Oracle 1Z0-1085-22 Online Practice Questions and Exam Preparation

Oracle 1Z0-1085-22 Online Questions & Answers

• Question 21:

  What purpose does an Oracle Cloud Infrastructure (OCI) Dynamic Routing Gateway Serve?

  A. Enables OCI Compute Instance to privately connect to OCI Object Storage
  B. Enables OCI Compute instance to connect to on-promises environments
  C. Enable OCI Compute instances to connect to the internal
  D. Enables OCI Compute instances to be reached from internet
  B. Enables OCI Compute instance to connect to on-promises environments

  ---

  Explanation/Reference:

  You can think of a Dynamic Routing Gateway (DRG) as a virtual router that provides a path for private traffic (that is, traffic that uses private IPv4 addresses) between your VCN and networks outside the VCN's region. For example, if you use an IPSec VPN or Oracle Cloud Infrastructure FastConnect (or both) to connect your on-premises network to your VCN, that private IPv4 address traffic goes through a DRG that you create and attach to your VCN. For scenarios for using a DRG to connect a VCN to your on-premises network, see Networking Scenarios. For important details about routing to your on-premises network, see Routing Details for Connections to Your On-Premises Network. Also, if you decide to peer your VCN with a VCN in another region, your VCN's DRG routes traffic to the other VCN over a private backbone that connects the regions (without traffic traversing the internet). For information about connecting VCNs in different regions, see Remote VCN Peering (Across Regions). Reference: https://docs.cloud.oracle.com/en-us/iaas/tools/oci-cli/2.9.1/oci_cli_docs/cmdref/network/drg.html

• Question 22:

  According to Shared security model, which two are a customer's responsibilities in Oracle Cloud Infrastructure (OCI)?

  A. Physical security of OCI data center facilities
  B. Virtual Machine hypervisor
  C. Local NVMe data persistence
  D. Customer data
  E. Object Storage data durability
  D. Customer data
  E. Object Storage data durability

  ---

  Explanation/Reference:

  Customer and Oracle's responsibilities can be divided into the following areas: Physical Security: Oracle is responsible for protecting the global infrastructure that runs all of the services offered in Oracle Cloud Infrastructure. This infrastructure consists of the hardware, software, networking, and facilities that run Oracle Cloud Infrastructure services. Identity and Access Management (IAM): As with all Oracle cloud services, you should protect your cloud access credentials and set up individual user accounts. You are responsible for managing and reviewing access for your own employee accounts and for all activities that occur under your tenancy. Oracle is responsible for providing effective IAM services such as identity management, authentication, authorization, and auditing. Workload Security: You are responsible for protecting and securing the operating system and application layers of your compute instances from attacks and compromises. This protection includes patching applications and operating systems, operating system configuration, and protection against malware and network attacks. Oracle is responsible for providing secure images that are hardened and have the latest patches. Also, Oracle makes it simple for you to bring the same third-party security solutions that you use today. Data Classification and Compliance: You are responsible for correctly classifying and labeling your data and meeting any compliance obligations. Also, you are responsible for auditing your solutions to ensure that they meet your compliance obligations. Host Infrastructure Security: You are responsible for securely configuring and managing your compute (virtual hosts, containers), storage (object, local storage, block volumes), and platform (database configuration) services. Oracle has a shared responsibility with you to ensure that the service is optimally configured and secured. This responsibility includes hypervisor security and the configuration of the permissions and network access controls required to ensure that hosts can communicate correctly and that devices are able to attach or mount the correct storage devices. Network Security: You are responsible for securely configuring network elements such as virtual networking, load balancing, DNS, and gateways. Oracle is responsible for providing a secure network infrastructure. Client and Endpoint Protection: Your enterprise uses various hardware and software systems, such as mobile devices and browsers, to access your cloud resources. You are responsible for securing all clients and endpoints that you allow to access Oracle Cloud Infrastructure services.

  Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Security/Concepts/security_overview.htm

• Question 23:

  Which option provides the best performance for running OLTP workloads in Oracle Cloud Infrastructure?

  A. OCI Exadata DB Systems
  B. OCI Autonomous Data Warehouse
  C. OCI Virtual Machine Instance
  D. OCI Dedicated Virtual Host
  A. OCI Exadata DB Systems

  ---

  Explanation/Reference:

  On an Exadata DB system, all databases share dedicated storage servers which include flash storage. By default, the databases are given equal priority with respect to these resources. The Exadata storage management software uses a first

  come, first served approach for query processing. If a database executes a major query that overloads I/O resources, overall system performance can be slowed down. The I/O Resource Management (IORM) allows you to assign priorities to

  your databases to ensure critical queries are processed first when workloads exceed their resource allocations. You assign priorities by creating directives that specify the number of shares for each database. The number of shares

  corresponds to a percentage of resources given to that database when I/O resources are stressed.

  Directives work together with an overall optimization objective you set for managing the resources.

  The following objectives are available:

  1) Auto - Recommended. IORM determines the optimization objective and continuously and dynamically determines the optimal settings, based on the workloads observed, and resource plans enabled.

  2) Balanced - For critical OLTP and DSS workloads. This setting balances low disk latency and high throughput. This setting limits disk utilization of large I/Os to a lesser extent than low latency to achieve a balance between good latency and

  good throughput.

  3) High throughput - For critical DSS workloads that require high throughput.

  4) Low latency - For critical OLTP workloads. This setting provides the lowest possible latency by significantly limiting disk utilization.

  Reference:

  https://docs.cloud.oracle.com/en-us/iaas/Content/Database/Tasks/examanagingiorm.htm

• Question 24:

  Which two are enabled by Oracle Cloud Infrastructure Fault Domains?

  A. Protect against unexpected hardware or power supply failures
  B. To meet requirements for legal jurisdictions
  C. To mitigate the risk of large scale events such as earthquakes
  D. Build replicated systems for disaster recovery
  E. Protect against planned hardware maintenance
  A. Protect against unexpected hardware or power supply failures
  E. Protect against planned hardware maintenance

  ---

  Explanation/Reference:

  A fault domain is a grouping of hardware and infrastructure within an availability domain. Each availability domain contains three fault domains. Fault domains provide anti-affinity: they let you distribute your instances so that the instances are not on the same physical hardware within a single availability domain. A hardware failure or Compute hardware maintenance event that affects one fault domain does not affect instances in other fault domains. In addition, the physical hardware in a fault domain has independent and redundant power supplies, which prevents a failure in the power supply hardware within one fault domain from affecting other fault domains. To control the placement of your compute instances, bare metal DB system instances, or virtual machine DB system instances, you can optionally specify the fault domain for a new instance or instance pool at launch time. If you don't specify the fault domain, the system selects one for you. Oracle Cloud Infrastructure makes a best-effort anti-affinity placement across different fault domains, while optimizing for available capacity in the availability domain. To change the fault domain for an instance, terminate it and launch a new instance in the preferred fault domain. Use fault domains to do the following things: Protect against unexpected hardware failures or power supply failures. Protect against planned outages because of Compute hardware maintenance. We can use fault domains to do the following things: 1) Protect against unexpected hardware failures or power supply failures. 2) Protect against planned outages because of Compute hardware maintenance

  

  Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/General/Concepts/regions.htm

• Question 25:

  Which statement below is not true for Oracle Cloud infrastructure Compartments?

  A. Resources can be moved from one compartment to another
  B. Compartments cannot be nested
  C. Each OCI resource belongs to a single compartment
  D. Resources and compartments can be added and deleted anytime
  B. Compartments cannot be nested

  ---

  Explanation/Reference:

  When creating a compartment, you must provide a name for it (maximum 100 characters, including letters, numbers, periods, hyphens, and underscores) that is unique within its parent compartment. You must also provide a description,

  which is a non-unique, changeable description for the compartment, from 1 through 400 characters. Oracle will also assign the compartment a unique ID called an Oracle Cloud ID.

  You can create subcompartments in compartments to create hierarchies that are six levels deep.

  Reference:

  https://docs.cloud.oracle.com/en-us/iaas/Content/Identity/Tasks/managingcompartments.htm When you first start working with Oracle Cloud Infrastructure, you need to think carefully about how you want to use compartments to organize and

  isolate your cloud resources. Compartments are fundamental to that process. Most resources can be moved between compartments. However, it's important to think through your compartment design for your organization up front, before

  implementing anything. For more information, see Setting Up Your Tenancy. The Console is designed to display your resources by compartment within the current region. When you work with your resources in the Console, you must choose

  which compartment to work in from a list on the page. That list is filtered to show only the compartments in the tenancy that you have permission to access. If you're an administrator, you'll have permission to view all compartments and work

  with any compartment's resources, but if you're a user with limited access, you probably won't. Compartments are tenancy-wide, across regions. When you create a compartment, it is available in every region that your tenancy is subscribed

  to. You can get a cross-region view of your resources in a specific compartment with the compartment explorer. See Viewing All Resources in a Compartment. You can create subcompartments in compartments to create hierarchies that are

  six levels deep.

  

  Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Identity/Tasks/managingcompartments.htm

• Question 26:

  Which OCI storage service does not provide encryption for data at rest?

  A. File Storage
  B. Block Volume
  C. Local NVMe
  D. Object Storage
  C. Local NVMe

  ---

  Explanation/Reference:

  NVMe stands for non-volatile memory express. It is a storage protocol created to fasten the transfer of data between enterprise and client systems and solid-state drives (SSDs) over a computer's high-speed Peripheral Component

  Interconnect Express bus. The characteristics are:

  1) Local NVMe is NVMe SSD-based temporary storage.

  2) It is the locally-attached NVMe devices to the OCI compute instance

  3) It is used very high storage performance requirements, lots of throughput, lots of IOPS, local storage and when you don't want to go out on network

  4) Oracle does not protect in any way through RAID, or snapshots, or backup out of the box and data is not encrypted at rest.

  Reference:

  https://techgoeasy.com/local-nvme-storage-oci/

• Question 27:

  You have an application that requires a shared file system. Which of the following services would you use?

  A. File Storage
  B. Archive Storage
  C. Object Storage
  D. Block Volume
  A. File Storage

  ---

  Explanation/Reference:

  Oracle Cloud Infrastructure File Storage service provides a durable, scalable, secure, enterprise-grade network file system. You can connect to a File Storage service file system from any bare metal, virtual machine, or container instance in your Virtual Cloud Network (VCN). You can also access a file system from outside the VCN using Oracle Cloud Infrastructure FastConnect and Internet Protocol security (IPSec) virtual private network (VPN). Large Compute clusters of thousands of instances can use the File Storage service for high-performance shared storage. Storage provisioning is fully managed and automatic as your use scales from a single byte to exabytes without upfront provisioning. The File Storage service supports the Network File System version 3.0 (NFSv3) protocol. The service supports the Network Lock Manager (NLM) protocol for file locking functionality. Oracle Cloud Infrastructure File Storage employs 5-way replicated storage, located in different fault domains, to provide redundancy for resilient data protection. Data is protected with erasure encoding. The File Storage service uses the "eventual overwrite" method of data eradication. Files are created in the file system with a unique encryption key. When you delete a single file, its associated encryption key is eradicated, making the file inaccessible. When you delete an entire file system, the file system is marked as inaccessible. The service systematically traverses deleted files and file systems, frees all the used space, and eradicates all residual files. Use the File Storage service when your application or workload includes big data and analytics, media processing, or content management, and you require Portable Operating System Interface (POSIX)-compliant file system access semantics and concurrently accessible storage. The File Storage service is designed to meet the needs of applications and users that need an enterprise file system across a wide range of use cases, including the following:

  

  Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/File/Concepts/filestorageoverview.htm

• Question 28:

  Which OCI Identity and access management capability helps you to organize multiple users into teams?

  A. Policies
  B. Groups
  C. Dynamic Groups
  D. Users
  B. Groups

  ---

  Explanation/Reference:

  IAM Group is A collection of users who all need the same type of access to a particular set of resources or compartment.

  IAM DYNAMIC GROUP is A special type of group that contains resources (such as compute instances) that match rules that you define (thus the membership can change dynamically as matching resources are created or deleted). These

  instances act as "principal" actors and can make API calls to services according to policies that you write for the dynamic group.

  Reference:

  https://docs.cloud.oracle.com/en-us/iaas/Content/Identity/Concepts/overview.htm GROUP:

  A collection of users who all need the same type of access to a particular set of resources or compartment.

  

  Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Identity/Tasks/managinggroups.htm

• Question 29:

  Which statement about Oracle Cloud Infrastructure (OCI) shared security model is true?

  A. You are responsible for managing security controls within the physical OCI network.
  B. You are not responsible for any aspect of security in OCI.
  C. You are responsible for securing all data that you place in OCI
  D. You are responsible for securing the hypervisor within OCI Compute service.
  C. You are responsible for securing all data that you place in OCI

  ---

  Explanation/Reference:

  Oracle Cloud Infrastructure offers best-in-class security technology and operational processes to secure its enterprise cloud services. However, for you to securely run your workloads in Oracle Cloud Infrastructure, you must be aware of your security and compliance responsibilities. By design, Oracle provides security of cloud infrastructure and operations (cloud operator access controls, infrastructure security patching, and so on), and you are responsible for securely configuring your cloud resources. Security in the cloud is a shared responsibility between you and Oracle. In a shared, multi-tenant compute environment, Oracle is responsible for the security of the underlying cloud infrastructure (such as data-center facilities, and hardware and software systems) and you are responsible for securing your workloads and configuring your services (such as compute, network, storage, and database) securely. In a fully isolated, single-tenant, bare metal server with no Oracle software on it, your responsibility increases as you bring the entire software stack (operating systems and above) on which you deploy your applications. In this environment, you are responsible for securing your workloads, and configuring your services (compute, network, storage, database) securely, and ensuring that the software components that you run on the bare metal servers are configured, deployed, and managed securely. More specifically, your and Oracle's responsibilities can be divided into the following areas: Identity and Access Management (IAM): As with all Oracle cloud services, you should protect your cloud access credentials and set up individual user accounts. You are responsible for managing and reviewing access for your own employee accounts and for all activities that occur under your tenancy. Oracle is responsible for providing effective IAM services such as identity management, authentication, authorization, and auditing. Workload Security: You are responsible for protecting and securing the operating system and application layers of your compute instances from attacks and compromises. This protection includes patching applications and operating systems, operating system configuration, and protection against malware and network attacks. Oracle is responsible for providing secure images that are hardened and have the latest patches. Also, Oracle makes it simple for you to bring the same third-party security solutions that you use today. Data Classification and Compliance: You are responsible for correctly classifying and labeling your data and meeting any compliance obligations. Also, you are responsible for auditing your solutions to ensure that they meet your compliance obligations. Host Infrastructure Security: You are responsible for securely configuring and managing your compute (virtual hosts, containers), storage (object, local storage, block volumes), and platform (database configuration) services. Oracle has a shared responsibility with you to ensure that the service is optimally configured and secured. This responsibility includes hypervisor security and the configuration of the permissions and network access controls required to ensure that hosts can communicate correctly and that devices are able to attach or mount the correct storage devices. Network Security: You are responsible for securely configuring network elements such as virtual networking, load balancing, DNS, and gateways. Oracle is responsible for providing a secure network infrastructure. Client and Endpoint Protection: Your enterprise uses various hardware and software systems, such as mobile devices and browsers, to access your cloud resources. You are responsible for securing all clients and endpoints that you allow to access Oracle Cloud Infrastructure services. Physical Security: Oracle is responsible for protecting the global infrastructure that runs all of the services offered in Oracle Cloud Infrastructure. This infrastructure consists of the hardware, software, networking, and facilities that run Oracle Cloud Infrastructure services.

  Reference: https://www.oracle.com/a/ocom/docs/oracle-cloud-infrastructure-security-architecture.pdf

• Question 30:

  Which Oracle Cloud Infrastructure compute shapes does not incur instance billing in a STOPPED state?

  A. Dense I/O
  B. Standard
  C. GPU
  D. HPC
  B. Standard

  ---

  Explanation/Reference:

  A shape is a template that determines the number of CPUs, amount of memory, and other resources that are allocated to an instance. Standard shapes don't incur costs in a STOPPED state.

  

  Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Compute/References/computeshapes.htm#baremetalshapes__bm-standard