Verified 1Z0-997-20 Exam Dumps PDF [2021] Access using Actual4Cert
Try Best 1Z0-997-20 Exam Questions from Training Expert Actual4Cert
Oracle 1Z0-997-20 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 7 |
|
| Topic 8 |
|
| Topic 9 |
|
| Topic 10 |
|
| Topic 11 |
|
NEW QUESTION 11
You are working as a solution architect for an online retail store to create a portal to allow the users to pay for their groceries using credit cards. Since the application is not fully compliant with the Payment Card Industry Data Security Standard (PCI DSS), your company is looking to use a third party payment service to process credit card payments.
The third party service allows a maximum of Spelunk IP addresses 5 public IP addresses at a time However, your website is using Oracle Cloud Infrastructure (OCI) Instance Pool Auto Scaling policy to create up to create up to 15 Instances during peak traffic demand, which are launched In VCN private in VCN private subnets and attached to an OCI public Load Balancer. Upon user payment, the portal connects to the payment service over the Interne! to complete the transaction What solution can you implement to make sure that all compute Instances can connect to the third party system to process the payments aw peak traffic demand?
- A. Whitelist the Internet Gateway Public IP on the third party service and route all payment requests through the Internet Gateway.
- B. Route credit card payment request from the compute instances through the NAT Gateway. On the third-party services, whitest the public IP associated with the NAT Gateway.
- C. Route payment request from the compute instances through the OCI Load Balancer, which will then be routed to the third party service.
- D. Create an OCI Command Line Interface (CLI) script to automatically reserve public IP address for the compute instances. On the third services, whitelist the Reserved public IP.
Answer: C
Explanation:
Explanation
You can OCI Load Balancer for this solution which can you the Public IPs of Load balancer to Traffic to third party services which allows a maximum of Spelunk IP addresses 5 public IP addresses at a time However, your website is using Oracle Cloud Infrastructure (OCI) Instance Pool Auto Scaling policy to create up to 15 Instances during peak traffic demand
NEW QUESTION 12
A developer is using Oracle Functions to deploy her code as part of an event-driven solution in Oracle Cloud Infrastructure (OCI). When she invokes her function, Oracle Functions returns a FunctionlnvokelmageNotAvailable message and a 502 error:
Which of the following options is NOT a plausible reason for this error?
- A. The function does not exist in the specified location in OCI Registry.
- B. The VCN being used does not have an internet gateway or a service gateway configured for Oracle Functions to be able to access OCI Registry.
- C. Missing or invalid IAM policy to give Oracle Functions read access to images stored for functions in repositories in OCI Registry.
- D. OCI Events service rule is not configured with the correct location of the function in OCI Registry.
Answer: D
NEW QUESTION 13
An insurance company is storing critical financial data in the OCI block volume. This volume is currently encrypted using oracle managed keys. Due to regulatory compliance, the customer wants to encrypt the data using the keys that they can control and not the keys which are controlled by Oracle.
What of the following series of tasks are required to encrypt the block volume using customer managed keys?
- A. Create a vault, import your master encryption key into the vault, generate data encryption key, assign data encryption key to the block volume
- B. Create a vault, create a master encryption key in the vault, assign this master encryption key to the block volume
- C. Create a master encryption key, create a data encryption key, decrypt the block volume using existing oracle managed keys, encrypt the block volume using the data encryption key
- D. Create a master encryption key, create a new version of the encryption key, decrypt the block volume using existing oracle managed keys and encrypt using new version of the encryption key
Answer: B
Explanation:
Oracle Cloud Infrastructure Vault lets you centrally manage the encryption keys that protect your data and the secret credentials that you use to securely access resources. You can use the Vault service to create and manage the following resources:
Vaults
Keys
Secrets
Vaults securely store master encryption keys and secrets that you might otherwise store in configuration files or in code.
The Vault service lets you create vaults in your tenancy as containers for encryption keys and secrets. If needed, a virtual private vault provides you with a dedicated partition in a hardware security module (HSM), offering a level of storage isolation for encryption keys that's effectively equivalent to a virtual independent HSM.
NEW QUESTION 14
As a solution architect, you are designing a web application to be deployed across multiple Oracle Cloud Infrastructures (OCI) regions for a global audience. Your goal is that users from each region should access the application web servers deployed in their own geographical OCI location.
Which OCI feature can be used to achieve this?
- A. OCI Traffic Management GeoLocation steering policy
- B. OCI Traffic Management IP Prefix steering policy
- C. OCI Public Load Balancers
- D. OCI Global Load balancers
Answer: A
NEW QUESTION 15
You are advising the database administrator responsible for managing non-production environment for Oracle Autonomous Database running on Oracle Cloud Infrastructure. You need to help the database administrator ensure that the non-production environments have a copy of the current data from the production environment in a manner that is most time-efficient.
Which method should you recommend? (Choose the best answer.)
- A. Create a full clone of the production Autonomous Database and create the non-production database from it.
- B. Create a metadata clone of the production Autonomous Database and create the non-production database from it.
- C. Take a Data Pump export of the production Autonomous database and import into the non-production database.
- D. Take a full database backup of the production Autonomous database and create the non-production database from it.
Answer: A
Explanation:
https://www.oracle.com/database/technologies/datawarehouse-bigdata/adb-faqs.html
NEW QUESTION 16
A retail company has several on-premises data centers which span multiple geographical locations. They plan to move some of their applications from on-premises data centers to Oracle Cloud Infrastructure (OCI). For these applications running in OCI, they still need to interact with applications running on their on-premises data centers to Oracle Cloud Infrastructure (OCI). for these applications running in OCI. they still need to interact with applications running on their on-premises data centers. These applications require highly available, fault-tolerant network connections between on premises data centers and OCI.
Which option should you recommend to provide the highest level of redundancy?
- A. Use FastConnect private peering only to ensure secure access from your data center to Oracle Cloud Infrastructure
- B. If your data centers span multiple, geographical locations, use only the specific IP address as a static route for the specific geographical location
- C. Set up both IPSec VPN and FastConnect to connect your on premises data centers to Oracle Cloud Infrastructure.
- D. Oracle cloud Infrastructure provides network redundancy by default so that no other operations are required
- E. Set up a single IPSec VPN connection (rom your data center to Oracle Cloud Infrastructure since It is cost effective
Answer: B
Explanation:
If your data centers span multiple geographical locations, we recommend using a broad CIDR (0.0.0.0/0) as a static route in addition to the CIDR of the specific geographical location. This broad CIDR provides high availability and flexibility to your network design. For instance, the following diagram shows two networks in separate geographical areas that each connect to Oracle Cloud Infrastructure. Each area has a single on-premises router, so two IPSec VPN connections can be created. Note that each IPSec VPN connection has two static routes: one for the CIDR of the particular geographical area, and a broad 0.0.0.0/0 static route.
NEW QUESTION 17
A large financial services company has used 2 types of Oracle DB Systems. In Oracle Cloud Infrastructure (OCI) to store user data. One is running on a VM.Standard2.8 shape and the other on a VM.Standard 2.4 shape.
As business grows, data is growing rapidly on both the databases and performance is also degrading. The company wants to address this problem with a viable and economical solution.
As the solution architect for that company you have suggested that they move their databases to Autonomous Transaction Processing Serverless (ATP-S) database.
Which two factors should you consider before you arrived at that recommendation?
- A. You verified that ATP S supports the database features and options currently being used by the 2 databases.
- B. Validate that ATP-S will support the storage and processing requirements for the 2 databases over the life cycle of the business applications.
- C. Upon provisioning, ATP-S automatically scales up CPU to meet the application's processing requirements.
- D. Confirm that ATP-S allows customers to compress tablespaces to reduce storage costs
Answer: A,B
Explanation:
Explanation
Not all features present in Oracle Database Enterprise Edition are available in ATP, and some some Oracle Database features are restricted, for example, database features designed for administration are not available.
so you need to validate it first, You can find a complete list of the features that are not supported,
https://docs.oracle.com/en/cloud/paas/atp-cloud/atpug/experienced-database-users.html#GUID-58EE6599-6DB4 Also, you must specify the initial storage required for your database but ADB is elastic, so it is possible to grow or shrink your database as needed.
NEW QUESTION 18
A hospital in Austin has hosted its web based medical records portal entirely In Oracle cloud Infrastructure (OCI) using Compute Instances for its web-tier and DB system database for its data tier. To validate compliance with Health Insurance Portability and Accountability (HIPAA), the security professional to check their systems it was found that there are a lot of unauthorized coming requests coming from a set of IP addresses originating from a country in Southeast Asia.
Which option can mitigate this type of attack?
- A. Mitigate the attack by changing the Route fable to redirect the unauthorized traffic to a dummy Compute instance
- B. Block the attacking IP address by creating by Network Security Group rule to deny access to the compute Instance where the web server Is running
- C. Block the attacking IP address by creating a Security List rule to deny access to the subnet where the web server Is running
- D. Block the attacking IP address by implementing a OCI Web Application Firewall policy using Access Control Rules
Answer: D
Explanation:
WAF can protect any internet facing endpoint, providing consistent rule enforcement across a customer's applications.
WAF provides you with the ability to create and manage rules for internet threats including Cross-Site Scripting (XSS), SQL Injection and other OWASP-defined vulnerabilities. Unwanted bots can be mitigated while tactically allowed desirable bots to enter. Access rules can limit based on geography or the signature of the request.
As a WAF administrator you can define explicit actions for requests that meet various conditions. Conditions use various operations and regular expressions. A rule action can be set to log and allow, detect, or block requests
NEW QUESTION 19
A data analytics company has been building Its now generation big data and analytics platform on Oracle Cloud Infrastructure (OCI). They need a storage service that provide the scale and performance that their big data applications require such as high throughput to compute nodes with low latency file operations in addition, their data needs to be stored redundantly across multiple nodes In a single availability domain and allows concurrent connections from multiple compute Instances hosted on multiple availability domains.
Which OCI storage service can you use to meet i his requirement?
- A. File System Storage
- B. Block Volume
- C. Object Storage
- D. Archive storage
Answer: A
Explanation:
Explanation
Oracle Cloud Infrastructure File Storage service provides a durable, scalable, secure, enterprise-grade network file system. You can connect to a File Storage service file system from any bare metal, virtual machine, or container instance in your Virtual Cloud Network (VCN). You can also access a file system from outside the VCN using Oracle Cloud Infrastructure FastConnect and Internet Protocol security (IPSec) virtual private network (VPN).
Use the File Storage service when your application or workload includes big data and analytics, media processing, or content management, and you require Portable Operating System Interface (POSIX)- compliant file system access semantics and concurrently accessible storage. The File Storage service is designed to meet the needs of applications and users that need an enterprise file system across a wide range of use cases
NEW QUESTION 20
Which of the following is NOT a good use case for the Oracle Cloud Infrastructure (OCI) Streaming service?
- A. Providing a unified entry point for cloud components to report their life cycle events for audit, accounting, and related activities.
- B. Meeting compliance requirements for data to remain unchanged over a long time, so that it can be retrieved for audit purposes.
- C. Messaging with a pull-based communication model and the ability to feed multiple consumers with the same data independently.
- D. Ingesting metric and log data to help make critical operational data more quickly available for indexing, analysis, and visualization.
Answer: B
NEW QUESTION 21
You are working as a solution architect for an online retail store to create a portal to allow the users to pay for their groceries using credit cards. Since the application is not fully compliant with the Payment Card Industry Data Security Standard (PCI DSS), your company is looking to use a third party payment service to process credit card payments.
The third party service allows a maximum of Spelunk IP addresses 5 public IP addresses at a time However, your website is using Oracle Cloud Infrastructure (OCI) Instance Pool Auto Scaling policy to create up to create up to 15 Instances during peak traffic demand, which are launched In VCN private in VCN private subnets and attached to an OCI public Load Balancer. Upon user payment, the portal connects to the payment service over the Interne! to complete the transaction What solution can you implement to make sure that all compute Instances can connect to the third party system to process the payments aw peak traffic demand?
- A. Whitelist the Internet Gateway Public IP on the third party service and route all payment requests through the Internet Gateway.
- B. Route payment request from the compute instances through the OCI Load Balancer, which will then be routed to the third party service.
- C. Create an OCI Command Line Interface (CLI) script to automatically reserve public IP address for the compute instances. On the third-party services, whitelist the Reserved public IP.
- D. Route credit card payment request from the compute instances through the NAT Gateway. On the third-party services, whitelist the public IP associated with the NAT Gateway.
Answer: D
NEW QUESTION 22
Your company needs to migrate a business critical application from your data center to Oracle Cloud Infrastructure (OCI). The application runs on Oracle Database and both the application and database servers run on Oracle Linux version 7. The application server is WebLogic server running on multiple 4-core servers and the database is deployed as an Oracle Database Enterprise Edition RAC database on 2 servers (4-cores each).
Which method of database migration should you choose so that the application has minimal impact? (Choose the best answer.)
- A. Deploy Autonomous Transaction Processing Database on OCI and use the MV2ADB tool for the database migration.
- B. Deploy Exadata Cloud Service Base rack and use Oracle Data Pump tool to migrate the data from customer on-premises to OCI.
- C. Deploy Virtual Machine RAC DB system on OCI and use the ZDM tool for the database migration.
- D. Deploy Virtual Machine RAC DB system on OCI and use the Oracle Database Backup module with RMAN to migrate the data from customer on-premises to OCI.
Answer: C
Explanation:
https://docs.oracle.com/en/database/oracle/zero-downtime-migration/19.2/zdmug/introduction-to-zero-downtime-migration.html#GUID-FF4CA22F-CC83-4118-AF26-6E7BE224717F
NEW QUESTION 23
A cloud consultant is working on implementation project on OCI. As part of the compliance requirements, the objects placed in object storage should be automatically archived first and then deleted. He is testing a Lifecycle Policy on Object Storage and created a policy as below:
[ { "name": "Archive_doc", "action": "ARCHIVE", "objectNameFilter": { "inclusionPrefixes": "doc"] },
"timeAmount": 5, "timeunit": "DAYS", "isEnabled": true },
{ "name": "Delete_doc", "action": "DELETE", "objectNameFilter": "inclusionPrefixes": [ "doc"]
1."timeAmount": 5, "timeunit": "DAYS", "isEnabled": true }
What will happen after this policy is applied?
- A. All the objects having file extension ".doc" will be archived 5 days after object creation
- B. All objects with names starting with "doc" will be deleted after 5 days of object creation
- C. All the objects with names starting with "doc" will be archived 5 days after object creation and will be deleted 5 days after archival
- D. All the objects having file extension ".doc" will be archived for 5 days and will be deleted 10 days after object creation
Answer: B
Explanation:
Explanation
Object Lifecycle Management works by defining rules that instruct Object Storage to archive or delete objects on your behalf within a given bucket. A bucket's lifecycle rules are collectively known as an object lifecycle policy.
You can use a rule to either archive or delete objects and specify the number of days until the specified action is taken.
A rule that deletes an object always takes priority over a rule that would archive that same object.
NEW QUESTION 24
An online gaming application is deployed to multiple Availability Domains in the Oracle Cloud Infrastructure (OCI) us-ashburn-1 region. Considering the high volume of traffic that the gaming application handles, the company has hired you to ensure that the data stored by the application is scalable, highly available, and disaster resilient. In the event of failure, the Recovery Time Objective (RTO) and Recovery Point Objective (RPO) must be less than 2 hours.
Which Disaster Recovery strategy should be used to achieve the RTO and RPO requirements in the event of a system failure?
- A. Create a user defined backup policy with a schedule of generating daily backups for block volumes.
- B. Configure hourly block volumes backups through the OCI Storage Gateway service.
- C. Create a user defined backup policy with a schedule of generating hourly backups for block volumes.
- D. Configure hourly block volumes backups using the OCI Command Line Interface (CLI).
Answer: D
NEW QUESTION 25
You are working as a solution architect with a global automotive provider who is looking to create a multi-cloud solution They want to run their application tier in Microsoft Azure while utilizing the Oracle DB Systems In the Oracle Cloud Infrastructure (OCI).
What is the most fault tolerant and secure solution for this customer?
- A. Create an Oracle database in OCI Virtual Cloud Network (VCN) and connect to the application tier running In Microsoft Azure over the Internet.
- B. Create a VPN connection between the application tie, running in Azure Virtual Network and Oracle Databases running In OCI Virtual Cloud Network (VCN).
- C. Use OCI Virtual Cloud Network remote peering connection to create connectivity among application tier running in Microsoft Azure Virtual Network and Oracle Databases running in OCI Virtual Cloud Network(VCN).
- D. Create a FastConnect virtual circuit and choose Microsoft Azure from the list of providers available to setup Network connectivity between application tier running in Microsoft Azure Virtual Network and Oracle Databases running In OCI Virtual Cloud (VCN)
Answer: C
Explanation:
Oracle and Microsoft have created a cross-cloud connection between Oracle Cloud Infrastructure and Microsoft Azure in certain regions. This connection lets you set up cross-cloud workloads without the traffic between the clouds going over the internet.
you can connect your VNet and VCN so that traffic that uses private IP addresses goes over the crosscloud connection.
For example, the following diagram shows a VNet that is connected to a VCN. Resources in the VNet are running a .NET application that access an Oracle database that runs on Database service resources in the VCN. The traffic between the application and database uses a logical circuit that runs on the cross-cloud connection between Azure and Oracle Cloud Infrastructure.
The two virtual networks must belong to the same company and not have overlapping CIDRs.
The connection requires you to create an Azure ExpressRoute circuit and an Oracle Cloud Infrastructure FastConnect virtual circuit.
NEW QUESTION 26
......
Latest 100% Passing Guarantee - Brilliant 1Z0-997-20 Exam Questions PDF: https://www.actual4cert.com/1Z0-997-20-real-questions.html