1Z0-997-22 Online Practice Questions and Answers

An insurance company is storing critical financial data in the OCI block volume. This volume is currently encrypted using oracle managed keys. Due to regulatory compliance, the customer wants to encrypt the data using the keys that they

can control and not the keys which are controlled by Oracle.

What of the following series of tasks are required to encrypt the block volume using customer managed keys?

A. Create a vault, import your master encryption key into the vault, generate data encryption key, assign data encryption key to the block volume

B. Create a master encryption key, create a data encryption key, decrypt the block volume using existing oracle managed keys, encrypt the block volume using the data encryption key

C. Create a vault, create a master encryption key in the vault, assign this master encryption key to the block volume

D. Create a master encryption key, create a new version of the encryption key, decrypt the block volume using existing oracle managed keys and encrypt using new version of the encryption key

A company is running High Performance Computing workloads on Oracle Cloud Infrastructure and are using OCI bare metal compute shape. They have decided to create a custom image of the bare metal instance's boot disk and use it to launch other instances.

Which of the following is a NOT a true statement?

A. Before you create a custom image of an instance, you must disconnect all iSCSI attachments and remove all iscsid node configurations from the instance.

B. Editing custom Windows images is not supported due to hardware differences between shapes.

C. Custom images do not include the data from any attached block volumes.

D. You can create additional custom images of an instance while the instance is engaged in the image creation process.

Your customer has gone through a recent reorganization. As part of this change, they are organizing their Oracle Cloud Infrastructure (OCI) compartment structure to align with the company's new organizational structure. (Refer to the exhibit)

They have made the following change:

Compartment A is moved, and its new parent compartment is compartment Dev.

Policy defined in compartment A: Allow group G1 to manage instance-family in compartment A

Policy defined in root compartment: Allow group admins to manage instance-family in compartment Ops: Test: A

After the compartment move, which action will provide users of group G1 and admins with similar privileges as before the move?

A. Define the following policy in compartment Dev: Allow group G1 to manage instance-family in compartment A

B. Define the following policies in compartment Dev: Allow group G1 to manage instance-family in compartment A Allow group admins to manage instance-family in compartment Ops: Dev: A

C. Define the following policy in compartment: Dev: Allow group admins to manage instance-family in compartment Ops: Dev: A

D. Mo change in any policy statement is required as all the policies associated with a compartment being moved is automatically updated

A digital marketing company is planning to host a website on Oracle Cloud Infrastructure (OCI) and leverage OCI Container Engine for Kubernetes (OKE). These web servers will make API calls to access OCI Object Storage to store all images uploaded by users.

For security purposes, you must ensure that the credentials used by the web server to allow access to OCI Object Storage are not stored in the compute instance.

What solution results in an implementation with the least-effort for this scenario?

A. Configure the credentials to use Transparent Data Encryption (TDE) to automatically allow the web server to make API calls to the OCI Object Storage.

B. Configure the credentials using OCI Registry (OCIR) to automatically connect with OKE allowing the web server to make API calls to the OCI Object Storage.

C. Configure the credentials using OCI Vault to allow an instance to make API calls and grant access to OCI Object Storage.

D. Configure the credentials using Instance Principals to allow the web server to make API calls to the OCI Object Storage.

An E-commerce company which sells computers, tablets, and other electronics items has recently decided to move all of their on-premises infrastructure to Oracle Cloud Infrastructure (OCI). One of their on-premises application is running on an NGINX server and the Oracle Database is running in a 2 node Oracle Real Application Clusters (RAC) configuration.

They cannot afford to have any application down time when they do the migration.

What is an effective mechanism to migrate the customer application to OCI and set up regular automated backups?

A. Launch a compute instance and run an NGINX server to host the application. Deploy a 2 node VM DB Systems with Oracle RAC enabled. Import the on-premises database to OCI VM DB Systems using Oracle Data Pump and then enable automatic backups.

B. Launch a compute instance for both the NGINX application server and the database server. Attach block volumes on the database server compute instance and enable backup policy to backup the block volumes.

C. Launch a compute instance and run an NGINX server to host the application. Deploy Exadata Quarter Rack, enable automatic backups and import the database using Oracle Data Pump.

D. Launch a compute instance and run an NGINX server to host the application. Deploy a 2 node VM DB Systems with Oracle RAC enabled. Setup Oracle GoldenGate to synchronize data from their on-premises database to OCIVM Database. Export and Import the on- premises database to OCIVM DB Systems using Oracle Data Pump, apply the GoldenGate trail files to sync up the OCI database with the on-premises database. Enable automatic backups for the OCIVM database and then cutoverthe application from on-premises to OCI.

You have deployed a multi-tier application with multiple compute instances in Oracle Cloud Infrastructure. You want to back up these volumes and have decided to use 'Volume Groups' feature. The Block volume and Compute instances exist in different compartments within your tenancy.

Periodically, a few child compartments are moved under different parent compartments, and you notice that sometimes volume group backup fails.

What could be the cause?

A. The Identity and Access Management policy allowing backup failed to move when the compartment was moved.

B. You are exceeding your volume group backup quota configured.

C. You have the same block volume attached to multiple compute instances; if these compute instances are in different compartments then all concerned compartments must be moved at the same time.

D. A compute instance with multiple block volumes attached cannot move when a compartment is moved.

You are working as a cloud consultant for a major media company. In the US and your client requested to consolidate all of their log streams, access logs, application logs, and security logs into a single system.

The client wants to analyze all of their logs In real-time based on heuristics and the result should be validated as well. This validation process requires going back to data samples extracted from the last 8 hours.

What approach should you take for this scenario?

A. Create an auto scaling pool of syslog-enabled servers using compute instances which will store the logs In Object storage, then use map reduce jobs to extract logs from Object storage, and apply heuristics on the logs.

B. Create a bare-metal instance big enough to host a syslog enabled server to process the logs and store logs on the locally attached NVMe SSDs for rapid retrieval of logs when needed.

C. Set up an OCI Audit service and ingest all the API arils from Audit service pragmatically to a client side application to apply heuristics and save the result in an OCI Object storage.

D. Stream all the logs and cloud events of Events service to Oracle Streaming Service. Build a client process that will apply heuristics on the logs and store them in an Object Storage.

A startup company is looking for a solution for processing of data transmitted by the IOT devices fitted to transport vehicles that carry frozen foods. The data should be consumed and processed in real time. The processed data should be archived to OCI Object Storage bucket. and use Autonomous Data warehouse (ADW) to handle analytics.

Which architecture will help you meet this requirement?

A. Use OCI Streaming Service to collect the incoming biometric data. Use an open source Hadoop cluster to analyze the data horn streaming service. Store the results to OCI Autonomous Data warehouse (ADW) to handle complex analytics

B. Use OCI Streaming Service to collect the incoming biometric data. Use Oracle Functions to process the date and show the results on a real-time dashboard and store the results lo OCI Object Storage Store the data In OCI Autonomous Data warehouse (ADW) to handle analytics.

C. Create an OCI Object Storage bucket to collect the incoming biometric data from the smart pet collar Fetch the data horn OC\ Object storage to OCI Autonomous Data Warehouse (ADW) every day and run analytics Jobs with it

D. Launch an open source Hadoop cluster to collect the Incoming biometrics data Use an Open source Fluentd cluster to analyze the- data me results to OCI Autonomous Transaction Processing (ADW)to handle complex analytics

As a solution architect, you are designing a web application to be deployed across multiple Oracle Cloud Infrastructures (OCI) regions for a global audience. Your goal is that users from each region should access the application web servers

deployed in their own geographical OCI location.

Which OCI feature can be used to achieve this?

A. OCI Traffic Management IP Prefix steering policy

B. OCI Global Load balancers

C. OCI Public Load Balancers

D. OCI Traffic Management GeoLocation steering policy

You are running a legacy application in a compute instance on Oracle Cloud Infrastructure (OCI). To provide enough space for it to store internal data, a block volume is attached to the instance in paravirtualized mode.

Your application is not resilient to crash-consistent backup.

What should you do to backup the block volume in a secure and cost effective way? (Choose the best answer.)

A. Save your application data, detach the block volume and create a clone.

B. Create a volume group, add the boot volume and then run the volume group backup.

C. Create a backup, detach the block volume and save your application data.

D. Save your application data, detach the block volume and create a backup.