[Feb-2023] Oracle 1z0-997-22 Exam Basic Questions With Answers [Q73-Q92]

Topic	Details
Topic 1	Create architecture patterns including N-tier applications, microservices, and serverless architectures Implement and troubleshoot database migrations
Topic 2	Design, implement and operate solutions for security and governance Plan and design solutions in Oracle Cloud Infrastructure (OCI)
Topic 3	Design, implement and operate solutions to meet compliance requirements Design scalable and elastic solutions for high availability and disaster recovery
Topic 4	Manage infrastructure using IaC, OCI CLI, APIs and SDKs Design and implement hybrid network architectures to meet high availability, bandwidth and latency requirements

QUESTION 73
You are using the Oracle Cloud Infrastructure (OCI) OS Management service to manage updates and patches for the Oracle Linux 8 environments on your compute instances in OCI. You have verified that the OS Management Service Agent (osms-agent) is installed and running properly in the instances.
One of the compute instances is not getting the updates from OS Management Service. You use the following command to validatethatyourinstance cannot reach the OS Management Ingestion service by running curl https://ingestion.osms.
<region>.oci.oraclecloud.com/
Which Is NOT a possible reason for this issue?

The instance Is in a private subnet with a NAT gateway.

The instance is in a private subnet with a privateendpointwith security rules configured to access the OS Managementingestion service

The instance is in a private subnet with a service gatewaythat uses the All <region> Services in Oracle Services Network CIDR label.

The Instance is in a publicsubnet with an Internet gateway.

QUESTION 74
A manufacturing company is planning to migrate their on-premises database to OCI and has hired you for the migration. Customer has provided following information regarding their existing onpremises database:
Database version, host operating system and version, database character set, storage for data staging, acceptable length of system outage.
What additional information do you need from customer in order to recommend a suitable migration method? Choose two

Elapsed time since database was last patched

On-premises host operating system and version

Number of active connections

Data types used in the on-premises database

Top 5 longest running queries

QUESTION 75
Your security team has informed you that there are a number of malicious requests for your web application coming from a set of IP addresses originating from a country in Europe.
Which of the following methods can be used to mitigate these type of unauthorized requests?

Web Application Firewall policy using access control rules

Deny rules in Virtual Cloud Network Security Group for the specific set of IP addresses.

Delete Internet Gateway from Virtual Cloud Network.

Deny rules in Virtual Cloud Network Security Lists for the specific set of IP addresses.

QUESTION 76
An E-commerce company which sells computers, tablets, and other electronics items has recently decided to move all of their on-premises infrastructure to Oracle Cloud Infrastructure (OCI). One of their on-premises application is running on an NGINX server and the Oracle Database is running in a 2 node Oracle Real Application Clusters (RAC) configuration.
They cannot afford to have any application down time when they do the migration.
What is an effective mechanism to migrate the customer application to OCI and set up regular automated backups?

Launch a compute instance and run an NGINX server to host the application. Deploy a 2 node VM DB Systems with Oracle RAC enabled. Import the on-premises database to OCI VM DB Systems using Oracle Data Pump and then enable automatic backups.

Launch a compute instance for both the NGINX application server and the database server. Attach block volumes on the database server compute instance and enable backup policy to backup the block volumes.

Launch a compute instance and run an NGINX server to host the application. Deploy Exadata Quarter Rack, enable automatic backups and import the database using Oracle Data Pump.

Launch a compute instance and run an NGINX server to host the application. Deploy a 2 node VM DB Systems with Oracle RAC enabled. Setup Oracle GoldenGate to synchronize data from their on-premises database to OCIVM Database. Export and Import the on-premises database to OCIVM DB Systems using Oracle Data Pump, apply the GoldenGate trail files to sync up the OCI database with the on-premises database. Enable automatic backups for the OCIVM database and then cutoverthe application from on-premises to OCI.

QUESTION 77
An OCI Architect is working on a solution consisting of analysis of data from clinical trials of a pharmaceutical company. The data is being stored in OCI Autonomous Data Warehouse (ADW) having 8 CPU Cores and 70 TB of storage. The architect is planning to setup autoscaling to respond to dynamic changes in the workload.
Which of the following needs to be considered while configuring auto scaling? Choose two

Enabling auto scaling does not change the concurrency and parallelism settings

Auto scaling also scales IO throughput linearly along with CPU

The database memory SGA and PGA will not get affected by the changes in the number of CPUs during auto scaling

The maximum CPU cores that will be automatically allocated for this database is 16 CPUs

QUESTION 78
You are tasked with building a highly available, fault tolerant web application for your current employer. The security team is concerned about an increase in malicious web-based attacks across the internet and asked what you can do to add a higher level of security to the website.
How should you architect the solution on Oracle Cloud Infrastructure (OCI) to meet all requirements defined by your organization? (Choose the best answer.)

Deploy at least 3 web application servers, each in a different fault domain, using a regional private subnet. Place a public load balancer in a regional public subnet and create a backend set for all of the web application servers. Deploy a Web Application Firewall (WAF) and configure the load balancer public IP address as the origin.

Deploy at least 3 web application servers, each in a different fault domain, using a regional private subnet. Place a public load balancer in a regional public subnet and create a backend set for all of the web application servers. Create a Geolocation steering policy in Traffic Management and add an answer pool that directs to the public IP address of the load balancer. Configure a global catch-all rule to use this answer pool.

Deploy at least 3 web application servers, each in a different fault domain, using a regional public subnet. Ensure that each web application server is assigned a public IP address. Deploy a Web Application Firewall (WAF) and configure one Origin for each public IP address.

Deploy at least 3 web application servers, each in a different fault domain, using a regional public subnet. Use the OCI Traffic Management service to create a load balancing policy that will resolve DNS evenly between all web servers.

QUESTION 79
A data analytics company has been building Its now generation big data and analytics platform on Oracle Cloud Infrastructure (OCI). They need a storage service that provide the scale and performance that their big data applications require such as high throughput to compute nodes with low latency file operations in addition, their data needs to be stored redundantly across multiple nodes In a single availability domain and allows concurrent connections from multiple compute Instances hosted on multiple availability domains.
Which OCI storage service can you use to meet i his requirement?

Object Storage

File System Storage

Archive storage

Block Volume

QUESTION 80
You are working with a customer who needs to attach an Oracle Cloud Infrastructure (OCI) block volume to a VM instance with read/write access type. The customer wants to know if the number of IOPS and throughput performance differs between the following two choices:
* Option A: attach a single 1 TB block volume to the VM instance
* Option B: attach two separate 500 GB block volumes In a RAID 0 array configuration to the VM instance You can assume that the customer is using iSCSI attachment type to attach the volumes to the instance. In addition, you can assume 1 MB block size for throughput and 4 KB block size for IOPS consideration.
How should you respond to the customer?

Option B provides higher level of throughput, but lower level of IOPS performance.

Both options provide the same number of IOPS and throughput performance.

Option A provides better IOPS, but lower throughput performance.

Option B provides better IOPS and throughput performance.

QUESTION 81
You have been asked to create a mobile application which will be used for submitting orders by users of a popular E-Commerce site. The application is built to work with Autonomous Transaction Processing – Serverless (ATP-S) database as the backend and HTML5 on Oracle Application Express as the front end. During the peak usage of the application you notice that the application response time is very slow. ATP-S database is deployed with 3 CPU cores and 1 TB of memory.
Which two options are expensive or impractical ways to improve the application response times?

Identify the maximum memory capacity needed for peak times and scale the memory for the ATP-S database to that number. ATP-S will scale the memory down when not needed.

Use the Machine Learning (ML) feature of the ATP-S database iteratively to tune the SQL queries used by the application.

Scale up CPU core count and memory during peak times.

Enable auto scaling for CPU cores on ATP-S database.

Identify the maximum CPU capacity needed for peak times and scale the CPU core count for the ATP-S database to that number. ATP-S will scale the CPU core count down when not needed.

QUESTION 82
You are working as a solution architect for a customer in Frankfurt, which uses multiple compute instance VMs spread among three Availability Domains in the Oracle Cloud Infrastructure (OCI) eu-frankfurt-1 region. The compute instances do not have public IP addresses and are running in private subnets inside a Virtual Cloud Network (VCN). You have set up OCI Autoscaling feature for the compute instances, but find out that instances cannot be auto scaled. You have enabled monitoring on the instances.
What could be wrong in this situation?

You need to assign a reserved public IP address to the compute instances.

You need to set up a Service Gateway to send metrics to the OCI Monitoring service.

Autoscaling only works for instances with public IP addresses.

Autoscaling only works with single availability domains.

QUESTION 83
You work for a large bank where security and compliance are critical. As part of the security overview meeting, your company decided to minimize the installation of local tools on your laptop. You have been running Ansible and kubectl to spin up Oracle Container Engine for Kubernetes (OKE) clusters and deployed your application.
For authentication, you are using an Oracle Cloud Infrastructure (OCI) CLI config file that contains OCIDs, Fingerprint, and a locally stored PEM file. Your security team doesn’t want you to store any local API key and certificate, or any other local tools.
Which two actions should you perform to spin up the OKE cluster and interact with it? (Choose two.)

Create a developer workstation on OCI. Install Ansible and kubectl on it. Use resource principal to authenticate against OCI API and create the OKE Cluster.

Develop your own code using OCI SDK to deploy the OKE cluster.

Work on OCI Cloud Shell to use built-in Ansible and kubectl to deploy the OKE cluster. Use OCI_CLI_AUTH=instance_obo_user environment variable to authenticate using built-in token.

Work on OCI Cloud Shell to use built-in Ansible and kubectl to deploy the OKE cluster. Bring in your own config file and certificate to authenticate against OCI API.

Create a developer workstation on OCI. Install Ansible and kubectl on it. Use instance principal to authenticate against OCI API and create the OKE Cluster.

QUESTION 84
You work for a retail company and they developed a Microservices based shopping application that needs to access Oracle Autonomous Database from the application. As an Architect, you have been tasked to treat all of the application components as Kubernetes native objects, such as the microservices, Oracle Autonomous database, Kubernetes services, etc.
What should you do to make sure that you can use Kubernetes constructs to manage the life cycle of the application components, including Oracle Autonomous Database? (Choose the best answer.)

Create an Oracle Cloud Infrastructure (OCI) Service Gateway and connect to the Oracle Autonomous Database using the private IP address from the microservice.

Provision an Oracle Autonomous Database and then use OCI Service Broker to access the database as a native component to your Kubernetes cluster.

Create a service from the Kubernetes cluster and point to the Oracle Autonomous Database using its FQDN.

Install and secure the OCI Service Broker for Kubernetes. Then provision and bind to the required Oracle Cloud Infrastructure services.

QUESTION 85
You have decided to migrate your application to Oracle Cloud Infrastructure and use Oracle Functions to deploy your microservices.
Which monitoring metrics are available to help you calculate your total cost for using Oracle Functions per month? (Choose Two)

Amount of RAM used by your functions.

Length of time a function runs.

Number of times a function is invoked.

Amount of storage used by your functions.

Network bandwidth used by your functions.

QUESTION 86
You are working as a cloud engineer for an IoT startup company which is developing a health monitoring pet collar for dogs and cats. The company collects biometric Information of the pet every second and then sends it to Oracle Cloud Infrastructure (OCI) Your task is to come up with an architecture which will accept and process the monitoring data as well as provide complete trends and health reports to the pet owners. The portal should be highly available, durable, and scalable with an additional feature for showing real time biometric data analytics.
which architecture will help you meet this requirement?

Use OCI Streaming Service to collect the incoming biometric data. Use Oracle Functions to process the date and show the results on a real-time dashboard and store the results lo OCI Object Storage Store the data In OCI Autonomous Data warehouse (ADW) to handle analytics.

Launch an open source Hadoop cluster to collect the Incoming biometrics data Use an Open source Fluentd cluster to analyze the- data me results to OCI Autonomous Transaction Processing (ADW)to handle complex analytics

Create an OCI Object Storage bucket to collect the incoming biometric data from the smart pet collar Fetch the data horn OC Object storage to OCI Autonomous Data Warehouse (ADW) every day and run analytics Jobs with it

Use OCI Streaming Service to collect the incoming biometric data. Use an open source Hadoop cluster to analyze the data horn streaming service. Store the results to OCI Autonomous Data warehouse (ADW) to handle complex analytics.

QUESTION 87
A global retailer is setting up the cloud architecture to be deployed in Oracle Cloud infrastructure (OCI) which will have thousands of users from two major geographical regions: North America and Asia Pacific. The requirements of the services are:
* Service needs to be available 27/7 to avoid any business disruption
* North American customers should be served by application running In North American regions
* Asia Pacific customers should be served by applications running In Asia Pacific regions
* Must be resilient enough to handle the outage of an entire OCI region

OCl DNS, Traffic Management with Failover steering policy

OCl DNS, Traffic Management with Geolocation steering policy. Health Checks

OCl DNS, Traffic Management with Geolocation steering policy

OCl DNS,’ Traffic Management with Load Balancer steering policy, Health Checks

QUESTION 88
You developed a microservices based application that runs on Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE). Your security team wants to use SSL termination for this application. What should you do to create a secure SSL termination for this application using fewest steps?

Create a self-signed certificate and it’s corresponding key. Create a Kubernetes secret using the certificate and the key. Then add these an notations to the Kubernetes service:
annotations:
service.beta.kubernetes.io/oci-load-balancer-ssl-ports: “443”
service.beta.kubernetes.io/oci-load-balancer-security-list-management-mode:”Frontend”

Generate a self-signed certificate using Let’s Encrypt. Use that certificate on OCI Load Balancer. Create the Kubernetes service usingthis load balancer.

Add these annotationsto the Kubernetes service:
annotations:
service.beta.kubernetes.io/oci-load-balancer-ssl-ports: “443”
service.beta.kubernetes.io/oci-load-balancer-ssl-secret-key: ssl-secret-key

Create a self-signed certificate and it’s corresponding key. Create a Kubernetes secret using then add these annotationsto the Kubernetes service.
Service.beta.kubernete.io/oci-load-balancer-ssl-ports: “443”
Service.beta.kubernete.io/oci-load-balancer-tls-secret:SSL-CERTIFICATE-SECRET

QUESTION 89
You are working as a solutions architect for an online retail store In Frankfurt which uses multiple compute instance VMs spread among three availability domains In the eu-frankfurt-1 region.
You noticed the website Is having very high traffic, so you enabled autoscaling to sun tee me no f your application but, you observed that one of the availability domains is not receiving any traffic.
What could be wrong In this situation?

Autoscaling only works with single availability domains.

You have to manually acid all three availability domains to your load balancer configuration.

Autoscaling can be enabled for multiple availability domains only in uk-london t region.

Autoscaling is using an Instance Pool configured to create instances in two availability Domains.

You forgot to attach a load balancer to your instance pool configuration.

Autoscaling lets you automatically adjust the number of Compute instances in an instance pool based on performance metrics such as CPU utilization. This helps you provide consistent performance for your end users during periods of high demand, and helps you reduce your costs during periods of low demand.
you can associate a load balancer with an instance pool. If you do this, when you add an instance to the instance pool, the instance is automatically added to the load balancer’s backend set . After the instance reaches a healthy state (the instance is listening on the configured port number), incoming traffic is automatically routed to the new instance.
Instance pools let you provision and create multiple Compute instances based off the same configuration, within the same region.
By default, the instances in a pool are distributed across all fault Domains in a best-effort manner based on capacity. If capacity isn’t available in one fault domain, the instances are placed in other fault domains to allow the instance pool to launch successfully.
In a high availability scenario, you can require that the instances in a pool are evenly distributed across each of the fault domains that you specify. When sufficient capacity isn’t available in one of the fault domains, the instance pool will not launch or scale successfully, and a work request for the instance pool will return an “out of capacity” error. To fix the capacity error, either wait for capacity to become available, or use the UpdateInstancePool operation to update the placement configuration (the availability domain and fault domain) for the instance pool.
during create the instance pool you can select the location where you want to place the instances” In the Availability Domain list, select the availability domain to launch the instances in.
If you want the instances in the pool to be placed evenly in one or more fault domains, select the Distribute instances evenly across selected fault domains check box. Then, select the fault domains to place the instances in.

QUESTION 90
You have deployed a web application targeting a global audience across multiple Oracle Cloud Infrastructure (OCI) regions.
You decide to use Traffic Management Geo-Location based Steering Policy to serve web requests to users from the region closets to the user. Within each region you have deployed a public load balancer with 4 servers in a backend set. During a DR test disable all web servers in one of the regions however, traffic Management does not automatically direct all users to the other region.
Which two are possible causes?

You did not setup a Route Table associated with load Balancer’s subnet

You did not setup an HTTP Health Check associated with Load Balancer public IP in the disabled region.

Rather than using Geo-Location based Steering Policy, you should use Failover Policy Type to serve traffic.

One of the two working web servers In the other region did not pass Its HTTP health check

You did not correctly setup the Load Balancer HTTP health check policy associated with backend set

QUESTION 91
A company has an application that processes confidential dat
a. The data is currently stored in an on-premises data center. A solution architect needs to move this data to Oracle Cloud Infrastructure (OCI) Object Storage and ensure data is encrypted in-transit to OCI.
Which two steps should the solution architect perform to set up the most cost-effective connection between on-premises data center and OCI?

Set up private end point for accessing Object Storage.

Attach an Internet Gateway to Virtual Cloud network(VCN).

Configure a service gateway accessing Object Storage.

Set up an IPsec tunnel between the customer equipment and software VPN on an oci instance

Configure a private peering connection on the Oracle FastConnect

Set up VPN Connect between the customer equipment and the Dynamic Routing Gateway.

QUESTION 92
A customer is in a process of shifting their web based Sales application from their own data center located in US West to OCI India West (Mumbai) region. They want to do it in a controlled manner and initially only 1% of the traffic will be steered to the servers in OCI. After verification of everything is working as expected, the company is gradually planning to increase the ratio until they are comfortable with fully migrating all traffic to OCI.
Which of the following solution can be used in this situation?

OCI DNS and Traffic Management with Geolocation Steering policy

OCI DNS and Traffic Management with Failover Steering policy

OCI DNS and Traffic Management with Load Balancer Steering policy

OCI DNS and OCI Load Balancer Service