Oracle 1Z0-1085-22 Online Practice Questions and Exam Preparation

Oracle 1Z0-1085-22 Online Questions & Answers

• Question 31:

  Which Oracle Cloud Infrastructure (OCI) service can be used to protect sensitive and regulated data in OCI database services?

  A. Oracle Data Guard
  B. OCI Audit
  C. Oracle Data Safe
  D. OCI OS management
  C. Oracle Data Safe

  ---

  Explanation/Reference:

  Oracle Data Safe is a unified control center for your Oracle databases which helps you understand the sensitivity of your data, evaluate risks to data, mask sensitive data, implement and monitor security controls, assess user security, monitor

  user activity, and address data security compliance requirements.

  Whether you're using an Autonomous Database or an Oracle DB system, Oracle Data Safe delivers essential data security capabilities as a service on Oracle Cloud Infrastructure.

  Features of Oracle Data Safe:

  Oracle Data Safe provides the following set of features for protecting sensitive and regulated data in Oracle Cloud databases, all in a single, easy-to-use management console:

  1) Security Assessment helps you assess the security of your cloud database configurations. It analyzes database configurations, user accounts, and security controls, and then reports the findings with recommendations for remediation

  activities that follow best practices to reduce or mitigate risk.

  2) User Assessment helps you assess the security of your database users and identify high risk users. It reviews information about your users in the data dictionary on your target databases, and calculates a risk score for each user. For

  example, it evaluates the user types, how users are authenticated, the password policies assigned to each user, and how long it has been since each user has changed their password. It also provides a direct link to audit records related to

  each user. With this information, you can then deploy appropriate security controls and policies.

  3) Data Discovery helps you find sensitive data in your cloud databases. You tell Data Discovery what kind of sensitive data to search for, and it inspects the actual data in your database and its data dictionary, and then returns to you a list of

  sensitive columns. By default, Data Discovery can search for a wide variety of sensitive data pertaining to identification, biographic, IT, financial, healthcare, employment, and academic information.

  4) Data Masking provides a way for you to mask sensitive data so that the data is safe for non- production purposes. For example, organizations often need to create copies of their production data to support development and test activities.

  Simply copying the production data exposes sensitive data to new users. To avoid a security risk, you can use Data Masking to replace the sensitive data with realistic, but fictitious data.

  5) Activity Auditing lets you audit user activity on your databases so you can monitor database usage and be alerted of unusual database activities.

  Reference:

  https://docs.cloud.oracle.com/en-us/iaas/data-safe/doc/oracle-data-safe-overview.html

• Question 32:

  Which should you use to distribute Incoming traffic between a set of web servers?

  A. Load Balances
  B. Internet Gateway
  C. Autoscallng
  D. Dynamic Routing Gateway
  A. Load Balances

  ---

  Explanation/Reference:

  The Oracle Cloud Infrastructure Load Balancing service provides automated traffic distribution from one entry point to multiple servers reachable from your virtual cloud network (VCN). The service offers a load balancer with your choice of a public or private IP address, and provisioned bandwidth. A load balancer improves resource utilization, facilitates scaling, and helps ensure high availability. You can configure multiple load balancing policies and application-specific health checks to ensure that the load balancer directs traffic only to healthy instances. The load balancer can reduce your maintenance window by draining traffic from an unhealthy application server before you remove it from service for maintenance. HOW LOAD BALANCING WORKS: The Load Balancing service enables you to create a public or private load balancer within your VCN. A public load balancer has a public IP address that is accessible from the internet. A private load balancer has an IP address from the hosting subnet, which is visible only within your VCN. You can configure multiple listeners for an IP address to load balance transport Layer 4 and Layer 7 (TCP and HTTP) traffic. Both public and private load balancers can route data traffic to any backend server that is reachable from the VCN. 1) Public Load Balancer To accept traffic from the internet, you create a public load balancer. The service assigns it a public IP address that serves as the entry point for incoming traffic. You can associate the public IP address with a friendly DNS name through any DNS vendor. A public load balancer is regional in scope. If your region includes multiple availability domains, a public load balancer requires either a regional subnet (recommended) or two availability domain- specific (AD-specific) subnets, each in a separate availability domain. With a regional subnet, the Load Balancing service creates a primary load balancer and a standby load balancer, each in a different availability domain, to ensure accessibility even during an availability domain outage. If you create a load balancer in two AD-specific subnets, one subnet hosts the primary load balancer and the other hosts a standby load balancer. If the primary load balancer fails, the public IP address switches to the secondary load balancer. The service treats the two load balancers as equivalent and you cannot specify which one is "primary". Whether you use regional or AD-specific subnets, each load balancer requires one private IP address from its host subnet. The Load Balancing service supplies a floating public IP address to the primary load balancer. The floating public IP address does not come from your backend subnets. If your region includes only one availability domain, the service requires just one subnet, either regional or AD-specific, to host both the primary and standby load balancers. The primary and standby load balancers each require a private IP address from the host subnet, in addition to the assigned floating public IP address. If there is an availability domain outage, the load balancer has no failover. 2) Private Load Balancer To isolate your load balancer from the internet and simplify your security posture, you can create a private load balancer. The Load Balancing service assigns it a private IP address that serves as the entry point for incoming traffic. When you create a private load balancer, the service requires only one subnet to host both the primary and standby load balancers. The load balancer can be regional or AD-specific, depending on the scope of the host subnet. The load balancer is accessible only from within the VCN that contains the host subnet, or as further restricted by your security rules. The assigned floating private IP address is local to the host subnet. The primary and standby load balancers each require an extra private IP address from the host subnet. If there is an availability domain outage, a private load balancer created in a regional subnet within a multi-AD region provides failover capability. A private load balancer created in an AD-specific subnet, or in a regional subnet within a single availability domain region, has no failover capability in response to an availability domain outage. Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Balance/Concepts/balanceoverview.htm

• Question 33:

  What characteristics are defined by an Oracle Cloud Infrastructure Compute shape?

  A. Number of vCPU, amount of RAM, bandwidth
  B. Availability Domain and Fault Domain locations
  C. Public or private visibility of the Compute instance
  D. Number of OCPU, amount of RAM, bandwidth
  D. Number of OCPU, amount of RAM, bandwidth

  ---

  Explanation/Reference:

  Oracle Compute Shape is coming with predefined or customize the number of OCPUs that are allocated to an instance. The amount of memory, network bandwidth, and number of VNICs scale proportionately with the number of OCPUs.

  Reference:

  https://docs.cloud.oracle.com/en-us/iaas/Content/Compute/References/computeshapes.htm

• Question 34:

  Which is NOT considered a security resource within Oracle Cloud Infrastructure?

  A. Network Security Group
  B. Web Application Firewall
  C. File Storage Service
  D. Security Lists
  C. File Storage Service

  ---

  Explanation/Reference:

  Oracle Cloud Infrastructure File Storage service provides a durable, scalable, secure, enterprise-grade network file system. You can connect to a File Storage service file system from any bare metal, virtual machine, or container instance in your Virtual Cloud Network (VCN). You can control the access of the file system from FSS by applying some security rules and others but the services it self not related to security but it related to shared storage

  Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/File/Concepts/filestorageoverview.htm

• Question 35:

  What is a key benefit of Oracle Cloud Infrastructure (OCI) Virtual Machine DB Systems?

  A. Support for RAC DB systems
  B. No need to create database Indices
  C. Automated backups to OCI Block Volume
  D. Automated disaster recovery
  A. Support for RAC DB systems

  ---

  Explanation/Reference:

  There are two types of DB systems on virtual machines:

  A 1-node virtual machine DB system consists of one virtual machine.

  A 2-node virtual machine DB system consists of two virtual machines.

  (RAC) A virtual machine DB system database uses Oracle Cloud Infrastructure block storage instead of local storage. You specify a storage size when you launch the DB system, and you can scale up the storage as needed at any time. For

  1-node virtual machine DB systems, Oracle Cloud Infrastructure provides have a "fast provisioning" option that allows you to create your DB system using Logical Volume Manager as your storage management software. Oracle Cloud

  Infrastructure offers single-node DB systems on either bare metal or virtual machines, and 2-node RAC DB systems on virtual machines. If you need to provision a DB system for development or testing purposes, then a special fast

  provisioning single-node virtual machine system is available.

  You can manage these systems by using the Console, the API, the Oracle Cloud Infrastructure CLI, the Database CLI (DBCLI), Enterprise Manager, Enterprise Manager Express, or SQL Developer.

  

  Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Database/Concepts/overview.htm

• Question 36:

  Which security service is offered by Oracle Cloud Infrastructure?

  A. Certificate Management System
  B. Key Management
  C. Managed Active Directory
  D. Managed Intrusion Detection
  B. Key Management

  ---

  Explanation/Reference:

  Oracle Cloud Infrastructure Key Management is a managed service that enables you to encrypt your data using keys that you control.

  

  Reference: https://www.oracle.com/in/cloud/security/cloud-services/key-management.html

• Question 37:

  Which option provides the best performance for running OTLP workloads in Oracle Cloud Infrastructure (OCI)?

  A. OCI Autonomous Data Warehouse
  B. OCI Virtual Machine Instance
  C. OCI Dedicated Virtual Host
  D. OCI Autonomous Transaction Processing
  D. OCI Autonomous Transaction Processing

  ---

  Explanation/Reference:

  https://docs.oracle.com/en/cloud/paas/atp-cloud/index.html

• Question 38:

  Which three methods can you use to create or modify Oracle Cloud Infrastructure (OCI) resources?

  A. REST APIs
  B. OCI desktop client
  C. Secure Shell (SSH)
  D. OCI Console
  E. Command-line Interface
  F. Remote Desktop Protocol (RDP)
  G. Serial console connection
  A. REST APIs
  D. OCI Console
  E. Command-line Interface

  ---

  Explanation/Reference:

  You can create and manage resources in the following ways:

  Oracle Cloud Infrastructure Console

  The Console is an intuitive, graphical interface that lets you create and manage your instances, cloud networks, and storage volumes, as well as your users and permissions. See Using the Console.

  Oracle Cloud Infrastructure APIs

  The Oracle Cloud Infrastructure APIs are typical REST APIs that use HTTPS requests and responses.

  See API Requests.

  SDKs

  Several Software Development Kits are available for easy integration with the Oracle Cloud Infrastructure APIs, including SDKs for Java, Ruby, and Python. For more information, see Developer Resources.

  Command Line Interface (CLI)

  You can use a command line interface with some services. For more information, see Developer Resources.

  Terraform

  Oracle supports Terraform. Terraform is "infrastructure-as-code" software that allows you to define your infrastructure resources in files that you can persist, version, and share. For more information, see Getting Started with the Terraform

  Provider.

  Ansible

  Oracle supports the use of Ansible for cloud infrastructure provisioning, orchestration, and configuration management. Ansible allows you to automate configuring and provisioning your cloud infrastructure, deploying and updating software

  assets, and orchestrating your complex operational processes. For more information, see Getting Started with Ansible for Oracle Cloud Infrastructure.

  Resource Manager

  Resource Manager is an Oracle Cloud Infrastructure service that allows you to automate the process of provisioning your Oracle Cloud Infrastructure resources. It helps you install, configure, and manage resources using the "infrastructureas-code" model. For more information, see Overview of Resource Manager.

  Reference:

  https://docs.cloud.oracle.com/en-us/iaas/pdf/gsg/OCI_Getting_Started.pdf

• Question 39:

  Which of the following services can you control access to via IAM?

  A. Networking components
  B. Compute Instances
  C. All services including IAM
  D. DB systems
  C. All services including IAM

  ---

  Explanation/Reference:

  Oracle Cloud Infrastructure Identity and Access Management (IAM) lets you control who has access to your cloud resources. You can control what type of access a group of users have and to which specific resources. This section gives you an overview of IAM components and an example scenario to help you understand how they work together.

  

  

  Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Identity/Concepts/overview.htm

• Question 40:

  How is total network throughput allocated to a Virtual Machine (VM) Instance?

  A. Network bandwidth is variable
  B. Network bandwidth is proportional to the number of OCPUs in the Instance shape
  C. When launching a compute instance, customers may select the desired maximum network bandwidth
  D. Each VM is allocated 10 Gbps of network bandwidth regardless of the selected shape
  B. Network bandwidth is proportional to the number of OCPUs in the Instance shape

  ---

  Explanation/Reference:

  A shape is a template that determines the number of CPUs, amount of memory, and other resources that are allocated to an instance. The network bandwidth is directly proportional to the number of OCPUs in the instance shape!

  

  

  

  Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Compute/References/computeshapes.htm