Oracle 1Z0-1085-24 Online Practice Questions and Exam Preparation

Oracle 1Z0-1085-24 Online Questions & Answers

• Question 71:

  Which feature does the Oracle Cloud Infrastructure Compute service leverage for ensuring high availability of applications?

  A. Fault Domains
  B. Real Application Clusters (RAC)
  C. Golden Gate
  D. Data Guard
  A. Fault Domains

  ---

  Explanation/Reference:

  Fault domains in Oracle Cloud Infrastructure are used to distribute instances across different physical hardware within an availability domain. This helps in ensuring high availability and fault tolerance by reducing the impact of hardware failures on instances.

• Question 72:

  Where are cryptographic operations performed for a Vault Master Encryption Key protected by a Hardware Security Module (HSM)?

  A. On the client
  B. On the HSM
  C. On the cloud
  D. On the server
  B. On the HSM

  ---

  Explanation/Reference:

  Cryptographic operations for a Vault Master Encryption Key protected by an HSM are performed directly on the HSM. The HSM is a specialized hardware device designed to securely generate, store, and perform cryptographic operations, ensuring the confidentiality and integrity of the encryption keys.

• Question 73:

  Which feature allows you to group and logically isolate your Oracle Cloud Infrastructure (OCI) resources?

  A. Tenancy
  B. Identity and Access Management Groups
  C. Availability Domains
  D. Compartments
  D. Compartments

  ---

  Explanation/Reference:

  It is collection of related resources. Compartments are a fundamental component of Oracle Cloud Infrastructure for organizing and isolating your cloud resources. You use them to clearly separate resources for the purposes of measuring usage and billing, access (through the use of IAM Service policies), and isolation (separating the resources for one project or business unit from another). A common approach is to create a compartment for each major part of your organization. For more information, see Overview of the IAM Service and also Setting Up Your Tenancy. To place a resource in a compartment, simply specify the compartment ID in the "Create" request object when initially creating the resource. For example, to launch an instance into a particular compartment, specify that compartment's OCID in the LaunchInstance request. You can't move an existing resource from one compartment to another. To use any of the API operations, you must be authorized in an IAM policy. If you're not authorized, talk to an administrator. If you're an administrator who needs to write policies to give users access, see Getting Started with Policies. Reference: https://docs.cloud.oracle.com/en-us/iaas/tools/ocicli/2.9.9/oci_cli_docs/cmdref/iam/compartment.html

• Question 74:

  Which two security capabilities are offered by Oracle Cloud Infrastructure?

  A. Always on data encryption for data-at-rest.
  B. Certificate Management service
  C. Captcha
  D. Key Management service
  E. Managed Active Directory service
  A. Always on data encryption for data-at-rest.
  D. Key Management service

  ---

  Explanation/Reference:

  Oracle Cloud Infrastructure's security approach is based on seven core pillars. Each pillar has multiple solutions designed to maximize the security and compliance of the platform and to help customers to improve their security posture. High Availability: Offer fault-independent data centers that enable high-availability scale-out architectures and are resilient against network attacks, ensuring constant uptime in the face of disaster and security attack. Customer Isolation: Allow customers to deploy their application and data assets in an environment that commits full isolation from other tenants and Oracle's staff. Data Encryption: Protect customer data at-rest and in-transit in a way that allows customers to meet their security and compliance requirements with respect to cryptographic algorithms and key management. Security Controls: Offer customers effective and easy-to-use application, platform, and network security solutions that allow them to protect their workloads, have a secure application delivery using a global edge network, constrain access to their services, and segregate operational responsibilities to reduce the risk associated with malicious and accidental user actions. Visibility: Offer customers comprehensive log data and security analytics that they can use to audit and monitor actions on their resources, allowing them to meet their audit requirements and reduce security and operational risk. Secure Hybrid Cloud: Enable customers to use their existing security assets, such as user accounts and policies, as well as third-party security solutions, when accessing their cloud resources and securing their data and application assets in the cloud. Verifiably Secure Infrastructure: Follow rigorous processes and use effective security controls in all phases of cloud service development and operation. Demonstrate adherence to Oracle's strict security standards through third- party audits, certifications, and attestations. Help customers demonstrate compliance readiness to internal security and compliance teams, their customers, auditors, and regulators. Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Security/Concepts/security_overview.htm

• Question 75:

  You are setting up a proof of concept (POC) and need to quickly establish a secure between an on- premises data center and Oracle Cloud Infrastructure (OCI). Which OCI service should you implement?

  A. VCN Peering
  B. FastConnect
  C. Internet Gateway
  D. IPSec VPN
  D. IPSec VPN

  ---

  Explanation/Reference:

  You can set up a single IPSec VPN with a simple layout that you might use for a proof of concept (POC).

  Reference:

  https://docs.cloud.oracle.com/en-us/iaas/Content/Network/Tasks/settingupIPsec.htm

  It is possible to set up a site-to-site Virtual Private Network (VPN) Connection between your on- premises network (a data center or corporate LAN) and your Oracle virtual cloud network (VCN) over a secure encrypted VPN. The VPN

  connection uses industry-standard IPSec protocols. The Oracle service that provides site-to-site connectivity is named VPN Connect (also referred to as an IPSec VPN).

  Reference:

  https://docs.cloud.oracle.com/en-us/iaas/Content/Network/Tasks/managingIPsec.htm

• Question 76:

  You are required to host several files in a location that can be publicly accessible from anywhere in the world. Which Oracle Cloud Infrastructure (OCI) service should you use?

  A. OCI Object Storage
  B. Oracle Functions
  C. OCI Block Volume
  D. OCI File Storage
  E. OCI Storage Gateway
  A. OCI Object Storage

• Question 77:

  Which is NOT a valid business benefit for a customer considering migrating their infrastructure and apps to Oracle Cloud Infrastructure (OCI)?

  A. Faster go-to market
  B. Capital Expenditure to Operational Expenditure conversion
  C. Greater agility
  D. Increased Total Cost of Ownership (TCO)
  D. Increased Total Cost of Ownership (TCO)

  ---

  Explanation/Reference:

  Oracle Cloud Infrastructure is a set of complementary cloud services that enable you to build and run a wide range of applications and services in a highly available hosted environment. Oracle Cloud Infrastructure offers high-performance

  compute capabilities (as physical hardware instances) and storage capacity in a flexible overlay virtual network that is securely accessible from your on- premises network.

  Reference:

  https://docs.cloud.oracle.com/en-us/iaas/Content/GSG/Concepts/baremetalintro.htm

  One of the major benefits of cloud computing is REDUCED TCO. Therefore, Increased TCO is the incorrect option.

  https://www.oracle.com/partners/en/partner-with-oracle/develop-solutions/why/increase-value- reduce-cost-3907933.pdf

• Question 78:

  Your company has deployed a business critical application in Oracle Cloud Infrastructure. What should you do to ensure that your application has the highest level of resilience and availability?

  A. Deploy the application across multiple Availability Domains and Subnets
  B. Deploy the application across multiple Virtual Cloud Networks
  C. Deploy the application across multiple Regions and Availability Domains
  D. Deploy the application across multiple Availability Domains and Fault Domains
  C. Deploy the application across multiple Regions and Availability Domains

  ---

  Explanation/Reference:

  To design a high availability architecture, three key elements should be considered-- redundancy, monitoring, and failover: 1) Redundancy means that multiple components can perform the same task. The problem of a single point of failure is eliminated because redundant components can take over a task performed by a component that has failed. 2) Monitoring means checking whether or not a component is working properly. 3) Failover is the process by which a secondary component becomes primary when the primary component fails. The best practices introduced here focus on these three key elements. Although high availability can be achieved at many different levels, including the application level and the cloud infrastructure level, here we will focus on the cloud infrastructure level. An Oracle Cloud Infrastructure region is a localized geographic area composed of one or more availability domains, each composed of three fault domains. High availability is ensured by a redundancy of fault domains within the availability domains. An availability domain is one or more data centers located within a region. Availability domains are isolated from each other, fault tolerant, and unlikely to fail simultaneously. Because availability domains do not share physical infrastructure, such as power or cooling, or the internal availability domain network, a failure that impacts one availability domain is unlikely to impact the availability of others. A fault domain is a grouping of hardware and infrastructure within an availability domain. Each availability domain contains three fault domains. Fault domains let you distribute your instances so that they are not on the same physical hardware within a single availability domain. As a result, an unexpected hardware failure or a Compute hardware maintenance that affects one fault domain does not affect instances in other fault domains. You can optionally specify the fault domain for a new instance at launch time, or you can let the system select one for you. All the availability domains in a region are connected to each other by a low-latency, high bandwidth network. This predictable, encrypted interconnection between availability domains provides the building blocks for both high availability and disaster recovery. Reference: https://docs.oracle.com/en/solutions/design-ha/index.html#GUID-76ECDDB4-4CB1-4D93-9A6D- A8B620F72369

• Question 79:

  A customer is looking to migrate their old database backups from their on-premises data center to Oracle Cloud Infrastructure (OCI). Which OCI service is the most cost-effective?

  A. Block Volume
  B. Archive Storage
  C. File Storage
  D. Object Storage (standard)
  B. Archive Storage

  ---

  Explanation/Reference:

  Archive storage is the most cost effective for archive data Reference:

  https://www.oracle.com/cloud/storage/archive-storage.html Oracle Cloud Infrastructure offers two distinct storage class tiers to address the need for both performant, frequently accessed "hot" storage, and less frequently accessed "cold"

  storage. Storage tiers help you maximize performance where appropriate and minimize costs where possible.

  1) Use Archive Storage for data to which you seldom or rarely access, but that must be retained and preserved for long periods of time. The cost efficiency of the Archive Storage offsets the long lead time required to access the data.

  2) Use Object Storage for data to which you need fast, immediate, and frequent access. Data accessibility and performance justifies a higher price to store data in the Object Storage. For more information, see Overview of Object Storage.

  

  Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Archive/Concepts/archivestorageoverview.htm

• Question 80:

  Which two Oracle Cloud Infrastructure resources can be used to group/categorize expenses?

  A. Policies
  B. Tags
  C. Users
  D. Compartments
  E. Groups
  B. Tags
  D. Compartments

  ---

  Explanation/Reference:

  You can do Costs Analysis in OCI and you can group and filter the cost by Tags or compartments To filter costs by dates To filter costs by tags To filter costs by compartments To remove a compartment or tag filter