Oracle 1Z0-997 Online Practice Questions and Exam Preparation

Oracle 1Z0-997 Online Questions & Answers

• Question 41:

  A global retailer has decided to re-design its e-commerce platform to have a micro-services architecture. They would like to decouple application architecture into smaller, independent services using Oracle Cloud Infrastructure (OCI). They

  have decided to use both containers and servers technologies to run these application instances.

  Which option should you recommend to build this new platform?

  A. Install a kubernetes cluster on OCI and use OCI event service.
  B. Use Oracle Container Engine for kubernetes, OCI Registry and OCI Functions.
  C. Use OCI Resource Manager to automate compute Instances provisioning and use OCI Streaming service.
  D. Use OCI functions, OCI object storage and OCI event service.
  B. Use Oracle Container Engine for kubernetes, OCI Registry and OCI Functions.

  ---

  Oracle Functions is a fully managed, multi-tenant, highly scalable, on-demand, Functions-as-a- Service platform. It is built on enterprise-grade Oracle Cloud Infrastructure and powered by the Fn Project open source engine. Use Oracle Functions (sometimes abbreviated to just Functions) when you want to focus on writing code to meet business needs.

  

  Oracle Cloud Infrastructure Container Engine for Kubernetes is a fully-managed, scalable, and highly available service that you can use to deploy your containerized applications to the cloud. Use Container Engine for Kubernetes (sometimes abbreviated to just OKE) when your development team wants to reliably build, deploy, and manage cloud-native applications. You specify the compute resources that your applications require, and Container Engine for Kubernetes provisions them on Oracle Cloud Infrastructure in an existing OCI tenancy.

• Question 42:

  An organization has its mission critical application consisting of multiple application servers and databases running inside Virtual Cloud Network (VCN) in uk-london-1 region. Their solution architect wants to further strengthen their

  architecture by planning for Disaster Recovery (DR) in eu-frankfurt- 1 region.

  Which two solutions should their architect keep in mind while designing for DR?

  A. A remote VCN peering connection is required to establish secure and reliable connectivity between different VCNs created in uk-london-1 and eu-frankfurt-1 region.
  B. rsync utility can be used to asynchronously copy file systems or snapshot data to another region.
  C. Load balancer will automatically distribute traffic between both the regions.
  D. The RTO is the acceptable timeframe of lost data that application can tolerate.
  E. It is not possible to use Active Data Guard to synchronize a database in uk-london-1 region to equivalent database in eu-frankfurt-1 region.
  A. A remote VCN peering connection is required to establish secure and reliable connectivity between different VCNs created in uk-london-1 and eu-frankfurt-1 region.
  C. Load balancer will automatically distribute traffic between both the regions.

• Question 43:

  The Finance department of your company has reached out to you. They have customer sensitive data on compute Instances In Oracle Cloud Infrastructure (OCI) which they want to store in OCI Storage for long term retention and archival.

  To meet security requirements they want to ensure this data is NOT transferred over public internet, even if encrypted.

  which they want to store In OCI Object Storage fin long term retention and archival To meet security requirements they want to ensure this data is NOT transferred over public Internet, even it encrypted.

  Which option meets this requirements?

  A. Configure a NAT instance and all traffic between compute In Private subnet should use this NAT instance with Private IP as the route target.
  B. Use NAT gateway with appropriate route table when transferring data. Then use NAT gateways' toggle (on/off) once data transfer is complete.
  C. Use Service gateway with appropriate route table.
  D. Use Storage gateway with appropriate firewall rule.
  C. Use Service gateway with appropriate route table.

  ---

  Service Gateway is virtual router that you can add to your VCN. It provides a path for private network traffic between your VCN and supported services in the Oracle Services Network like Object Storage) so compute Instances in a private subnet in your VCN can back up data to Object Storage without needing public IP addresses or access to the intern

• Question 44:

  Give this compartment structure:

  

  You want to move a compute instance that is in 'Compute' compartment to 'SysTes-Team'. You login to your Oracle Cloud Infrastructure (OCI)account and use the 'Move Resource' option. What will happen when you attempt moving the compute resource?

  A. The move will be successful though Compute Instance and its Public and Private IP address will stay the same. The Compute instance VNIC will need to be moved separately. The Compute instance will still be associated with the original VCN.
  B. The move will fail and you will be prompted to move the VCN first. Once VCN is moved to the target compartment, the Compute instance can be moved.
  C. The move will be successful though Compute Instance Public and Private IP address changed, and it will be associated to the VCN in target compartment.
  D. The move will be successful though Compute Instance and its Public and Private IP address will stay the same. The Compute instance VNIC will still be associated with the original VCN.
  D. The move will be successful though Compute Instance and its Public and Private IP address will stay the same. The Compute instance VNIC will still be associated with the original VCN.

  ---

  Moving Resources to a Different Compartment Most resources can be moved after they are created. There are a few resources that you can't move from one compartment to another. Some resources have attached resource dependencies and some don't. Not all attached dependencies behave the same way when the parent resource moves. For some resources, the attached dependencies move with the parent resource to the new The parent resource moves immediately, but in some cases attached dependencies move asynchronously and are not visible in the new compartment until the move is complete. For other resources, the attached resource dependencies do not move to the new compartment. You can move these attached resources independently. You can move Compute resources such as instances, instance pools, and custom images from one compartment to another. When you move a Compute resource to a new compartment, associated resources such as boot volumes and VNICs are not moved. You can move a VCN from one compartment to another. When you move a VCN, its associated VNICs, private IPs, and ephemeral IPs move with it to the new compartment.

• Question 45:

  A global retailer is setting up the cloud architecture to be deployed in Oracle Cloud infrastructure (OCI) which will have thousands of users from two major geographical regions: North America and Asia Pacific. The requirements of the services are:

  *

  Service needs to be available 27/7 to avoid any business disruption

  *

  North American customers should be served by application running In North American regions

  *

  Asia Pacific customers should be served by applications running In Asia Pacific regions

  *

  Must be resilient enough to handle the outage of an entire OCI region

  A. OCl DNS, Traffic Management with Failover steering policy
  B. OCl DNS, Traffic Management with Geolocation steering policy. Health Checks
  C. OCl DNS, Traffic Management with Geolocation steering policy
  D. OCl DNS,' Traffic Management with Load Balancer steering policy, Health Checks
  B. OCl DNS, Traffic Management with Geolocation steering policy. Health Checks

  ---

  GEOLOCATION STEERING Geolocation steering policies distribute DNS traffic to different endpoints based on the location of the end user. Customers can define geographic regions composed of originating continent, countries or states/provinces (North America) and define a separate endpoint or set of endpoints for each region. Combine with Oracle Health Checks to fail over from one region to another

  

• Question 46:

  You are responsible for migrating your on premises legacy databases on 11.2.0.4 version to Autonomous Transaction Processing Dedicated (ATP-D) In Oracle Cloud Infrastructure (OCI). As a solution architect, you need to plan your migration approach. Which two options do you need to implement together to migrate your on premises databases to OCI?

  A. Use Oracle Data Guard to keep on premises database always active during migration
  B. Retain changes to Oracle shipped privileges, stored procedures or views In the on-premises databases.
  C. Use Oracle GoldenGate replication to keep on premises database online during migration.
  D. Convert on-premises databases to PDB, upgrade to 19c, and encrypt Migration.
  E. Retain all legacy structures and unsupported features (e.g. taw U>Bs) In the onuses databases for migration.
  C. Use Oracle GoldenGate replication to keep on premises database online during migration.
  D. Convert on-premises databases to PDB, upgrade to 19c, and encrypt Migration.

  ---

  Autonomous Database is an Oracle Managed and Secure environment. A physical database can't simply be migrated to autonomous because:

  -

  Database must be converted to PDB, upgraded to 19c, and encrypted

  -

  Any changes to Oracle shipped privileges, stored procedures or views must be removed

  -

  All legacy structures and unsupported features must be removed (e.g. legacy LOBs) GoldenGate replication can be used to keep database online during migration

• Question 47:

  A startup company is looking for a solution for processing of data transmitted by the IOT devices fitted to transport vehicles that carry frozen foods. The data should be consumed and processed in real time. The processed data should be

  archived to OCI Object Storage bucket. and use Autonomous Data warehouse (ADW) to handle analytics.

  Which architecture will help you meet this requirement?

  A. Use OCI Streaming Service to collect the incoming biometric data. Use an open source Hadoop cluster to analyze the data horn streaming service. Store the results to OCI Autonomous Data warehouse (ADW) to handle complex analytics
  B. Use OCI Streaming Service to collect the incoming biometric data. Use Oracle Functions to process the date and show the results on a real-time dashboard and store the results lo OCI Object Storage Store the data In OCI Autonomous Data warehouse (ADW) to handle analytics.
  C. Create an OCI Object Storage bucket to collect the incoming biometric data from the smart pet collar Fetch the data horn OC\ Object storage to OCI Autonomous Data Warehouse (ADW) every day and run analytics Jobs with it
  D. Launch an open source Hadoop cluster to collect the Incoming biometrics data Use an Open source Fluentd cluster to analyze the- data me results to OCI Autonomous Transaction Processing (ADW)to handle complex analytics
  B. Use OCI Streaming Service to collect the incoming biometric data. Use Oracle Functions to process the date and show the results on a real-time dashboard and store the results lo OCI Object Storage Store the data In OCI Autonomous Data warehouse (ADW) to handle analytics.

  ---

  Real-time processing of high-volume streams of data

  - OCI Streaming service provides a fully managed, scalable, durable storage option for continuous, highvolume streams of data that you can consume and process in real-time

  -Use cases Log and Event data collection Web/Mobile activity data ingestion IoT Data streaming for processing and alerts Messaging: use streaming to decouple components of large systems

  - Oracle managed service with REST APIs (Create, Put, Get, Delete)

  -Integrated Monitoring

• Question 48:

  A civil engineering company is running an online portal In which engineers can upload there constructions photos, videos, and other digital files. There is a new requirement for you to implement: the online portal must offload the digital

  content to an Object Storage bucket for a period of 72 hours. After the provided time limit has elapsed, the portal will hold all the digital content locally and wait for the next offload period.

  Which option fulfills this requirement?

  A. Create a pre-authenticated URL for the entire Object Storage bucket to read and list the content with an expiration of 72 hours.
  B. Create a pre authenticated URL lot each object that Is uploaded to the Object Storage bucket with an expiration of 72 hours.
  C. Create a Dynamic Group with matching rule for the portal compute Instance and grant access to the Object Storage bucket for 72 hours.
  D. Create a pre authenticated URL for the entire Object Storage bucket to write content with an expiration of 72 hours.
  D. Create a pre authenticated URL for the entire Object Storage bucket to write content with an expiration of 72 hours.

  ---

  Pre-authenticated requests provide a way to let users access a bucket or an object without having their own credentials, as long as the request creator has permission to access those objects. For example, you can create a request that lets

  operations support user upload backups to a bucket without owning API keys. Or, you can create a request that lets a business partner update shared data in a bucket without owning API keys.

  When creating a pre-authenticated request, you have the following options:

  You can specify the name of a bucket that a pre-authenticated request user has write access to and can upload one or more objects to. You can specify the name of an object that a pre-authenticated request user can read from, write to, or

  read from and write to.

  Scope and Constraints

  Understand the following scope and constraints regarding pre-authenticated requests:

  Users can't list bucket contents.

  You can create an unlimited number of pre-authenticated requests. There is no time limit to the expiration date that you can set. You can't edit a pre-authenticated request. If you want to change user access options in response to changing

  requirements, you must create a new pre-authenticated request. The target and actions for a pre-authenticated request are based on the creator's permissions. The request is not, however, bound to the creator's account login credentials. If

  the creator's login credentials change, a pre-authenticated request is not affected.

  You cannot delete a bucket that has a pre-authenticated request associated with that bucket or with an object in that bucket.

• Question 49:

  A retail company has recently adopted a hybrid architecture. They have the following requirements for their end-to-end Connectivity model between their on-premises data center and Oracle Cloud Infrastructure (OC1) region

  *

  Highly available connection with service level redundancy

  *

  Dedicated network bandwidth with low latency

  Which connectivity setup is the most cost effective solution for this scenario?

  A. Setup IPsec VPN as your primary connection, and a FastConnect virtual circuit as a backup connection. Use separate edge devices in your on-premises data canter for each connection from your edge devices, advertise more specific routes IPSec VPN, and specific routes through the backup FastConnect virtual circuit.
  B. Setup FastConnect virtual circuit as your primary connection, and a second FastConnect virtual circuit as a backup connection. Use separate edge devices in your FastConnect physical connectivity is redundant Use a single edge device in your on premises data center for each connection From yc device, advertise more specific routes via primary FastConnect virtual circuit, and less specific routes through t backup FastConnect circuit.
  C. Setup FastConnect virtual circuit as your primary connection, and an IPSec VPN as a backup connection. Use separate edge devices in your on-premises data center for each connection. From your edge devices, advertise more specific routes through FastConnect virtual circuit, and more specific routes through the backup IPSec VPN path.
  D. Setup IPSec VPN as your primary connection, and a second IPSec VPN as a backup connection. Use separate edge devices in your on p data center for each connection. From your edge devices, advertise more specific routes via primary IPSec VPN. and less specific rod the backup IPSec VPN.
  D. Setup IPSec VPN as your primary connection, and a second IPSec VPN as a backup connection. Use separate edge devices in your on p data center for each connection. From your edge devices, advertise more specific routes via primary IPSec VPN. and less specific rod the backup IPSec VPN.

  ---

  there are two main requirements for this Customer First Highly available connection with service level redundancy and that can achieve by

  

  3- Redundant FastConnect

  

• Question 50:

  A new International hacktivfst group based in London, launched a wide scale cyber attacks Including SQL Injection and Cross-Site Scripting (XSS) across multiple websites which are hosted in Oracle Cloud Infrastructure (OCI). As an IT

  consultant, you must configure a Web Application Firewall (WAF) to protect these website against the attacks.

  How should you configure your WAF to protect the website against those attacks?

  A. Enable an Access Rule that contains XSS Filters Categories and SQL Filters Categories.
  B. Enable a Protection Rule to block the attacks based on HTTP Headers that contain XSS and SQL strings.
  C. Enable a Protection Rule that contains XSS Filters Categories and SQL Filters Categories.
  D. Enable an Access Rule to block the IP Address range from London.
  E. Enable a Protection Rule to block requests that came from London.
  A. Enable an Access Rule that contains XSS Filters Categories and SQL Filters Categories.