Oracle 1Z0-1085-22 Online Practice Questions and Exam Preparation

Oracle 1Z0-1085-22 Online Questions & Answers

• Question 61:

  A new customer has logged into Oracle Cloud Infrastructure (OCI) as an administrator for the first time. The admin would like to deploy Infrastructure into a region other then their home region. What is the first Stop they must take in order to accomplish this task?

  A. Use API endpoints to create resources in the desired region.
  B. Navigate to the desired region and begin creating resources.
  C. Subscribe to the desired region.
  D. File a service request for access to each additional region.
  C. Subscribe to the desired region.

  ---

  Explanation/Reference:

  When you sign up for Oracle Cloud Infrastructure, Oracle creates a tenancy for you in one region. This is your home region. Your home region is where your IAM resources are defined. When you subscribe to another region, your IAM resources are available in the new region, however, the master definitions reside in your home region and can only be changed there. When you subscribe your tenancy to a new region, all the policies from your home region are enforced in the new region. If you want to limit access for groups of users to specific regions, you can write policies to grant access to specific regions only. Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Identity/Tasks/managingregions.htm

  To create an instance in another region, perform these preliminary steps:

  1.

  Extend your subscription to another region.

  2.

  Federate Oracle Identity Cloud Service (IDCS) from the new region with Oracle Cloud Infrastructure (OCI).

  Also, when you purchase these services or sign up for a free promotion, you typically choose the data region closest to your location to access them. This becomes your primary data region. However, if required, you can extend your

  subscription to other geographical regions (within the same cloud account) and use the services there.

  Reference:

  https://docs.oracle.com/en/cloud/paas/content-cloud/administer/create-instance-oracle-cloud- console.html

• Question 62:

  Which three components are part of Oracle Cloud Infrastructure Identity and Access Management service?

  A. Virtual Cloud Networks
  B. Policies
  C. Regional Subnets
  D. Dynamic Groups
  E. Roles
  F. Compute Instances
  G. Users
  B. Policies
  D. Dynamic Groups
  G. Users

  ---

  Explanation/Reference:

  IAM components are RESOURCE The cloud objects that your company's employees create and use when interacting with Oracle Cloud Infrastructure. For example: compute instances, block storage volumes, virtual cloud networks (VCNs), subnets, route tables, etc. USER An individual employee or system that needs to manage or use your company's Oracle Cloud Infrastructure resources. Users might need to launch instances, manage remote disks, work with your virtual cloud network, etc. End users of your application are not typically IAM users. Users have one or more IAM credentials (see User Credentials). POLICY A document that specifies who can access which resources, and how. Access is granted at the group and compartment level, which means you can write a policy that gives a group a specific type of access within a specific compartment, or to the tenancy itself. If you give a group access to the tenancy, the group automatically gets the same type of access to all the compartments inside the tenancy. For more information, see Example Scenario and How Policies Work. The word "policy" is used by people in different ways: to mean an individual statement written in the policy language; to mean a collection of statements in a single, named "policy" document (which has an Oracle Cloud ID (OCID) assigned to it); and to mean the overall body of policies your organization uses to control access to resources. GROUP

  A collection of users who all need the same type of access to a particular set of resources or compartment.

  DYNAMIC GROUP

  A special type of group that contains resources (such as compute instances) that match rules that you define (thus the membership can change dynamically as matching resources are created or deleted). These instances act as "principal"

  actors and can make API calls to services according to policies that you write for the dynamic group.

  NETWORK SOURCE

  A group of IP addresses that are allowed to access resources in your tenancy. The IP addresses can be public IP addresses or IP addresses from a VCN within your tenancy. After you create the network source, you use policy to restrict

  access to only requests that originate from the IPs in the network source.

  COMPARTMENT

  A collection of related resources. Compartments are a fundamental component of Oracle Cloud Infrastructure for organizing and isolating your cloud resources. You use them to clearly separate resources for the purposes of measuring usage

  and billing, access (through the use of policies), and isolation (separating the resources for one project or business unit from another). A common approach is to create a compartment for each major part of your organization. For more

  information, see Setting Up Your Tenancy.

  TENANCY

  The root compartment that contains all of your organization's Oracle Cloud Infrastructure resources. Oracle automatically creates your company's tenancy for you. Directly within the tenancy are your IAM entities (users, groups,

  compartments, and some policies; you can also put policies into compartments inside the tenancy). You place the other types of cloud resources (e.g., instances, virtual networks, block storage volumes, etc.) inside the compartments that you

  create.

  HOME REGION

  The region where your IAM resources reside. All IAM resources are global and available across all regions, but the master set of definitions reside in a single region, the home region. You must make changes to your IAM resources in your

  home region. The changes will be automatically propagated to all regions. For more information, see Managing Regions.

  FEDERATION

  A relationship that an administrator configures between an identity provider and a service provider. When you federate Oracle Cloud Infrastructure with an identity provider, you manage users and groups in the identity provider. You manage

  authorization in Oracle Cloud Infrastructure's IAM service. Oracle Cloud Infrastructure tenancies are federated with Oracle Identity Cloud Service by default.

  Reference:

  https://docs.cloud.oracle.com/en-us/iaas/data-safe/doc/iam-components.html

• Question 63:

  Your company has deployed a business critical application in Oracle Cloud Infrastructure. What should you do to ensure that your application has the highest level of resilience and availability?

  A. Deploy the application across multiple Availability Domains and Subnets
  B. Deploy the application across multiple Virtual Cloud Networks
  C. Deploy the application across multiple Regions and Availability Domains
  D. Deploy the application across multiple Availability Domains and Fault Domains
  C. Deploy the application across multiple Regions and Availability Domains

  ---

  Explanation/Reference:

  To design a high availability architecture, three key elements should be considered-- redundancy, monitoring, and failover: 1) Redundancy means that multiple components can perform the same task. The problem of a single point of failure is eliminated because redundant components can take over a task performed by a component that has failed. 2) Monitoring means checking whether or not a component is working properly. 3) Failover is the process by which a secondary component becomes primary when the primary component fails. The best practices introduced here focus on these three key elements. Although high availability can be achieved at many different levels, including the application level and the cloud infrastructure level, here we will focus on the cloud infrastructure level. An Oracle Cloud Infrastructure region is a localized geographic area composed of one or more availability domains, each composed of three fault domains. High availability is ensured by a redundancy of fault domains within the availability domains. An availability domain is one or more data centers located within a region. Availability domains are isolated from each other, fault tolerant, and unlikely to fail simultaneously. Because availability domains do not share physical infrastructure, such as power or cooling, or the internal availability domain network, a failure that impacts one availability domain is unlikely to impact the availability of others. A fault domain is a grouping of hardware and infrastructure within an availability domain. Each availability domain contains three fault domains. Fault domains let you distribute your instances so that they are not on the same physical hardware within a single availability domain. As a result, an unexpected hardware failure or a Compute hardware maintenance that affects one fault domain does not affect instances in other fault domains. You can optionally specify the fault domain for a new instance at launch time, or you can let the system select one for you. All the availability domains in a region are connected to each other by a low-latency, high bandwidth network. This predictable, encrypted interconnection between availability domains provides the building blocks for both high availability and disaster recovery. Reference: https://docs.oracle.com/en/solutions/design-ha/index.html#GUID-76ECDDB4-4CB1-4D93-9A6D- A8B620F72369

• Question 64:

  Which three components are part of Oracle Cloud Infrastructure (OCI) identity and access management service?

  A. Regional Subnets
  B. Policies
  C. Users
  D. Compute Instances
  E. Dynamic Groups
  F. Roles
  G. Virtual Cloud Networks
  B. Policies
  C. Users
  E. Dynamic Groups

  ---

  Explanation/Reference:

  Components of IAM IAM uses the components described in this section. To better understand how the components fit together, see Example Scenario. RESOURCE The cloud objects that your company's employees create and use when interacting with Oracle Cloud Infrastructure. For example: compute instances, block storage volumes, virtual cloud networks (VCNs), subnets, route tables, etc. USER An individual employee or system that needs to manage or use your company's Oracle Cloud Infrastructure resources. Users might need to launch instances, manage remote disks, work with your virtual cloud network, etc. End users of your application are not typically IAM users. Users have one or more IAM credentials (see User Credentials). GROUP A collection of users who all need the same type of access to a particular set of resources or compartment. DYNAMIC GROUP A special type of group that contains resources (such as compute instances) that match rules that you define (thus the membership can change dynamically as matching resources are created or deleted). These instances act as "principal" actors and can make API calls to services according to policies that you write for the dynamic group. NETWORK SOURCE A group of IP addresses that are allowed to access resources in your tenancy. The IP addresses can be public IP addresses or IP addresses from a VCN within your tenancy. After you create the network source, you use policy to restrict access to only requests that originate from the IPs in the network source. COMPARTMENT A collection of related resources. Compartments are a fundamental component of Oracle Cloud Infrastructure for organizing and isolating your cloud resources. You use them to clearly separate resources for the purposes of measuring usage and billing, access (through the use of policies), and isolation (separating the resources for one project or business unit from another). A common approach is to create a compartment for each major part of your organization. For more information, see Setting Up Your Tenancy. TENANCY The root compartment that contains all of your organization's Oracle Cloud Infrastructure resources. Oracle automatically creates your company's tenancy for you. Directly within the tenancy are your IAM entities (users, groups, compartments, and some policies; you can also put policies into compartments inside the tenancy). You place the other types of cloud resources (e.g., instances, virtual networks, block storage volumes, etc.) inside the compartments that you create. POLICY A document that specifies who can access which resources, and how. Access is granted at the group and compartment level, which means you can write a policy that gives a group a specific type of access within a specific compartment, or to the tenancy itself. If you give a group access to the tenancy, the group automatically gets the same type of access to all the compartments inside the tenancy. For more information, see Example Scenario and How Policies Work. The word "policy" is used by people in different ways: to mean an individual statement written in the policy language; to mean a collection of statements in a single, named "policy" document (which has an Oracle Cloud ID (OCID) assigned to it); and to mean the overall body of policies your organization uses to control access to resources. HOME REGION The region where your IAM resources reside. All IAM resources are global and available across all regions, but the master set of definitions reside in a single region, the home region. You must make changes to your IAM resources in your home region. The changes will be automatically propagated to all regions. For more information, see Managing Regions. FEDERATION A relationship that an administrator configures between an identity provider and a service provider. When you federate Oracle Cloud Infrastructure with an identity provider, you manage users and groups in the identity provider. You manage authorization in Oracle Cloud Infrastructure's IAM service. Oracle Cloud Infrastructure tenancies are federated with Oracle Identity Cloud Service by default.

  https://docs.cloud.oracle.com/en-us/iaas/Content/Identity/Concepts/overview.htm

• Question 65:

  Which Oracle Cloud Infrastructure storage service can provide a shared file system across multiple compute instances?

  A. file Storage
  B. Local NVMe
  C. Object Storage
  D. Archive storage
  A. file Storage

  ---

  Explanation/Reference:

  Oracle Cloud Infrastructure File Storage service provides a durable, scalable, secure, enterprise-grade network file system. You can connect to a File Storage service file system from any bare metal, virtual machine, or container instance in your Virtual Cloud Network (VCN). You can also access a file system from outside the VCN using Oracle Cloud Infrastructure FastConnect and Internet Protocol security (IPSec) virtual private network (VPN). Large Compute clusters of thousands of instances can use the File Storage service for high- performance shared storage. Storage provisioning is fully managed and automatic as your use scales from a single byte to exabytes without upfront provisioning.

  Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/File/Concepts/filestorageoverview.htm

• Question 66:

  Oracle cloud Infrastructure is compliant with which three industry standards?

  A. SOC 1 Type 2 and SOC 2 Type 2 attestations
  B. NERC Critical Infrastructure Protection Standards
  C. Health Insurance Portability and Accountability Act (HIPAA)
  D. ISO 27001:2013 certification
  E. Health Care Compliance Association (HCCA)
  A. SOC 1 Type 2 and SOC 2 Type 2 attestations
  C. Health Insurance Portability and Accountability Act (HIPAA)
  D. ISO 27001:2013 certification

  ---

  Explanation/Reference:

  Here is the official list of all industry standards that OCI complies with : https://www.oracle.com/in/cloud/cloud-infrastructure-compliance/

• Question 67:

  Which describes a key benefit of using Oracle Cloud Infrastructure (OCI)?

  A. With OCI, you can only run Java based workloads on bare metal.
  B. With OCI, you can run only cloud-native workloads.
  C. Only bare metal workloads are supported on OCI.
  D. OCI offers consistent performance with a predictable pricing model.
  D. OCI offers consistent performance with a predictable pricing model.

  ---

  Explanation/Reference:

  https://www.oracle.com/in/cloud/pricing.html

  -

  OCI offers consistent performance with a predictable pricing model - is the best suited answer.

  -

  Only bare metal workloads are supported in OCI - False, since you can work with VMs etc too

  -

  With OCI, you can run cloud native workloads - False, since you can work with on-premise by connecting it to OCI too.

  -

  With OCI, you can only run Java based workloads on bare metal - False since Java is not the only programming language supported by OCI.

• Question 68:

  Which feature allows you to group and logically isolate your Oracle Cloud Infrastructure (OCI) resources?

  A. Tenancy
  B. Identity and Access Management Groups
  C. Availability Domains
  D. Compartments
  D. Compartments

  ---

  Explanation/Reference:

  It is collection of related resources. Compartments are a fundamental component of Oracle Cloud Infrastructure for organizing and isolating your cloud resources. You use them to clearly separate resources for the purposes of measuring usage and billing, access (through the use of IAM Service policies), and isolation (separating the resources for one project or business unit from another). A common approach is to create a compartment for each major part of your organization. For more information, see Overview of the IAM Service and also Setting Up Your Tenancy. To place a resource in a compartment, simply specify the compartment ID in the "Create" request object when initially creating the resource. For example, to launch an instance into a particular compartment, specify that compartment's OCID in the LaunchInstance request. You can't move an existing resource from one compartment to another. To use any of the API operations, you must be authorized in an IAM policy. If you're not authorized, talk to an administrator. If you're an administrator who needs to write policies to give users access, see Getting Started with Policies. Reference: https://docs.cloud.oracle.com/en-us/iaas/tools/ocicli/2.9.9/oci_cli_docs/cmdref/iam/compartment.html

• Question 69:

  You were recently assigned to manage a project to deploy Oracle E-Business Suite on Oracle Cloud Infrastructure (OCI). The application will require a database, several servers, and a shared file system. Which three OCI services are best suited for this project?

  A. OCI virtual or Bare Metal DB Systems
  B. OCI Streaming Service
  C. Object Storage Service
  D. Virtual Machine (VM) or Bare Metal (BM) compute Instances
  E. File Storage Service
  F. Oracle Container Engine for Kubernetes
  A. OCI virtual or Bare Metal DB Systems
  D. Virtual Machine (VM) or Bare Metal (BM) compute Instances
  E. File Storage Service

  ---

  Explanation/Reference:

  https://docs.oracle.com/en/solutions/deploy-ebusiness-suite-oci/index.html#GUID-0CA881FD- D96F-4885-BC77-62E3A66EFF95

• Question 70:

  A banking platform has been re-designed to a microservices based architecture using Docker containers for deployment. Which service can you use to deploy containers on Oracle Cloud Infrastructure (OCI)?

  A. Container Engine for Kubernetes (OKE)
  B. Streaming Service
  C. API Gateway
  D. File Storage Service
  A. Container Engine for Kubernetes (OKE)

  ---

  Explanation/Reference:

  Oracle Cloud Infrastructure Container Engine for Kubernetes is a fully-managed, scalable, and highly available service that you can use to deploy your containerized applications to the cloud. Use Container Engine for Kubernetes (sometimes abbreviated to just OKE) when your development team wants to reliably build, deploy, and manage cloud-native applications. You specify the compute resources that your applications require, and Container Engine for Kubernetes provisions them on Oracle Cloud Infrastructure in an existing OCI tenancy. Container Engine for Kubernetes uses Kubernetes - the open-source system for automating deployment, scaling, and management of containerized applications across clusters of hosts. Kubernetes groups the containers that make up an application into logical units (called pods) for easy management and discovery. You can access Container Engine for Kubernetes to define and create Kubernetes clusters using the Console and the REST API. You can access the clusters you create using the Kubernetes command line (kubectl), the Kubernetes Dashboard, and the Kubernetes API. Container Engine for Kubernetes is integrated with Oracle Cloud Infrastructure Identity and Access Management (IAM), which provides easy authentication with native Oracle Cloud Infrastructure identity functionality.

  Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/ContEng/Concepts/contengoverview.htm