Oracle 1Z0-997-20 Online Practice Questions and Exam Preparation

Oracle 1Z0-997-20 Online Questions & Answers

• Question 141:

  You have deployed a multi-tier application with multiple compute instances in Oracle Cloud Infrastructure. You want to back up these volumes and have decided to use 'Volume Groups' feature. The Block volume and Compute instances exist in different compartments within your tenancy.

  Periodically, a few child compartments are moved under different parent compartments, and you notice that sometimes volume group backup fails.

  What could be the cause?

  A. The Identity and Access Management policy allowing backup failed to move when the compartment was moved.
  B. You are exceeding your volume group backup quota configured.
  C. You have the same block volume attached to multiple compute instances; if these compute instances are in different compartments then all concerned compartments must be moved at the same time.
  D. A compute instance with multiple block volumes attached cannot move when a compartment is moved.
  A. The Identity and Access Management policy allowing backup failed to move when the compartment was moved.

• Question 142:

  You have configured backups for your Oracle Cloud Infrastructure (OCI) 2-node RAC DB systems on virtual machines. In the console, the database backup displays a Failed status.

  Which of the following options is the most likely reason for this backup issue?

  A. The master key stored in OCI Key Management for encryption and decryption of data in the database is not accessible to the backup service.
  B. The auth token being used by the Object Store Swift endpoint is incorrect.
  C. The allocated storage on the OCI File Storage service file system attached with the database is full.
  D. The RMAN backup agent is not compatible with the version of database being used.
  B. The auth token being used by the Object Store Swift endpoint is incorrect.

• Question 143:

  Your company will soon start moving critical systems Into Oracle Cloud Infrastructure (OCI) platform. These systems will reside in the us-phoenix-1and us-ashburn 1 regions. As part of the migration planning, you are reviewing the company's existing security policies and written guidelines for the OCI platform usage within the company. you have to work with the company managed key.

  Which two options ensure compliance with this policy?

  A. When you create a new compute instance through OCI console, you use the default options for "configure boot volume" to speed up the process to create this compute instance.
  B. When you create a new block volume through OCI console, select Encrypt using Key Management checkbox and use encryption keys generated and stored in OCI Key Management Service.
  C. When you create a new compute instance through OCI console, you use the default shape to speed up the process to create this compute instance.
  D. When you create a new OCI Object Storage bucket through OCI console, you need to choose "ENCRYPT USING CUSTOMER-MANAGED KEYS" option.
  E. You do not need to perform any additional actions because the OCI Block Volume service always encrypts all block volumes, boot volumes, and volume backups at rest by using the Advanced Encryption Standard (AES) algorithm with 256-bit encryption.
  B. When you create a new block volume through OCI console, select Encrypt using Key Management checkbox and use encryption keys generated and stored in OCI Key Management Service.
  D. When you create a new OCI Object Storage bucket through OCI console, you need to choose "ENCRYPT USING CUSTOMER-MANAGED KEYS" option.

  ---

  Explanation/Reference:

  Block Volume Encryption

  By default all volumes and their backups are encrypted using the Oracle-provided encryption keys. Each time a volume is cloned or restored from a backup the volume is assigned a new unique encryption key.

  You have the option to encrypt all of your volumes and their backups using the keys that you own and manage using the Vault service.If you do not configure a volume to use the Vault service or you later

  unassign a key from the volume, the Block Volume service uses the Oracle-provided encryption key instead.

  

  This applies to both encryption at-rest and in-transit encryption. Object Storage Encryption

  Object Storage employs 256-bit Advanced Encryption Standard (AES-256) to encrypt object data on the server. Each object is encrypted with its own data encryption key. Data encryption keys are always encrypted with a master encryption key that is assigned to the bucket. Encryption is enabled by default and cannot be turned off. By default, Oracle manages the master encryption key. However, you can optionally configure a bucket so that it's assigned an Oracle Cloud Infrastructure Vault master encryption key that you control and rotate on your own schedule. Encryption: Buckets are encrypted with keys managed by Oracle by default, but you can optionally encrypt the data in this bucket using your own Vault encryption key. To use Vault for your encryption needs, select Encrypt Using Customer-Managed Keys. Then, select the Vault Compartment and Vault that contain the master encryption key you want to use. Also select the Master Encryption Key Compartment and Master Encryption Key.

  

• Question 144:

  A company is running High Performance Computing workloads on Oracle Cloud Infrastructure and are using OCI bare metal compute shape. They have decided to create a custom image of the bare metal instance's boot disk and use it to launch other instances.

  Which of the following is a NOT a true statement?

  A. Before you create a custom image of an instance, you must disconnect all iSCSI attachments and remove all iscsid node configurations from the instance.
  B. Editing custom Windows images is not supported due to hardware differences between shapes.
  C. Custom images do not include the data from any attached block volumes.
  D. You can create additional custom images of an instance while the instance is engaged in the image creation process.
  D. You can create additional custom images of an instance while the instance is engaged in the image creation process.

• Question 145:

  Give this compartment structure:

  

  You want to move a compute instance that is in 'Compute' compartment to 'SysTes-Team'. You login to your Oracle Cloud Infrastructure (OCI)account and use the 'Move Resource' option.

  What will happen when you attempt moving the compute resource?

  A. The move will be successful though Compute Instance and its Public and Private IP address will stay the same. The Compute instance VNIC will need to be moved separately. The Compute instance will still be associated with the original VCN.
  B. The move will fail and you will be prompted to move the VCN first. Once VCN is moved to the target compartment, the Compute instance can be moved.
  C. The move will be successful though Compute Instance Public and Private IP address changed, and it will be associated to the VCN in target compartment.
  D. The move will be successful though Compute Instance and its Public and Private IP address will stay the same. The Compute instance VNIC will still be associated with the original VCN.
  D. The move will be successful though Compute Instance and its Public and Private IP address will stay the same. The Compute instance VNIC will still be associated with the original VCN.

  ---

  Explanation/Reference:

  Moving Resources to a Different Compartment

  Most resources can be moved after they are created. There are a few resources that you can't move from one compartment to another. Some resources have attached resource dependencies and some don't.

  Not all attached dependencies behave the same way when the parent resource moves. For some resources, the attached dependencies move with the parent resource to the new compartment.

  The parent resource moves immediately, but in some cases attached dependencies move asynchronously and are not visible in the new compartment until the move is complete. For other resources, the attached resource dependencies do

  not move to the new compartment. You can move these attached resources independently. You can move Compute resources such as instances, instance pools, and custom images from one compartment to another. When you move a

  Compute resource to a new compartment, associated resources such as boot volumes and VNICs are not moved. You can move a VCN from one compartment to another. When you move a VCN, its associated VNICs, private IPs, and

  ephemeral IPs move with it to the new compartment.

• Question 146:

  You have deployed a web application targeting a global audience across multiple Oracle Cloud Infrastructure (OCI) regions.

  You decide to use Traffic Management Geo-Location based Steering Policy to serve web requests to users from the region closets to the user. Within each region you have deployed a public load balancer with 4 servers in a backend set. During a DR test disable all web servers in one of the regions however, traffic Management does not automatically direct all users to the other region.

  Which two are possible causes?

  A. You did not setup a Route Table associated with load Balancer's subnet
  B. You did not setup an HTTP Health Check associated with Load Balancer public IP in the disabled region.
  C. Rather than using Geo-Location based Steering Policy, you should use Failover Policy Type to serve traffic.
  D. One of the two working web servers In the other region did not pass Its HTTP health check
  E. You did not correctly setup the Load Balancer HTTP health check policy associated with backend set
  B. You did not setup an HTTP Health Check associated with Load Balancer public IP in the disabled region.
  E. You did not correctly setup the Load Balancer HTTP health check policy associated with backend set

  ---

  Explanation/Reference:

  Managing Traffic Management GEOLOCATION Steering Policies Geolocation steering policies distribute DNS traffic to different endpoints based on the location of the end user. Customers can define geographic regions composed of originating continent, countries or states/provinces (North America) and define a separate endpoint or set of endpoints for each region. The Health Checks service allows you to monitor the health of IP addresses and hostnames, as measured from geographic vantage points of your choosing, using HTTP and ping probes. After configuring a health check, you can view the monitor's results. The results include the location from which the host was monitored, the availability of the endpoint, and the date and time the test was performed. Also you can Combine Managing Traffic Management GEOLOCATION Steering Policies with Oracle Health Checks to fail over from one region to another The Load Balancing service provides health status indicators that use your health check policies to report on the general health of your load balancers and their components. if you misconfigure the health check Protocol between the Load balancer and backend set that can lead to not get an accurate response as example below If you run a TCP-level health check against an HTTP service, you might not get an accurate response. The TCP handshake can succeed and indicate that the service is up even when the HTTP service is ly configured or having other issues. Although the health check appears good customers might experience transaction failures.

• Question 147:

  You are working with a customer who needs to attach an Oracle Cloud Infrastructure (OCI) block volume to a VM instance with read/write access type. The customer wants to know if the number of IOPS and throughput performance differs between the following two choices:

  Option A: attach a single 1 TB block volume to the VM instance Option B: attach two separate 500 GB block volumes In a RAID 0 array configuration to the VM instance

  You can assume that the customer is using iSCSI attachment type to attach the volumes to the instance. In addition, you can assume 1 MB block size for throughput and 4 KB block size for IOPS consideration.

  How should you respond to the customer?

  A. Option B provides higher level of throughput, but lower level of IOPS performance.
  B. Both options provide the same number of IOPS and throughput performance.
  C. Option A provides better IOPS, but lower throughput performance.
  D. Option B provides better IOPS and throughput performance.
  B. Both options provide the same number of IOPS and throughput performance.

  ---

  Explanation/Reference:

• Question 148:

  You work for a German company as the Lead Oracle Cloud Infrastructure architect. You have designed a highly scalable architecture for your company's business critical application which uses the Load Balancer service auto which uses the Load Balancer service, autoscaling configuration for the application servers and a 2 Node VM Oracle RAC database. During the peak utilization period of the- application yon notice that the application is running slow and customers are complaining. This is resulting in support tickets being created for API timeouts and negative sentiment from the customer base.

  What are two possible reasons for this application slowness?

  A. Autoscaling configuration for the application servers didn't happen due to IAM policy that's blocking access to the application server compartment
  B. The Load Balancer configuration is not sending traffic to the listener of the application servers.
  C. Autoscaling configuration for the application servers didn't happen due to compartment quota breach of the VM shapes used by the application servers.
  D. Autoscaling configuration for the application servers didn't happen due to service limit breach of the VM shapes used by the application servers
  E. The Load Balancer doesn't have a Network Security Group to allow traffic to the application servers.
  C. Autoscaling configuration for the application servers didn't happen due to compartment quota breach of the VM shapes used by the application servers.
  D. Autoscaling configuration for the application servers didn't happen due to service limit breach of the VM shapes used by the application servers

  ---

  Explanation/Reference:

  Autoscaling Autoscaling enables you to automatically adjust the number of Compute instances in an instance pool based on performance metrics such as CPU utilization. This helps you provide consistent performance for your end users during periods of high demand, and helps you reduce your costs during periods of low demand. Prerequisites

  -

  You have an instance pool. Optionally, you can attach a load balancer to the instance pool. For steps to create an instance pool and attach a load balancer, see Creating an Instance Pool.

  -

  Monitoring is enabled on the instances in the instance pool. For steps to enable monitoring, see Enabling Monitoring for Compute Instances.

  -

  The instance pool supports the maximum number of instances that you want to scale to.

  This limit is

  determined by your tenancy's service limits.

  About Service Limits and Usage

  When you sign up for Oracle Cloud Infrastructure, a set of service limits are configured for your tenancy.

  The service limit is the quota or allowance set on a resource. For example, your tenancy is allowed a maximum number of compute instances per availability domain. These limits are generally established with your Oracle sales representative

  when you purchase Oracle Cloud Infrastructure.

  Compartment Quotas

  Compartment quotas are similar to service limits; the biggest difference is that service limits are set by Oracle, and compartment quotas are set by administrators, using policies that allow them to allocate resources with a high level of

  flexibility.

• Question 149:

  Which of the following is NOT a good use case for the Oracle Cloud Infrastructure (OCI) Streaming service?

  A. Meeting compliance requirements for data to remain unchanged over a long time, so that it can be retrieved for audit purposes.
  B. Messaging with a pull-based communication model and the ability to feed multiple consumers with the same data independently.
  C. Ingesting metric and log data to help make critical operational data more quickly available for indexing, analysis, and visualization.
  D. Providing a unified entry point for cloud components to report their life cycle events for audit, accounting, and related activities.
  A. Meeting compliance requirements for data to remain unchanged over a long time, so that it can be retrieved for audit purposes.

• Question 150:

  Your company has recently deployed a new web application that uses Oracle functions Your manager Instructed you to Implement major manage your systems more effectively. You know that Oracle functions automatically monitors functions on your behalf reports metrics through Service Metrics.

  Which two metrics are collected and made available by this feature?

  A. length of time a function runs
  B. number of times a function is removed
  C. number of times a function is invoked
  D. amount of CPU used by a function
  E. number of concurrent connections
  A. length of time a function runs
  C. number of times a function is invoked

  ---

  Explanation/Reference:

  https://docs.cloud.oracle.com/en-us/iaas/Content/Functions/Reference/functionsmetrics.htm

  you can monitor the health, capacity, and performance of functions you've deployed to Oracle Functions by using metrics

  Oracle Functions monitors function execution, and collects and reports metrics such as:

  The number of times a function is invoked.

  The length of time a function runs for.

  The number of times a function failed.

  The number of requests to invoke a function that returned a '429 Too Many Requests' error in the response (known as 'throttled function invocations').