1Z0-997-22 Online Practice Questions and Answers

A company has an application that processes confidential data. The data is currently stored in an on-premises data center. A solution architect needs to move this data to Oracle Cloud Infrastructure (OCI) Object Storage and ensure data is encrypted in-transit to OCI.

Which two steps should the solution architect perform to set up the most cost-effective connection between on-premises data center and OCI?

A. Set up private end point for accessing Object Storage.

B. Attach an Internet Gateway to Virtual Cloud network(VCN).

C. Configure a service gateway accessing Object Storage.

D. Set up an IPsec tunnel between the customer equipment and software VPN on an oci instance

E. Configure a private peering connection on the Oracle FastConnect

F. Set up VPN Connect between the customer equipment and the Dynamic Routing Gateway.

A manufacturing company is planning to migrate their on-premises database to Oracle Cloud Infrastructure and has hired you for the migration. Customer has provided following information regarding their existing on-premises database:

Database version, database character set, storage for data staging, acceptable length of system outage.

What additional information do you need from customer in order to recommend a suitable migration method? (Choose Two)

A. On-Premises host operating system and version.

B. Number of active connections.

C. Data types used in the on-premises database.

D. Elapsed time since database was last patched.

E. Top 5 longest running queries.

You have configured backups for your Oracle Cloud Infrastructure (OCI) 2-node RAC DB systems on virtual machines. In the console, the database backup displays a Failed status.

Which of the following options is the most likely reason for this backup issue?

A. The master key stored in OCI Key Management for encryption and decryption of data in the database is not accessible to the backup service.

B. The auth token being used by the Object Store Swift endpoint is incorrect.

C. The allocated storage on the OCI File Storage service file system attached with the database is full.

D. The RMAN backup agent is not compatible with the version of database being used.

Your organization is planning on using Oracle Cloud Infrastructure (OCI) File Storage Service (FSS). You will be deploying multiple compute instance in Oracle Cloud Infrastructure (OCI) and mounting the file system to these compute instances. The file system will hold payment data processed by a Database instance and utilized by compute instances to create a overall inventory report. You need to restrict access to this data for specific compute instances and must be allowed/blocked per compute instance's CIDR block.

Which option can you use to secure access?

A. Use stateless Security List rule to restrict access from known IP addresses only.

B. Create a new VCN security list, choose SOURCE TYPE as Service and SOURCE SERVICE as FSS. Add stateless ingress and egress rules for specific P address and CIDR blocks.

C. Use 'Export option' feature of FSS to restrict access to the mounted file systems.

D. Create and configure OCI Web Application Firewall service with built in DNS based intelligent routing.

You are working as a solution architect with a global automotive provider who is looking to create a multi-cloud solution. They want to run their application tier in Microsoft Azure while utilizing the Oracle DB Systems in the Oracle Cloud Infrastructure (OCI).

What is the most-fault tolerant and secure solution for this customer? (Choose the best answer.)

A. Deploy the Oracle database system into a public subnet in your VCN and assign a public IP address. Connect your application tier running in Azure to the public IP address of the database system over the internet.

B. Create a FastConnect virtual circuit with Microsoft Azure as the provider to establish a private interconnect between the application tier running in the Azure Virtual Network and the OCI VCN that contains the Oracle Databases.

C. Create an encrypted, Virtual Private Network connection between the Microsoft Azure Virtual Network that contains the application tier and the OCI Virtual Cloud Network (VCN) that contains the Oracle Databases.

D. Use an OCI Virtual Cloud Network remote peering connection to create a remote network connection between the application tier running in Microsoft Azure Virtual Network and Oracle Databases running in the OCI Virtual Cloud Network (VCN).

You are creating an Oracle Cloud Infrastructure Dynamic Group. To determine the members of this group you are defining a set of matching rules.

Which of the following are the supported variables to define conditions in the matching rules? (Choose Two)

A. instance.compartment.id -the OCID of the compartment where the instance resides.

B. instance.tenancy.id -the OCID of the tenancy where the instance resides.

C. tag...value -the tag namespace and tag key.

D. iam.policy.id - the OCID of the IAM policy to apply to the group.

A manufacturing company is planning to migrate their on-premises database to OCI and has hired you for the migration. Customer has provided following information regarding their existing onpremises database:

Database version, host operating system and version, database character set, storage for data staging, acceptable length of system outage.

What additional information do you need from customer in order to recommend a suitable migration method? Choose two

A. Elapsed time since database was last patched

B. On-premises host operating system and version

C. Number of active connections

D. Data types used in the on-premises database

E. Top 5 longest running queries

There are two compartments: Networks and Devlnstances There are two groups: NetworkAdmins with a user named Nick, and Devs with a user named Dave The following IAM policies are being used: *Allow group NetworkAdmins to manage virtual-network-family in compartment Networks *Allow group NetworkAdmins to manage instance-family in compartment Networks *Allow group Devs to use virtual-network-family in compartment Networks *Allow group Devs to manage all-resources in compartment Devlnstances Nick creates a VCN in Networks compartment. Dave creates a VCN in Devlnstances compartment. Which of the following statements is INCORRECT?

A. Dave launches instances in Devlnstances using the VCN in Networks compartment

B. Nick cannot launch new instances in Devlnstances compartment

C. Nick launches instances in Networks using VCN in Devlnstances compartment

D. Dave cannot launch new instances in Networks compartment

A company has an urgent requirement to migrate 100 TB of data to Oracle Cloud Infrastructure (OCI) in two weeks. They have a 100 Mbps Internet line but the connection is intermittent due to problems with their internet provider. In this scenario, what is the most time-efficient mechanism to migrate data to OCI?

A. Set up an IPSec VPN tunnel between your data center and OCI. Upload all data to OCI using OCI Storage Gateway.

B. Set up an OCI Storage Gateway to connect your data center to your Virtual Cloud Network and upload data.

C. Upload data using OCI Object Storage multipart upload capability.

D. Set up hybrid network by launching a 1 Gbps FastConnect virtual circuit between your data center and OCI. Use OCI Object Storage multipart upload capability to automate the migration of your data to OCI.

E. Use OCI File Storage Service to copy data from your data center to OCI.

Your organization needs to migrate legacy monolithic applications into cloud-native containerized RESTful microservices. The development team is testing the use of packaged procedures with containers in a fully serverless environment. Before migrating the existing code to production, the team decides to perform a lift and shift of the monolithic application and code the new features that are essential for serverless microservices.

You want to carry out a steady migration to the Oracle Cloud Infrastructure (OCI) platform, making the new microservice functionalities available while maintaining the monolithic application for all the other activities. You also want to integrate the legacy monolithic application with the new microservices to have a single interface with simplified management for auditing and monitoring while meeting operational and compliance requirements.

How can you meet this requirement?

A. Push the container image to OCIR, build a serverless function using the OCI Functions serviceBYOD (Bring-Your-Own-Dockerfile) feature, build an API deployment specification with serverless functions as the back-end, and use an OCI API gateway to provide front- end access to that function.

B. Push the container image to the OCI code repository, create an instance template with a Docker container running the image, and create an instance pool with autoscaling configuration. Use the OCI load balancer to provide an API endpoint to connect with the microservice.

C. Push the container image to the OCI code repository, build a serverless function using the OCI Functions service BYOD feature, build an API deployment specification with serverless functions as the back-end, and use an OCI API gateway to provide front-end access to that function.

D. Push the container image to OCIR, create an instance template with a Docker container running the image, and create an instance pool with autoscaling configuration. Use the OCI load balancer to provide an API endpoint to connect with the microservice.