1Z0-997 Online Practice Questions and Answers

You are working as a solution architect for an online retail store to create a portal to allow the users to pay for their groceries using credit cards. Since the application is not fully compliant with the Payment Card Industry Data Security Standard (PCI DSS), your company is looking to use a third party payment service to process credit card payments. The third party service allows a maximum of Spelunk IP addresses 5 public IP addresses at a time However, your website is using Oracle Cloud Infrastructure (OCI) Instance Pool Auto Scaling policy to create up to create up to 15 Instances during peak traffic demand, which are launched In VCN private in VCN private subnets and attached to an OCI public Load Balancer. Upon user payment, the portal connects to the payment service over the Interne! to complete the transaction What solution can you implement to make sure that all compute Instances can connect to the third party system to process the payments aw peak traffic demand?

A. Route credit card payment request from the compute instances through the NAT Gateway. On the third-party services, whitest the public IP associated with the NAT Gateway.

B. Whitelist the Internet Gateway Public IP on the third party service and route all payment requests through the Internet Gateway.

C. Create an OCI Command Line Interface (CLI) script to automatically reserve public IP address for the compute instances. On the third services, whitelist the Reserved public IP.

D. Route payment request from the compute instances through the OCI Load Balancer, which will then be routed to the third party service.

Your customer recently ordered for a 1-Gbps Fast Connect connection In ap-tokyo-1 region of Oracle Cloud Infrastructure (OCI). They will us this to one Virtual cloud Network (VCN) in their production (OC1) tenancy and VCN In their development OC1 tenancy As a Solution Architect, how should yon configure and architect the connectivity between on premises and VCNs In OCI?

A. Create two private virtual circuits on the FastConnect link. Create two Dynamic Routing Gateways, one for each VCNs. Attach the virtual circuits to the dynamic routing gateways.

B. You cannot achieve connectivity using single FastConnect link as the production and the development VCNs-are in separate tenancies. Request one more FastConnect connection.

C. Create a single private virtual circuit over FastConnect and attach fastConnect to either of the

D. Create a hub-VCN that uses Dynamic Routing Gateway (DRG) to communicate with on-premises network over FastConnect. Connect the hub-VCN to the production VCN spoke and with development VCN spoke, each peered via their respective local Peering Gateway (LPG)

Which three scenarios are suitable for the Oracle Infrastructure (OCI) Autonomous transaction Processing Server less (ATP-S) deployment?

A. well established, online auction marketplace is running an application where there is database usage 24? but also has peaks of activity that the hard to predict when the peaks happen, the total activities may reach 3 times the normal activity level

B. A small startup is deploying a new application fen eCommerce and it requires database to store customers' transactions the team b of what the load will look like since it is a new application.

C. A midsize company is considering migrating its legacy on premises MongoDB database to Oracle Cloud Infrastructure (OCI). The database has significantly higher workloads on weekends than weekdays

D. A developer working on an Internal project needs to use a database during work hours but doesn't need It during nights or weekends. the project budget requires her to keep costs low.

E. A manufacturing company is running Oracle E-Business Suite application on premises. They are looking to move this application to OCI and they want to use a managed database offering for their database tier.

The Finance department of your company has reached out to you. They have customer sensitive data on

compute Instances In Oracle Cloud Infrastructure (OCI) which they want to store in OCI Storage for long

term retention and archival.

To meet security requirements they want to ensure this data is NOT transferred over public internet, even if

encrypted.

which they want to store In OCI Object Storage fin long term retention and archival To meet security

requirements they want to ensure this data is NOT transferred over public Internet, even it encrypted.

Which option meets this requirements?

A. Configure a NAT instance and all traffic between compute In Private subnet should use this NAT instance with Private IP as the route target.

B. Use NAT gateway with appropriate route table when transferring data. Then use NAT gateways' toggle (on/off) once data transfer is complete.

C. Use Service gateway with appropriate route table.

D. Use Storage gateway with appropriate firewall rule.

An online Stock trading application is deployed to multiple Availability Domains in the us phoenix-1 region. Considering the high volume of transactions that the trading application handles, the company has hired you to ensure that the data stored by the application available, and disaster resilient. In the event of failure, the Recovery lime Objective (UK)) must be less than 2 hours to meet regulator requirements. Which Disaster Recovery strategy should be used to achieve the RTO requirement In the event of system failure?

A. Configure hourly block volumes backups through the Storage Gateway service.

B. Configure hourly block volumes backups using the Oracle Cloud Infrastructure (OCI) Command Line Interface (CLI)

C. Store hourly block volumes backup to NVMe device under a compute instance and generate a custom Image every 5 minutes.

D. Configure your application to use synchronous master slave data replication between Availability Domains.

After performing maintenance on an Oracle Linux compute instance the system is returned to a running state You attempt to connect using SSH but are unable to do so. You decide to create an instance console connection to troubleshoot the issue. Which three tasks would enable you to connect to the console connection and begin troubleshooting?

A. Use SSH to connect to the public: IP address of the compute Instance and provide the console connection OCID as the username.

B. edit the Linux boot menu to enable access to console.

C. Use SSH to connect to the service endpoint of the console connection service

D. Reboot the compute instance using the Oracle Cloud Infrastructure (OCI) Management Console

E. Upload an API signing key for console connection authentication.

F. Stop the compute Instance using the Oracle cloud Infrastructure (OCI) Command Line interface (CLI).

A company has an urgent requirement to migrate 300 TB of data to Oracle Cloud Infrastructure (OCI) In two weeks. Their data center has been recently struck by a massive hurricane and the building has been badly damaged, although still operational. They have a 100 Mbps Internet line but the connection is Intermittent due to the damages caused to the electrical grid in this scenario, what is the most effective service to use to migrate the data to OCI given the time constraints?

A. Setup a OCI Storage Gateway to connect your data center and your VCN. Once the connection has been established, upload all data to OCI using OCI Storage Gateway Cloud Sync tool.

B. Setup a hybrid network by launching aIGbpsFastConnect virtual circuit between your data center and OCI. Use OCI Object storage multipart upload tool to automate the migration of your data to OCI.

C. Use multiple OCI Data Transfer Appliances to transfer data to OCI.

D. Upload the data to OCI using OCI Object Storage multipart upload tool.

E. Storage Gateway to connect your data center and your VCN. Once the connection has been established, upload all data to OCI.

You are responsible for migrating your on premises legacy databases on 11.2.0.4 version to Autonomous Transaction Processing Dedicated (ATP-D) In Oracle Cloud Infrastructure (OCI). As a solution architect, you need to plan your migration approach. Which two options do you need to implement together to migrate your on premises databases to OCI?

A. Use Oracle Data Guard to keep on premises database always active during migration

B. Retain changes to Oracle shipped privileges, stored procedures or views In the on-premises databases.

C. Use Oracle GoldenGate replication to keep on premises database online during migration.

D. Convert on-premises databases to PDB, upgrade to 19c, and encrypt Migration.

E. Retain all legacy structures and unsupported features (e.g. taw U>Bs) In the onuses databases for migration.

Give this compartment structure:

You want to move a compute instance that is in 'Compute' compartment to 'SysTes-Team'. You login to your Oracle Cloud Infrastructure (OCI)account and use the 'Move Resource' option. What will happen when you attempt moving the compute resource?

A. The move will be successful though Compute Instance and its Public and Private IP address will stay the same. The Compute instance VNIC will need to be moved separately. The Compute instance will still be associated with the original VCN.

B. The move will fail and you will be prompted to move the VCN first. Once VCN is moved to the target compartment, the Compute instance can be moved.

C. The move will be successful though Compute Instance Public and Private IP address changed, and it will be associated to the VCN in target compartment.

D. The move will be successful though Compute Instance and its Public and Private IP address will stay the same. The Compute instance VNIC will still be associated with the original VCN.

A large financial services company has used 2 types of Oracle DB Systems. In Oracle Cloud Infrastructure

(OCI) to store user dat.

One is running on a VM.Standard2.8 shape and the other on a VM.Standard 2.4 shape.

As business grows, data is growing rapidly on both the databases and performance is also degrading.

The company wants to address this problem with a viable and economical solution.

As the solution architect for that company you have suggested that they move their databases to

Autonomous Transaction Processing Serverless (ATP-S) database.

Which two factors should you consider before you arrived at that recommendation?

A. You verified that ATP S supports the database features and options currently being used by the 2 databases.

B. Validate that ATP-S will support the storage and processing requirements for the 2 databases over the life cycle of the business applications.

C. Confirm that ATP-S allows customers to compress tablespaces to reduce storage costs

D. Upon provisioning, ATP-S automatically scales up CPU to meet the application's processing requirements.

A new International hacktivfst group based in London, launched a wide scale cyber attacks Including SQL Injection and Cross-Site Scripting (XSS) across multiple websites which are hosted in Oracle Cloud Infrastructure (OCI). As an IT consultant, you must configure a Web Application Firewall (WAF) to protect these website against the attacks. How should you configure your WAF to protect the website against those attacks?

A. Enable an Access Rule that contains XSS Filters Categories and SQL Filters Categories.

B. Enable a Protection Rule to block the attacks based on HTTP Headers that contain XSS and SQL strings.

C. Enable a Protection Rule that contains XSS Filters Categories and SQL Filters Categories.

D. Enable an Access Rule to block the IP Address range from London.

E. Enable a Protection Rule to block requests that came from London.

You are helping a customer troubleshoot a problem. The customer has several Oracle Linux servers in

Based on cost considerations, which option will fix this Issue?

A. Create a Public Load Balancer In front of the servers and add the servers to the Backend Set of the Public Load Balancer.

B. Create another Internet Gateway and configure it as route target for the private subnet.

C. Implement a NAT instance In the public subnet of the VCN and configure the NAT instance as the route target for the private subnet.

D. Create a NAT gateway in the VCN and configure the NAT gateway as the route target for the private subnet.

An upcoming e-commerce company has deployed their online shopping application on OCI. The application was deployed on compute instances with autoscaling configuration for application servers fronted by a load balancer and OCI Autonomous Transaction Processing (ATP) in the backend. In order to promote their e-commerce platform 50% discount was announced on all the products for a limited period. During the day 1 of promotional period it was observed that the application is running slow and company's hotline is flooded with complaints. What could be two possible reasons for this situation?

A. The health check on some of the backend servers has failed and the load balancer has taken those servers temporarily out of rotation

B. As part of autoscaling, the load balancer shape has dynamically changed to a larger shape to handle more incoming traffic and the system was slow for a short time during this change

C. The health check on some of the backend servers has failed and the load balancer was rebooting these servers.

D. The autoscaling has already scaled to the maximum number of instances specified in the configuration and there is no room of scaling

You are working as a security consultant with a global insurance organization which is using Microsoft Azure Active Directory (AD) as identity provided to manager user login/passwords. When a user logs in to Oracle Cloud infrastructure (OCI) console, it should get authenticated by Azure AD. Which set of steps are required to configure at OCI side in order to get it enabled

A. Setup Azure AD as an Enterprise Application, map Azure AD users and groups and policies to OCI groups and users

B. Setup Azure AD as an Identity Provider, Import users and groups from Azure AD to OCI, set up IAM policies to govern access to Azure AD groups

C. Setup Azure AD as an Enterprise Application, configure OCI for single sign-on, map Azure AD groups to OCI groups, set up the IAM policies to govern access to Azure AD groups

D. Setup Azure AD as an Identity Provider, map Azure AD groups to OCI groups, set up the IAM policies to govern access to Azure AD groups

You are part of a project team working in the development environment created in OCI. You have realized that the CIDR block specified for one of the subnet in a VCN is not correct and want to delete the subnet. While deleting you are getting an error indicating that there are still resources that you must delete first. The error includes the OCID of the VNIC that is in the subnet. Which of the following action you will take to troubleshoot this issue?

A. Use OCI CLI to call "GetVnic" operation to find out the parent resource of the VNIC

B. Copy and Paste OCID of the VNIC in the search box of the OCI Console to find out the parent resource of the VNIC

C. Use OCI CLI to delete the VNIC first and then delete the subnet

D. Use OCI CLI to delete the subnet using --force option