Oracle 1Z0-997-21 dumps - 100% Pass Guarantee!

You are working as a security consultant with a global insurance organization which is using Microsoft Azure Active Directory (AD) as identity provided to manager user login/passwords. When a user logs in to Oracle Cloud infrastructure (OCI) console, it should get authenticated by Azure AD. Which set of steps are required to configure at OCI side in order to get it enabled?

A. Setup Azure AD as an Enterprise Application, map Azure AD users and groups and policies to OCI groups and users

B. Setup Azure AD as an Identity Provider, Import users and groups from Azure AD to OCI, set up IAM policies to govern access to Azure AD groups

C. Setup Azure AD as an Enterprise Application, configure OCI for single sign-on, map Azure AD groups to OCI groups, set up the IAM policies to govern access to Azure AD groups

D. Setup Azure AD as an Identity Provider, map Azure AD groups to OCI groups, set up the IAM policies to govern access to Azure AD groups

An organization has its mission critical application consisting of multiple application servers and databases

running inside Virtual Cloud Network (VCN) in uk-london-1 region. Their solution architect wants to further

strengthen their architecture by planning for Disaster Recovery (DR) in eu-frankfurt- 1 region.

Which two solutions should their architect keep in mind while designing for DR?

A. A remote VCN peering connection is required to establish secure and reliable connectivity between different VCNs created in uk-london-1 and eu-frankfurt-1 region.

B. rsync utility can be used to asynchronously copy file systems or snapshot data to another region.

C. Load balancer will automatically distribute traffic between both the regions.

D. The RTO is the acceptable timeframe of lost data that application can tolerate.

E. It is not possible to use Active Data Guard to synchronize a database in uk-london-1 region to equivalent database in eu-frankfurt-1 region.

Your organization is planning on using Oracle Cloud Infrastructure (OCI) File Storage Service (FSS). You will be deploying multiple compute instance in Oracle Cloud Infrastructure(OCI) and mounting the file system to these compute instances. The file system will hold payment data processed by a Database instance and utilized by compute instances to create a overall inventory report. You need to restrict access to this data for specific compute instances and must be allowed/blocked per compute instance's CIDR block. Which option can you use to secure access?

A. Create a new VCN security list, choose SOURCE TYPE as Service and SOURCE SERVICE as FSS. Add stateless ingress and egress rules for specific IP address and CIDR blocks.

B. Use 'Export option' feature of FSS to restrict access to the mounted file systems.

C. Create and configure OCI Web Application Firewall service with built in DNS based intelligent routing.

D. Use stateless Security List rule to restrict access from known IP addresses only.

You are building a demo for a customer that showcases Oracle Cloud Infrastructure (OCI) Events service and Oracle Functions. You plan to create an event every time an image is uploaded to an OCI Object Storage bucket. You have also created a function that is listening to the event and processes the image for face recognition. Choose the two actions from below that are NOT required to run the demo successfully.

A. You must specify an action type while creating an Event service and specify the function you want to trigger.

B. Creating an event rule is not permitted for OCI Object storage.

C. The function must be deployed only to Oracle Kubernetes Engine (OKE).

D. You have to enable Object Storage buckets to emit events for state changes.

E. You must deploy the function that does facial recognition for the demo to work.

Many development engineers are deploying new instances as part of their projects in Oracle Cloud Infrastructure tenancy, but majority of these instances have not been tagged. You as an administrator of this tenancy want to enforce tagging to identify owners who are launching these instances. Which option below should be used to implement this requirement?

A. Create a predefined tag with tag variables to automatically tag a resource with usemame.

B. Create a default tag for each compartment which ensure appropriate tags are allowed at resource creation.

C. Create tag variables for each compartment to automatically tag a resource with user name.

D. Create an IAM policy to automatically tag a resource with the usemame.