Check Real Oracle 1z0-997-21 Exam Question for Free (2022) [Q16-Q33]

Topic	Details
Topic 1	Design, implement and operate databases in OCI Migrate on-premises workloads to OCI Operate and troubleshoot solutions on OCI
Topic 2	Manage infrastructure using OCI CLI, APIs and SDKs Plan and design solutions in Oracle Cloud Infrastructure (OCI)
Topic 3	Design and implement hybrid network architectures to meet high availability, bandwidth and latency requirements Implement and operate solutions in OCI
Topic 4	Design, implement and operate solutions for security and governance Implement solutions to meet business and technical requirements
Topic 5	Design for Security and Compliance Evaluate and implement databases Operate and troubleshoot databases
Topic 6	Evaluate multi-cloud solution architectures Conduct Monitoring, observability and alerting in OCI

QUESTION 16
You are part of a project team working in the development environment created in Oracle Cloud Infrastructure (OCI). You realize that the CIDR block specified for one of the subnets in a Virtual Cloud Network (VCN) is not correct and want to delete the subnet. While deleting you get an error indicating that there are still resources that you must delete first. The error includes the OCID of the VNIC that is in the subnet.
Which of the following action you will take to troubleshoot this issue?

Use OCI CLI to call “network vnic” and “compute vnic-attachment” operations to find out the parent resource of the VNIC.

Use OCI CLI to delete the VNIC first and then delete the subnet.

Use OCI CLI to delete the subnet using -force option.

Copy and paste OCID of the VNIC in the search box of the OCI Console to find out the parent resource of the VNIC.

QUESTION 17
Which three scenarios are suitable for the Oracle Infrastructure (OCI) Autonomous transaction Processing Server less (ATP-S) deployment?

well established, online auction marketplace is running an application where there is database usage 24*7 but also has peaks of activity that the hard to predict when the peaks happen, the total activities may reach 3 times the normal activity level (Correct)

A small startup is deploying a new application fen eCommerce and it requires database to store customers’ transactions the team b of what the load will look like since it is a new application. (Correct)

A midsize company is considering migrating its legacy on premises MongoDB database to Oracle Cloud Infrastructure (OCI). The database has significantly higher workloads on weekends than weekdays

A developer working on an Internal project needs to use a database during work hours but doesn’t need It during nights or weekends. the project budget requires her to keep costs low. (Correct)

A manufacturing company is running Oracle E-Business Suite application on premises. They are looking to move this application to OCI and they want to use a managed database offering for their database tier.

QUESTION 18
You are working as a solution architect with a global automotive provider who is looking to create a multi-cloud solution. They want to run their application tier in Microsoft Azure while utilizing the Oracle DB Systems in the Oracle Cloud Infrastructure (OCI).
What is the most-fault tolerant and secure solution for this customer? (Choose the best answer.)

Deploy the Oracle database system into a public subnet in your VCN and assign a public IP address. Connect your application tier running in Azure to the public IP address of the database system over the internet.

Create a FastConnect virtual circuit with Microsoft Azure as the provider to establish a private interconnect between the application tier running in the Azure Virtual Network and the OCI VCN that contains the Oracle Databases.

Create an encrypted, Virtual Private Network connection between the Microsoft Azure Virtual Network that contains the application tier and the OCI Virtual Cloud Network (VCN) that contains the Oracle Databases.

Use an OCI Virtual Cloud Network remote peering connection to create a remote network connection between the application tier running in Microsoft Azure Virtual Network and Oracle Databases running in the OCI Virtual Cloud Network (VCN).

QUESTION 19
An insurance company is storing critical financial data in the OCI block volume. This volume is currently encrypted using oracle managed keys. Due to regulatory compliance, the customer wants to encrypt the data using the keys that they can control and not the keys which are controlled by Oracle.
What of the following series of tasks are required to encrypt the block volume using customer managed keys?

Create a vault, import your master encryption key into the vault, generate data encryption key, assign data encryption key to the block volume

Create a master encryption key, create a data encryption key, decrypt the block volume using existing oracle managed keys, encrypt the block volume using the data encryption key

Create a vault, create a master encryption key in the vault, assign this master encryption key to the block volume

Create a master encryption key, create a new version of the encryption key, decrypt the block volume using existing oracle managed keys and encrypt using new version of the encryption key

QUESTION 20
Which three scenarios are suitable for the Oracle Infrastructure (OCI) Autonomous transaction Processing Server less (ATP-S) deployment?

well established, online auction marketplace is running an application where there is database usage 24*7 but also has peaks of activity that the hard to predict when the peaks happen, the total activities may reach 3 times the normal activity level

A small startup is deploying a new application fen eCommerce and it requires database to store customers’ transactions the team b of what the load will look like since it is a new application.

A midsize company is considering migrating its legacy on premises MongoDB database to Oracle Cloud Infrastructure (OCI). The database has significantly higher workloads on weekends than weekdays

A developer working on an Internal project needs to use a database during work hours but doesn’t need It during nights or weekends. the project budget requires her to keep costs low.

A manufacturing company is running Oracle E-Business Suite application on premises. They are looking to move this application to OCI and they want to use a managed database offering for their database tier.

QUESTION 21
An online Stock trading application is deployed to multiple Availability Domains in the us phoenix-1 region. Considering the high volume of transactions that the trading application handles, the company has hired you to ensure that the data stored by the application available, and disaster resilient. In the event of failure, the Recovery lime Objective (UK)) must be less than 2 hours to meet regulator requirements.
Which Disaster Recovery strategy should be used to achieve the RTO requirement In the event of system failure?

Configure hourly block volumes backups through the Storage Gateway service.

Configure hourly block volumes backups using the Oracle Cloud Infrastructure (OCI) Command Line Interface (CLI)

Store hourly block volumes backup to NVMe device under a compute instance and generate a custom Image every 5 minutes.

Configure your application to use synchronous master slave data replication between Availability Domains.

QUESTION 22
You developed a microservices based application that runs on Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE). Your security team wants to use SSL termination for this application. What should you do to create a secure SSL termination for this application using fewest steps?

Create a self-signed certificate and it’s corresponding key. Create a Kubernetes secret using the certificate and the key. Then add these an notations to the Kubernetes service:
annotations:
service.beta.kubernetes.io/oci-load-balancer-ssl-ports: “443”
service.beta.kubernetes.io/oci-load-balancer-security-list-management-mode:”Frontend”

Generate a self-signed certificate using Let’s Encrypt. Use that certificate on OCI Load Balancer. Create the Kubernetes service usingthis load balancer.

Add these annotationsto the Kubernetes service:
annotations:
service.beta.kubernetes.io/oci-load-balancer-ssl-ports: “443”
service.beta.kubernetes.io/oci-load-balancer-ssl-secret-key: ssl-secret-key

Create a self-signed certificate and it’s corresponding key. Create a Kubernetes secret using then add these annotationsto the Kubernetes service.
Service.beta.kubernete.io/oci-load-balancer-ssl-ports: “443”
Service.beta.kubernete.io/oci-load-balancer-tls-secret:SSL-CERTIFICATE-SECRET

QUESTION 23
You are advising the database administrator responsible for managing non-production environment for Oracle Autonomous Database running on Oracle Cloud Infrastructure. You need to help the database administrator ensure that the non-production environments have a copy of the current data from the production environment in a manner that is most time-efficient.
Which method should you recommend? (Choose the best answer.)

Take a full database backup of the production Autonomous database and create the non-production database from it.

Create a metadata clone of the production Autonomous Database and create the non-production database from it.

Create a full clone of the production Autonomous Database and create the non-production database from it.

Take a Data Pump export of the production Autonomous database and import into the non-production database.

QUESTION 24
Your organization is planning on using Oracle Cloud Infrastructure (OCI) File Storage Service (FSS). You will be deploying multiple compute instance in Oracle Cloud Infrastructure(OCI) and mounting the file system to these compute instances.
The file system will hold payment data processed by a Database instance and utilized by compute instances to create a overall inventory report. You need to restrict access to this data for specific compute instances and must be allowed/blocked per compute instance’s CIDR block.
Which option can you use to secure access?

Create a new VCN security list, choose SOURCE TYPE as Service and SOURCE SERVICE as FSS. Add stateless ingress and egress rules for specific IP address and CIDR blocks.

Use ‘Export option’ feature of FSS to restrict access to the mounted file systems.

Create and configure OCI Web Application Firewall service with built in DNS based intelligent routing.

Use stateless Security List rule to restrict access from known IP addresses only.

QUESTION 25
You are trying to troubleshoot the configuration of your Oracle Cloud Infrastructure (OCI) Load Balancing service. You have a backend HTTP service for which you have created a backend set in the load balancer. You have configured health checks for the backend set. Although the health checks appear good, customers sometimes experience transaction failures.
Which of the following options will definitely lead to this problem?

You are NOT using regional subnets in your Virtual Cloud Network. With Availability Domain (AD) specific subnet. the compute instances of the backend service running in the subnet have issues when the AD is down.

You are using OCI Domain Name System. You have misconfigured the ‘A’ record with the wrong IP address leading to requests not getting routed correctly.

You are using iSCI for block volume attachment to the compute instances in your backed HTTP service. TCP/IP configuration of your block volume attachment is not configured correctly, leading to issues in your backend service.

You are running a TCP-level health check against your HTTP service. The TCP handshake can succeed and indicate that the service is up even when the HTTP service has issues.

QUESTION 26
An insurance company is storing critical financial data in the Oracle Cloud Infrastructure block volume. This volume is currently encrypted using oracle managed keys. Due to regulatory compliance, the customer wants to encrypt the data using the keys that they can control and not the keys which are controlled by Oracle.
What of the following series of tasks are required to encrypt the block volume using customer managed keys?

Create a master encryption key, create a data encryption key, decrypt the block volume using existing oracle managed keys, encrypt the block volume using the data encryption key.

Create a vault import your master encryption key into the vault, generate data encryption key, assign data encryption key to the block volume.

Create a master encryption key, create a new version of the encryption key, decrypt the block volume using existing oracle managed keys and encrypt using new version of the encryption key.

Create a vault, create a master encryption key in the vault, assign this master encryption key to the block volume.

QUESTION 27
You developed a microservices based application that runs on Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE). It has multiple endpoints that needs to be exposed to the public internet.
What Is the most cost-effective way to expose multiple application endpoints without adding complexity to the application?

Use clusterlP service type in Kubernetesfor each of yourservice endpointand use a load balancerto expose the endpoints.

Use separate load balancerinstancefor each service but use the 100 Mbps loadbalanceroption.

Deploy an Ingress controllerand use it to expose each endpointwith its own routing endpoint.

Use NodePort service type in Kubernetesfor each of yourservice endpointand use node’s public IP address to acccess the applications.

QUESTION 28
Which three options are available to migrate an Oracle database 12.x from an on-premises environment to Oracle Cloud Infrastructure (OCI)?

Leverage OCI Storage Gateway asynchronous database migration option.

Use Oracle Data Pump Export/Import to migrate the database.

Configure RMAN cross-platform transportable tablespace backup sets.

Setup OCI schema and data transfer tool with Bare Metal DB Systems as the target.

Create a backup of your on-premises database In OCI DB Systems.

QUESTION 29
Which of the following is NOT a good use case for the volume backup feature of the Oracle Cloud Infrastructure Block Volume service?

Support business continuity requirements of reducing the risk of outages or data mutation over time.

Meet compliance and regulatory requirements for data to remain unchanged over time, so that it can be retrieved for audit purposes.

Rapidly duplicate an environment in seconds to test configuration changes without impacting your production environment.

Retain a copy of data in a volume, so that you can duplicate an environment later or preserve the data for future use.

QUESTION 30
Your customer has gone through a recent departmental re structure. As part of this change, they are organizing their Oracle Cloud Infrastructure (OCI) compartment structure to align with the company’s new organizational structure.
They have made the following change:
Compartment x Is moved, and its parent compartment is now compartment c.

Policy defined in compartment A: Allow group networkadmins to manage subnets in compartment X Policy defined in root compartment: Allow group admins to read subnets in compartment Finance:A:X After you move the compartment, which two IAM policies would be required to ensure both groups retain the same permissions to compartment X that they had before? (Choose two.)

Define a policy in the root compartment as follows: Allow group admins to manage subnets in compartment Finance:A:X

Define a policy in compartment HR as follows: Allow group networkadmins to manage subnets in compartment C:X.

Define a policy in the root compartment as follows: Allow group admins to read subnets in compartment HR:C:X

Define a policy in compartment C as follows: Allow group networkadmins to read subnets in compartment X

QUESTION 31
All three Data Guard Configuration are fully supported on Oracle Cloud infrastructure (OCI). You want to deploy a maximum availability architecture (MAA) for database workload.
Which option should you consider while designing your Data Guard configuration to ensure best RTO and PRO without causing any data loss?

Configure “Maximum Protection” mode which provides zero data loss If the primary database fails.

Configure “Maximum Performance” mode In SYNC mode between two availability domains (same region) which provides, the highest level of data protection that is possible without affecting the performance of the primary database.

Configure ”Maximum Scalability” mode which provides the highest level of scalability without compromising the availability of the primary database.

Configure ”Maximum Availability” mode in SYNC mode between two availability domains (same region), and use the Maximum Availability mode in SYNC mode between two regions.

QUESTION 32
A company has an application that processes confidential dat
a. The data is currently stored in an on-premises data center. A solution architect needs to move this data to Oracle Cloud Infrastructure (OCI) Object Storage and ensure data is encrypted in-transit to OCI.
Which two steps should the solution architect perform to set up the most cost-effective connection between on-premises data center and OCI?

Set up private end point for accessing Object Storage.

Attach an Internet Gateway to Virtual Cloud network(VCN).

Configure a service gateway accessing Object Storage.

Set up an IPsec tunnel between the customer equipment and software VPN on an oci instance

Configure a private peering connection on the Oracle FastConnect

Set up VPN Connect between the customer equipment and the Dynamic Routing Gateway.

QUESTION 33
You are using the Oracle Cloud Infrastructure (OCI) OS Management service to manage updates and patches for the Oracle Linux 8 environments on your compute instances in OCI. You have verified that the OS Management Service Agent (osms-agent) is installed and running properly in the instances.
One of the compute instances is not getting the updates from OS Management Service. You use the following command to validatethatyourinstance cannot reach the OS Management Ingestion service by running curl https://ingestion.osms.
<region>.oci.oraclecloud.com/
Which Is NOT a possible reason for this issue?

The instance Is in a private subnet with a NAT gateway.

The instance is in a private subnet with a privateendpointwith security rules configured to access the OS Managementingestion service

The instance is in a private subnet with a service gatewaythat uses the All <region> Services in Oracle Services Network CIDR label.

The Instance is in a publicsubnet with an Internet gateway.

Free certification test prep

Check Real Oracle 1z0-997-21 Exam Question for Free (2022) [Q16-Q33]

Oracle 1z0-997-21 Exam Syllabus Topics:

Leave a Reply Cancel reply