Oracle 1Z0-1085-22 Online Practice Questions and Exam Preparation

Oracle 1Z0-1085-22 Online Questions & Answers

• Question 41:

  A customer wants to use Oracle Cloud Infrastructure (OCI) for storing application backups which can be stored based on business needs. Which OCI storage service can be used to meet the requirement?

  A. File Storage
  B. Block Volume
  C. Archive Storage
  D. Object Storage (standard)
  D. Object Storage (standard)

  ---

  Explanation/Reference:

  Oracle Cloud Infrastructure offers two distinct storage class tiers to address the need for both performant, frequently accessed "hot" storage, and less frequently accessed "cold" storage. Storage tiers help you maximize performance where appropriate and minimize costs where possible. 1) Use Object Storage for data to which you need fast, immediate, and frequent access. Data accessibility and performance justifies a higher price to store data in the Object Storage tier. 2) Use Archive Storage for data to which you seldom or rarely access, but that must be retained and preserved for long periods of time. The cost efficiency of the Archive Storage tier offsets the long lead time required to access the data. For more information, see Overview of Archive Storage. The Oracle Cloud Infrastructure Object Storage service is an internet-scale, high-performance storage platform that offers reliable and cost-efficient data durability. The Object Storage service can store an unlimited amount of unstructured data of any content type, including analytic data and rich content, like images and videos. With Object Storage, you can safely and securely store or retrieve data directly from the internet or from within the cloud platform. Object Storage offers multiple management interfaces that let you easily manage storage at scale. The elasticity of the platform lets you start small and scale seamlessly, without experiencing any degradation in performance or service reliability. Object Storage is a regional service and is not tied to any specific compute instance. You can access data from anywhere inside or outside the context of the Oracle Cloud Infrastructure, as long you have internet connectivity and can access one of the Object Storage endpoints. Authorization and resource limits are discussed later in this topic. Object Storage also supports private access from Oracle Cloud Infrastructure resources in a VCN through a service gateway. A service gateway allows connectivity to the Object Storage public endpoints from private IP addresses in private subnets. For example, you can back up DB systems to an Object Storage bucket over the Oracle Cloud Infrastructure backbone instead of over the internet. You can optionally use IAM policies to control which VCNs or ranges of IP addresses can access Object Storage. See Access to Oracle Services: Service Gateway for details. Object Storage is Always Free eligible. For more information about Always Free resources, including additional capabilities and limitations, see Oracle Cloud Infrastructure Free Tier. The following list summarizes some of the ways that you can use Object Storage.

  

  Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Object/Concepts/objectstorageoverview.htm

• Question 42:

  Which statement is true for an oracle cloud Infrastructure (OCI) compute instance?

  A. Compute instance always get a public IP address
  B. Compute instance does not use a boot volume
  C. Compute instance cannot leverage auto scaling feature
  D. Compute instance always get a private IP address
  D. Compute instance always get a private IP address

  ---

  Explanation/Reference:

  When you create an instance, the instance is automatically attached to a virtual network interface card (VNIC) in the cloud network's subnet and given a private IP address from the subnet's CIDR. You can let the IP address be automatically

  assigned, or you can specify a particular address of your choice. The private IP address lets instances within the cloud network communicate with each other.

  Reference:

  https://docs.cloud.oracle.com/en-us/iaas/Content/Compute/Tasks/launchinginstance.htm

  Instances use IP addresses for communication. Each instance has at least one private IP address and optionally one or more public IP addresses. A private IP address enables the instance to communicate with other instances inside the

  VCN, or with hosts in your on-premises network (via an IPSec VPN or Oracle Cloud Infrastructure FastConnect).

  A public IP address enables the instance to communicate with hosts on the internet.

  Reference:

  https://docs.cloud.oracle.com/en-us/iaas/Content/Network/Tasks/managingIPaddresses.htm

• Question 43:

  Which Oracle cloud infrastructure capability can be used to protect against power failures within an availability Domain?

  A. Data Plane
  B. Fault Domains
  C. Services Cells
  D. Top of Rack Switch
  B. Fault Domains

  ---

  Explanation/Reference:

  A fault domain is a grouping of hardware and infrastructure within an availability domain. Each availability domain contains three fault domains. Fault domains provide anti-affinity: they let you distribute your instances so that the instances are

  not on the same physical hardware within a single availability domain. A hardware failure or Compute hardware maintenance event that affects one fault domain does not affect instances in other fault domains. In addition, the physical

  hardware in a fault domain has independent and redundant power supplies, which prevents a failure in the power supply hardware within one fault domain from affecting other fault domains. To control the placement of your compute

  instances, bare metal DB system instances, or virtual machine DB system instances, you can optionally specify the fault domain for a new instance or instance pool at launch time. If you don't specify the fault domain, the system selects one

  for you. Oracle Cloud Infrastructure makes a best-effort anti-affinity placement across different fault domains, while optimizing for available capacity in the availability domain. To change the fault domain for an instance, terminate it and launch

  a new instance in the preferred fault domain.

  Use fault domains to do the following things:

  Protect against unexpected hardware failures or power supply failures. Protect against planned outages because of Compute hardware maintenance.

  Reference:

  https://blogs.oracle.com/cloud-infrastructure/using-availibility-domains-and-fault-domains-to- improve-application-resiliency

• Question 44:

  What does compute instance horizonal scaling mean?

  A. stopping/starting the instance
  B. backing up data to object storage
  C. adding additional compute instances
  D. changing compute instance size
  C. adding additional compute instances

  ---

  Explanation/Reference:

  Cloud Horizontal Scaling refers to provisioning additional servers to meet your needs, often splitting workloads between servers to limit the number of requests any individual server is getting. In a cloud-based environment, this would mean

  adding additional instances instead of moving to a larger instance size.

  Cloud Vertical Scaling refers to adding more CPU or memory to an existing server, or replacing one server with a more powerful server.

  Reference:

  https://cloudcheckr.com/cloud-cost-management/cloud-vs-data-center-what-is-scalability-in-cloud- computing/

  Horizontal scaling means that you scale by adding more machines into your pool of resources whereas Vertical scaling means that you scale by adding more power (CPU, RAM) to an existing machine. An easy way to remember this is to

  think of a machine on a server rack, we add more machines across the horizontal direction and add more resources to a machine in the vertical direction.

  

  With horizontal-scaling it is often easier to scale dynamically by adding more machines into the existing pool -- Vertical-scaling is often limited to the capacity of a single machine, scaling beyond that capacity often involves downtime and

  comes with an upper limit.

  Reference:

  https://medium.com/@abhinavkorpal/scaling-horizontally-and-vertically-for-databases- a2aef778610c

• Question 45:

  Which feature is not component of Oracle cloud Infrastructure identity and Access management service?

  A. federation
  B. User Credential
  C. Network Security Group
  D. Policies
  C. Network Security Group

  ---

  Explanation/Reference:

  Components of IAM RESOURCE The cloud objects that your company's employees create and use when interacting with Oracle Cloud Infrastructure. For example: compute instances, block storage volumes, virtual cloud networks (VCNs), subnets, route tables, etc. USER An individual employee or system that needs to manage or use your company's Oracle Cloud Infrastructure resources. Users might need to launch instances, manage remote disks, work with your virtual cloud network, etc. End users of your application are not typically IAM users. Users have one or more IAM credentials (see User Credentials). GROUP A collection of users who all need the same type of access to a particular set of resources or compartment. DYNAMIC GROUP A special type of group that contains resources (such as compute instances) that match rules that you define (thus the membership can change dynamically as matching resources are created or deleted). These instances act as "principal" actors and can make API calls to services according to policies that you write for the dynamic group. NETWORK SOURCE A group of IP addresses that are allowed to access resources in your tenancy. The IP addresses can be public IP addresses or IP addresses from a VCN within your tenancy. After you create the network source, you use policy to restrict access to only requests that originate from the IPs in the network source. COMPARTMENT A collection of related resources. Compartments are a fundamental component of Oracle Cloud Infrastructure for organizing and isolating your cloud resources. You use them to clearly separate resources for the purposes of measuring usage and billing, access (through the use of policies), and isolation (separating the resources for one project or business unit from another). A common approach is to create a compartment for each major part of your organization. For more information, see Setting Up Your Tenancy. TENANCY The root compartment that contains all of your organization's Oracle Cloud Infrastructure resources. Oracle automatically creates your company's tenancy for you. Directly within the tenancy are your IAM entities (users, groups, compartments, and some policies; you can also put policies into compartments inside the tenancy). You place the other types of cloud resources (e.g., instances, virtual networks, block storage volumes, etc.) inside the compartments that you create. POLICY A document that specifies who can access which resources, and how. Access is granted at the group and compartment level, which means you can write a policy that gives a group a specific type of access within a specific compartment, or to the tenancy itself. If you give a group access to the tenancy, the group automatically gets the same type of access to all the compartments inside the tenancy. For more information, see Example Scenario and How Policies Work. The word "policy" is used by people in different ways: to mean an individual statement written in the policy language; to mean a collection of statements in a single, named "policy" document (which has an Oracle Cloud ID (OCID) assigned to it); and to mean the overall body of policies your organization uses to control access to resources. HOME REGION The region where your IAM resources reside. All IAM resources are global and available across all regions, but the master set of definitions reside in a single region, the home region. You must make changes to your IAM resources in your home region. The changes will be automatically propagated to all regions. For more information, see Managing Regions. FEDERATION A relationship that an administrator configures between an identity provider and a service provider. When you federate Oracle Cloud Infrastructure with an identity provider, you manage users and groups in the identity provider. You manage authorization in Oracle Cloud Infrastructure's IAM service. Oracle Cloud Infrastructure tenancies are federated with Oracle Identity Cloud Service by default. Reference:

  https://docs.cloud.oracle.com/en-us/iaas/Content/Identity/Concepts/overview.htm

• Question 46:

  ___________________ is a fully-managed, scalable, and highly available service that you can use to deploy your containerized applications to the cloud.

  A. Oracle Cloud Infrastructure Container Engine for Kubernetes
  B. Oracle Cloud Infrastructure Container Engine for Containerization
  C. Oracle Cloud Infrastructure Container Engine for Deployment
  D. Oracle Cloud Infrastructure Container Engine for Docker
  A. Oracle Cloud Infrastructure Container Engine for Kubernetes

  ---

  Explanation/Reference:

  Oracle Cloud Infrastructure Container Engine for Kubernetes is a fully-managed, scalable, and highly available service that you can use to deploy your containerized applications to the cloud. Use Container Engine for Kubernetes (sometimes abbreviated to just OKE) when your development team wants to reliably build, deploy, and manage cloud-native applications. You specify the compute resources that your applications require, and Container Engine for Kubernetes provisions them on Oracle Cloud Infrastructure in an existing OCI tenancy. You can access Container Engine for Kubernetes to define and create Kubernetes clusters using the Console and the REST API. You can access the clusters you create using the Kubernetes command line (kubectl), the Kubernetes Dashboard, and the Kubernetes API. Container Engine for Kubernetes is integrated with Oracle Cloud Infrastructure Identity and Access Management (IAM), which provides easy authentication with native Oracle Cloud Infrastructure identity functionality. Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/ContEng/Concepts/contengoverview.htm

• Question 47:

  Which two situations incur costs in Oracle Cloud Infrastructure (OCI)?

  A. Data ingress from the internet
  B. Transferring data across regions
  C. Transferring data from one instance to another in the same Availibility Domain
  D. Data egress to the internet
  E. Transferring data from one instance to another across different Availibility Domains in a Region
  B. Transferring data across regions
  D. Data egress to the internet

• Question 48:

  Which of the following is an example of an edge service in OCI?

  A. DNS Zone Management
  B. Virtual Machines
  C. OCI compute instances
  D. Oracle Data Guard
  A. DNS Zone Management

  ---

  Explanation/Reference:

  The Oracle Cloud Infrastructure Domain Name System (DNS) service lets you create and manage your DNS zones. You can create zones, add records to zones, and allow Oracle Cloud Infrastructure's edge network to handle your domain's DNS queries.

  

  Reference: https://www.oracle.com/a/ocom/docs/cloud/edge-services-100.pdf

• Question 49:

  Which service is the most effective for moving large amounts of data from your on-premises to OCI?

  A. Data Transfer appliance
  B. Data Safe
  C. Internal Gateway
  D. Dynamic Routing Gateway
  A. Data Transfer appliance

• Question 50:

  Which two security capabilities are offered by Oracle Cloud Infrastructure?

  A. Always on data encryption for data-at-rest.
  B. Certificate Management service
  C. Captcha
  D. Key Management service
  E. Managed Active Directory service
  A. Always on data encryption for data-at-rest.
  D. Key Management service

  ---

  Explanation/Reference:

  Oracle Cloud Infrastructure's security approach is based on seven core pillars. Each pillar has multiple solutions designed to maximize the security and compliance of the platform and to help customers to improve their security posture. High Availability: Offer fault-independent data centers that enable high-availability scale-out architectures and are resilient against network attacks, ensuring constant uptime in the face of disaster and security attack. Customer Isolation: Allow customers to deploy their application and data assets in an environment that commits full isolation from other tenants and Oracle's staff. Data Encryption: Protect customer data at-rest and in-transit in a way that allows customers to meet their security and compliance requirements with respect to cryptographic algorithms and key management. Security Controls: Offer customers effective and easy-to-use application, platform, and network security solutions that allow them to protect their workloads, have a secure application delivery using a global edge network, constrain access to their services, and segregate operational responsibilities to reduce the risk associated with malicious and accidental user actions. Visibility: Offer customers comprehensive log data and security analytics that they can use to audit and monitor actions on their resources, allowing them to meet their audit requirements and reduce security and operational risk. Secure Hybrid Cloud: Enable customers to use their existing security assets, such as user accounts and policies, as well as third-party security solutions, when accessing their cloud resources and securing their data and application assets in the cloud. Verifiably Secure Infrastructure: Follow rigorous processes and use effective security controls in all phases of cloud service development and operation. Demonstrate adherence to Oracle's strict security standards through third-party audits, certifications, and attestations. Help customers demonstrate compliance readiness to internal security and compliance teams, their customers, auditors, and regulators. Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Security/Concepts/security_overview.htm