Oracle 1Z0-1085-22 Online Practice Questions and Exam Preparation

Oracle 1Z0-1085-22 Online Questions & Answers

• Question 71:

  Which statement about the Oracle Cloud Infrastructure (OCI) shared-security model is true?

  A. You are responsible for securing all data that you place in OCI
  B. You are not responsible for any aspect of security in OCI
  C. You are responsible for securing the hypervisor within OCI compute service
  D. You are responsible for managing security controls within the physical OCI network
  A. You are responsible for securing all data that you place in OCI

  ---

  Explanation/Reference:

  Oracle Cloud Infrastructure offers best-in-class security technology and operational processes to secure its enterprise cloud services. However, for you to securely run your workloads in Oracle Cloud Infrastructure, you must be aware of your security and compliance responsibilities. By design, Oracle provides security of cloud infrastructure and operations (cloud operator access controls, infrastructure security patching, and so on), and you are responsible for securely configuring your cloud resources. Security in the cloud is a shared responsibility between you and Oracle. In a shared, multi-tenant compute environment, Oracle is responsible for the security of the underlying cloud infrastructure (such as data-center facilities, and hardware and software systems) and you are responsible for securing your workloads and configuring your services (such as compute, network, storage, and database) securely. In a fully isolated, single-tenant, bare metal server with no Oracle software on it, your responsibility increases as you bring the entire software stack (operating systems and above) on which you deploy your applications. In this environment, you are responsible for securing your workloads, and configuring your services (compute, network, storage, database) securely, and ensuring that the software components that you run on the bare metal servers are configured, deployed, and managed securely. The responsibilities can be divided as: Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Security/Concepts/security_overview.htm

  

• Question 72:

  Which gateway can be used to provide internet access to an Oracle Cloud Infrastructure compute instance in a private subnet?

  A. NAT Gateway
  B. Service Gateway
  C. Dynamic Routing Gateway
  D. Internet Gateway
  A. NAT Gateway

  ---

  Explanation/Reference:

  A NAT gateway gives cloud resources without public IP addresses access to the internet without exposing those resources to incoming internet connections.

  

  

  Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Network/Tasks/NATgateway.htm

• Question 73:

  OCI budgets can be set on which two options?

  A. Cost-tracking tags
  B. Free-form tags
  C. Compartments
  D. Virtual Cloud Network
  E. Tenancy
  A. Cost-tracking tags
  C. Compartments

  ---

  Explanation/Reference:

  In OCI a budget can be used to set soft limits on your Oracle Cloud Infrastructure spending. You can set alerts on your budget to let you know when you might exceed your budget, and you can view all of your budgets and spending from one single place in the Oracle Cloud Infrastructure console. Budgets are set on

  1.

  Cost-tracking tags

  2.

  Compartments (including the root compartment)

  Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Billing/Concepts/budgetsoverview.htm

• Question 74:

  Which three services Integrate with Oracle Cloud Infrastructure (OCI) Key Management?

  A. Functions
  B. Block Volume
  C. Object Storage
  D. Auto Scaling
  E. Identity and Access Management
  F. File Storage
  B. Block Volume
  C. Object Storage
  F. File Storage

  ---

  Explanation/Reference:

  DATA ENCRYPTION

  Protect customer data at-rest and in-transit in a way that allows customers to meet their security and compliance requirements for cryptographic algorithms and key management The Oracle Cloud Infrastructure Block Volume service always

  encrypts all block volumes, boot volumes, and volume backups at rest by using the Advanced Encryption Standard (AES) algorithm with 256-bit encryption. By default all volumes and their backups are encrypted using the Oracle- provided

  encryption keys. Each time a volume is cloned or restored from a backup the volume is assigned a new unique encryption key.

  The File Storage service encrypts all file system and snapshot data at rest. By default all file systems are encrypted using Oracle-managed encryption keys. You have the option to encrypt all of your file systems using the keys that you own

  and manage using the Vault service. Object Storage employs 256-bit Advanced Encryption Standard (AES-256) to encrypt object data on the server. Each object is encrypted with its own data encryption key. Data encryption keys are always

  encrypted with a master encryption key that is assigned to the bucket. Encryption is enabled by default and cannot be turned off. By default, Oracle manages the master encryption key.

  Reference:

  https://docs.cloud.oracle.com/en-us/iaas/Content/Block/Concepts/overview.htm https://docs.cloud.oracle.com/en-us/iaas/Content/Object/Concepts/objectstorageoverview.htm https://docs.cloud.oracle.com/en-us/iaas/Content/File/Concepts/

  filestorageoverview.htm

  Oracle Cloud Infrastructure Key Management is a managed service that enables you to encrypt your data using keys that you control.IAM, Autoscaling and functions cannot be used with Key Management and hence are incorrect options.

  Reference:

  https://docs.cloud.oracle.com/en-us/iaas/Content/KeyManagement/Concepts/keyoverview.htm

• Question 75:

  Oracle Cloud Infrastructure Budgets can be set on which two options?

  A. Free-form tags
  B. Compartments
  C. Tenancy
  D. Virtual Cloud Network
  E. Cost-tracking tags
  B. Compartments
  E. Cost-tracking tags

  ---

  Explanation/Reference:

  A budget can be used to set soft limits on your Oracle Cloud Infrastructure spending. You can set alerts on your budget to let you know when you might exceed your budget, and you can view all of your budgets and spending from one single

  place in the Oracle Cloud Infrastructure console.

  How Budgets Work:

  Budgets are set on cost-tracking tags or on compartments (including the root compartment) to track all spending in that cost-tracking tag or for that compartment and its children. All budgets alerts are evaluated every 15 minutes. To see the

  last time a budget was evaluated, open the details for a budget. You will see fields that show the current spend, the forecast and the "Spent in period" field which shows you the time period over which the budget was evaluated. When a

  budget alert fires, the email recipients configured in the budget alert receive an email.

  Reference:

  https://docs.cloud.oracle.com/en-us/iaas/Content/Billing/Concepts/budgetsoverview.htm

• Question 76:

  A new customer has logged into Oracle Cloud Infrastructure (OCI) as an administrator for the first time. The admin would like to deploy infrastructure. What is the first step they must take in order to accomplish this task?

  A. File a service request for access to each additional region.
  B. Use API endpoints to create resources in the desired region.
  C. Subscribe to the desired region.
  D. Navigate to the desired region and begin creating resources.
  C. Subscribe to the desired region.

  ---

  Explanation/Reference:

  When you sign up for Oracle Cloud Infrastructure, Oracle creates a tenancy for you in one region. This is your home region. Your home region is where your IAM resources are defined. When you subscribe to another region, your IAM resources are available in the new region, however, the master definitions reside in your home region and can only be changed there. When you subscribe your tenancy to a new region, all the policies from your home region are enforced in the new region. If you want to limit access for groups of users to specific regions, you can write policies to grant access to specific regions only.

  Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Identity/Tasks/managingregions.htm

• Question 77:

  You want to migrate mission-critical Oracle E- Business Suite application to Oracle Cloud Infrastructure (OCI) with full control and access to the underlying infrastructure. Which option meets this requirement?

  A. Replace E-Business Suite with an Oracle SaaS application
  B. OCI Exadata DB Systems and OCI compute instances
  C. OCI Exadata DB Systems and Oracle Functions
  D. Oracle Exadata Cloud at customer, Storage Gateway and API Gateway
  B. OCI Exadata DB Systems and OCI compute instances

• Question 78:

  Which Oracle Cloud Infrastructure service can you use to assess user security of your Oracle databases?

  A. Oracle Data Safe
  B. Oracle Data Guard
  C. Audit Vault and Database Firewall option for Oracle Database Enterprise Edition
  D. Audit Service
  A. Oracle Data Safe

  ---

  Explanation/Reference:

  Oracle Data Safe is a unified control center for your Oracle databases which helps you understand the sensitivity of your data, evaluate risks to data, mask sensitive data, implement and monitor security controls, assess user security, monitor

  user activity, and address data security compliance requirements.

  Whether you're using an Autonomous Database or an Oracle DB system, Oracle Data Safe delivers essential data security capabilities as a service on Oracle Cloud Infrastructure.

  Reference:

  https://docs.cloud.oracle.com/en-us/iaas/data-safe/doc/oracle-data-safe-overview.html

• Question 79:

  Which is NOT available to you whenever Oracle Cloud Infrastructure creates or resolves an incident?

  A. Twitter notifications
  B. Text Message notifications
  C. Email notifications
  D. Webhook notifications
  A. Twitter notifications

  ---

  Explanation/Reference:

  The Oracle Cloud Infrastructure Notifications service broadcasts messages to distributed components through a publish-subscribe pattern, delivering secure, highly reliable, low latency and durable messages for applications hosted on Oracle Cloud Infrastructure and externally. Use Notifications to get notified when event rules are triggered or alarms are breached, or to directly publish a message. Messages sent out as email by the Oracle Cloud Infrastructure Notifications service are processed and delivered through Oracle resources

  Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Notification/Concepts/notificationoverview.htm

• Question 80:

  Which feature allows you to logically group and isolate your Oracle Cloud Infrastructure resources?

  A. Tenancy
  B. Identity and Access Management Groups
  C. Compartments
  D. Availability Domain
  C. Compartments

  ---

  Explanation/Reference:

  COMPARTMENT A collection of related resources. Compartments are a fundamental component of Oracle Cloud Infrastructure for organizing and isolating your cloud resources. You use them to clearly separate resources for the purposes

  of measuring usage and billing, access (through the use of policies), and isolation (separating the resources for one project or business unit from another).

  A common approach is to create a compartment for each major part of your organization.

  User Group can use some resources in the compartment like network resources also they can't create it depend on the policy that assigned Remember, a compartment is a logical grouping, not a physical one Reference:

  https://docs.cloud.oracle.com/en-us/iaas/tools/oci-cli/2.9.8/oci_cli_docs/cmdref/iam/compartment.html