PassTestking 1z0-997-22 Dumps PDF - 100% Passing Guarantee [Q66-Q86]

NO.66 All three Data Guard Configuration are fully supported on Oracle Cloud infrastructure (OCI). You want to deploy a maximum availability architecture (MAA) for database workload.
Which option should you consider while designing your Data Guard configuration to ensure best RTO and PRO without causing any data loss?

Configure “Maximum Protection” mode which provides zero data loss If the primary database fails.

Configure “Maximum Performance” mode In SYNC mode between two availability domains (same region) which provides, the highest level of data protection that is possible without affecting the performance of the primary database.

Configure ”Maximum Scalability” mode which provides the highest level of scalability without compromising the availability of the primary database.

Configure ”Maximum Availability” mode in SYNC mode between two availability domains (same region), and use the Maximum Availability mode in SYNC mode between two regions.

NO.67 An online Stock trading application is deployed to multiple Availability Domains in the us phoenix-1 region. Considering the high volume of transactions that the trading application handles, the company has hired you to ensure that the data stored by the application available, and disaster resilient. In the event of failure, the Recovery lime Objective (UK)) must be less than 2 hours to meet regulator requirements.
Which Disaster Recovery strategy should be used to achieve the RTO requirement In the event of system failure?

Configure hourly block volumes backups through the Storage Gateway service.

Configure hourly block volumes backups using the Oracle Cloud Infrastructure (OCI) Command Line Interface (CLI)

Store hourly block volumes backup to NVMe device under a compute instance and generate a custom Image every 5 minutes.

Configure your application to use synchronous master slave data replication between Availability Domains.

NO.68 Which of the below options for private access to services within Oracle Cloud Infrastructure (OCI) is NOT valid?

You cannot use the private endpoint for hosts in the on-premises network.

Traffic from an OCI compute instance going through a Service Gateway to Object Storage is routed without being sent over the internet.

You can enable private access to certain services within OCI from your Virtual Cloud Network by using either a private endpoint or a service gateway.

The private endpoint gives hosts within your Virtual Cloud Network access to a given service within Oracle Cloud Infrastructure.

NO.69 As a part of migration exercise for an existing on premises application to Oracle Cloud Infrastructure (OCT), yon ore required to transfer a 7 TB file to OCI Object Storage. You have decided to upload functionality of Object Storage.
Which two statements are true?

Active multipart upload can be checked by listing all parts that have been uploaded, however It Is not possible to list information for individual object part in an active multipart upload

It is possible to spill this fileInto multiple parts using the APIs provided by Object Storage.

It is possible to split this file into multiple parts using rclone tool provided by Object Storage.

After initiating a multipart upload by making a CreateMultlPartUpload RESI API Call, the upload remains active until you explicitly commit it or abort.

Contiguous numbers need to be assigned for each part so that Object Storage constructs the object by ordering, part numbers in ascending order

NO.70 You are trying to delete a compartment. The delete operation is falling and you need to troubleshoot the problem.
Which step should NOT be considered when troubleshooting this issue?

Verify that there are no policies In the root compartment that reference the compartment you are trying to delete.

Verify that you have removed all resources from the compartment.

Make sure you have at least one more compartment in your tenancy other than the root compartment.

Search for resources in the compartment for each region that your tenancy is subscribed to.

NO.71 An organization has its IT infrastructure in a hybrid setup with an on-premises environment and an Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN) in the us-phonix-1 region. The on-premise applications communications with compute instances inside the VPN over a hardware VPN connection. They are looking to implement an Intrusion detected and Prevention (IDS/IPS) system for their OCI environment. This platform should have the ability to scale to thousands of compute of instances running inside the VCN.
How should they architect their solution on OCI to achieve this goal?

Set up an OCI Private Load Balance! and configure IDS/IPS related health checks at TCP and/or HTTP level to inspect traffic

Configure each host with an agent that collects all network traffic and sends that traffic to the IDS/IPS platform to inspection

There Is no need to implement an IPS/IDS system as traffic coming over IPSec VPN tunnels Is already encrypt

Configure autoscaling on a compute Instance pool and set vNIC to promiscuous mode to called traffic across the vcn and send it IDS/IPS platform for inspection.

NO.72 Your company developed a function that needs to access the Oracle Database to inject some data to it at runtime. You are tasked to move this function to the Oracle Cloud Infrastructure (OCI) and use Oracle Functions and access Oracle Autonomous Database. You created a Dockerfile below to run this function, however, you are getting this error “cx_Oracle.DatabaseError: ORA””12560: TNS:protocol adapter error”.

What should you do to make sure that Oracle Functions can run this Dockerfile properly? (Choose the best answer.)

Add these two lines to your Dockerfile: groupadd “”””gid 1000 fn && adduser “”””uid 1000 “”””gid fn fn

Use “”””privileged flag while running the Docker container to add runtime privilege

Use “”””cap””add=ALL flag while running the Docker container to add runtime capability

You ned to run this Container as root, so add this line: USER root

NO.73 You are running a legacy application in a compute instance on Oracle Cloud Infrastructure (OCI). To provide enough space for it to store internal data, a block volume is attached to the instance in paravirtualized mode.
Your application is not resilient to crash-consistent backup.
What should you do to backup the block volume in a secure and cost effective way? (Choose the best answer.)

Save your application data, detach the block volume and create a clone.

Create a volume group, add the boot volume and then run the volume group backup.

Create a backup, detach the block volume and save your application data.

Save your application data, detach the block volume and create a backup.

NO.74 An eCommerce company is running on Oracle Cloud Infrastructure (OCI) and many compute instances remain unused for the most part of the year except during Black Friday and Christmas. You suggest them to use OCI’s Autoscaling feature and present them a slide to showcase the features of Autoscaling.
Which option below is inaccurate in your presentation to the customer?

A cooldown period between Autoscaling events lets the system stabilize at the updated level.

When an instance pool scales in, instances are terminated in this order: the number of instances is balanced across Availability Domains, and then balanced across Fault Domains. Finally, within a Fault Domain, the newest instance is terminated first.

Autoscaling relies on performance metrics such as CPU utilization that are collected by OCI Monitoring service to trigger an Autoscaling event.

Autoscaling requires an instance pool as a pre-requisite so that it can automatically adjust the number of compute instances in an instance pool.

NO.75 A company has an application that processes confidential dat
a. The data is currently stored in an on-premises data center. A solution architect needs to move this data to Oracle Cloud Infrastructure (OCI) Object Storage and ensure data is encrypted in-transit to OCI.
Which two steps should the solution architect perform to set up the most cost-effective connection between on-premises data center and OCI?

Set up private end point for accessing Object Storage.

Attach an Internet Gateway to Virtual Cloud network(VCN).

Configure a service gateway accessing Object Storage.

Set up an IPsec tunnel between the customer equipment and software VPN on an oci instance

Configure a private peering connection on the Oracle FastConnect

Set up VPN Connect between the customer equipment and the Dynamic Routing Gateway.

NO.76 As an administrator you want to give users of ObjectWriters group full access to bucket Bucket-A and its objects in compartment comp-images. You want users of ObjectWriters to not be able to access or modify properties of any other buckets and its objects in the compartment comp-images.
Select the statement(s) below that will best define your IAM policies.

Allow group ObjectWriters to mange buckets in compartment comp- images Allow group ObjectWriters to manage objects in compartment comp-images where target.bucket.name= ‘Eucket-A’

Allow group ObjectWriters to manage buckets in compartment comp-images where target.bucket.name=’ Bucket-A’

Allow group ObjectWriters to inspect buckets in compartment comp-images Allow group ObjectWriters to read buckets in compartment comp-images where target.bucket.name=’ Bucket-A” Allow group ObjectWriters to manage objects in compartment comp-images where target.bucket.name=’ Bucket-A’

Allow group ObjectWritexs to read buckets in compartmentcomp-images Allow group ObjectWriters to manage objects in compartment comp- images where target.bucket.name= ‘Bucket-A’

NO.77 Which three scenarios are suitable for the Oracle Infrastructure (OCI) Autonomous transaction Processing Server less (ATP-S) deployment?

well established, online auction marketplace is running an application where there is database usage 24×7 but also has peaks of activity that the hard to predict when the peaks happen, the total activities may reach 3 times the normal activity level

A small startup is deploying a new application fen eCommerce and it requires database to store customers’ transactions the team b of what the load will look like since it is a new application.

A midsize company is considering migrating its legacy on premises MongoDB database to Oracle Cloud Infrastructure (OCI). The database has significantly higher workloads on weekends than weekdays

A developer working on an Internal project needs to use a database during work hours but doesn’t need It during nights or weekends. the project budget requires her to keep costs low.

A manufacturing company is running Oracle E-Business Suite application on premises. They are looking to move this application to OCI and they want to use a managed database offering for their database tier.

NO.78 A retail company has recently adopted a hybrid architecture. They have the following requirements for their end-to-end Connectivity model between their on-premises data center and Oracle Cloud Infrastructure (OC1) region
* Highly available connection with service level redundancy
* Dedicated network bandwidth with low latency
Which connectivity setup is the most cost effective solution for this scenario?

Setup IPsec VPN as your primary connection, and a FastConnect virtual circuit as a backup connection. Use separate edge devices in your on-premises data canter for each connection from your edge devices, advertise more specific routes IPSec VPN, and specific routes through the backup FastConnect virtual circuit.

Setup FastConnect virtual circuit as your primary connection, and a second FastConnect virtual circuit as a backup connection. Use separate edge devices in your FastConnect physical connectivity is redundant Use a single edge device in your on premises data center for each connection From yc device, advertise more specific routes via primary FastConnect virtual circuit, and less specific routes through t backup FastConnect circuit.

Setup FastConnect virtual circuit as your primary connection, and an IPSec VPN as a backup connection. Use separate edge devices in your on-premises data center for each connection. From your edge devices, advertise more specific routes through FastConnect virtual circuit, and more specific routes through the backup IPSec VPN path.

Setup IPSec VPN as your primary connection, and a second IPSec VPN as a backup connection. Use separate edge devices in your on p data center for each connection. From your edge devices, advertise more specific routes via primary IPSec VPN. and less specific rod the backup IPSec VPN.

NO.79 An automobile company wants to deploy their CRM application for Oracle Database on Oracle Cloud Infrastructure (OC1) DB Systems for one of major clients. In compliance with the Business Continuity Program of the client, they need to provide a Recovery Point objective (RPO) of 24 hours and a Recovery time objective (RTO) of 24 hours and Recovery Time Objective (RTO) of 1 hour.
The CRM application should be available oven in me event that an entire on Region is down.
Which approach Is the most suitable and cost effective configuration for this scenario?

Deploy a 1 node VM Oracle database in one region and replicate the database to a 1 node VM Oracle database in another region using a manual setup and configuration of Oracle Data Guard.

Deploy a 2 node Virtual Machine (VM) Oracle RAC database in one region and replicate the database to a 2 node VM Oracle RAC database in another region using a manual setup and configuration of Oracle Data Guard.

Deploy a 1 node VM Oracle database in one region. Manual Configure a Recovery Manager (RMAN) database backup schedule to take hourly database backups. Asynchronously copy the database backups to object storage in another OCI region, If the primary OCI region is unavailable launch a new 1 new VM Database in the other OCI region restore the production database from the backup.

Deploy an Autonomous Transaction Processing (Serverless) database in one region and replicate it to an Autonomous Transaction Processing (Serverless) database in another region Oracle GoldenGate.

NO.80 A developer is using Oracle Functions to deploy her code as part of an event-driven solution in Oracle Cloud Infrastructure (OCI). When she invokes her function, Oracle Functions returns a FunctionlnvokelmageNotAvailable message and a 502 error:

Which of the following options is NOT a plausible reason for this error?

Missing or invalid IAM policy to give Oracle Functions read access to images stored for functions in repositories in OCI Registry.

The function does not exist in the specified location in OCI Registry.

The VCN being used does not have an internet gateway or a service gateway configured for Oracle Functions to be able to access OCI Registry.

OCI Events service rule is not configured with the correct location of the function in OCI Registry.

NO.81 You have two Virtual Cloud Networks (VCN) that need to be peered. The set up is as follows:
The VCNs are in different tenancies.
Peering has to be via Local Peering Gateway (LPG) because one of the VCNs needs to be added to an existing Hub and Spoke configuration that consists of a hub and two spokes.
There is a CIDR overlap. The VCN that serves as the Hub VCN has a 172.19.0.0/16 CIDR prefix. The other VCN to be added as a Spoke VCN has a 172.19.128.0/17 CIDR prefix.
The other two spokes have 10.0.0.0/16 and 192.168.0.0/16 prefixes, respectively.
What is a possible solution to this problem?

Use Dynamic Routing Gateway (DRG) instead.

Add another CIDR prefix to the VCN that is integrating with the Hub and Spoke and does not overlap. Use that CIDR for the LPG connection.

Review the subnets in the hub VCN. If they all have the third octet under 128, change the VCN prefix to /17.

Review the subnets in the hub VCN. If they all have the third octet above 128, change the VCN prefix to /17.

Review all subnets in the hub VCN. If one of them has the third octet at 128, change the VCN prefix to /17.

NO.82 You work for a large bank where your main application is a payment processing gateway API. You deployed the application on Oracle Container Engine for Kubernetes (OKE) and used API Gateway with several policies to control the access of the API endpoint.
However, your customers are complaining about the unavailability of the API endpoint. Upon checking, you noticed that the Gateway URL is throwing Service Unavailable error. You need to check the backend latency and backend responses when this error started last night.
What should you do to get this data? (Choose the best answer.)

Check with the application owner and search the log file for the container to get the metrics from the log file.

Go to Governance Menu and click on Audit to see the Audit log for the API Gateway. Filter it using Start and End date with a 503 response status.

Go to Developer Services and click on API Gateway. Go to the detail page of the gateway and select Metrics. Change the Start and End time to filter the metrics.

Go to Monitoring and click on Service Metrics. Choose the Metric Namespace as oci_apigateway. Change the Start and End time accordingly. Add a Dimension and select httpStatusCode: 503. Check the backend latency and backend responses metric.

NO.83 Your customer has gone through a recent departmental re structure. As part of this change, they are organizing their Oracle Cloud Infrastructure (OCI) compartment structure to align with the company’s new organizational structure.
They have made the following change:
Compartment x Is moved, and its parent compartment is now compartment c.

Policy defined in compartment A: Allow group networkadmins to manage subnets in compartment X Policy defined in root compartment: Allow group admins to read subnets in compartment Finance:A:X After you move the compartment, which two IAM policies would be required to ensure both groups retain the same permissions to compartment X that they had before? (Choose two.)

Define a policy in the root compartment as follows: Allow group admins to manage subnets in compartment Finance:A:X

Define a policy in compartment HR as follows: Allow group networkadmins to manage subnets in compartment C:X.

Define a policy in the root compartment as follows: Allow group admins to read subnets in compartment HR:C:X

Define a policy in compartment C as follows: Allow group networkadmins to read subnets in compartment X

NO.84 A new international hacktivist group, based in London, launched wide scale cyber attacks including SQL Injection and Cross-Site Scripting (XSS) across multiple websites which are hosted in Oracle Cloud Infrastructure (OCI). As an IT consultant, you must configure a Web Application Firewall (WAF) to protect these websites against the attacks.
How should you configure your WAF to protect the website against those attacks? (Choose the best answer.)

Enable an Access Rule that contains XSS Filters Categories and SQL Filters Categories.

Enable a Protection Rule to block the attacks based on HTTP Headers that contain XSS and SQL strings.

Enable a Protection Rule that contains XSS Filters Categories and SQL Filters Categories.

Enable an Access Rule to block the IP Address range from London.

Enable a Protection Rule to block requests that came from London.

NO.85 After performing maintenance on an Oracle Linux compute instance the system is returned to a running state You attempt to connect using SSH t to do so. You decide to create an instance console connection to troubleshoot the issue.
Which three tasks would enable you to connect to the console connection and begin troubleshooting?

Use SSH to connect to the public: IP address of the compute Instance and provide the console connection OCID as the username.

edit the Linux boot menu to enable access to console.

Use SSH to connect to the service endpoint of the console connection service

Reboot the compute instance using the Oracle Cloud Infrastructure (OCI) Management Console

Upload an API signing key for console connection authentication.

Stop the compute Instance using the Oracle cloud Infrastructure (OCI) Command Line interface (CLI).

NO.86 You are designing the network infrastructure for an application consisting of a web server (server-1) and a Domain Name Server (server-2) running in two different subnets inside the same Virtual Cloud Network (VCN) in Oracle Cloud Infrastructure (OCI). You have a requirement where your end users will access server-1 from the internet and server-2 from your customer’s on-premises network. The on-premises network is connected to your VCN over a FastConnect virtual circuit.
How should you design your routing configuration to meet these requirements?

Configure a single routing table with two set of rules: one that has route to internet via an Internet Gateway and another that propagates specific routes for the on-premises network via a Dynamic Routing Gateway. Don’t associate this routing table with any of the subnets in the VCN.

Configure a single routing table with two set of rules: one that has route to internet via an Internet Gateway and another that propagate specific routes to the on-premises network via a Dynamic Routing Gateway. Associate the routing table with all the VCN subnets.

Configure two routing tables: first one with a route to internet via an Internet gateway; associate this route table to the subnet containing server-1 .Configure the second route table to propagate specific routes to the on-premises network via a Dynamic Routing Gateway; associate this route table to subnet containing server-2.

Configure two routing tables that have rules to route all traffic via a Dynamic Routing Gateway. Associate the two routing tables with all the VCN subnets.