manufacturing company is planning to migrate their on-premises database to OCI and has hired you for the migration. Customer has provided following information regarding their existing onpremises database: Database version, host operating system and version, database character set, storage for data staging, acceptable length of system outage. What additional information do you need from customer in order to recommend a suitable migration method? Choose two
-
A
Elapsed time since database was last patched
-
B
On-premises host operating system and version
-
C
Number of active connections
-
D
Data types used in the on-premises database
-
E
Top 5 longest running queries
Reveal answer details
Close answer details
Correct answersB, D
ExplanationNot all migration methods apply to all migration scenarios. Many of the migration methods apply only if specific characteristics of the source and destination databases match or are compatible. Moreover, additional factors can affect which method you choose for your migration from among the methods that are technically applicable to your migration scenario. Some of the characteristics and factors to consider when choosing a migration method are: On-premises database version Database service database version On-premises host operating system and version On-premises database character set Quantity of data, including indexes Data types used in the on-premises database Storage for data staging Acceptable length of system outage Network bandwidth
Question 8
Multiple choice
Multiple departments In your company use a shared Oracle Cloud Infrastructure (OCI) tenancy to Implement their projects. You are in charge of managing the cost of OCI resources in the tenancy and need to obtain better Insights Into department's usage. Which three options can you implement together to accomplish this?
-
A
Create a budget that matches your commitment amount and an alert at 100 percent of the forecast
-
B
Set up a consolidated budget tracking lags to analyze costs in ,1 granular manner
-
C
Set up different compartments for each department then track and analyze cost per compartment
-
D
Use the billing cost tracking report to analyze costs
-
E
Set up a tag default that automatically applies tags to all specified resources created In a compartment then use these tags for cost analysis.
Reveal answer details
Close answer details
Correct answersA, C, E
Explanationbudgets
You can use budgets to track costs in your tenancy. After creating a budget for a compartment, you can set up alerts that will notify you if a budget is forecast to be exceeded or if spending surpasses a certain amount.
OCI Cost Analysis
Visualization tools Help understand spending patterns at a glance Filter costs by Date, Tags and Compartments Frend lines show how spending patterns are changing
To use Cost Analysis you must be a member of the Administrators group 
Question 9
Multiple choice
A large financial services company has used 2 types of Oracle DB Systems. In Oracle Cloud Infrastructure (OCI) to store user dat.
One is running on a VM.Standard2.8 shape and the other on a VM.Standard 2.4 shape.
As business grows, data is growing rapidly on both the databases and performance is also degrading.
The company wants to address this problem with a viable and economical solution.
As the solution architect for that company you have suggested that they move their databases to Autonomous Transaction Processing Serverless (ATP-S) database. Which two factors should you consider before you arrived at that recommendation?
-
A
You verified that ATP S supports the database features and options currently being used by the 2 databases.
-
B
Validate that ATP-S will support the storage and processing requirements for the 2 databases over the life cycle of the business applications.
-
C
Confirm that ATP-S allows customers to compress tablespaces to reduce storage costs
-
D
Upon provisioning, ATP-S automatically scales up CPU to meet the application's processing requirements.
Reveal answer details
Close answer details
Correct answersA, B
ExplanationNot all features present in Oracle Database Enterprise Edition are available in ATP, and some some Oracle Database features are restricted, for example, database features designed for administration are not available. so you need to validate it first, You can find a complete list of the features that are not supported,
https://docs.oracle.com/en/cloud/paas/atp-cloud/atpug/experienced-database-users.html#GUID-58EE6599-6DB4-4F8E-816D-0422377857E5.
Also, you must specify the initial storage required for your database but ADB is elastic, so it is possible to grow or shrink your database as needed.
Question 10
Multiple choice
An upcoming e-commerce company has deployed their online shopping application on OCI. The application was deployed on compute instances with autoscaling configuration for application servers fronted by a load balancer and OCI Autonomous Transaction Processing (ATP) in the backend. In order to promote their e-commerce platform 50% discount was announced on all the products for a limited period.
During the day 1 of promotional period it was observed that the application is running slow and company's hotline is flooded with complaints. What could be two possible reasons for this situation?
-
A
The health check on some of the backend servers has failed and the load balancer has taken those servers temporarily out of rotation
-
B
As part of autoscaling, the load balancer shape has dynamically changed to a larger shape to handle more incoming traffic and the system was slow for a short time during this change
-
C
The health check on some of the backend servers has failed and the load balancer was rebooting these servers.
-
D
The autoscaling has already scaled to the maximum number of instances specified in the configuration and there is no room of scaling
Reveal answer details
Close answer details
Question 11
Single choice
You have provisioned a new VM.DenseIO2.24 compute instance with local NVMe drives. The compute instance is running production application. This is a write heavy application, with a significant Impact to the business it the application goes down. What should you do to help maintain write performance and protect
against NVMe devices failure.
-
A
NVMe drive have built in capability to recover themself so no other actions are required
-
B
Configure RAID 6 for NVMe devices.
-
C
Configure RAID 1 for NVMe devices.
-
D
Configure RAID 10 for NVMe devices.
Reveal answer details
Close answer details
Correct answerD
ExplanationVM.DeselO2.24 compute instance include locally attached NVMe devices. These devices provide extremely low latency, high performance block storage that is ideal for big data, OLTP, and any other workload that can benefit from high-performance block storage. A protected RAID array is the most recommended way to protect against an NVMe device failure. There are three RAID levels that can be used for the majority of workloads: RAID 1: An exact copy (or mirror) of a set of data on two or more disks; a classic RAID 1 mirrored pair
Question 12
Single choice
A large London based eCommerce company is running Oracle DB System Virtual RAC database on Oracle Cloud Infrastructure (OCI) for their eCommerce application activity. They are launching a new product soon, which is expected to sell in large quantities all over the world. The application architecture should have minimal cost, no data loss, no performance impacts during the database backup windows and should have minimal downtime.
-
A
Launch a new VM RAC database in another availability domain, launch a compute instance, deploy Oracle GoldenGate on it and then configure it to replicate the data from the eCommerce Database over to the new RAC database using GoldenGate. Take backups from the new VM RAC database.
-
B
Turn off automated backups from the eCommerce database, implement Oracle Data Guard with the Standby database deployed on another availability domain, take backups from the standby database.
-
C
Launch a new VM RAC database in another availability domain, launch a compute instance, deploy Oracle GoldenGate on it and then configure bi-directional replication from the eCommerce Database over to the new VM RAC database using GoldenGate. Take backups from the new VM RAC database.
-
D
Turn off automatic backups from the eCommerce database, implement Oracle Active Data Guard with the standby database deployed on another availability domain, and take backups from the standby database.
Reveal answer details
Close answer details
Correct answerC
ExplanationActive Data Guard or GoldenGate are used for disaster recovery when fast recovery times or additional levels of data protection are required. And offload queries and backup to standby system. Oracle GoldenGate to support a disaster recovery site is to have a working bi-directional data flow, from the primary system to the live-standby system and vice versa. DataGuard and Automatic Backup
You can enable the Automatic Backup feature on a database with the standby role in a Data Guard association. However, automatic backups for that database will not be created until it assumes the primary role.
|