1Z0-997-21 Exam Questions & Answers

The Finance department of your company has reached out to you. They have customer sensitive data on

compute Instances In Oracle Cloud Infrastructure (OCI) which they want to store in OCI Storage for long

term retention and archival.

To meet security requirements they want to ensure this data is NOT transferred over public internet, even if

encrypted.

which they want to store In OCI Object Storage fin long term retention and archival To meet security

requirements they want to ensure this data is NOT transferred over public Internet, even it encrypted.

Which option meets this requirements?

A. Configure a NAT instance and all traffic between compute In Private subnet should use this NAT instance with Private IP as the route target.

B. Use NAT gateway with appropriate route table when transferring data. Then use NAT gateways' toggle (on/off) once data transfer is complete.

C. Use Service gateway with appropriate route table.

D. Use Storage gateway with appropriate firewall rule.

You have designed and deployed your Autonomous Data Warehouse (ADW) such that it is accessible from your on-premises data center and servers running on both private and public networks in Oracle Cloud Infrastructure (OCI).

As you are testing the connectivity to your ADW database from the different access paths, you notice that the server running on the private network is unable to connect to ADW. Which two steps do you need to take to enable connectivity from the server on the private network to ADW? (Choose two.)

A. Add an entry in the Security List of the ADW allowing ingress traffic for C10R block 10.2.2.0/24

B. Add an entry in the route table (associated with the private subnet) with destination of 0.0.0.0/: target type of NAT Gateway, add a stateful egress rule to the security list (associated with the private subnet) with destination of 0.0.0.0./0 and for all IP protocols.

C. Add an entry in the access table list of ASW for CIDR block 10.2.2.0/24.

D. Add an entry in the route table (associated with the private subnet) with destination of 0.0.0.0./0; target type of internet Gateway, add a stateful egress in the security list (associated with the private subnet) with destination of 0.0.0.0/0 and for all IP protocols.

E. Add an entry in the access control list of ADW for IP address 129.146.160.11

A new international hacktivist group, based in London, launched wide scale cyber attacks including SQL Injection and Cross-Site Scripting (XSS) across multiple websites which are hosted in Oracle Cloud Infrastructure (OCI). As an IT consultant, you must configure a Web Application Firewall (WAF) to protect these websites against the attacks. How should you configure your WAF to protect the website against those attacks? (Choose the best answer.)

A. Enable an Access Rule that contains XSS Filters Categories and SQL Filters Categories.

B. Enable a Protection Rule to block the attacks based on HTTP Headers that contain XSS and SQL strings.

C. Enable a Protection Rule that contains XSS Filters Categories and SQL Filters Categories.

D. Enable an Access Rule to block the IP Address range from London.

E. Enable a Protection Rule to block requests that came from London.