Oracle 1Z0-997-22 Online Practice Questions and Exam Preparation

Oracle 1Z0-997-22 Online Questions & Answers

• Question 81:

  You are working for a Travel company and your travel portal application is a collection of microservices that run on Oracle Cloud Infrastructure Container Engine for Kubernetes. As per the recent security overview, you have noticed that Oracle has published a newer image of the Operating System used by the worker nodes. You want to make sure that your application doesn't face any downtime but at the same time the worker nodes gets upgraded to the latest version of the Operating System.

  What should you do to get this upgrade done without application downtime? (Choose the best answer.)

  A. 1. Shutdown the worker nodes 2. Create a new node pool 3. Manually schedule the pods on the newly built node pool
  B. 1. Create a new node pool using the latest available Operating System image. 2. Run kubectl cordon against all the worker nodes in the old pool to stop any new application pods to get scheduled 3. Run kubectl drain """"delete""local""data """"force """"ignore""daemonsets to evict any Pods that are running 4. Delete the old node pool
  C. 1. Create a new node pool using the latest available Operating System image 2. Run kubectl taint nodes """"all node""role.kubernetes.io/master"" 3. Delete the old node pool
  D. 1. Run kubectl cordon against all the worker nodes in the old pool to stop any new application pods to get scheduled 2. Run kubectl drain """"delete""local""data """"force """"ignore""daemonsets to evict any Pods that are running 3. Download the patches for the new Operating System image 4. Patch the worker nodes to the latest Operating System image
  B. 1. Create a new node pool using the latest available Operating System image. 2. Run kubectl cordon against all the worker nodes in the old pool to stop any new application pods to get scheduled 3. Run kubectl drain """"delete""local""data """"force """"ignore""daemonsets to evict any Pods that are running 4. Delete the old node pool

  ---

  Explanation/Reference:

  https://docs.cloud.oracle.com/en-us/iaas/Content/ContEng/Tasks/contengupgradingk8sworkernode.htm

• Question 82:

  Your company has recently deployed a new web application that uses Oracle functions Your manager Instructed you to Implement major manage your systems more effectively. You know that Oracle functions automatically monitors functions on your behalf reports metrics through Service Metrics.

  Which two metrics are collected and made available by this feature?

  A. length of time a function runs
  B. number of times a function is removed
  C. number of times a function is invoked
  D. amount of CPU used by a function
  E. number of concurrent connections
  A. length of time a function runs
  C. number of times a function is invoked

  ---

  Explanation/Reference:

  https://docs.cloud.oracle.com/en-us/iaas/Content/Functions/Reference/functionsmetrics.htm

  you can monitor the health, capacity, and performance of functions you've deployed to Oracle Functions by using metrics

  Oracle Functions monitors function execution, and collects and reports metrics such as:

  The number of times a function is invoked.

  The length of time a function runs for.

  The number of times a function failed.

  The number of requests to invoke a function that returned a '429 Too Many Requests' error in the response (known as 'throttled function invocations').

• Question 83:

  As an administrator you want to give users of ObjectWriters group full access to bucket Bucket-A and its objects in compartment comp-images. You want users of ObjectWriters to not be able to access or modify properties of any other buckets and its objects in the compartment comp-images.

  Select the statement(s) below that will best define your IAM policies.

  A. Allow group ObjectWriters to mange buckets in compartment comp- images Allow group ObjectWriters to manage objects in compartment comp-images where target.bucket.name= 'Eucket-A'
  B. Allow group ObjectWriters to manage buckets in compartment comp-images where target.bucket.name=' Bucket-A'
  C. Allow group ObjectWriters to inspect buckets in compartment comp-images Allow group ObjectWriters to read buckets in compartment comp-images where target.bucket.name=' Bucket-A" Allow group ObjectWriters to manage objects in compartment comp-images where target.bucket.name=' Bucket-A'
  D. Allow group ObjectWritexs to read buckets in compartmentcomp-images Allow group ObjectWriters to manage objects in compartment comp- images where target.bucket.name= 'Bucket-A'
  C. Allow group ObjectWriters to inspect buckets in compartment comp-images Allow group ObjectWriters to read buckets in compartment comp-images where target.bucket.name=' Bucket-A" Allow group ObjectWriters to manage objects in compartment comp-images where target.bucket.name=' Bucket-A'

  ---

  Explanation/Reference:

• Question 84:

  A large financial company has a web application hosted in their on-premises data center. They are migrating their application to Oracle Cloud Infrastructure (OCI) and require no downtime while the migration is on-going. In order to achieve this, they have decided to divert only 30% of the application works fine, they divert all traffic to OCI.

  As a solution architect working with this customer, which suggestion should you provide them?

  A. Use OCI Traffic management with failover steering policy and distribute the traffic between OC1 and on premises infrastructure.
  B. Use OCI Traffic management with Load Balancing steering policy and distribute the traffic between OCI and on premises infrastructure.
  C. Use an OCI load Balancer and distribute the traffic between OCI and on premises infrastructure.
  D. Use VPN connectivity between on premises Infrastructure and OCI, and create routing tables to distribute the traffic between them.
  B. Use OCI Traffic management with Load Balancing steering policy and distribute the traffic between OCI and on premises infrastructure.

  ---

  Explanation/Reference:

  Traffic Management Steering Policies can account for health of answers to provide failover capabilities, provide the ability to load balance traffic across multiple resources, and account for the location where the query was initiated to provide a simple, flexible and powerful mechanism to efficiently steer DNS traffic.

• Question 85:

  As a part of migration exercise for an existing on premises application to Oracle Cloud Infrastructure (OCT), yon ore required to transfer a 7 TB file to OCI Object Storage. You have decided to upload functionality of Object Storage. Which two statements are true?

  A. Active multipart upload can be checked by listing all parts that have been uploaded, however It Is not possible to list information for individual object part in an active multipart upload
  B. It is possible to spill this fileInto multiple parts using the APIs provided by Object Storage.
  C. It is possible to split this file into multiple parts using rclone tool provided by Object Storage.
  D. After initiating a multipart upload by making a CreateMultlPartUpload RESI API Call, the upload remains active until you explicitly commit it or abort.
  E. Contiguous numbers need to be assigned for each part so that Object Storage constructs the object by ordering, part numbers in ascending order
  A. Active multipart upload can be checked by listing all parts that have been uploaded, however It Is not possible to list information for individual object part in an active multipart upload
  D. After initiating a multipart upload by making a CreateMultlPartUpload RESI API Call, the upload remains active until you explicitly commit it or abort.

  ---

  Explanation/Reference:

  You can check on an active multipart upload by listing all parts that have been uploaded. (You cannot list information for an individual object part in an active multipart upload.)

  After you finish creating object parts, initiate a multipart upload by making a CreateMultipartUpload REST API call. Provide the object name and any object metadata. Object Storage responds with a unique upload ID that you must include in any requests related to this multipart upload. Object Storage also marks the upload as active. The upload remains active until you explicitly commit it or abort it.

• Question 86:

  A small business specializing in video processing wants to leverage cloud storage in order to lower its costs. They are looking to backup all video data generated, from an existing on- premises file server to Oracle Cloud Infrastructure (OCI). The requirement is to setup continuous data sync as changes are made to on-premises file server. What is the most cost effective solution for this scenario?

  A. Set up a Fastconnect virtual Circuit and nightly back up all videos to OCI Archive Storage.
  B. Set up file storage service on OCI and mount the file system to an instance running on- premises. Move all the data to this on-premises instance and then sync the videos to the shared file system.
  C. Set up a VPN connect connection and back up all videos to Object storage standard bucket. Create a lifecycle policy to move files older than 30 days to Archive Storage.
  D. Setup an on-premises OCI Storage Gateway Cloud Sync to back up videos to OCI Object Storage Archive tier.
  D. Setup an on-premises OCI Storage Gateway Cloud Sync to back up videos to OCI Object Storage Archive tier.

  ---

  Explanation/Reference:

• Question 87:

  A consulting company that employs Oracle Cloud Infrastructure (OCI) architects has successfully completed resource migration from Microsoft Azure to OCI, and no longer requires the OCI FastConnect circuit to Azure. The project manager has asked you to delete all resources involved in this inter-cloud connectivity. From the Azure side, you delete the Resource Group. After a while, you notice that all Azure resources have been deleted, except for the Azure ExpressRoute circuit.

  What could be a potential reason for this issue?

  A. You need to first delete the OCI FastConnect circuit for the ExpressRoute circuit to be decommissioned, and then you can delete the ExpressRoute virtual circuit.
  B. Your bill from the OCI side needs to be paid in full before you can remove the Azure ExpressRoute circuit.
  C. You need to remove all routes that point to the inter-cloud connection on both OCI and Azure before you can delete the circuit.
  D. You need to remove the Azure ExpressRoute Partner Service Key from the OCI FastConnect circuit, and then you can delete the ExpressRoute virtual circuit.
  A. You need to first delete the OCI FastConnect circuit for the ExpressRoute circuit to be decommissioned, and then you can delete the ExpressRoute virtual circuit.

• Question 88:

  You developed a microservices based application that runs on Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE). Your security team wants to use SSL termination for this application. What should you do to create a secure SSL termination for this application using fewest steps?

  A. Create a self-signed certificate and it's corresponding key. Create a Kubernetes secret using the certificate and the key. Then add these an notations to the Kubernetes service: annotations: service.beta.kubernetes.io/oci-load-balancer-ssl-ports: "443" service.beta.kubernetes.io/oci-load-balancer-security-list-management-mode:"Frontend"
  B. Generate a self-signed certificate using Let's Encrypt. Use that certificate on OCI Load Balancer. Create the Kubernetes service usingthis load balancer.
  C. Add these annotationsto the Kubernetes service: annotations: service.beta.kubernetes.io/oci-load-balancer-ssl-ports: "443" service.beta.kubernetes.io/oci-load-balancer-ssl-secret-key: ssl-secret-key
  D. Create a self-signed certificate and it's corresponding key. Create a Kubernetes secret using then add these annotationsto the Kubernetes service. Service.beta.kubernete.io/oci-load-balancer-ssl-ports: "443" Service.beta.kubernete.io/oci-load-balancer-tls-secret:SSL-CERTIFICATE-SECRET
  D. Create a self-signed certificate and it's corresponding key. Create a Kubernetes secret using then add these annotationsto the Kubernetes service. Service.beta.kubernete.io/oci-load-balancer-ssl-ports: "443" Service.beta.kubernete.io/oci-load-balancer-tls-secret:SSL-CERTIFICATE-SECRET

• Question 89:

  An insurance company is storing critical financial data in the OCI block volume. This volume is currently encrypted using oracle managed keys. Due to regulatory compliance, the customer wants to encrypt the data using the keys that they

  can control and not the keys which are controlled by Oracle.

  What of the following series of tasks are required to encrypt the block volume using customer managed keys?

  A. Create a vault, import your master encryption key into the vault, generate data encryption key, assign data encryption key to the block volume
  B. Create a master encryption key, create a data encryption key, decrypt the block volume using existing oracle managed keys, encrypt the block volume using the data encryption key
  C. Create a vault, create a master encryption key in the vault, assign this master encryption key to the block volume
  D. Create a master encryption key, create a new version of the encryption key, decrypt the block volume using existing oracle managed keys and encrypt using new version of the encryption key
  C. Create a vault, create a master encryption key in the vault, assign this master encryption key to the block volume

  ---

  Explanation/Reference:

  Oracle Cloud Infrastructure Vault lets you centrally manage the encryption keys that protect your data and the secret credentials that you use to securely access resources. You can use the Vault service to create and manage the following resources: Vaults Keys Secrets Vaults securely store master encryption keys and secrets that you might otherwise store in configuration files or in code. The Vault service lets you create vaults in your tenancy as containers for encryption keys and secrets. If needed, a virtual private vault provides you with a dedicated partition in a hardware security module (HSM), offering a level of storage isolation for encryption keys that's effectively equivalent to a virtual independent HSM.

• Question 90:

  As part of planning the network design on Oracle Cloud Infrastructure, you have been asked to create an Oracle Cloud Infrastructure Virtual Cloud Network (VCN) with 3 subnets, one in each Availability Domain. Each subnet needs to have a minimum of 64 usable IP addresses.

  What is the smallest subnet and VCN size you should use to implement this design?

  A. 122 for the VCN; 124 for the subnets
  B. /23 for the VCN; /25 for the subnets
  C. /24 for the VCN; /24 for the subnets
  D. /22 for the VCN; /25 for the subnets
  B. /23 for the VCN; /25 for the subnets

  ---

  Explanation/Reference: