Oracle 1Z0-997-22 Online Practice Questions and Exam Preparation

Oracle 1Z0-997-22 Online Questions & Answers

• Question 51:

  You are working as a solution architect for a customer in Frankfurt, which uses multiple compute instance VMs spread among three Availability Domains in the Oracle Cloud Infrastructure (OCI) eu-frankfurt-1 region. The compute instances do not have public IP addresses and are running in private subnets inside a Virtual Cloud Network (VCN). You have set up OCI Autoscaling feature for the compute instances, but find out that instances cannot be auto scaled. You have enabled monitoring on the instances.

  What could be wrong in this situation?

  A. You need to assign a reserved public IP address to the compute instances.
  B. You need to set up a Service Gateway to send metrics to the OCI Monitoring service.
  C. Autoscaling only works for instances with public IP addresses.
  D. Autoscaling only works with single availability domains.
  B. You need to set up a Service Gateway to send metrics to the OCI Monitoring service.

• Question 52:

  A startup company is looking for a solution for processing of data transmitted by the IOT devices fitted to transport vehicles that carry frozen foods. The data should be consumed and processed in real time. The processed data should be archived to OCI Object Storage bucket. and use Autonomous Data warehouse (ADW) to handle analytics.

  Which architecture will help you meet this requirement?

  A. Use OCI Streaming Service to collect the incoming biometric data. Use an open source Hadoop cluster to analyze the data horn streaming service. Store the results to OCI Autonomous Data warehouse (ADW) to handle complex analytics
  B. Use OCI Streaming Service to collect the incoming biometric data. Use Oracle Functions to process the date and show the results on a real-time dashboard and store the results lo OCI Object Storage Store the data In OCI Autonomous Data warehouse (ADW) to handle analytics.
  C. Create an OCI Object Storage bucket to collect the incoming biometric data from the smart pet collar Fetch the data horn OC\ Object storage to OCI Autonomous Data Warehouse (ADW) every day and run analytics Jobs with it
  D. Launch an open source Hadoop cluster to collect the Incoming biometrics data Use an Open source Fluentd cluster to analyze the- data me results to OCI Autonomous Transaction Processing (ADW)to handle complex analytics
  B. Use OCI Streaming Service to collect the incoming biometric data. Use Oracle Functions to process the date and show the results on a real-time dashboard and store the results lo OCI Object Storage Store the data In OCI Autonomous Data warehouse (ADW) to handle analytics.

  ---

  Explanation/Reference:

  Real-time processing of high-volume streams of data

  - OCI Streaming service provides a fully managed, scalable, durable storage option for continuous, highvolume streams of data that you can consume and process in real-time

  -Use cases Log and Event data collection Web/Mobile activity data ingestion IoT Data streaming for processing and alerts Messaging: use streaming to decouple components of large systems

  - Oracle managed service with REST APIs (Create, Put, Get, Delete)

  -Integrated Monitoring

• Question 53:

  You are a Lead Architect at one of the leading consulting firms. Your firm has workloads deployed in both Oracle Cloud Infrastructure (OCI) and Microsoft Azure. You are asked to design a solution where workloads on both clouds can communicate directly and efficiently. You would like to set up a private interconnection between OCI and Microsoft Azure.

  What are the steps you need to perform on the OCI side to set up the interconnection?

  A. Create a VCN with subnets and attach a DRG to the VCN. Create a FastConnect connection of the connection type "FastConnect Partner" and select "Microsoft Azure: ExpressRoute" as the Partner. Create a public virtual circuit, provide details of the DRG and add the "partner connection key" provided by Microsoft Azure. Configure OCI VCN Security Lists and Route Tables.
  B. Create a Virtual Cloud Network (VCN) with subnets and attach a Virtual Network Gateway to the VCN. Create a FastConnect connection of the connection type "FastConnect Partner" and select "Microsoft Azure: ExpressRoute" as the Partner. Create a private virtual circuit, provide details of the Dynamic Routing Gateway (DRG) and add the "partner interconnect key" provided by Microsoft Azure. Provide the BGP IP addresses. Configure OCI VCN Security Lists and Route Tables.
  C. Create a VCN with subnets and attach a DRG to the VCN. Create a FastConnect connection of the connection type "FastConnect Direct". Create a Cross-Connect Group, provide details of the DRG and add the "partner secret key" provided by Microsoft Azure. Provide the BGP IP addresses, Configure OCI VCN Security Lists and Route Tables.
  D. Create a VCN with subnets and attach a DRG to the VCN. Create a FastConnect connection of the connection type "FastConnect Partner" and select "Microsoft Azure: ExpressRoute" as the Partner. Create a private virtual circuit, provide details of the DRG and add the "partner service key" provided by Microsoft Azure. Provide the BGP IP addresses, Configure OCI VCN Security Lists and Route Tables.
  D. Create a VCN with subnets and attach a DRG to the VCN. Create a FastConnect connection of the connection type "FastConnect Partner" and select "Microsoft Azure: ExpressRoute" as the Partner. Create a private virtual circuit, provide details of the DRG and add the "partner service key" provided by Microsoft Azure. Provide the BGP IP addresses, Configure OCI VCN Security Lists and Route Tables.

• Question 54:

  You are working with a social media company as a solution architect. The media company wants to collect and analyze large amounts of data being generated from their websites and social media feeds to gain insights and continuously improve the user experience. In order to meet this requirement, you have developed a microservices application hosted on Oracle Container Engine for Kubernetes. The application will process the data and store the result to an Autonomous Data Warehouse (ADW) instance.

  Which Oracle Cloud Infrastructure (OCI) service can you use to collect and process a large volume of unstructured data in real time?

  A. OCI Events
  B. OCI Streaming
  C. OCI Resource Manager
  D. OCI Notifications
  B. OCI Streaming

• Question 55:

  A company runs a public-facing application that uses a Java-based web service via a RESTful API in their on-premises data center. Use of the API is expected to double with a new product launch. The business wants to migrate their application to Oracle Cloud Infrastructure (OCI) to meet the scale and reliability requirements. In order to achieve this, they will divert only 40% of the traffic to the new Apache Tomcat web servers running on OCI and serve the remaining 60% traffic through their on-premises infrastructure. Once the migration is complete and application works fine, they will divert all traffic to OCI. How can these requirements be met with the LEAST amount of effort?

  A. Use OCI Traffic management service with failover steering policy and distribute the traffic between OCI and on premises infrastructure.
  B. Use OCI Traffic management service with Load Balancing steering policy and distribute the traffic between OCI and on premises infrastructure.
  C. Use an OCI load Balancer and distribute the traffic between OCI and on premises infrastructure.
  D. Use VPN connectivity between on premises Infrastructure and OCI and create routing tables to distribute the traffic between them.
  B. Use OCI Traffic management service with Load Balancing steering policy and distribute the traffic between OCI and on premises infrastructure.

• Question 56:

  Your organization is planning on using Oracle Cloud Infrastructure (OCI) File Storage Service (FSS). You will be deploying multiple compute instance in Oracle Cloud Infrastructure(OCI) and mounting the file system to these compute instances.

  The file system will hold payment data processed by a Database instance and utilized by compute instances to create a overall inventory report. You need to restrict access to this data for specific compute instances and must be allowed/ blocked per compute instance's CIDR block.

  Which option can you use to secure access?

  A. Create a new VCN security list, choose SOURCE TYPE as Service and SOURCE SERVICE as FSS. Add stateless ingress and egress rules for specific IP address and CIDR blocks.
  B. Use 'Export option' feature of FSS to restrict access to the mounted file systems.
  C. Create and configure OCI Web Application Firewall service with built in DNS based intelligent routing.
  D. Use stateless Security List rule to restrict access from known IP addresses only.
  B. Use 'Export option' feature of FSS to restrict access to the mounted file systems.

• Question 57:

  By copying block volume backups to another region at regular intervals, it makes it easier for you to rebuild applications and data in the destination region if a region-wide disaster occurs in the source region.

  Which IAM Policy statement allows the VolumeAdmins group to copy volume backups between regions?

  A. Allow group VolumeAdmins to use volumes in tenancy
  B. Allow group VolumeAdmins to copy volume' backups in tenancy
  C. Allow group VolumeAdmins to manage volume-family In tenancy
  D. Allow group VolumeAdmins to inspect volumes in tenancy
  C. Allow group VolumeAdmins to manage volume-family In tenancy

  ---

  Explanation/Reference:

  The backups feature of the Oracle Cloud Infrastructure Block Volume service lets you make a point-intime snapshot of the data on a block volume.These backups can then be restored to new volumes either immediately after a backup or at a

  later time that you choose.

  You can copy block volume backups between regions using the Console, command line interface (CLI), SDKs, or REST APIs.

  To copy volume backups between regions, you must have permission to read and copy volume backups in the source region, and permission to create volume backups in the destination region.

  to do all things with block storage volumes, volume backups, and volume groups in all compartments with the exception of copying volume backups across regions. Allow group VolumeAdmins to manage volume-family in tenancy The

  aggregate resource type volume-family does not include the VOLUME_BACKUP_COPY permission, so to enable copying volume backups across regions you need to ensure that you include the third statement in that policy, which is:

  Allow group VolumeAdmins to use volume-backups in tenancy where request.permission='VOLUME _BACKUP_COPY'

• Question 58:

  There are two compartments: Networks and Devlnstances There are two groups: NetworkAdmins with a user named Nick, and Devs with a user named Dave The following IAM policies are being used: *Allow group NetworkAdmins to manage virtual-network-family in compartment Networks *Allow group NetworkAdmins to manage instance-family in compartment Networks *Allow group Devs to use virtual-network-family in compartment Networks *Allow group Devs to manage all-resources in compartment Devlnstances Nick creates a VCN in Networks compartment. Dave creates a VCN in Devlnstances compartment. Which of the following statements is INCORRECT?

  A. Dave launches instances in Devlnstances using the VCN in Networks compartment
  B. Nick cannot launch new instances in Devlnstances compartment
  C. Nick launches instances in Networks using VCN in Devlnstances compartment
  D. Dave cannot launch new instances in Networks compartment
  C. Nick launches instances in Networks using VCN in Devlnstances compartment

• Question 59:

  An online registration system Is currently hosted on one large Oracle Cloud Infrastructure (OCT) Bare metal compute Instance with attached block volume to store of the users' data. The registration system accepts the Information from the user, Including documents and photos then performs automated verification and processing to check it the user is eligible for registration.

  The registration system becomes unavailable at tunes when there is a surge of users using the system the existing architecture needs improvement as it takes a long time for the system to complete the processing and the attached block volumes are not large enough to use data being uploaded by the users.

  Which Is the most effective option to achieve a highly scalable solution?

  A. Attach more Block volumes as the data volume increase, use Oracle Notification Service (ONS) to distribute tasks to a pool of compute instances working In parallel, and Auto Scaling to dynamically size the pool of Instances depending on the number of notifications received from the Notification Service. Use Resource Manager stacks to replicate your architecture to another region.
  B. Change your architecture to use an OCI Object Storage standard tier bucket, replace the single bare metal instance with a Oracle Streaming Service (OSS) to ingest the Incoming requests and distribute the tasks to a group of compute Instances with Auto Scaling
  C. Upgrade your architecture to use a pool of Bare metal servers and configure them to use their local SSDs for faster data access Set up Oracle Streaming Service (OSS) to distribute the tasks to the pool of Bare metal Instances with Auto Scaling to dynamically increase or decrease the pool of compute instances depending on the length of the Streaming queue.
  D. Upgrade your architecture to use more Block volumes as the data volume Increases. Replace the single bare metal instance with a group of compute instances with Auto Scaling to dynamically increase or decrease the compute instance pools depending on the traffic.
  D. Upgrade your architecture to use more Block volumes as the data volume Increases. Replace the single bare metal instance with a group of compute instances with Auto Scaling to dynamically increase or decrease the compute instance pools depending on the traffic.

• Question 60:

  Your organization is planning on using Oracle Cloud Infrastructure (OCI) File Storage Service (FSS). You will be deploying multiple compute instance in Oracle Cloud Infrastructure (OCI) and mounting the file system to these compute instances. The file system will hold payment data processed by a Database instance and utilized by compute instances to create a overall inventory report. You need to restrict access to this data for specific compute instances and must be allowed/blocked per compute instance's CIDR block.

  Which option can you use to secure access?

  A. Use stateless Security List rule to restrict access from known IP addresses only.
  B. Create a new VCN security list, choose SOURCE TYPE as Service and SOURCE SERVICE as FSS. Add stateless ingress and egress rules for specific P address and CIDR blocks.
  C. Use 'Export option' feature of FSS to restrict access to the mounted file systems.
  D. Create and configure OCI Web Application Firewall service with built in DNS based intelligent routing.
  C. Use 'Export option' feature of FSS to restrict access to the mounted file systems.

  ---

  Explanation/Reference:

  NFS export options enable you to create more granular access control than is possible using just security list rules to limit VCN access. You can use NFS export options to specify access levels for IP addresses or CIDR blocks connecting to file systems through exports in a mount target. Access can be restricted so that each client's file system is inaccessible and invisible to the other, providing better security controls in multi-tenant environments. Using NFS export option access controls, you can limit clients' ability to connect to the file system and view or write data. For example, if you want to allow clients to consume but not update resources in your file system, you can set access to Read Only. You can also reduce client root access to your file systems and map specified User IDs (UIDs) and Group IDs (GIDs) to an anonymous UID/GID of your choice. For more information about how NFS export options work with other security layers