1Z0-997-21 Real Exam Questions and Verified Answers

Question 1 Single choice

A retail company has several on-premises data centers which span multiple geographical locations. They plan to move some of their applications from on-premises data centers to Oracle Cloud Infrastructure (OCI). For these applications running in OCI, they still need to interact with applications running on their on-premises data centers to Oracle Cloud Infrastructure (OCI). for these applications running in OCI. they still need to interact with applications running on their on-premises data centers. These applications require highly available, fault-tolerant network connections between on premises data centers and OCI.

Which option should you recommend to provide the highest level of redundancy?

A
Oracle cloud Infrastructure provides network redundancy by default so that no other operations are required
B
If your data centers span multiple, geographical locations, use only the specific IP address as a static route for the specific geographical location
C
Set up both IPSec VPN and FastConnect to connect your on premises data centers to Oracle Cloud Infrastructure.
D
Use FastConnect private peering only to ensure secure access from your data center to Oracle Cloud Infrastructure
E
Set up a single IPSec VPN connection (rom your data center to Oracle Cloud Infrastructure since It is cost effective

Show answer and explanation

Correct answer: B

Explanation

If your data centers span multiple geographical locations, we recommend using a broad CIDR (0.0.0.0/0) as a static route in addition to the CIDR of the specific geographical location. This broad CIDR provides high availability and flexibility to your network design. For instance, the following diagram shows two networks in separate geographical areas that each connect to Oracle Cloud Infrastructure. Each area has a single on-premises router, so two IPSec VPN connections can be created. Note that each IPSec VPN connection has two static routes: one for the CIDR of the particular geographical area, and a broad
0.0.0.0/0 static route.

Question 2 Single choice

An insurance company is storing critical financial data in the Oracle Cloud Infrastructure block volume.
This volume is currently encrypted using oracle managed keys. Due to regulatory compliance, the customer wants to encrypt the data using the keys that they can control and not the keys which are controlled by Oracle.

What of the following series of tasks are required to encrypt the block volume using customer managed keys?

A
Create a master encryption key, create a data encryption key, decrypt the block volume using existing oracle managed keys, encrypt the block volume using the data encryption key.
B
Create a vault import your master encryption key into the vault, generate data encryption key, assign data encryption key to the block volume.
C
Create a master encryption key, create a new version of the encryption key, decrypt the block volume using existing oracle managed keys and encrypt using new version of the encryption key.
D
Create a vault, create a master encryption key in the vault, assign this master encryption key to the block volume.

Show answer and explanation

Correct answer: D

Question 3 Multiple choice

An organization has its mission critical application consisting of multiple application servers and databases running inside Virtual Cloud Network (VCN) in uk-london-1 region. Their solution architect wants to further strengthen their architecture by planning for Disaster Recovery (DR) in eu-frankfurt- 1 region.

Which two solutions should their architect keep in mind while designing for DR?

A
A remote VCN peering connection is required to establish secure and reliable connectivity between different VCNs created in uk-london-1 and eu-frankfurt-1 region.
B
rsync utility can be used to asynchronously copy file systems or snapshot data to another region.
C
Load balancer will automatically distribute traffic between both the regions.
D
The RTO is the acceptable timeframe of lost data that application can tolerate.
E
It is not possible to use Active Data Guard to synchronize a database in uk-london-1 region to equivalent database in eu-frankfurt-1 region.

Show answer and explanation

Correct answers: A, C

Question 4 Single choice

Your company needs to migrate a business critical application from your data center to Oracle Cloud Infrastructure (OCI). The application runs on Oracle Database and both the application and database servers run on Oracle Linux version 7. The application server is WebLogic server running on multiple 4-core servers and the database is deployed as an Oracle Database Enterprise Edition RAC database on 2 servers (4-cores each).

Which method of database migration should you choose so that the application has minimal impact? (Choose the best answer.)

A
Deploy Virtual Machine RAC DB system on OCI and use the Oracle Database Backup module with RMAN to migrate the data from customer on-premises to OCI.
B
Deploy Virtual Machine RAC DB system on OCI and use the ZDM tool for the database migration.
C
Deploy Autonomous Transaction Processing Database on OCI and use the MV2ADB tool for the database migration.
D
Deploy Exadata Cloud Service Base rack and use Oracle Data Pump tool to migrate the data from customer on-premises to OCI.

Show answer and explanation

Correct answer: B

Explanation

https://docs.oracle.com/en/database/oracle/zero-downtime-migration/19.2/zdmug/introduction-to-zero-downtime-migration.html#GUID-FF4CA22F-CC83-4118-AF26-6E7BE224717F

Question 5 Single choice

You are trying to delete a compartment. The delete operation is falling and you need to troubleshoot the problem.

Which step should NOT be considered when troubleshooting this issue?

A
Verify that there are no policies In the root compartment that reference the compartment you are trying to delete.
B
Verify that you have removed all resources from the compartment.
C
Make sure you have at least one more compartment in your tenancy other than the root compartment.
D
Search for resources in the compartment for each region that your tenancy is subscribed to.

Show answer and explanation

Correct answer: A

Question 6 Single choice

Which of the following is NOT a good use case for using the functionality available in the Oracle Cloud Infrastructure (OCI) Events service?

A
Publish all events in a specific compartment to Oracle Streaming service for later analysis.
B
Triggers Function using Oracle Functions when new files are uploaded in an OCI Object Storage bucket.
C
Publish a notification when long lived tasks complete, such as OCI Autonomous Database backup completion.
D
Capture Monitoring Alarms and invoke Autoscaling of compute instances.
E
Trigger a notification when a function completes its execution.

Show answer and explanation

Correct answer: D

Question 7 Single choice

You are working as a cloud consultant for a major media company. In the US and your client requested to consolidate all of their log streams, access logs, application logs, and security logs into a single system.
The client wants to analyze all of their logs In real-time based on heuristics and the result should be validated as well. This validation process requires going back to data samples extracted from the last 8 hours.

What approach should you take for this scenario?

A
Create an auto scaling pool of syslog-enabled servers using compute instances which will store the logs In Object storage, then use map reduce jobs to extract logs from Object storage, and apply heuristics on the logs.
B
Create a bare-metal instance big enough to host a syslog enabled server to process the logs and store logs on the locally attached NVMe SSDs for rapid retrieval of logs when needed.
C
Set up an OCI Audit service and ingest all the API arils from Audit service pragmatically to a client side application to apply heuristics and save the result in an OCI Object storage.
D
Stream all the logs and cloud events of Events service to Oracle Streaming Service. Build a client process that will apply heuristics on the logs and store them in an Object Storage.

Show answer and explanation

Correct answer: D

Explanation

The Oracle Cloud Infrastructure Streaming service provides a fully managed, scalable, and durable storage solution for ingesting continuous, high-volume streams of data that you can consume and process in real time. Streaming can be used for messaging, ingesting high-volume data such as application logs, operational telemetry, web click-stream data, or other use cases in which data is produced and processed continually and sequentially in a publish-subscribe messaging model.
Streaming Usage Scenarios
Here are some of the many possible uses for Streaming: Metric and log ingestion: Use the Streaming service as an alternative for traditional file-scraping approaches to help make critical operational data more quickly available for indexing, analysis, and visualization.
Messaging: Use Streaming to decouple components of large systems. Streaming provides a pull/ bufferbased communication model with sufficient capacity to flatten load spikes and the ability to feed multiple consumers with the same data independently. Key-scoped ordering and guaranteed durability provide reliable primitives to implement various messaging patterns, while high throughput potential allows for such a system to scale well. Web/Mobile activity data ingestion: Use Streaming for capturing activity from websites or mobile apps (such as page views, searches, or other actions users may take). This information can be used for realtime monitoring and analytics, as well as in data warehousing systems for offline processing and reporting.
Infrastructure and apps event processing: Use Streaming as a unified entry point for cloud components to report their life cycle events for audit, accounting, and related activities.

Question 8 Single choice

Your Oracle database is deployed on-premises and has produced 100 TB database backup locally. You have a disaster recovery plan that requires you to create redundant database backups in Oracle Cloud Infrastructure (OCI).

Once the initial backup is completed, the backup must be available for retrieval in less than 30 minutes to support the Recovery Time Objective (RTO) of your solution.

Which is the most cost effective option to meet these requirements?

A
Setup an IPsec VPNConnect between on-premises data center and OCI. Then to use OCI CLI command to upload database backups to OCI Object Storage Archive tier as the final destination.
B
Use OCI Storage Gateway to transfer the backup files to OCI Object Storage Archive tier as the final destination.
C
Setup a FastConnect connection between on-premises data center and OCI. Then to use OCI CLI command to upload database backups to OCI Object Storage Standard tier as the final destination.
D
Use OCI Storage Gateway to transfer the backup files to OCI Object Storage Standard tier as the final destination.

Show answer and explanation

Correct answer: D

Question 9 Multiple choice

You are currently working for a public health care company based in the United Stats. Their existing patient records runs in an on-premises data center and the customer is sending tape backups offsite as part of their recovery planning.
You have developed an alternative archival solution using Oracle Cloud Infrastructure (OCI) that will save the company a significant amount of mom on a yearly basis. The solution involves storing data in an OCI Object Storage bucket After reviewing your solution with the customer global Compliance (GRC) team they have highlighted the following security requirements: All data less than 1 year old must be accessible within 2 hour.
All data must be retained for at least 10 years and be accessible within 48 hours AH data must be encrypted at rest
No data may be transmitted across the public Internet

Which two options meet the requirements outlined by the customer GRC team?

A
Provision a FastConnect link to the closest OCI region and configure a private peering virtual circuit.
B
Create an OCI Object Storage Standard tier bucket Configure a lifecycle policy to archive any object that Is older than 365 days
C
Create a VPN connection between your on premises data center and OCI. Create a Virtual Cloud Network (VCN) along with an OCI Service Gateway for OCI Object Storage.
D
Provision a FastConnect link to the closest OCI region and configure a public peering virtual circuit
E
Create an OCI Object Storage Standard tier bucket. Configure a lifecycle policy to delete any object that is older than 7 years

Show answer and explanation

Correct answers: B, D

Explanation

The Oracle Services Network is a conceptual network in Oracle Cloud Infrastructure that is reserved for Oracle services. These services have public IP addresses that you typically reach over the internet.
However, you can access the Oracle Services Network without the traffic going over the internet.
There are different ways, depending on which of your hosts need the access: Hosts in your on-premises network:
- Private access through a VCN with FastConnect private peering or VPN Connect: The on-premises hosts use private IP addresses and reach the Oracle Services Network by way of the VCN and the VCN's service gateway.
- Public access with FastConnect public peering: The on-premises hosts use public IP addresses.
regarding which Fastconnect Public peering: To access public services in Oracle Cloud Infrastructure without using the internet. For example, Object Storage, the Oracle Cloud Infrastructure Console and APIs, or public load balancers in your VCN. Communication across the connection is with IPv4 public IP addresses. Without FastConnect, the traffic destined for public IP addresses would be routed over the internet. With FastConnect, that traffic goes over your private physical connection. so Answer 4 will be the best answer that meets the customer requirement A service gateway lets your virtual cloud network (VCN) privately access specific Oracle services without exposing the data to the public internet. No internet gateway or NAT is required to reach those specific services. The resources in the VCN can be in a private subnet and use only private IP addresses. The traffic from the VCN to the Oracle service travels over the Oracle network fabric and never traverses the internet.
Object Lifecycle Management lets you automatically manage the archiving and deletion of objects. By using Object Lifecycle Management to manage your Object Storage and Archive Storage data, you can reduce your storage costs and the amount of time you spend managing data.

Question 10 Multiple choice

Multiple departments In your company use a shared Oracle Cloud Infrastructure (OCI) tenancy to Implement their projects. You are in charge of managing the cost of OCI resources in the tenancy and need to obtain better Insights Into department's usage.

Which three options can you implement together to accomplish this?

A
Create a budget that matches your commitment amount and an alert at 100 percent of the forecast
B
Set up a consolidated budget tracking lags to analyze costs in ,1 granular manner
C
Set up different compartments for each department then track and analyze cost per compartment
D
Use the billing cost tracking report to analyze costs
E
Set up a tag default that automatically applies tags to all specified resources created In a compartment then use these tags for cost analysis.

Show answer and explanation

Correct answers: A, C, E

Explanation