Oracle Oracle Certifications 1Z0-1085-24 Questions & Answers

• Question 31:

  Which three components are part of Oracle Cloud Infrastructure Identity and Access Management service?

  A. Virtual Cloud Networks

  B. Policies

  C. Regional Subnets

  D. Dynamic Groups

  E. Roles

  F. Compute Instances

  G. Users

  Correct Answer: BDG

  IAM components are RESOURCE The cloud objects that your company's employees create and use when interacting with Oracle Cloud Infrastructure. For example: compute instances, block storage volumes, virtual cloud networks (VCNs), subnets, route tables, etc. USER An individual employee or system that needs to manage or use your company's Oracle Cloud Infrastructure resources. Users might need to launch instances, manage remote disks, work with your virtual cloud network, etc. End users of your application are not typically IAM users. Users have one or more IAM credentials (see User Credentials). POLICY A document that specifies who can access which resources, and how. Access is granted at the group and compartment level, which means you can write a policy that gives a group a specific type of access within a specific compartment, or to the tenancy itself. If you give a group access to the tenancy, the group automatically gets the same type of access to all the compartments inside the tenancy. For more information, see Example Scenario and How Policies Work. The word "policy" is used by people in different ways: to mean an individual statement written in the policy language; to mean a collection of statements in a single, named "policy" document (which has an Oracle Cloud ID (OCID) assigned to it); and to mean the overall body of policies your organization uses to control access to resources. GROUP A collection of users who all need the same type of access to a particular set of resources or compartment.

  DYNAMIC GROUP

  A special type of group that contains resources (such as compute instances) that match rules that you define (thus the membership can change dynamically as matching resources are created or deleted). These instances act as "principal"

  actors and can make API calls to services according to policies that you write for the dynamic group.

  NETWORK SOURCE

  A group of IP addresses that are allowed to access resources in your tenancy. The IP addresses can be public IP addresses or IP addresses from a VCN within your tenancy. After you create the network source, you use policy to restrict

  access to only requests that originate from the IPs in the network source.

  COMPARTMENT

  A collection of related resources. Compartments are a fundamental component of Oracle Cloud Infrastructure for organizing and isolating your cloud resources. You use them to clearly separate resources for the purposes of measuring usage

  and billing, access (through the use of policies), and isolation (separating the resources for one project or business unit from another). A common approach is to create a compartment for each major part of your organization. For more

  information, see Setting Up Your Tenancy.

  TENANCY

  The root compartment that contains all of your organization's Oracle Cloud Infrastructure resources. Oracle automatically creates your company's tenancy for you. Directly within the tenancy are your IAM entities (users, groups,

  compartments, and some policies; you can also put policies into compartments inside the tenancy). You place the other types of cloud resources (e.g., instances, virtual networks, block storage volumes, etc.) inside the compartments that you

  create.

  HOME REGION

  The region where your IAM resources reside. All IAM resources are global and available across all regions, but the master set of definitions reside in a single region, the home region. You must make changes to your IAM resources in your

  home region. The changes will be automatically propagated to all regions. For more information, see Managing Regions.

  FEDERATION

  A relationship that an administrator configures between an identity provider and a service provider. When you federate Oracle Cloud Infrastructure with an identity provider, you manage users and groups in the identity provider. You manage

  authorization in Oracle Cloud Infrastructure's IAM service. Oracle Cloud Infrastructure tenancies are federated with Oracle Identity Cloud Service by default.

  Reference:

  https://docs.cloud.oracle.com/en-us/iaas/data-safe/doc/iam-components.html

• Question 32:

  A customer wants to use Oracle Cloud Infrastructure (OCI) storing application backups which can be stored for months, but retrieved immediately based on business needs. Which OCI storage service can be used to meet this requirement?

  A. Archive Storage

  B. Block Volume

  C. Object Storage (standard)

  D. File Storage

  Correct Answer: C

  Oracle Cloud Infrastructure offers two distinct storage class tiers to address the need for both performant, frequently accessed "hot" storage, and less frequently accessed "cold" storage. Storage tiers help you maximize performance where

  appropriate and minimize costs where possible. Use Object Storage for data to which you need fast, immediate, and frequent access. Data accessibility and performance justifies a higher price to store data in the Object Storage tier. Use

  Archive Storage for data to which you seldom or rarely access, but that must be retained and preserved for long periods of time. The cost efficiency of the Archive Storage tier offsets the long lead time required to access the data.

  Unlike Object Storage, Archive Storage data retrieval is not instantaneous.

  Reference:

  https://oracledbwr.com/oracle-cloud-infrastructure-object-storage-service/

• Question 33:

  Which two Oracle Cloud Infrastructure resources can be used to group/categorize expenses?

  A. Policies

  B. Tags

  C. Users

  D. Compartments

  E. Groups

  Correct Answer: BD

  You can do Costs Analysis in OCI and you can group and filter the cost by Tags or compartments To filter costs by dates To filter costs by tags To filter costs by compartments To remove a compartment or tag filter

• Question 34:

  A customer is looking to migrate their old database backups from their on-premises data center to Oracle Cloud Infrastructure (OCI). Which OCI service is the most cost-effective?

  A. Block Volume

  B. Archive Storage

  C. File Storage

  D. Object Storage (standard)

  Correct Answer: B

  Archive storage is the most cost effective for archive data Reference:

  https://www.oracle.com/cloud/storage/archive-storage.html Oracle Cloud Infrastructure offers two distinct storage class tiers to address the need for both performant, frequently accessed "hot" storage, and less frequently accessed "cold"

  storage. Storage tiers help you maximize performance where appropriate and minimize costs where possible.

  1) Use Archive Storage for data to which you seldom or rarely access, but that must be retained and preserved for long periods of time. The cost efficiency of the Archive Storage offsets the long lead time required to access the data.

  2) Use Object Storage for data to which you need fast, immediate, and frequent access. Data accessibility and performance justifies a higher price to store data in the Object Storage. For more information, see Overview of Object Storage.

  

  Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Archive/Concepts/archivestorageoverview.htm

• Question 35:

  A new customer has logged into Oracle Cloud Infrastructure (OCI) as an administrator for the first time. The admin would like to deploy infrastructure. What is the first step they must take in order to accomplish this task?

  A. File a service request for access to each additional region.

  B. Use API endpoints to create resources in the desired region.

  C. Subscribe to the desired region.

  D. Navigate to the desired region and begin creating resources.

  Correct Answer: C

  When you sign up for Oracle Cloud Infrastructure, Oracle creates a tenancy for you in one region. This is your home region. Your home region is where your IAM resources are defined. When you subscribe to another region, your IAM resources are available in the new region, however, the master definitions reside in your home region and can only be changed there. When you subscribe your tenancy to a new region, all the policies from your home region are enforced in the new region. If you want to limit access for groups of users to specific regions, you can write policies to grant access to specific regions only.

  Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Identity/Tasks/managingregions.htm

• Question 36:

  You are required to host several files in a location that can be publicly accessible from anywhere in the world. Which Oracle Cloud Infrastructure (OCI) service should you use?

  A. OCI Object Storage

  B. Oracle Functions

  C. OCI Block Volume

  D. OCI File Storage

  E. OCI Storage Gateway

  Correct Answer: A

• Question 37:

  Which is an example of Edge Services in Oracle Cloud Infrastructure (OCI)?

  A. Virtual Cloud Network (VCN)

  B. Object Storage

  C. Web Application Firewall

  D. Virtual Firewall

  Correct Answer: C

  Oracle Cloud Infrastructure Web Application Firewall (WAF) is a cloud-based, Payment Card Industry (PCI) compliant, global security service that protects applications from malicious and unwanted internet traffic. WAF can protect any

  internet facing endpoint, providing consistent rule enforcement across a customer's applications.

  WAF provides you with the ability to create and manage rules for internet threats including Cross- Site Scripting (XSS), SQL Injection and other OWASP-defined vulnerabilities. Unwanted bots can be mitigated while tactically allowed desirable

  bots to enter. Access rules can limit based on geography or the signature of the request.

  Reference:

  https://blogs.oracle.com/cloud-infrastructure/introducing-the-oci-waf https://blogs.oracle.com/cloud-infrastructure/innovation-in-edge-services-the-oracle-cloud- infrastructure-edge-network

• Question 38:

  Which capability enables you to search, purchase, and start using software in your Oracle Cloud Infrastructure (OCI) tenancy?

  A. OCI Marketplace

  B. OCI OS Management

  C. OCI Resource Manager

  D. OCI Registry

  Correct Answer: A

  Oracle Cloud Infrastructure Marketplace is an online store that offers solutions specifically for customers of Oracle Cloud Infrastructure. In the Oracle Cloud Infrastructure Marketplace catalog, you can find listings for two types of solutions from Oracle and trusted partners: images and stacks. These listing types include different categories of applications. Also, some listings are free and others require payment. Images are templates of virtual hard drives that determine the operating system and software to run on an instance. You can deploy image listings on an Oracle Cloud Infrastructure Compute instance. Marketplace also offers stack listings. Stacks represent definitions of groups of Oracle Cloud Infrastructure resources that you can act on as a group. Each stack has a configuration consisting of one or more declarative configuration files. With an image or a stack, you have a customized, more streamlined way of getting started with a publisher's software.

  Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Marketplace/Concepts/marketoverview.htm

• Question 39:

  In what two ways does Oracle Cloud Infrastructure (OCI) offer industry leading price-performance?

  A. OCI leverages advanced encryption that results In fast performance

  B. With OCI, pricing Is low and predictable across all regions and services.

  C. OCI hypervisor provides Industry loading performance.

  D. OCI backs performance claims with Service Level Agreements.

  E. OCI does not over subscribe CPU, but only memory.

  Correct Answer: BD

  OCI leverages advanced encryption that leads to fast performance, OCI does not over subscribe CPU, but only memory, and OCI hypervisor provides industry leading performance are WRONG. However, OCI does back claims with SLAs and offers predictable pricing for all services. Reference: https://www.oracle.com/cloud/iaas/sla.html https://www.oracle.com/in/cloud/pricing.html

• Question 40:

  A customer wants to deploy a customized e commerce Web application using multiple virtual machines, block storage, databases, load balancer and web application firewall. What cloud model can be used to host this application?

  A. Software as a Service (SaaS)

  B. Platform as a Service (PaaS)

  C. Anything as a Service (XaaS)

  D. Infrastructure as a Service (IaaS)

  Correct Answer: D

  https://www.oracle.com/cloud/what-is-iaas/

  What Is IaaS?

  Infrastructure as a service (IaaS) is a type of cloud service model in which computing resources are hosted in the cloud. Businesses can use the IaaS model to shift some or all of their use of on- premises or colocated data center

  infrastructure to the cloud, where it is owned and managed by a cloud provider. These infrastructure elements can include compute, network, and storage hardware as well as other components and software. In the IaaS model, the cloud

  provider owns and operates the hardware and software and also owns or leases the data center. When you have an IaaS solution, you rent the resources like compute or storage, provision them when needed, and pay for the resources your

  organization consumes. For some resources such as compute, you'll pay for the resources you use. For others such as storage, you'll pay for capacity.

  How Does IaaS Work?

  In a typical IaaS model, a business--which can be of any size--consumes services like compute, storage, and databases from a cloud provider. The cloud provider offers those services by hosting hardware and software in the cloud. The

  business will no longer need to purchase and manage its own equipment, or space to host the equipment, and the cost will shift to a pay-as-you-go model. When the business needs less, it pays for less. And when it grows, it can provision

  additional computing resources and other technologies in minutes. In contrast, in a traditional on-premises scenario, a business manages and maintains its own data center. The business must invest in servers, storage, software, and other

  technologies, and hire an IT staff or contractors to purchase, manage, and upgrade all the equipment and licenses. The data center has to be built to meet peak demand, even though sometimes workloads decline and those resources stand

  idle. Conversely, if the business grows quickly, the IT department might struggle to keep up.

  Reference:

  https://www.oracle.com/in/cloud/what-is-iaas/