Oracle 1Z0-1085-20 Online Practice Questions and Exam Preparation

Oracle 1Z0-1085-20 Online Questions & Answers

• Question 1:

  Which is NOT a valid business benefit for a customer considering migrating their infrastructure and apps to Oracle Cloud Infrastructure (OCI)?

  A. Faster go-to market
  B. Capital Expenditure to Operational Expenditure conversion
  C. Greater agility
  D. Increased Total Cost of Ownership (TCO)
  D. Increased Total Cost of Ownership (TCO)

  ---

  Oracle Cloud Infrastructure is a set of complementary cloud services that enable you to build and run a wide range of applications and services in a highly available hosted environment. Oracle Cloud Infrastructure offers high-performance

  compute capabilities (as physical hardware instances) and storage capacity in a flexible overlay virtual network that is securely accessible from your on- premises network.

  Reference:

  https://docs.cloud.oracle.com/en-us/iaas/Content/GSG/Concepts/baremetalintro.htm

  One of the major benefits of cloud computing is REDUCED TCO. Therefore, Increased TCO is the incorrect option.

  https://www.oracle.com/partners/en/partner-with-oracle/develop-solutions/why/increase-value- reduce-cost-3907933.pdf

• Question 2:

  You are setting up a proof of concept (POC) and need to quickly establish a secure between an on- premises data center and Oracle Cloud Infrastructure (OCI). Which OCI service should you implement?

  A. VCN Peering
  B. FastConnect
  C. Internet Gateway
  D. IPSec VPN
  D. IPSec VPN

  ---

  You can set up a single IPSec VPN with a simple layout that you might use for a proof of concept (POC).

  Reference:

  https://docs.cloud.oracle.com/en-us/iaas/Content/Network/Tasks/settingupIPsec.htm

  It is possible to set up a site-to-site Virtual Private Network (VPN) Connection between your on- premises network (a data center or corporate LAN) and your Oracle virtual cloud network (VCN) over a secure encrypted VPN. The VPN

  connection uses industry-standard IPSec protocols. The Oracle service that provides site-to-site connectivity is named VPN Connect (also referred to as an IPSec VPN).

  Reference:

  https://docs.cloud.oracle.com/en-us/iaas/Content/Network/Tasks/managingIPsec.htm

• Question 3:

  Which is NOT covered by Oracle Cloud Infrastructure (OCI) Service Level Agreement (SLA)?

  A. Manageability
  B. Performance
  C. Reliability
  D. Availability
  C. Reliability

  ---

  https://www.oracle.com/assets/paas-iaas-pub-cld-srvs-pillar-4021422.pdf Enterprises demand more than just availability from their cloud infrastructure. Mission-critical workloads also require consistent performance, and the ability to manage, monitor, and modify resources running in the cloud at any time. Only Oracle offers end-to-end SLAs covering performance, availability, manageability of services.

  

  Reference: https://www.oracle.com/in/cloud/iaas/sla.html

• Question 4:

  What is Oracle's responsibility according to the Oracle Cloud Infrastructure (OCI) shared-security model?

  A. Configuring OCI services securely
  B. Data classification and compliance
  C. Securing application workloads
  D. Security of data center facilities
  D. Security of data center facilities

  ---

  Oracle's mission is to build cloud infrastructure and platform services for your business to have effective and manageable security to run your mission-critical workloads and store your data with confidence. Oracle Cloud Infrastructure offers best-in-class security technology and operational processes to secure its enterprise cloud services. However, for you to securely run your workloads in Oracle Cloud Infrastructure, you must be aware of your security and compliance responsibilities. By design, Oracle provides security of cloud infrastructure and operations (cloud operator access controls, infrastructure security patching, and so on), and you are responsible for securely configuring your cloud resources. Security in the cloud is a shared responsibility between you and Oracle. In a shared, multi-tenant compute environment, Oracle is responsible for the security of the underlying cloud infrastructure (such as data-center facilities, and hardware and software systems) and you are responsible for securing your workloads and configuring your services (such as compute, network, storage, and database) securely. In a fully isolated, single-tenant, bare metal server with no Oracle

  software on it, your responsibility increases as you bring the entire software stack (operating systems and above) on which you deploy your applications. In this environment, you are responsible for securing your workloads, and configuring

  your services (compute, network, storage, database) securely, and ensuring that the software components that you run on the bare metal servers are configured, deployed, and managed securely.

  More specifically, your and Oracle's responsibilities can be divided into the following areas:

  

  Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Security/Concepts/security_overview.htm

• Question 5:

  Which Oracle Cloud Infrastructure compute shapes does not incur instance billing in a STOPPED state?

  A. Dense I/O
  B. Standard
  C. GPU
  D. HPC
  B. Standard

  ---

  A shape is a template that determines the number of CPUs, amount of memory, and other resources that are allocated to an instance. Standard shapes don't incur costs in a STOPPED state.

  

  Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Compute/References/computeshapes.htm#baremetalshapes__bm-standard

• Question 6:

  Which two security capabilities are offered by Oracle Cloud Infrastructure?

  A. Always on data encryption for data-at-rest.
  B. Certificate Management service
  C. Captcha
  D. Key Management service
  E. Managed Active Directory service
  A. Always on data encryption for data-at-rest.
  D. Key Management service

  ---

  Oracle Cloud Infrastructure's security approach is based on seven core pillars. Each pillar has multiple solutions designed to maximize the security and compliance of the platform and to help customers to improve their security posture. High Availability: Offer fault-independent data centers that enable high-availability scale-out architectures and are resilient against network attacks, ensuring constant uptime in the face of disaster and security attack. Customer Isolation: Allow customers to deploy their application and data assets in an environment that commits full isolation from other tenants and Oracle's staff. Data Encryption: Protect customer data at-rest and in-transit in a way that allows customers to meet their security and compliance requirements with respect to cryptographic algorithms and key management. Security Controls: Offer customers effective and easy-to-use application, platform, and network security solutions that allow them to protect their workloads, have a secure application delivery using a global edge network, constrain access to their services, and segregate operational responsibilities to reduce the risk associated with malicious and accidental user actions. Visibility: Offer customers comprehensive log data and security analytics that they can use to audit and monitor actions on their resources, allowing them to meet their audit requirements and reduce security and operational risk. Secure Hybrid Cloud: Enable customers to use their existing security assets, such as user accounts and policies, as well as third-party security solutions, when accessing their cloud resources and securing their data and application assets in the cloud. Verifiably Secure Infrastructure: Follow rigorous processes and use effective security controls in all phases of cloud service development and operation. Demonstrate adherence to Oracle's strict security standards through third-party audits, certifications, and attestations. Help customers demonstrate compliance readiness to internal security and compliance teams, their customers, auditors, and regulators. Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Security/Concepts/security_overview.htm

• Question 7:

  Which OCI storage service does not provide encryption for data at rest?

  A. File Storage
  B. Block Volume
  C. Local NVMe
  D. Object Storage
  C. Local NVMe

  ---

  NVMe stands for non-volatile memory express. It is a storage protocol created to fasten the transfer of data between enterprise and client systems and solid-state drives (SSDs) over a computer's high-speed Peripheral Component

  Interconnect Express bus. The characteristics are:

  1) Local NVMe is NVMe SSD-based temporary storage.

  2) It is the locally-attached NVMe devices to the OCI compute instance

  3) It is used very high storage performance requirements, lots of throughput, lots of IOPS, local storage and when you don't want to go out on network

  4) Oracle does not protect in any way through RAID, or snapshots, or backup out of the box and data is not encrypted at rest.

  Reference:

  https://techgoeasy.com/local-nvme-storage-oci/

• Question 8:

  Which security service is offered by Oracle Cloud Infrastructure?

  A. Certificate Management System
  B. Key Management
  C. Managed Active Directory
  D. Managed Intrusion Detection
  B. Key Management

  ---

  Oracle Cloud Infrastructure Key Management is a managed service that enables you to encrypt your data using keys that you control.

  

  Reference: https://www.oracle.com/in/cloud/security/cloud-services/key-management.html

• Question 9:

  You run 5 Oracle Cloud Infrastructure (OCI) Virtual Machine instances on an OCI dedicated virtual host. How will this deployment be billed?

  A. Only the dedicated virtual machine host will be billed
  B. The dedicated virtual machine host and the boot volumes of each instance will be billed
  C. The dedicated virtual machine host all 5 instances, and the boot volume of each instance will be billed
  D. All 5 instances will be billed on the basis of the number of OCPUs
  B. The dedicated virtual machine host and the boot volumes of each instance will be billed

  ---

  You must create a dedicated virtual machine host before you can place any instances on it. When creating the dedicated virtual machine host, you select an availability domain and fault domain to launch it in. All the VM instances that you place on the host will subsequently be created in this availability domain and fault domain. You also select a compartment when you create the dedicated virtual machine host, but you can move the host to a new compartment later without impacting any of the instances placed on it. You can also create the instances in a different compartment than the dedicated virtual machine host, or move them to difference compartments after they have been launched. You are billed for the dedicated virtual machine host as soon as you create it, but you are not billed for any of the individual VM instances you place on it. You will still be billed for image licensing costs if they apply to the image you are using for the VM instances.

  Read more: https://docs.cloud.oracle.com/en-us/iaas/Content/Compute/Concepts/dedicatedvmhosts.htm

• Question 10:

  A customer wants to deploy a customized e commerce Web application using multiple virtual machines, block storage, databases, load balancer and web application firewall. What cloud model can be used to host this application?

  A. Software as a Service (SaaS)
  B. Platform as a Service (PaaS)
  C. Anything as a Service (XaaS)
  D. Infrastructure as a Service (IaaS)
  D. Infrastructure as a Service (IaaS)

  ---

  https://www.oracle.com/cloud/what-is-iaas/

  What Is IaaS?

  Infrastructure as a service (IaaS) is a type of cloud service model in which computing resources are hosted in the cloud. Businesses can use the IaaS model to shift some or all of their use of on- premises or colocated data center

  infrastructure to the cloud, where it is owned and managed by a cloud provider. These infrastructure elements can include compute, network, and storage hardware as well as other components and software. In the IaaS model, the cloud

  provider owns and operates the hardware and software and also owns or leases the data center. When you have an IaaS solution, you rent the resources like compute or storage, provision them when needed, and pay for the resources your

  organization consumes. For some resources such as compute, you'll pay for the resources you use. For others such as storage, you'll pay for capacity.

  How Does IaaS Work?

  In a typical IaaS model, a business--which can be of any size--consumes services like compute, storage, and databases from a cloud provider. The cloud provider offers those services by hosting hardware and software in the cloud. The

  business will no longer need to purchase and manage its own equipment, or space to host the equipment, and the cost will shift to a pay-as-you-go model. When the business needs less, it pays for less. And when it grows, it can provision

  additional computing resources and other technologies in minutes. In contrast, in a traditional on-premises scenario, a business manages and maintains its own data center. The business must invest in servers, storage, software, and other

  technologies, and hire an IT staff or contractors to purchase, manage, and upgrade all the equipment and licenses. The data center has to be built to meet peak demand, even though sometimes workloads decline and those resources stand

  idle. Conversely, if the business grows quickly, the IT department might struggle to keep up.

  Reference:

  https://www.oracle.com/in/cloud/what-is-iaas/