2022 Realistic 1z0-997-21 Dumps Exam Tips Test Pdf Exam Material [Q15-Q36]

Topic	Details
Topic 1	Design, implement and operate solutions to meet compliance requirements Plan and design solutions to meet business and technical requirements
Topic 2	Manage infrastructure using OCI CLI, APIs and SDKs Plan and design solutions in Oracle Cloud Infrastructure (OCI)
Topic 3	Design, implement and operate solutions for security and governance Implement solutions to meet business and technical requirements
Topic 4	Design for Security and Compliance Evaluate and implement databases Operate and troubleshoot databases
Topic 5	Evaluate multi-cloud solution architectures Conduct Monitoring, observability and alerting in OCI
Topic 6	Create architecture patterns including N-tier applications, microservices, and serverless architectures Implement and troubleshoot database migrations

NEW QUESTION 15
You are the Solution Architect that designed this Oracle Cloud Infrastructure (OCI) compartment layout for your organization:

The development team has deployed quite a few instances under ‘Compute’ Compartment and the operations team needs to list the Instances under the same compartment for their testing. Both teams, development and operations are part of a group called ‘Eng-group’ You have been looking for an option to allow the operations team to list the instances without access any confidential information or metadata of resources.
Which IAM policy should you write based on these requirements?

Allow group Eng-group to inspect instance-family in compartment Dev-Team:Compute and attach the policy to ‘Engineering’ Compartment

Allow group Eng-group to inspect instance-family in compartment Dev-Team: Compute and attach the policy to ‘SysTest Team’ Compartment

Allow group Eng-group to read instance-family in compartment Compute and attach the policy to ‘Engineering’ Compartment.

Allow group Eng-group to read instance-family in compartment Dev-Team-.Compute and attach the policy to’Dev-Team’

Policy Attachment
When you create a policy you must attach it to a compartment (or the tenancy, which is the root compartment). Where you attach it controls who can then modify it or delete it. If you attach it to the tenancy (in other words, if the policy is in the root compartment), then anyone with access to manage policies in the tenancy can then change or delete it. Typically that’s the Administrators group or any similar group you create and give broad access to. Anyone with access only to a child compartment cannot modify or delete that policy.
When you attach a policy to a compartment, you must be in that compartment and you must indicate directly in the statement which compartment it applies to. If you are not in the compartment, you’ll get an error if you try to attach the policy to a different compartment. Notice that attachment occurs during policy creation, which means a policy can be attached to only one compartment.
Policies and Compartment Hierarchies
a policy statement must specify the compartment for which access is being granted (or the tenancy).
Where you create the policy determines who can update the policy. If you attach the policy to the compartment or its parent, you can simply specify the compartment name. If you attach the policy further up the hierarchy, you must specify the path. The format of the path is each compartment name (or OCID) in the path, separated by a colon:
<compartment_level_1>:<compartment_level_2>: . . . <compartment_level_n> to allow action to compartment Compute so you need to set the compartment PATH as per where you attach the policy as below examples if you attach it to Root compartment you need to specify the PATH as following Engineering:Dev-Team:Compute if you attach it to Engineering compartment you need to specify the PATH as following Dev-Team:Compute if you attach it to Dev-Team or Compute compartment you need to specify the PATH as following Compute Note : in the Policy inspect verb that give the Ability to list resources, without access to any confidential information or user-specified metadata that may be part of that resource.

NEW QUESTION 16
Your customer has gone through a recent reorganization. As part of this change, they are organizing their Oracle Cloud Infrastructure (OCI) compartment structure to align with the company’s new organizational structure. (Refer to the exhibit)

They have made the following change:
Compartment A is moved, and its new parent compartment is compartment Dev.
Policy defined in compartment A: Allow group G1 to manage instance-family in compartment A Policy defined in root compartment: Allow group admins to manage instance-family in compartment Ops: Test: A After the compartment move, which action will provide users of group G1 and admins with similar privileges as before the move?

Define the following policy in compartment Dev:
Allow group G1 to manage instance-family in compartment A

Define the following policies in compartment Dev:
Allow group G1 to manage instance-family in compartment A
Allow group admins to manage instance-family in compartment Ops: Dev: A

Define the following policy in compartment: Dev:
Allow group admins to manage instance-family in compartment Ops: Dev: A

Mo change in any policy statement is required as all the policies associated with a compartment being moved is automatically updated

NEW QUESTION 17
You are working as a solution architect for an online retail store to create a portal to allow the users to pay for their groceries using credit cards. Since the application is not fully compliant with the Payment Card Industry Data Security Standard (PCI DSS), your company is looking to use a third party payment service to process credit card payments.
The third party service allows a maximum of Spelunk IP addresses 5 public IP addresses at a time However, your website is using Oracle Cloud Infrastructure (OCI) Instance Pool Auto Scaling policy to create up to create up to 15 Instances during peak traffic demand, which are launched In VCN private in VCN private subnets and attached to an OCI public Load Balancer. Upon user payment, the portal connects to the payment service over the Interne! to complete the transaction What solution can you implement to make sure that all compute Instances can connect to the third party system to process the payments aw peak traffic demand?

Route credit card payment request from the compute instances through the NAT Gateway. On the third-party services, whitelist the public IP associated with the NAT Gateway.

Create an OCI Command Line Interface (CLI) script to automatically reserve public IP address for the compute instances. On the third-party services, whitelist the Reserved public IP.

Whitelist the Internet Gateway Public IP on the third party service and route all payment requests through the Internet Gateway.

Route payment request from the compute instances through the OCI Load Balancer, which will then be routed to the third party service.

NEW QUESTION 18
A global retailer has decided to re-design its e-commerce platform to have a micro-services architecture. They would like to decouple application architecture into smaller, independent services using Oracle Cloud Infrastructure (OCI). They have decided to use both containers and servers technologies to run these application instances.
Which option should you recommend to build this new platform?

Install a kubernetes cluster on OCI and use OCI event service.

Use Oracle Container Engine for kubernetes, OCI Registry and OCI Functions.

Use OCI Resource Manager to automate compute Instances provisioning and use OCI Streaming service.

Use OCI functions, OCI object storage and OCI event service.

NEW QUESTION 19
You are working on the migration of the web application infrastructure of your company from on-premises to Oracle Cloud Infrastructure. You need to ensure that the DNS cache entries of external clients will not direct them to the on-premises infrastructure after switching to the new infrastructure.
Which of the following options will minimize this problem?

Reduce the TTL of the DNS records after the switch.

DNS changes propagate fast enough that it is not necessary to take any action.

Increase the TTL of the DNS records before the switch.

Increase the TTL of the DNS records after the switch.

Reduce the TTL of the DNS records before the switch.

NEW QUESTION 20
You are working as a solution architect for a customer in Frankfurt, which uses multiple compute instance VMs spread among three Availability Domains in the Oracle Cloud Infrastructure (OCI) eu-frankfurt-1 region. The compute instances do not have public IP addresses and are running in private subnets inside a Virtual Cloud Network (VCN). You have set up OCI Autoscaling feature for the compute instances, but find out that instances cannot be auto scaled. You have enabled monitoring on the instances.
What could be wrong in this situation?

You need to assign a reserved public IP address to the compute instances.

You need to set up a Service Gateway to send metrics to the OCI Monitoring service.

Autoscaling only works for instances with public IP addresses.

Autoscaling only works with single availability domains.

NEW QUESTION 21
A FinTech startup is developing a new blockchain based application to provide Smart Contracts using micro-services architecture. The development team is planning to deploy the application using containers and looking for a reliable way to build, deploy and manage their cloud-native application.
Additionally, they need an easy way to store, share and manage their application artifacts.
Which option should you recommend for this application?

Install and manage a Kubernetes cluster on OCI Compute Instances and use OCI Resource Manager for management of application artifacts

Use and OCI Resource Manager to manage cloud-native application and make the application artifacts available using OCI Functions

Use Oracle Container Engine for Kubernetes (OKE) to manage of cloud-native applications and OCI Registry for application artifacts

Use Oracle Container Engine for Kubernetes (OKE) to manage the deployment environment and OCI Functions for application artifacts

NEW QUESTION 22
An OCI Architect is working on a solution consisting of analysis of data from clinical trials of a pharmaceutical company. The data is being stored in OCI Autonomous Data Warehouse (ADW) having 8 CPU Cores and 70 TB of storage. The architect is planning to setup autoscaling to respond to dynamic changes in the workload.
Which of the following needs to be considered while configuring auto scaling? Choose two

Enabling auto scaling does not change the concurrency and parallelism settings

Auto scaling also scales IO throughput linearly along with CPU

The database memory SGA and PGA will not get affected by the changes in the number of CPUs during auto scaling

The maximum CPU cores that will be automatically allocated for this database is 16 CPUs

NEW QUESTION 23
A startup company is looking for a solution for processing of data transmitted by the IOT devices fitted to transport vehicles that carry frozen foods. The data should be consumed and processed in real time. The processed data should be archived to OCI Object Storage bucket. and use Autonomous Data warehouse (ADW) to handle analytics.
Which architecture will help you meet this requirement?

Use OCI Streaming Service to collect the incoming biometric data. Use an open source Hadoop cluster to analyze the data horn streaming service. Store the results to OCI Autonomous Data warehouse (ADW) to handle complex analytics

Use OCI Streaming Service to collect the incoming biometric data. Use Oracle Functions to process the date and show the results on a real-time dashboard and store the results lo OCI Object Storage Store the data In OCI Autonomous Data warehouse (ADW) to handle analytics.

Create an OCI Object Storage bucket to collect the incoming biometric data from the smart pet collar Fetch the data horn OC Object storage to OCI Autonomous Data Warehouse (ADW) every day and run analytics Jobs with it

Launch an open source Hadoop cluster to collect the Incoming biometrics data Use an Open source Fluentd cluster to analyze the- data me results to OCI Autonomous Transaction Processing (ADW)to handle complex analytics

NEW QUESTION 24
You are building a demo for a customer that showcases Oracle Cloud Infrastructure (OCI) Events service and Oracle Functions. You plan to create an event every time an image is uploaded to an OCI Object Storage bucket. You have also created a function that is listening to the event and processes the image for face recognition.
Choose the two actions from below that are NOT required to run the demo successfully.

You must specify an action type while creating an Event service and specify the function you want to trigger.

Creating an event rule is not permitted for OCI Object storage.

The function must be deployed only to Oracle Kubernetes Engine (OKE).

You have to enable Object Storage buckets to emit events for state changes.

You must deploy the function that does facial recognition for the demo to work.

NEW QUESTION 25
All three Data Guard Configuration are fully supported on Oracle Cloud infrastructure (OCI). You want to deploy a maximum availability architecture (MAA) for database workload.
Which option should you consider while designing your Data Guard configuration to ensure best RTO and PRO without causing any data loss?

Configure “Maximum Protection” mode which provides zero data loss If the primary database fails.

Configure “Maximum Performance” mode In SYNC mode between two availability domains (same region) which provides, the highest level of data protection that is possible without affecting the performance of the primary database.

Configure ”Maximum Scalability” mode which provides the highest level of scalability without compromising the availability of the primary database.

Configure ”Maximum Availability” mode in SYNC mode between two availability domains (same region), and use the Maximum Availability mode in SYNC mode between two regions.

NEW QUESTION 26
You work for a bank as the lead Oracle Cloud Infrastructure architect. You designed a highly scalable solution for your company’s banking application. The architecture includes a load balancer, application servers with autoscaling configuration based on CPU utilization, and an Autonomous Database with Transaction Processing workload type running in a Virtual Cloud Network (VCN).
During the peak utilization period, the application users complain that the application runs slow.
What are two possible reasons for the application running slow at times? (Choose two.)

The VCN does not have a Network Security Group configured to allow traffic from the load balancer to all the application servers in the backend set.

Instance pool in autoscaling configuration for the application servers did not scale out due to compartment quota breach of the VM shapes used by the application servers.

The load balancer is not configured correctly to send traffic to all the listeners of the application servers in the backend set.

Instance pool in autoscaling configuration for the Autonomous Database did not scale out due to misconfigured scaling policy.

Instance pool in autoscaling configuration for the application servers did not scale out due to service limit breach of the VM shapes used by the application servers.

NEW QUESTION 27
You are working with a customer who needs to attach an Oracle Cloud Infrastructure (OCI) block volume to a VM instance with read/write access type. The customer wants to know if the number of IOPS and throughput performance differs between the following two choices:
* Option A: attach a single 1 TB block volume to the VM instance
* Option B: attach two separate 500 GB block volumes In a RAID 0 array configuration to the VM instance You can assume that the customer is using iSCSI attachment type to attach the volumes to the instance. In addition, you can assume 1 MB block size for throughput and 4 KB block size for IOPS consideration.
How should you respond to the customer?

Option B provides higher level of throughput, but lower level of IOPS performance.

Both options provide the same number of IOPS and throughput performance.

Option A provides better IOPS, but lower throughput performance.

Option B provides better IOPS and throughput performance.

NEW QUESTION 28
You are tasked with migrating an online shopping website to Oracle Cloud Infrastructure (OCI) and decide to use a Load Balancer. You have configured the backend set with the round robin policy. During the testing phase, you noticed that users are losing items from their shopping carts when they navigate to different pages.
How should you implement a solution to this problem?

Set up a Traffic Management Steering Policy to redirect traffic to a different backend set that is deployed exclusively for the purpose of holding all Items placed in the shopping cart.

Configure a set of path route rules that will route to different backend sets based on the URI requested by the customer’s browser.

Replace the round robin policy with least connections policy at the backend set.

Set up session persistence at the Load Balancer backend set.

NEW QUESTION 29
You have been asked to review some network proposals by a major client. The client’s IT director needs to provision two Virtual Cloud Network (VCN) for a major application. Both applications use a large number of virtual machine instances, and so will ideally occupy VCNs with as many address spaces as possible. Additionally, in the future, VCN peering will be required to allow communication between the VCNs.
Which of the following are valid IP ranges to consider for the VCNs?

10.0.0.0/24 and 10.0.1.0/24

10.0.1.0/24 and 10.0.1.0/27

10.0.0.0/16 and 10.0.64.0/24

10.0.0.0/8 and 11.0.0.0/8

NEW QUESTION 30
You have configured backups for your Oracle Cloud Infrastructure (OCI) 2-node RAC DB systems on virtual machines. In the console, the database backup displays a Failed status.
Which of the following options is the most likely reason for this backup issue?

The master key stored in OCI Key Management for encryption and decryption of data in the database is not accessible to the backup service.

The auth token being used by the Object Store Swift endpoint is incorrect.

The allocated storage on the OCI File Storage service file system attached with the database is full.

The RMAN backup agent is not compatible with the version of database being used.

NEW QUESTION 31
An insurance company is storing critical financial data in the OCI block volume. This volume is currently encrypted using oracle managed keys. Due to regulatory compliance, the customer wants to encrypt the data using the keys that they can control and not the keys which are controlled by Oracle.
What of the following series of tasks are required to encrypt the block volume using customer managed keys?

Create a vault, import your master encryption key into the vault, generate data encryption key, assign data encryption key to the block volume

Create a master encryption key, create a data encryption key, decrypt the block volume using existing oracle managed keys, encrypt the block volume using the data encryption key

Create a vault, create a master encryption key in the vault, assign this master encryption key to the block volume

Create a master encryption key, create a new version of the encryption key, decrypt the block volume using existing oracle managed keys and encrypt using new version of the encryption key

NEW QUESTION 32
A hospital in Austin has hosted its web based medical records portal entirely In Oracle cloud Infrastructure (OCI) using Compute Instances for its web-tier and DB system database for its data tier. To validate compliance with Health Insurance Portability and Accountability (HIPAA), the security professional to check their systems it was found that there are a lot of unauthorized coming requests coming from a set of IP addresses originating from a country in Southeast Asia.
Which option can mitigate this type of attack?

Block the attacking IP address by creating by Network Security Group rule to deny access to the compute Instance where the web server Is running

Block the attacking IP address by implementing a OCI Web Application Firewall policy using Access Control Rules

Mitigate the attack by changing the Route fable to redirect the unauthorized traffic to a dummy Compute instance

Block the attacking IP address by creating a Security List rule to deny access to the subnet where the web server Is running

NEW QUESTION 33
A global media organization is working on a project which lets users upload their videos to the site. After upload is complete, the video should be automatically processed by an Al algorithm. The algorithm will try to recognize certain actions in the videos so that it can be used to show related advertisements in future. The development team wants to focus on writing Al code and not worry about underlying infrastructure for high availability, scalability, security and monitoring.
Which Oracle Cloud Infrastructure (OCI) services would meet these requirements?

OCI Object Storage, OCI Events service and OCI Functions.

Oracle Container Engine for Kubernetes, OCI Notifications and OCI Object Storage.

OCI Events, Oracle Container Engine for Kubernetes and OCI Digital Assistant.

OCI Resource Manager, OCI Functions and OCI Events service.

NEW QUESTION 34
You are part of a project team working in the development environment created in OCI. You have realized that the CIDR block specified for one of the subnet in a VCN is not correct and want to delete the subnet. While deleting you are getting an error indicating that there are still resources that you must delete first. The error includes the OCID of the VNIC that is in the subnet.
Which of the following action you will take to troubleshoot this issue?

Use OCI CLI to call “GetVnic” operation to find out the parent resource of the VNIC

Copy and Paste OCID of the VNIC in the search box of the OCI Console to find out the parent resource of the VNIC

Use OCI CLI to delete the VNIC first and then delete the subnet

Use OCI CLI to delete the subnet using –force option

NEW QUESTION 35
You are advising the database administrator responsible for managing non-production environment for Oracle Autonomous Database running on Oracle Cloud Infrastructure. You need to help the database administrator ensure that the non-production environments have a copy of the current data from the production environment in a manner that is most time-efficient.
Which method should you recommend? (Choose the best answer.)

Take a full database backup of the production Autonomous database and create the non-production database from it.

Create a metadata clone of the production Autonomous Database and create the non-production database from it.

Create a full clone of the production Autonomous Database and create the non-production database from it.

Take a Data Pump export of the production Autonomous database and import into the non-production database.

NEW QUESTION 36
You have created compartment called Dev for developers. There are two IAM groups for developers: group-devl and group-dev2. You need to write an Identity and Access Management (IAM) policy to give users in these groups access to manage all resources in the compartment Dev.
Which of the following IAM policy will accomplish this?

Allow any-user to manage all resources in compartment Dev where request.group= /group-dev*/

Allow group group-devl group-dev2 to manage all resources in compartment Dev

Allow group /group-dev*/ to manage all resources in compartment Dev

Allow any-user to manage all resources in tenancy where target.comparment= Dev

2022 Realistic 1z0-997-21 Dumps Exam Tips Test Pdf Exam Material [Q15-Q36]

Oracle 1z0-997-21 Exam Syllabus Topics:

admin

Leave a Reply Cancel reply

Oracle 1z0-997-21 Exam Syllabus Topics:

Related posts:

admin

You might also like

Leave a Reply Cancel reply