Oracle 1Z0-997-22 Online Practice Questions and Exam Preparation

Oracle 1Z0-997-22 Online Questions & Answers

• Question 131:

  Given this compartment structure:

  

  You are managing a compute instance that currently resides in the Compute compartment. The Virtual Cloud Network (VCN) into which the compute instance was originally deployed, also resides in this compartment. To support a project-related task, you need to move just the compute instance to the SysTest-Team compartment. You log into your Oracle Cloud Infrastructure (OCI) account and use the Move Resource option to place the compute instance in the new compartment.

  What will be the result of your attempt to move the compute instance to the new compartment? (Choose the best answer.)

  A. The move will be successful. The compute instance's public and private IP addresses will stay the same. The compute instance will remain associated with the VCN from the source compartment.
  B. The move will fail and you will be prompted to move the VCN first. Once VCN is moved to the target compartment, the compute instance can be moved.
  C. After moving the compute instance, you must move the compute instance VNIC as a separate action. The public and private IP addresses of the instance will remain unchanged and it will still be associated with the VCN from the source compartment.
  D. The move will be successful. However, the compute instance's public and private IP addresses will change, and it will be associated to the first VCN that was created in the new, target compartment.
  C. After moving the compute instance, you must move the compute instance VNIC as a separate action. The public and private IP addresses of the instance will remain unchanged and it will still be associated with the VCN from the source compartment.

• Question 132:

  You have provisioned a new VM.DenseIO2.24 compute instance with local NVMe drives. The compute instance is running production application. This is a write heavy application, with a significant Impact to the business it the application goes down.

  What should you do to help maintain write performance and protect against NVMe devices failure.

  A. NVMe drive have built in capability to recover themself so no other actions are required
  B. Configure RAID 6 for NVMe devices.
  C. Configure RAID 1 for NVMe devices.
  D. Configure RAID 10 for NVMe devices.
  D. Configure RAID 10 for NVMe devices.

  ---

  Explanation/Reference:

  VM.DeselO2.24 compute instance include locally attached NVMe devices. These devices provide extremely low latency, high performance block storage that is ideal for big data, OLTP, and any other workload that can benefit from high-performance block storage.

  A protected RAID array is the most recommended way to protect against an NVMe device failure. There are three RAID levels that can be used for the majority of workloads:

  RAID 1: An exact copy (or mirror) of a set of data on two or more disks; a classic RAID 1 mirrored pair contains two disks RAID 10: Stripes data across multiple mirrored pairs. As long as one disk in each mirrored pair is functional, data can be retrieved RAID 6: Block-level striping with two parity blocks distributed across all member disks If you need the best possible performance and can sacrifice some of your available space, then RAID 10 array is an option.

• Question 133:

  Your company needs to migrate a business critical application from your data center to Oracle Cloud Infrastructure (OCI). The application runs on Oracle

  Database and both the application and database servers run on Oracle Linux version 7. The application server is WebLogic server running on multiple 4-core servers and the database is deployed as an Oracle Database Enterprise Edition RAC database on 2 servers (4-cores each).

  Which method of database migration should you choose so that the application has minimal impact? (Choose the best answer.)

  A. Deploy Virtual Machine RAC DB system on OCI and use the Oracle Database Backup module with RMAN to migrate the data from customer on-premises to OCI.
  B. Deploy Virtual Machine RAC DB system on OCI and use the ZDM tool for the database migration.
  C. Deploy Autonomous Transaction Processing Database on OCI and use the MV2ADB tool for the database migration.
  D. Deploy Exadata Cloud Service Base rack and use Oracle Data Pump tool to migrate the data from customer on-premises to OCI.
  B. Deploy Virtual Machine RAC DB system on OCI and use the ZDM tool for the database migration.

  ---

  Explanation/Reference:

  https://docs.oracle.com/en/database/oracle/zero-downtime- migration/19.2/zdmug/introduction-to-zero-downtime-migration.html#GUID-FF4CA22F- CC83-4118-AF26-6E7BE224717F

• Question 134:

  You work for a large bank where security and compliance are critical. As part of the security overview meeting, your company decided to minimize the installation of local tools on your laptop. You have been running Ansible and kubectl to spin up Oracle Container Engine for Kubernetes (OKE) clusters and deployed your application.

  For authentication, you are using an Oracle Cloud Infrastructure (OCI) CLI config file that contains OCIDs, Fingerprint, and a locally stored PEM file. Your security team doesn't want you to store any local API key and certificate, or any other local tools.

  Which two actions should you perform to spin up the OKE cluster and interact with it? (Choose two.)

  A. Create a developer workstation on OCI. Install Ansible and kubectl on it. Use resource principal to authenticate against OCI API and create the OKE Cluster.
  B. Develop your own code using OCI SDK to deploy the OKE cluster.
  C. Work on OCI Cloud Shell to use built-in Ansible and kubectl to deploy the OKE cluster. Use OCI_CLI_AUTH=instance_obo_user environment variable to authenticate using built- in token.
  D. Work on OCI Cloud Shell to use built-in Ansible and kubectl to deploy the OKE cluster. Bring in your own config file and certificate to authenticate against OCI API.
  E. Create a developer workstation on OCI. Install Ansible and kubectl on it. Use instance principal to authenticate against OCI API and create the OKE Cluster.
  C. Work on OCI Cloud Shell to use built-in Ansible and kubectl to deploy the OKE cluster. Use OCI_CLI_AUTH=instance_obo_user environment variable to authenticate using built- in token.
  E. Create a developer workstation on OCI. Install Ansible and kubectl on it. Use instance principal to authenticate against OCI API and create the OKE Cluster.

  ---

  Explanation/Reference:

  https://docs.cloud.oracle.com/en-us/iaas/tools/oci-cli/2.12.4/oci_cli_docs/oci.html

• Question 135:

  Which three options are available to migrate an Oracle database 12.x from an on-premises environment to Oracle Cloud Infrastructure (OCI)?

  A. Leverage OCI Storage Gateway asynchronous database migration option.
  B. Use Oracle Data Pump Export/Import to migrate the database.
  C. Configure RMAN cross-platform transportable tablespace backup sets.
  D. Setup OCI schema and data transfer tool with Bare Metal DB Systems as the target.
  E. Create a backup of your on-premises database In OCI DB Systems.
  B. Use Oracle Data Pump Export/Import to migrate the database.
  C. Configure RMAN cross-platform transportable tablespace backup sets.
  E. Create a backup of your on-premises database In OCI DB Systems.

  ---

  Explanation/Reference:

  https://docs.cloud.oracle.com/en-us/iaas/Content/Database/Tasks/mig- onprembackup.htm

• Question 136:

  All three Data Guard Configuration are fully supported on Oracle Cloud infrastructure (OCI). You want to deploy a maximum availability architecture (MAA) for database workload.

  Which option should you consider while designing your Data Guard configuration to ensure best RTO and PRO without causing any data loss?

  A. Configure "Maximum Protection" mode which provides zero data loss If the primary database fails.
  B. Configure "Maximum Performance" mode In SYNC mode between two availability domains (same region) which provides, the highest level of data protection that is possible without affecting the performance of the primary database.
  C. Configure ''Maximum Scalability" mode which provides the highest level of scalability without compromising the availability of the primary database.
  D. Configure ''Maximum Availability" mode in SYNC mode between two availability domains (same region), and use the Maximum Availability mode in SYNC mode between two regions.
  D. Configure ''Maximum Availability" mode in SYNC mode between two availability domains (same region), and use the Maximum Availability mode in SYNC mode between two regions.

  ---

  Explanation/Reference:

  https://docs.cloud.oracle.com/enus/iaas/Content/Resources/Assets/whitepapers/best-practices-for-dr-on-oci.pdf

  All three Data Guard configurations are fully supported on Oracle Cloud Infrastructure. However, because of a high risk of production outage, we don't recommend using the maximum protection mode for your Data Guard configuration. We recommend using the maximum availability mode in SYNC mode between two availability domains (same region), and using the maximum availability mode in ASYNC mode between two regions. This architecture provides you the best RTO and RPO without causing any data loss. We recommend building this architecture in daisy-chain mode: the primary database ships redo logs to the first standby database in another availability domain in SYNC mode, and then the first standby database ships the redo logs to another region in ASYNC mode. This method ensures that your primary database is not doing the double work of shipping redo logs, which can cause performance impact on a production workload.

  

  This configuration offers the following benefits: No data loss within a region. No overhead on the production database to maintain standbys in another region. Option to configure lagging on the DR site if needed for business reasons. Option to configure multiple standbys in different regions without any additional overhead on the production database. A typical use case is a CDN application Bottom of Form

• Question 137:

  The Finance department of your company has reached out to you. They have customer sensitive data on compute Instances In Oracle Cloud Infrastructure (OCI) which they want to store in OCI Storage for long term retention and archival.

  To meet security requirements they want to ensure this data is NOT transferred over public internet, even if encrypted.

  which they want to store In OCI Object Storage fin long term retention and archival

  To meet security requirements they want to ensure this data is NOT transferred over public Internet, even it encrypted.

  Which option meets this requirements?

  A. Configure a NAT instance and all traffic between compute In Private subnet should use this NAT instance with Private IP as the route target.
  B. Use NAT gateway with appropriate route table when transferring data. Then use NAT gateways' toggle (on/off) once data transfer is complete.
  C. Use Service gateway with appropriate route table.
  D. Use Storage gateway with appropriate firewall rule.
  C. Use Service gateway with appropriate route table.

  ---

  Explanation/Reference:

  Service Gateway is virtual router that you can add to your VCN. It provides a path for private network traffic between your VCN and supported services in the Oracle Services Network like Object Storage) so compute Instances in a private subnet in your VCN can back up data to Object Storage without needing public IP addresses or access to the intern

• Question 138:

  A customer has a Virtual Machine instance running in their Oracle Cloud Infrastructure tenancy. They realized that they wrongly picked a smaller shape for their compute instance. They are reaching out to you to help them fix the issue. Which of the below options is best recommended to suggest to the customer?

  A. Delete the running instance and spin up a new instance with the desired shape.
  B. Change the shape of instance without reboot, but stop all the applications running on instance beforehand to prevent data corruption.
  C. Change the shape of the virtual machine instance using the Change Shape feature available in the console.
  D. OCI doesn't allow such an operation.
  C. Change the shape of the virtual machine instance using the Change Shape feature available in the console.

  ---

  Explanation/Reference:

  You can change the shape of a virtual machine (VM) instance without having to rebuild your instances or redeploy your applications. This lets you scale up your Compute resources for increased performance, or scale down to reduce cost. When you change the shape of an instance, you select a different processor, number of cores, amount of memory, network bandwidth, and maximum number of VNICs for the instance. The instance's public and private IP addresses, volume attachments, and VNIC attachments remain the same.

• Question 139:

  An Oracle Cloud Infrastructure (OCI) Public Load Balancer's SSL certificate is expiring soon. You noticed the Load Balancer is configured with SSL Termination only. When the certificate expires, data traffic can be interrupted and security compromised.

  What steps do you need to take to prevent this situation?

  A. Add the new SSL certificate to the Load Balancer, update backend servers to work with a new certificate and edit listeners so they can use the new certificate bundle.
  B. Add the new SSL certificate to the Load Balancer, update listeners and backend sets so they can use the new certificate bundle.
  C. Add the new SSL certificate to the Load Balancer and implement end to end SSL so it can encrypt the traffic from clients all the way to the backend servers.
  D. Add the new SSL certificate to the Load Balancer and update backend servers to use the new certificate bundle.
  E. Add the new SSL certificate to the Load Balancer and update listeners to use the new certificate bundle.
  C. Add the new SSL certificate to the Load Balancer and implement end to end SSL so it can encrypt the traffic from clients all the way to the backend servers.

  ---

  Explanation/Reference:

  https://docs.cloud.oracle.com/en-us/iaas/Content/Balance/Tasks/managingcertificates.htm

• Question 140:

  After performing maintenance on an Oracle Linux compute instance the system is returned to a running state You attempt to connect using SSH t to do so. You decide to create an instance console connection to troubleshoot the issue.

  Which three tasks would enable you to connect to the console connection and begin troubleshooting?

  A. Use SSH to connect to the public: IP address of the compute Instance and provide the console connection OCID as the username.
  B. edit the Linux boot menu to enable access to console.
  C. Use SSH to connect to the service endpoint of the console connection service
  D. Reboot the compute instance using the Oracle Cloud Infrastructure (OCI) Management Console
  E. Upload an API signing key for console connection authentication.
  F. Stop the compute Instance using the Oracle cloud Infrastructure (OCI) Command Line interface (CLI).
  B. edit the Linux boot menu to enable access to console.
  C. Use SSH to connect to the service endpoint of the console connection service
  D. Reboot the compute instance using the Oracle Cloud Infrastructure (OCI) Management Console

  ---

  Explanation/Reference:

  The Oracle Cloud Infrastructure Compute service provides console connections that enable you to remotely troubleshoot malfunctioning instances, such as:

  An imported or customized image that does not complete a successful boot. A previously working instance that stops responding. the steps to connect to console and troubleshoot the OS Issue 1- Before you can connect to the serial console

  you need to create the instance console connection.

  Open the navigation menu. Under Core Infrastructure, go to Compute and click Instances.

  Click the instance that you're interested in.

  Under Resources, click Console Connections.

  Click Create Console Connection.

  Upload the public key (.pub) portion for the SSH key. You can browse to a public key file on your computer or paste your public key into the text box.

  Click Create Console Connection.

  When the console connection has been created and is available, the status changes to ACTIVE.

  2- Connecting to the Serial Console

  you can connect to the serial console by using a Secure Shell (SSH) connection to the service endpoint

  of the console connection service

  Open the navigation menu. Under Core Infrastructure, go to Compute and click Instances.

  Click the instance that you're interested in.

  Under Resources, click Console Connections.

  Click the Actions icon (three dots), and then click Copy Serial Console Connection for Linux/Mac.

  Paste the connection string copied from the previous step to a terminal window on a Mac OS X or Linux system, and then press Enter to connect to the console. If you are not using the default SSH key or ssh-agent, you can modify the serial

  console connection string to include the identity file flag, -i , to specify the SSH key to use. You must specify this for both the SSH

  connection and the SSH ProxyCommand, as shown in the following line:

  ssh -i // -o ProxyCommand='ssh -i // -W %h:%p -p 443...

  Press Enter again to activate the console.

  3- Troubleshooting Instances from Instance Console Connections To boot into maintenance mode

  Reboot the instance from the Console.

  When the reboot process starts, switch back to the terminal window, and you see Console messages start to appear in the window. As soon as you see the GRUB boot menu appear, use the up/down arrow

  key to stop the automatic boot process, enabling you to use the boot menu. In the boot menu, highlight the top item in the menu, and type e to edit the boot entry. In edit mode, use the down arrow key to scroll down through the entries until

  you reach the line that starts with either linuxefi for instances running Oracle Autonomous Linux 7.x or Oracle Linux 7.x,

  or kernel for instances running Oracle Linux 6.x.

  At the end of that line, add the following:

  init=/bin/bash

  Reboot the instance from the terminal window by entering the keyboard shortcut CTRL+X.