Oracle 1Z0-997-22 Online Practice Questions and Exam Preparation

Oracle 1Z0-997-22 Online Questions & Answers

• Question 61:

  A digital marketing company is planning to host a website on Oracle Cloud Infrastructure (OCI) and leverage OCI Container Engine for Kubernetes (OKE). The web server will make API calls to access OCI Object Storage to store all images uploaded by users.

  For security purposes, your manager instructed you to ensure that the credentials used by the web server to allow access not stored locally on the compute instance.

  What solution results in an Implementation with the least effort for this scenario?

  A. Configure the credentials using Instance Principal to allow the web server to make API calls to OCl Object Storage
  B. Configure the credentials using OCI Registry (OC1R) which will automatically connect with OKE allowing the web server to make API calls to OCI Object Storage.
  C. Configure the credentials to use Transparent Data Encryption (TDE) which will automatically allow the web server to make API calls to OCl Object Storage.
  D. Configure the credentials using OCI Key Management to allow an instance to make API calls and grant access to OCl Object Storage.
  A. Configure the credentials using Instance Principal to allow the web server to make API calls to OCl Object Storage

• Question 62:

  You are tasked with migrating an online shopping website to Oracle Cloud Infrastructure (OCI) and decide to use a Load Balancer. You have configured the backend set with the round robin policy. During the testing phase, you noticed that users are losing items from their shopping carts when they navigate to different pages. How should you implement a solution to this problem?

  A. Set up a Traffic Management Steering Policy to redirect traffic to a different backend set that is deployed exclusively for the purpose of holding all Items placed in the shopping cart.
  B. Configure a set of path route rules that will route to different backend sets based on the URI requested by the customer's browser.
  C. Replace the round robin policy with least connections policy at the backend set.
  D. Set up session persistence at the Load Balancer backend set.
  C. Replace the round robin policy with least connections policy at the backend set.

• Question 63:

  You have 10 Oracle Linux Compute instances within the ociarchpro compartment running in Oracle Cloud Infrastructure (OCI). The instances are placed in a private subnet inside a Virtual Cloud Network (VCN). You plan to leverage the Oracle Vulnerability Scanning service to gain visibility into potential vulnerabilities. Your goal is to improve the overall security posture. You create a Scan recipe with the following settings: Type: Compute Name: ociproscanrecipe CIS benchmark scanning: Enabled CIS benchmark profile: Medium (More than 40% of the benchmarks failing is a high risk) Schedule: Daily You create a target with the following settings: Type: Compute Compartment: ociarchpro Scan recipe: ociproscanrecipe Targets: All compute instances in the selected target compartment and its sub- compartments However, you are not able to see the result of host scans for the compute target. For the given scenario, which is NOT a valid troubleshooting task?

  A. Check whether the target was created less than 24 hours ago.
  B. Enable the scanning plugin on the Oracle Cloud Agent if you manually disabled it on the target compute instances.
  C. Create a service gateway for the Virtual Cloud Network (VCN) and configure a route rule.
  D. Disable agent-based scanning in the recipe.
  C. Create a service gateway for the Virtual Cloud Network (VCN) and configure a route rule.

• Question 64:

  A large E-commerce company is looking to run seasonal workloads in Oracle Cloud Infrastructure. The Oracle database used by their E-commerce application can use up to 52 cores at peak workloads. Due to the seasonal nature of the business, the database will be not be used for 10 months in a year and can also be shut down during non-business hours.

  A. Autonomous Transaction Processing with shared Exadata infrastructure
  B. Oracle Cloud Infrastructure Exadata DB Systems
  C. Oracle Cloud Infrastructure Virtual Machine DB Systems
  D. Oracle Cloud Infrastructure Bare Metal DB Systems
  A. Autonomous Transaction Processing with shared Exadata infrastructure

• Question 65:

  Your organization needs to migrate legacy monolithic applications into cloud-native containerized RESTful microservices. The development team is testing the use of packaged procedures with containers in a fully serverless environment. Before migrating the existing code to production, the team decides to perform a lift and shift of the monolithic application and code the new features that are essential for serverless microservices.

  You want to carry out a steady migration to the Oracle Cloud Infrastructure (OCI) platform, making the new microservice functionalities available while maintaining the monolithic application for all the other activities. You also want to integrate the legacy monolithic application with the new microservices to have a single interface with simplified management for auditing and monitoring while meeting operational and compliance requirements.

  How can you meet this requirement?

  A. Push the container image to OCIR, build a serverless function using the OCI Functions serviceBYOD (Bring-Your-Own-Dockerfile) feature, build an API deployment specification with serverless functions as the back-end, and use an OCI API gateway to provide front- end access to that function.
  B. Push the container image to the OCI code repository, create an instance template with a Docker container running the image, and create an instance pool with autoscaling configuration. Use the OCI load balancer to provide an API endpoint to connect with the microservice.
  C. Push the container image to the OCI code repository, build a serverless function using the OCI Functions service BYOD feature, build an API deployment specification with serverless functions as the back-end, and use an OCI API gateway to provide front-end access to that function.
  D. Push the container image to OCIR, create an instance template with a Docker container running the image, and create an instance pool with autoscaling configuration. Use the OCI load balancer to provide an API endpoint to connect with the microservice.
  B. Push the container image to the OCI code repository, create an instance template with a Docker container running the image, and create an instance pool with autoscaling configuration. Use the OCI load balancer to provide an API endpoint to connect with the microservice.

• Question 66:

  You are advising the database administrator responsible for managing non-production environment for Oracle Autonomous Database running on Oracle Cloud Infrastructure. You need to help the database administrator ensure that the non-production environments have a copy of the current data from the production environment in a manner that is most time-efficient.

  Which method should you recommend? (Choose the best answer.)

  A. Take a full database backup of the production Autonomous database and create the non-production database from it.
  B. Create a metadata clone of the production Autonomous Database and create the non- production database from it.
  C. Create a full clone of the production Autonomous Database and create the non- production database from it.
  D. Take a Data Pump export of the production Autonomous database and import into the non-production database.
  C. Create a full clone of the production Autonomous Database and create the non- production database from it.

  ---

  Explanation/Reference:

  https://www.oracle.com/database/technologies/datawarehouse-bigdata/adb- faqs.html

• Question 67:

  Which of the two options are true for an autonomous database in dedicated infrastructure deployment? (Choose two.)

  A. You can modify maintenance schedule of the AVM after provisioning, to match your organization maintenance schedules.
  B. The new resource model consists of autonomous exadata infrastructure, autonomous container database and autonomous database.
  C. Unlike autonomous database in shared infrastructure, you can customize the maintenance schedule of the autonomous databases in dedicated infrastructure in OCI public cloud.
  D. The new resource model consists of exadata infrastructure, autonomous Exadata VM cluster, autonomous container database.
  E. Network selection, License model and certificate management are resources configured at AVM level.
  D. The new resource model consists of exadata infrastructure, autonomous Exadata VM cluster, autonomous container database.
  E. Network selection, License model and certificate management are resources configured at AVM level.

• Question 68:

  You are part of a project team working in the development environment created in OCI. You have realized that the CIDR block specified for one of the subnet in a VCN is not correct and want to delete the subnet. While deleting you are getting an error indicating that there are still resources that you must delete first. The error includes the OCID of the VNIC that is in the subnet.

  Which of the following action you will take to troubleshoot this issue?

  A. Use OCI CLI to call "GetVnic" operation to find out the parent resource of the VNIC
  B. Copy and Paste OCID of the VNIC in the search box of the OCI Console to find out the parent resource of the VNIC
  C. Use OCI CLI to delete the VNIC first and then delete the subnet
  D. Use OCI CLI to delete the subnet using --force option
  A. Use OCI CLI to call "GetVnic" operation to find out the parent resource of the VNIC

  ---

  Explanation/Reference:

  VCN, it must first be empty and have no related resources or attached gateways To delete a VCN's subnets, they must first be empty. Note: When you create one of the preceding resources, you specify a VCN and subnet for it. The relevant service creates at least one VNIC in the subnet and attaches the VNIC to the resource. The service manages the VNICs on your behalf, so they are not readily apparent to you in the Console. The VNIC enables the resource to communicate with other resources over the network. Although this documentation commonly talks about the resource itself being in the subnet, it's actually the resource's attached VNIC. If the subnet is not empty, you instead get an error indicating that there are still resources that you must delete first. The error includes the OCID of a VNIC that is in the subnet (there could be more, but the error returns only a single VNIC's OCID). You can use the Oracle Cloud Infrastructure command line interface (CLI) or another SDK or client to call the GetVnic operation with the VNIC OCID. The response includes the VNIC's display name. Depending on the type of parent resource, the display name can indicate which parent resource the VNIC belongs to. You can then delete that parent resource, or you can contact your administrator to determine who owns the resource. When the VNIC's parent resource is deleted, the attached VNIC is also deleted from the subnet. If there are remaining VNICs in the subnet, repeat the process of determining and deleting each parent resource until the subnet is empty. Then you can delete the subnet. For example, if you're using the CLI, use this command to get information about the VNIC. oci network vnic get --vnic-id

• Question 69:

  You work for a large bank where your main application is a payment processing gateway API. You deployed the application on Oracle Container Engine for Kubernetes (OKE) and used API Gateway with several policies to control the access of the API endpoint.

  However, your customers are complaining about the unavailability of the API endpoint. Upon checking, you noticed that the Gateway URL is throwing Service Unavailable error. You need to check the backend latency and backend responses when this error started last night.

  What should you do to get this data? (Choose the best answer.)

  A. Check with the application owner and search the log file for the container to get the metrics from the log file.
  B. Go to Governance Menu and click on Audit to see the Audit log for the API Gateway. Filter it using Start and End date with a 503 response status.
  C. Go to Developer Services and click on API Gateway. Go to the detail page of the gateway and select Metrics. Change the Start and End time to filter the metrics.
  D. Go to Monitoring and click on Service Metrics. Choose the Metric Namespace as oci_apigateway. Change the Start and End time accordingly. Add a Dimension and select httpStatusCode: 503. Check the backend latency and backend responses metric.
  D. Go to Monitoring and click on Service Metrics. Choose the Metric Namespace as oci_apigateway. Change the Start and End time accordingly. Add a Dimension and select httpStatusCode: 503. Check the backend latency and backend responses metric.

  ---

  Explanation/Reference:

  https://medium.com/oracledevs/using-oci-monitoring-healthchecks-to- schedule-execution-of-serverless-functions-on-oracle-cloud-ef233f887a5

• Question 70:

  You have multiple IAM users who launch different types of compute Instances and block volumes every day. As a result, your Oracle cloud Infrastructure (OCF) tenancy quickly hit the service limit and you can no longer create any new instances. As you are cleaning up environment, you notice that the majority of the Instances and block volumes are untagged. Therefore, It is difficult to pinpoint the owner of these resources verify if they are safe to terminate.

  Because of this, your company has issued a new mandate, which requires adding compute instances.

  Which option is the simplest way to implement this new requirement?

  A. Create a policy to automatically tag a resource with the user name.
  B. Create a policy using IAM requiring users to tag specific resources. This will allow a user to launch compute instances on\y if certain tags were defined.
  C. Create tag variables to automatically tag a resource with the user name.
  D. Create a default tag for each compartment, which ensure that appropriate tags are applied at resource creation
  E. Create tag variables for each compartment to automatically tag a resource with the user name.
  C. Create tag variables to automatically tag a resource with the user name.

  ---

  Explanation/Reference:

  Tag Variables You can use a variable to set the value of a defined tag. When you add the tag to a resource, the variable resolves to the data it represents. You can use tag variables in defined tags and default tags. Supported Tag Variables The following tag variables are supported. ${iam.principal.name} The name of the principal that tagged the resource ${iam.principal.type} The type of principal that tagged the resource. ${oci.datetime} The date and time that the tag was created. Consider the following example: Operations.CostCenter=" ${iam.principal.name} at ${oci.datetime} " Operations is the namespace, CostCenter is the tag key, and the tag value contains two tag variables ${iam.principal.name} and ${oci.datetime} . When you add this tag to a resource, the variable resolves to your user name (the name of the principal that applied the tag) and a time date stamp for when you added the tag. user_name at 2019-06-18T18:00:57.604Z The variable is replaced with data at the time you apply the tag. If you later edit the tag, the variable is gone and only the data remains. You can edit the tag value in all the ways you would edit any other tag value. To create a tag variable, you must use a specific format. ${} Type a dollar sign followed by open and close curly brackets. The tag variable goes between the curly brackets. You can use tag variables with other tag variables and with string values. Tag defaults let you specify tags to be applied automatically to all resources, at the time of creation, in a specific compartment. This feature allows you to ensure that appropriate tags are applied at resource creation without requiring the user who is creating the resource to have access to the tag namespaces. https://docs.cloud.oracle.com/en-us/iaas/Content/Tagging/Tasks/managingtagdefaults.htm