Estudos de oci

Esta é uma pré-visualização de arquivo. Entre para ver o arquivo original

1. You are creating an Oracle Cloud Infrastructure Dynamic Group. To determine the members of this group you are defining a set of matching rules.
Which of the following are the supported variables to define conditions in the matching rules? (Choose Two)
(Choose all correct answers)
(1/1) Points
instance.compartment.id - the OCID of the compartment where the instance resides. (*)
iam.policy.id - the OCID of the IAM policy to apply to the group.
instance.tenancy.id - the OCID of the tenancy where the instance resides.
tag.<tagnamespace>.<tagkey>.value - the tag namespace and tag key. (*)
 Correct
 
 
 2. Your organization is planning on using Oracle Cloud Infrastructure (OCI) File Storage Service (FSS). You will be deploying multiple compute instance in Oracle Cloud Infrastructure(OCI) and mounting the file system to these compute instances.
The file system will hold payment data processed by a Database instance and utilized by compute instances to create a overall inventory report. You need to restrict access to this data for specific compute instances and must be allowed/blocked per compute instance’s CIDR block.
Which option can you use to secure access?
(0/1) Points
Use stateless Security List rule to restrict access from known IP addresses only.
Create and configure OCI Web Application Firewall service with built in DNS based intelligent routing.
Create a new VCN security list, choose SOURCE TYPE as Service and SOURCE SERVICE as FSS. Add stateless ingress and egress rules for specific IP address and CIDR blocks.
Use ‘Export option’ feature of FSS to restrict access to the mounted file systems. (*)
3. A developer is using Oracle Functions to deploy her code as part of an event-driven solution in Oracle Cloud Infrastructure (OCI). When she invokes her function, Oracle Functions returns a FunctionInvokeImageNotAvailable message and a 502 error:
{"code":"FunctionInvokeImageNotAvailable","message":"Failed to pull function image"}
Fn: Error invoking function. status: 502 message: Failed to pull function image
Which of the following options is NOT a plausible reason for this error?
(1/1) Points
OCI Events service rule is not configured with the correct location of the function in OCI Registry. (*)
Missing or invalid IAM policy to give Oracle Functions read access to images stored for functions in repositories in OCI Registry.
The VCN being used does not have an internet gateway or a service gateway configured for Oracle Functions to be able to access OCI Registry.
The function does not exist in the specified location in OCI Registry.
4. An E-Commerce company wants to deploy their web application for Oracle Database on Oracle Cloud Infrastructure (OCI) DB Systems. In compliance with the business continuity program of the business, they need to provide a Recovery Point Objective (RPO) of 1 hour and a Recovery Time Objective (RTO) of 5 minutes. The web application should be highly available within the region and meet the RTO and RPO requirements in case of a region outage.
Which approach is the most suitable and cost effective configuration for this scenario?
(0/1) Points
Deploy an Autonomous Transaction Processing (Serverless) database in one region and replicate it to an Autonomous Transaction Processing (Serverless) database in another region using Oracle GoldenGate.
Deploy a 1 node VM Oracle database in one region and replicate the database to a 1 node VM Oracle database in another region using a manual setup and configuration of Oracle Data Guard.
Deploy a 1 node VM Oracle database in one region. Manually Configure a Recovery Manager (RMAN) database backup schedule to take hourly database backups. Asynchronously copy the database backups to object storage in another OCI region. If the primary OCI region is unavailable, launch a new 1 node VM Database in the other OCI region and restore the production database from the backup.
Deploy a 2 node Virtual Machine (VM) Oracle RAC database in one region and replicate the database to a 2 node VM Oracle RAC database in another region using a manual setup and configuration of Oracle Data Guard. (*)
5. A customer has a Virtual Machine instance running in their Oracle Cloud Infrastructure tenancy. They realized that they wrongly picked a smaller shape for their compute instance. They are reaching out to you to help them fix the issue.
Which of the below options is best recommended to suggest to the customer?
(0/1) Points
OCI doesn’t allow such an operation.
Delete the running instance and spin up a new instance with the desired shape.
Change the shape of instance without reboot, but stop all the applications running on instance beforehand to prevent data corruption.
Change the shape of the virtual machine instance using the Change Shape feature available in the console. (*)
 Incorrect
 
 6. An eCommerce company is running on Oracle Cloud Infrastructure (OCI) and many compute instances remain unused for the most part of the year except during Black Friday and Christmas. You suggest them to use OCI’s Autoscaling feature and present them a slide to showcase the features of Autoscaling.
Which option below is inaccurate in your presentation to the customer?
(0/1) Points
When an instance pool scales in, instances are terminated in this order: the number of instances is balanced across Availability Domains, and then balanced across Fault Domains. Finally, within a Fault Domain, the newest instance is terminated first. (*)
A cooldown period between Autoscaling events lets the system stabilize at the updated level.
Autoscaling relies on performance metrics such as CPU utilization that are collected by OCI Monitoring service to trigger an Autoscaling event.
Autoscaling requires an instance pool as a pre-requisite so that it can automatically adjust the number of compute instances in an instance pool.
7. Which of the following is NOT a good use case for using the functionality available in the Oracle Cloud Infrastructure (OCI) Events service?
(0/1) Points
Capture Monitoring Alarms and invoke Autoscaling of compute instances. (*)
Trigger a Function using Oracle Functions when new files are uploaded in an OCI Object Storage bucket.
Publish all events in a specific compartment to Oracle Streaming service for later analysis.
Publish a notification when long lived tasks complete, such as OCI Autonomous Database backup completion.
Trigger a notification when a function completes its execution.
8. You have to migrate your application to Oracle Cloud Infrastructure (OCI). The database is constantly being updated and needs to be online without interruptions. How can you transition the database to OCI without interrupting its use?
(0/1) Points
Use an on-premises database with two-way synchronization to a cloud-based database and allow clients to connect to either databases.
It is impossible to migrate without interruption.
Use an on-premises database with one-way synchronization to a cloud-based database and allow clients to connect only to the cloud database.
Use an on-premises database with one-way synchronization to a cloud-based database and allow clients to connect only to the on-premises database until it is synchronized. (*)
9. Design and implement hybrid network architectures to meet high availability, bandwidth and latency requirements
Your Oracle database is deployed on-premises and has produced 100 TB database backup locally. You have a disaster recovery plan that requires you to create redundant database backups in Oracle Cloud Infrastructure (OCI). Once the initial backup is completed, the backup must be available for retrieval in less than 30 minutes to support the Recovery Time Objective (RTO) of your solution.
Which is the most cost effective option to meet these requirements?
(0/1) Points
Use OCI Storage Gateway to transfer the backup files to OCI Object Storage Standard tier as the final destination. (*)
Setup an IPsec VPNConnect between on-premises data center
and OCI. Then to use OCI CLI command to upload database backups to OCI Object Storage Archive tier as the final destination.
Use OCI Storage Gateway to transfer the backup files to OCI Object Storage Archive tier as the final destination.
Setup a FastConnect connection between on-premises data center and OCI. Then to use OCI CLI command to upload database backups to OCI Object Storage Standard tier as the final destination.
(Answer all questions in this section)
10. Which of the below options for private access to services within Oracle Cloud Infrastructure (OCI) is NOT valid?
(0/1) Points
You cannot use the private endpoint for hosts in the on-premises network. (*)
Traffic from an OCI compute instance going through a Service Gateway to Object Storage is routed without being sent over the internet.
You can enable private access to certain services within OCI from your Virtual Cloud Network by using either a private endpoint or a service gateway.
The private endpoint gives hosts within your Virtual Cloud Network access to a given service within Oracle Cloud Infrastructure.
11. Many development engineers are deploying new instances as part of their projects in Oracle Cloud Infrastructure tenancy, but majority of these instances have not been tagged. You as an administrator of this tenancy want to enforce tagging to identify owners who are launching these instances.
Which option below should be used to implement this requirement?
(0/1) Points
Create a default tag for each compartment which ensure appropriate tags are allowed at resource creation.
Create a predefined tag with tag variables to automatically tag a resource with username. (*)
Create tag variables for each compartment to automatically tag a resource with user name.
Create an IAM policy to automatically tag a resource with the username.
12. An E-commerce company which sells computers, tablets, and other electronics items has recently decided to move all of their on-premises infrastructure to Oracle Cloud Infrastructure (OCI). One of their on-premises application is running on an NGINX server and the Oracle Database is running in a 2 node Oracle Real Application Clusters (RAC) configuration.
They cannot afford to have any application down time when they do the migration.
What is an effective mechanism to migrate the customer application to OCI and set up regular automated backups?
(0/1) Points
Launch a compute instance and run an NGINX server to host the application. Deploy Exadata Quarter Rack, enable automatic backups and import the database using Oracle Data Pump.
Launch a compute instance and run an NGINX server to host the application. Deploy a 2 node VM DB Systems with Oracle RAC enabled. Import the on-premises database to OCI VM DB Systems using Oracle Data Pump and then enable automatic backups.
Launch a compute instance for both the NGINX application server and the database server. Attach block volumes on the database server compute instance and enable backup policy to backup the block volumes.
Launch a compute instance and run an NGINX server to host the application. Deploy a 2 node VM DB Systems with Oracle RAC enabled. Setup Oracle GoldenGate to synchronize data from their on-premises database to OCI VM Database. Export and Import the on-premises database to OCI VM DB Systems using Oracle Data Pump, apply the GoldenGate trail files to sync up the OCI database with the on-premises database. Enable automatic backups for the OCI VM database and then cut over the application from on-premises to OCI. (*)
13. You want to automate the processing of new image files to generate thumbnails. The expected rate is 10 new files every hour.
Which of the following is the most cost effective option to meet this requirement in Oracle Cloud Infrastructure (OCI)?
(0/1) Points
Upload all files to an Oracle Streaming Service (OSS) stream. Set up a cron job to invoke a function in Oracle Functions to fetch data from the stream. Invoke another function to process the image files and generate thumbnails. Store thumbnails in another OSS stream.
Build a web application to ingest the files and save them to a NoSQL Database. Configure OCI Events service to trigger a notification using Oracle Notification Service (ONS). ONS invokes a custom application to process the image files to generate thumbnails. Store thumbnails in a NoSQL Database table.
Upload files to an OCI Object storage bucket. Every time a file is uploaded, an event is emitted. Write a rule to filter these events with an action to trigger a function in Oracle Functions. The function processes the image in the file and stores the thumbnails back in an Object storage bucket. (*)
Upload files to an OCI Object storage bucket. Every time a file is uploaded, trigger an event with an action to provision a compute instance with a cloud-init script to access the file, process it and store it back in an Object storage bucket. Terminate the instance using Autoscaling policy after the processing is finished.
14. You are designing the network infrastructure for an application consisting of a web server (server-1) and a Domain Name Server (server-2) running in two different subnets inside the same Virtual Cloud Network (VCN) in Oracle Cloud Infrastructure (OCI). You have a requirement where your end users will access server-1 from the internet and server-2 from your customer’s on-premises network. The on-premises network is connected to your VCN over a FastConnect virtual circuit.
How should you design your routing configuration to meet these requirements?
(1/1) Points
Configure a single routing table with two set of rules: one that has route to internet via an Internet Gateway and another that propagates specific routes for the on-premises network via a Dynamic Routing Gateway. Don't associate this routing table with any of the subnets in the VCN.
Configure two routing tables: first one with a route to internet via an Internet gateway; associate this route table to the subnet containing server-1.Configure the second route table to propagate specific routes to the on-premises network via a Dynamic Routing Gateway; associate this route table to subnet containing server-2. (*)
Configure two routing tables that have rules to route all traffic via a Dynamic Routing Gateway. Associate the two routing tables with all the VCN subnets.
Configure a single routing table with two set of rules: one that has route to internet via an Internet Gateway and another that propagate specific routes to the on-premises network via a Dynamic Routing Gateway. Associate the routing table with all the VCN subnets.
15. You are tasked with backing up your data using Oracle Cloud Infrastructure Block Volume service.
When you are finalizing your block volume backup schedule, which of the following two are valid considerations for your backup plan?
(Choose all correct answers)
(0/1) Points
Encryption: Whether to use your own key to encrypt your volume backups.
Number of stored backups: How many backups you need to keep available and the deletion schedule for those you no longer need. (*)
Location: Determine the Object Store Bucket where the backups will be stored.
Governance: Tagging of backups so you can capture backup related API calls through the Audit service.
Frequency: How often you want to back up your data. (*)
16. You are building a demo for a customer that showcases Oracle Cloud Infrastructure (OCI) Events service and Oracle Functions. You plan to create an event every time an image is uploaded to an OCI Object Storage bucket. You have also created a function that is listening to the event and processes the image for face recognition.
Choose the two actions from below that are NOT required to run the demo successfully.
(Choose all correct answers)
(0/1) Points
Creating an event rule is not permitted for OCI Object storage. (*)
You must deploy the function that does facial recognition for the demo to work.
You have to enable Object Storage buckets
to emit events for state changes.
The function must be deployed only to Oracle Kubernetes Engine (OKE). (*)
You must specify an action type while creating an Event service and specify the function you want to trigger.
17. A manufacturing company is planning to migrate their on-premises database to Oracle Cloud Infrastructure and has hired you for the migration. Customer has provided following information regarding their existing on-premises database:
Database version, database character set, storage for data staging, acceptable length of system outage.
What additional information do you need from customer in order to recommend a suitable migration method? (Choose Two)
(Choose all correct answers)
(0/1) Points
Number of active connections.
Data types used in the on-premises database. (*)
Elapsed time since database was last patched.
Top 5 longest running queries.
On-Premises host operating system and version. (*)
18. Which of the following features is NOT supported by Oracle Cloud Infrastructure Multi-factor authentication (MFA)?
(1/1) Points
Only the user can enable MFA for their own account.
Members of the Administrators group can enable MFA for other users. (*)
Users can disable MFA for their own accounts.
Members of the Administrators group can disable MFA for other users.
19. You have configured backups for your Oracle Cloud Infrastructure (OCI) 2-node RAC DB systems on virtual machines. In the console, the database backup displays a Failed status.
Which of the following options is the most likely reason for this backup issue?
(0/1) Points
The master key stored in OCI Key Management for encryption and decryption of data in the database is not accessible to the backup service.
The allocated storage on the OCI File Storage service file system attached with the database is full.
The auth token being used by the Object Store Swift endpoint is incorrect. (*)
The RMAN backup agent is not compatible with the version of database being used.
20. You are part of a project team working in the development environment created in Oracle Cloud Infrastructure (OCI). You realize that the CIDR block specified for one of the subnets in a Virtual Cloud Network (VCN) is not correct and want to delete the subnet. While deleting you get an error indicating that there are still resources that you must delete first. The error includes the OCID of the VNIC that is in the subnet.
Which of the following actions you will take to troubleshoot this issue?
(1/1) Points
Use OCI CLI to call “network vnic” and “compute vnic-attachment” operations to find out the parent resource of the VNIC. (*)
Use OCI CLI to delete the VNIC first and then delete the subnet.
Copy and paste OCID of the VNIC in the search box of the OCI Console to find out the parent resource of the VNIC.
Use OCI CLI to delete the subnet using --force option.
21. You have been asked to create a mobile application which will be used for submitting orders by users of a popular E-Commerce site. The application is built to work with Autonomous Transaction Processing - Serverless (ATP-S) database as the backend and HTML5 on Oracle Application Express as the front end. During the peak usage of the application you notice that the application response time is very slow. ATP-S database is deployed with 3 CPU cores and 1 TB of memory.
Which two options are expensive or impractical ways to improve the application response times?
(Choose all correct answers)
(0/1) Points
Scale up CPU core count and memory during peak times. (*)
Use the Machine Learning (ML) feature of the ATP-S database iteratively to tune the SQL queries used by the application.
Identify the maximum memory capacity needed for peak times and scale the memory for the ATP-S database to that number. ATP-S will scale the memory down when not needed.
Enable auto scaling for CPU cores on ATP-S database.
Identify the maximum CPU capacity needed for peak times and scale the CPU core count for the ATP-S database to that number. ATP-S will scale the CPU core count down when not needed. (*)
22. You are working as a solution architect for a customer in Frankfurt, which uses multiple compute instance VMs spread among three Availability Domains in the Oracle Cloud Infrastructure (OCI) eu-frankfurt-1 region. The compute instances do not have public IP addresses and are running in private subnets inside a Virtual Cloud Network (VCN). You have set up OCI Autoscaling feature for the compute instances, but find out that instances cannot be auto scaled. You have enabled monitoring on the instances.
What could be wrong in this situation?
(1/1) Points
Autoscaling only works with single availability domains.
You need to assign a reserved public IP address to the compute instances.
You need to set up a Service Gateway to send metrics to the OCI Monitoring service. (*)
Autoscaling only works for instances with public IP addresses.
23. You are responsible for migrating your on-premises legacy databases on 11.2.0.4 version to Autonomous Transaction Processing - Dedicated (ATP-D) in Oracle Cloud Infrastructure (OCI). As a solution architect, you need to plan your migration approach.
Which three options do you need to implement together to migrate your on-premises databases to OCI?
(Choose all correct answers)
(0/1) Points
Launch Autonomous Transaction Processing – Dedicated database in OCI. (*)
Use Oracle Data Guard to keep on-premises database always active during migration.
Retain all legacy structures and unsupported features (e.g. legacy LOBs) in the on-premises databases for migration.
Convert on-premises databases to PDB, upgrade to 19c, and encrypt. (*)
Use Oracle GoldenGate replication to keep on-premises database online during migration. (*)
Retain changes to Oracle shipped privileges, stored procedures or views in the on-premises databases.
24. Your security team has informed you that there are a number of malicious requests for your web application coming from a set of IP addresses originating from a country in Europe.
Which of the following methods can be used to mitigate these type of unauthorized requests?
(0/1) Points
Deny rules in Virtual Cloud Network Security Lists for the specific set of IP addresses.
Deny rules in Virtual Cloud Network Security Group for the specific set of IP addresses.
Web Application Firewall policy using access control rules (*)
Delete Internet Gateway from Virtual Cloud Network.
25. You are working on the migration of the web application infrastructure of your company from on-premises to Oracle Cloud Infrastructure. You need to ensure that the DNS cache entries of external clients will not direct them to the on-premises infrastructure after switching to the new infrastructure.
Which of the following options will minimize this problem?
(1/1) Points
Increase the TTL of the DNS records after the switch.
Reduce the TTL of the DNS records before the switch. (*)
Increase the TTL of the DNS records before the switch.
DNS changes propagate fast enough that it is not necessary to take any action.
Reduce the TTL of the DNS records after the switch.
26. An insurance company is storing critical financial data in the Oracle Cloud Infrastructure block volume. This volume is currently encrypted using oracle managed keys. Due to regulatory compliance, the customer wants to encrypt the data using the keys that they can control and not the keys which are controlled by Oracle.
What of the following series of tasks are required to encrypt the block volume using customer managed keys ?
(1/1) Points
Create a vault, import your master encryption key into the vault, generate data encryption key, assign data encryption key to the block volume.
Create a vault, create a master encryption key in the vault, assign this master encryption key to the block volume. (*)
Create a master encryption key, create a new version of the encryption key, decrypt the block volume using existing oracle managed keys and encrypt
using new version of the encryption key.
Create a master encryption key, create a data encryption key, decrypt the block volume using existing oracle managed keys, encrypt the block volume using the data encryption key.
27. You have created compartment called Dev for developers. There are two IAM groups for developers: group-dev1 and group-dev2. You need to write an Identity and Access Management (IAM) policy to give users in these groups access to manage all resources in the compartment Dev.
Which of the following IAM policy will accomplish this?
(0/1) Points
Allow group group-dev1 group-dev2 to manage all resources in compartment Dev (*)
Allow any-user to manage all resources in compartment Dev where request.group= /group-dev*/
Allow group /group-dev*/ to manage all resources in compartment Dev
Allow any-user to manage all resources in tenancy where target.comparment= Dev
28. You have deployed a multi-tier application with multiple compute instances in Oracle Cloud Infrastructure. You want to back up these volumes and have decided to use ‘Volume Groups’ feature. The Block volume and Compute instances exist in different compartments within your tenancy.
Periodically, a few child compartments are moved under different parent compartments, and you notice that sometimes volume group backup fails.
What should be the cause ?
(0/1) Points
A compute instance with multiple block volumes attached cannot move when a compartment is moved.
The Identity and Access Management policy allowing backup failed to move when the compartment was moved. (*)
You are exceeding your volume group backup quota configured.
You have the same block volume attached to multiple compute instances; if these compute instances are in different compartments then all concerned compartments must be moved at the same time.
29. A global media organization is working on a project which lets users upload their videos to the site. After upload is complete, the video should be automatically processed by an AI algorithm. The algorithm will try to recognize certain actions in the videos so that it can be used to show related advertisements in future. The development team wants to focus on writing AI code and not worry about underlying infrastructure for high availability, scalability, security and monitoring.
Which Oracle Cloud Infrastructure (OCI) services would meet these requirements?
(0/1) Points
OCI Events, Oracle Container Engine for Kubernetes and OCI Digital Assistant.
Oracle Container Engine for Kubernetes, OCI Notifications and OCI Object Storage.
OCI . Active multipart upload Storage, OCI Events service and OCI Functions. (*)
OCI Resource Manager, OCI Functions and OCI Events service.
30. As a solution architect, you are designing a web application to be deployed across multiple Oracle Cloud Infrastructures (OCI) regions for a global audience. Your goal is that users from each region should access the application web servers deployed in their own geographical OCI location.
Which OCI feature can be used to achieve this?
(1/1) Points
OCI Global Load balancers
OCI Traffic Management GeoLocation steering policy (*)
OCI Public Load Balancers
OCI Traffic Management IP Prefix steering policy
31. Which of the following is NOT a good use case for the Oracle Cloud Infrastructure (OCI) Streaming service?
(0/1) Points
Meeting compliance requirements for data to remain unchanged over a long time, so that it can be retrieved for audit purposes. (*)
Ingesting metric and log data to help make critical operational data more quickly available for indexing, analysis, and visualization.
Messaging with a pull-based communication model and the ability to feed multiple consumers with the same data independently.
Providing a unified entry point for cloud components to report their life cycle events for audit, accounting, and related activities.
32. As an administrator you want to give users of ObjectWriters group full access to bucket Bucket-A and its objects in compartment comp-images. You want users of ObjectWriters to not be able to access or modify properties of any other buckets and its objects in the compartment comp-images.
Select the statement(s) below that will best define your IAM policies.
(0/1) Points
Allow group ObjectWriters to manage buckets in compartment comp-images where target.bucket.name='Bucket-A'
Allow group ObjectWriters to read buckets in compartment comp-images
Allow group ObjectWriters to manage objects in compartment comp-images where target.bucket.name='Bucket-A'
Allow group ObjectWriters to mange buckets in compartment comp-images
Allow group ObjectWriters to manage objects in compartment comp-images where target.bucket.name='Bucket-A'
Allow group ObjectWriters to inspect buckets in compartment comp-images
Allow group ObjectWriters to read buckets in compartment comp-images where target.bucket.name='Bucket-A'
Allow group ObjectWriters to manage objects in compartment comp-images where target.bucket.name='Bucket-A' (*)
33. Which of the following is NOT a good use case for the volume backup feature of the Oracle Cloud Infrastructure Block Volume service?
(0/1) Points
Support business continuity requirements of reducing the risk of outages or data mutation over time.
Rapidly duplicate an environment in seconds to test configuration changes without impacting your production environment. (*)
Retain a copy of data in a volume, so that you can duplicate an environment later or preserve the data for future use.
Meet compliance and regulatory requirements for data to remain unchanged over time, so that it can be retrieved for audit purposes.
34. A cloud consultant is working on a implementation project on Oracle Cloud Infrastructure (OCI). As part of the compliance requirements, the objects placed in OCI Object Storage should be automatically archived first and then deleted. He is testing a lifecycle policy on Object Storage and created a policy as below:
[ { "name": “Archive_doc”, "action": "ARCHIVE", "objectNameFilter": { "inclusionPrefixes": [ “doc”] },
"timeAmount": 5, “timeUnit”: “DAYS”, "isEnabled": true },
{ "name": “Delete_doc”, "action": "DELETE", "objectNameFilter": { "inclusionPrefixes": [ “doc”] },
"timeAmount": 5, “timeUnit”: “DAYS”, “isEnabled": true }
]
What will happen after this policy is applied?
(0/1) Points
All objects with names starting with “doc” will be deleted after 5 days of object creation. (*)
All the objects with names starting with “doc” will be archived 5 days after object creation and will be deleted 5 days after archival.
All the objects having file extension “doc” will be archived for 5 days and will be deleted 10 days after object creation.
All the objects having file extension “doc” will be archived 5 days after object creation.
(Answer all questions in this section)
35. Which of the below options is true regarding Oracle Cloud Infrastructure’s load balancing service?
(0/1) Points
When you create a private load balancer, the service requires 2 or more subnets to host both the primary and standby load balancers.
The public load balancer applies a floating public IP address to the primary load balancer. (*)
You can dynamically change the load balancer shape to handle more incoming traffic.
A public load balancer is Availability Domain specific in scope.
36. You have deployed an application server in a private subnet in your virtual cloud network (VCN). For the database, you have provisioned an Autonomous Transaction Processing (ATP) serverless instance. However, you are unable to connect to the database instance from your application server.
Which two steps would you need to enable this connectivity?
(Choose all correct answers)
(0/1) Points
Add an internet gateway to your VCN and add a route rule to your private subnet route table.
CIDR: 0.0.0.0/0
Target: Internet Gateway
Add a remote peering connection from your VCN to the ATP VCN
Add a stateful egress rule to the security list associated
with your private subnet.
Destination CIDR: 0.0.0.0/0
Protocols: All Protocols (*)
Create a NAT Gateway and add the following route rule to the route table of private subnet.
CIDR: 0.0.0.0/0
Target: NAT Gateway (*)
37. You have been asked to implement a bespoke financial application in Oracle Cloud Infrastructure using virtual machine instances controlled by Autoscaling across multiple Availability Domains. The application stores transaction logs, intermediate transaction data, and audit data and needs to store this on a persistent, durable data store accessible from all of the application servers. The application requires the file system to be mounted in the /audit folder on the Linux file system. The system needs to tolerate the failure of two or more Fault Domains and still maintain data integrity. The solution should be as low maintenance as possible.
What storage architecture should you suggest?
(0/1) Points
Implement a single instance and install an NFS server, configure and create an NFS share, and mount this as /audit on the application instances.
Use locally attached NVMe instances and configure RAID 0 replication between servers.
Use File Storage Service(FSS). Configure FSS to operate from all Availability Domains the application servers operate in and mount the file system in the /audit folder. (*)
Store the data on Oracle Object Storage mounted at the /audit mount point on all the Linux instances using the default mount options.
38. You have an application running in Microsoft Azure and want to use Oracle Autonomous Data warehouse (ADW) instance for running business analytics.
How can you build a secure solution for such a use-case?
(0/1) Points
Connect the Oracle ADW in your VCN to the Microsoft Azure VNet over the internet.
Create a software Remote Peering Connection between Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN) and Microsoft Azure Virtual Network (VNet) and connect the application with Oracle ADW instance.
Setup an interconnect between OCI and Microsoft Azure using FastConnect and ExpressRoute. Use a Service Gateway in OCI Virtual Cloud Network to provide connectivity to the Oracle ADW instance for the application in Microsoft Azure VNet. (*)
Create a software VPN connection between Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN) and Microsoft Azure Virtual Network (VNet) and connect the application with Oracle ADW instance.
39. You have been asked to review some network proposals by a major client. The client's IT director needs to provision two Virtual Cloud Network (VCN) for a major application. Both applications use a large number of virtual machine instances, and so will ideally occupy VCNs with as many address spaces as possible. Additionally, in the future, VCN peering will be required to allow communication between the VCNs.
Which of the following are valid IP ranges to consider for the VCNs?
(0/1) Points
10.0.1.0/24 and 10.0.1.0/27
10.0.0.0/8 and 11.0.0.0/8
10.0.0.0/16 and 10.0.64.0/24
10.0.0.0/24 and 10.0.1.0/24 (*)
40. You have decided to migrate your application to Oracle Cloud Infrastructure and use Oracle Functions to deploy your microservices.
Which monitoring metrics are available to help you calculate your total cost for using Oracle Functions per month? (Choose Two)
(Choose all correct answers)
(0/1) Points
Number of times a function is invoked. (*)
Network bandwidth used by your functions.
Length of time a function runs. (*)
Amount of storage used by your functions.
Amount of RAM used by your functions.
41. Your customer has gone through a recent reorganization. As part of this change, they are organizing their Oracle Cloud Infrastructure (OCI) compartment structure to align with the company's new organizational structure. (Refer to the exhibit)
exhibit
They have made the following change:
Compartment A is moved, and its new parent compartment is compartment Dev.
Policy defined in compartment A: Allow group G1 to manage instance-family in compartment A
Policy defined in root compartment: Allow group admins to manage instance-family in compartment Ops: Test: A
After the compartment move, which action will provide users of group G1 and admins with similar privileges as before the move?
(1/1) Points
Define the following policy in compartment Dev:
Allow group admins to manage instance-family in compartment Ops: Dev: A
Define the following policy in compartment Dev:
Allow group G1 to manage instance-family in compartment A (*)
Define the following policies in compartment Dev:
Allow group G1 to manage instance-family in compartment A
Allow group admins to manage instance-family in compartment Ops: Dev: A
No change in any policy statement is required as all the policies associated with a compartment being moved is automatically updated
42. You notice that a majority of your Oracle Cloud Infrastructure (OCI) resources like compute instances, block volumes, and load balancers are not tagged. You have received a mandate from your CIO to add a predefined set of tags to identify owners for respective OCI resources. E.g. if Chris and Larry each create compute instances in a compartment, the instances that Chris creates include tags that contain his name as the value, while the instances that Larry creates have his name.
Which option is the simplest way to implement this new tagging requirement?
(1/1) Points
Create an OCI Identity and Access Management policy requiring users to tag resources with their user name.
Create an OCI Identity and Access Management policy to automatically tag a resource with the user name.
Create a default tag for each compartment, which ensure that appropriate tags are applied at the time of resource creation.
Create tag variables to automatically tag a resource with the user name. (*)
43. As part of planning the network design on Oracle Cloud Infrastructure, you have been asked to create an Oracle Cloud Infrastructure Virtual Cloud Network (VCN) with 3 subnets, one in each Availability Domain. Each subnet needs to have a minimum of 64 usable IP addresses.
What is the smallest subnet and VCN size you should use to implement this design? The requirements are static, so no growth is expected.
(1/1) Points
/24 for the VCN; /24 for the subnets
/22 for the VCN; /25 for the subnets
/23 for the VCN; /25 for the subnets (*)
/22 for the VCN; /24 for the subnets
44. An online gaming application is deployed to multiple Availability Domains in the Oracle Cloud Infrastructure (OCI) us-ashburn-1 region. Considering the high volume of traffic that the gaming application handles, the company has hired you to ensure that the data stored by the application is scalable, highly available, and disaster resilient. In the event of failure, the Recovery Time Objective (RTO) and Recovery Point Objective (RPO) must be less than 2 hours.
Which Disaster Recovery strategy should be used to achieve the RTO and RPO requirements in the event of a system failure?
(0/1) Points
Create a user defined backup policy with a schedule of generating hourly backups for block volumes.
Create a user defined backup policy with a schedule of generating daily backups for block volumes.
Configure hourly block volumes backups using the OCI Command Line Interface (CLI). (*)
Configure hourly block volumes backups through the OCI Storage Gateway service.
45. You are a solution architect working with a startup that has decided to move their workload to Oracle Cloud Infrastructure. Since their workload is small, upon architecting, you decide its sufficient to use 8 compute instances to run their workload. The company wants to use a common storage for their instances. So, you propose the idea of attaching a block volume to multiple instances to provide a common storage.
Which of the below option is NOT true for such a solution?
(0/1) Points
Once you attach a block volume to an instance as read-only, it can only be attached to other instances as read-only.
Block volumes attached as read-only are configured as shareable by default.
If the block volume is already attached to an instance as read/write non-shareable you can't attach it to another instance until you detach it from the first instance.
You can delete a block volume from one instance without detaching it from all other instances there by keeping other instance’s storage intact. (*)
46. You are trying to troubleshoot the configuration of your Oracle Cloud Infrastructure (OCI) Load Balancing service. You have a backend HTTP service for which you have created a backend set in the load balancer. You have configured health checks for the backend set. Although the health checks appear good, customers sometimes experience transaction failures.
Which of the following options will definitely lead to this problem?
(0/1) Points
You are running a TCP-level health check against your HTTP service. The TCP handshake can succeed and indicate that the service is up even when the HTTP service has issues. (*)
You are using iSCI for block volume attachment to the compute instances in your backed HTTP service. TCP/IP configuration of your block volume attachment is not configured correctly, leading to issues in your backend service.
You are using OCI Domain Name System. You have misconfigured the 'A' record with the wrong IP address leading to requests not getting routed correctly.
You are NOT using regional subnets in your Virtual Cloud Network. With Availability Domain (AD) specific subnet, the compute instances of the backend service running in the subnet have issues when the AD is down.
47. There are two compartments: Networks and DevInstances
There are two groups: NetworkAdmins with a user named Nick, and Devs with a user named Dave
The following IAM policies are being used:
Allow group NetworkAdmins to manage virtual-network-family in compartment Networks
Allow group NetworkAdmins to manage instance-family in compartment Networks
Allow group Devs to use virtual-network-family in compartment Networks
Allow group Devs to manage all-resources in compartment DevInstances
Nick creates a VCN in Networks compartment. Dave creates a VCN in DevInstances compartment.
Which of the following statements is INCORRECT?
(0/1) Points
Nick cannot launch new instances in DevInstances compartment
Dave launches instances in DevInstances using the VCN in Networks compartment
Dave cannot launch new instances in Networks compartment
Nick launches instances in Networks using VCN in DevInstances compartment (*)
48. A company is running High Performance Computing workloads on Oracle Cloud Infrastructure and are using OCI bare metal compute shape. They have decided to create a custom image of the bare metal instance's boot disk and use it to launch other instances.
Which of the following is a NOT a true statement?
(0/1) Points
Before you create a custom image of an instance, you must disconnect all iSCSI attachments and remove all iscsid node configurations from the instance.
You can create additional custom images of an instance while the instance is engaged in the image creation process. (*)
Editing custom Windows images is not supported due to hardware differences between shapes.
Custom images do not include the data from any attached block volumes.
49. You are working as a security consultant with a global insurance organization which is using Microsoft Azure Active Directory as an identity provider to manage user login/passwords. When a user logs in to Oracle Cloud Infrastructure (OCI) console, it should get authenticated by Azure AD.
Which set of steps are required to be configured in OCI to meet this requirement?
(1/1) Points
Setup Azure AD as an Enterprise Application, configure OCI for single sign-on, map Azure AD groups to OCI groups, set up the IAM policies to govern access to Azure AD groups.
Setup Azure AD as an Enterprise Application, map Azure AD users, groups and policies to OCI groups and users.
Setup Azure AD as an Identity Provider, map Azure AD groups to OCI groups, set up the IAM policies to govern access to Azure AD groups. (*)
Setup Azure AD as an Identity Provider, import users and groups from Azure AD to OCI, set up IAM policies to govern access to Azure AD groups.
50. A fast growing E-commerce company has deployed their online shopping application on Oracle Cloud Infrastructure. The application was deployed on compute instances with Autoscaling configuration for application servers fronted by a load balancer and OCI Autonomous Transaction Processing (ATP) in the backend. In order to promote their e-commerce platform 50% discount was announced on all the products for a limited period. During the day 1 of promotional period it was observed that the application is running slow and company’s hotline is flooded with complaints.
What could be two possible reasons for this situation?
(Choose all correct answers)
(0/1) Points
The health check on some of the backend servers has failed and the load balancer has taken those servers temporarily out of rotation. (*)
As part of Autoscaling, the load balancer shape has dynamically changed to a larger shape to handle more incoming traffic and the system was slow for a short time during this change.
Autoscaling has already scaled to the maximum number of instances specified in the configuration and there is no room for scaling further. (*)
The health check on some of the backend servers has failed and the load balancer was rebooting these servers.
1. Which two features are available in the Enterprise Edition of Oracle Autonomous Database?
(Choose all correct answers)
(0/1) Points
Database In-Memory
Tablespace Encryption (*)
Data Guard (*)
Oracle RAC
2. Which are the three types of autonomous databases you can deploy?
(Choose all correct answers)
(0/1) Points
Autonomous Ledger Database
Autonomous Data Warehouse (*)
Autonomous Document Database
Autonomous JSON Database (*)
Autonomous Transaction Processing (*)
3. Which two statements are true about Autonomous Database?
(Choose all correct answers)
(1/1) Points
Users have access to the OS of the Autonomous Database stack.
It is built and operates on Exadata infrastructure. (*)
It makes use of Machine Learning for database tuning. (*)
Customers are responsible for managing updates.
4. Which Autonomous Database edition provides Active Data Guard?
(1/1) Points
Standard Edition 2
Enterprise Edition
Enterprise Edition Extreme Performance (*)
Enterprise Edition High Performance
5. What is the maximum number of OCPUs that can be deployed for an Oracle DB on Bare Metal?
(1/1) Points
52 (*)
24
48
12
1. What two statements are true when you upgrade the OKE cluster with the new version?
(Choose all correct answers)
(0/1) Points
The worker nodes are upgraded by the customer. (*)
The Control plane and worker nodes are updated by the customer.
The control plane is updated by Oracle. (*)
The Control plane and worker nodes are automatically updated by Oracle.
2. Which three can be used to push docker images to OCIR?
(Choose all correct answers)
(0/1) Points
Oracle Functions Service (*)
Docker CLI (*)
SQL Plus
Docker v2 API (*)
Data Pump
3. Identify three correct statements when configuring API gateway in OCI?
(Choose all correct answers)
(0/1) Points
API gateway instances can run on separate Fault domains. (*)
API gateway instance placement is controlled by user during provisioning.
VCN must exists before creating an API gateway. (*)
VCN is created when you create an API gateway.
API gateway instances can run on separate Availability domain. (*)
4. Identify the two correct statements for deleting a docker image from OCIR?
(Choose all correct answers)
(0/1) Points
Tagged images cannot be deleted.
Only Manual deletes are possible.
There is time limit to undelete the image. (*)
You can use OCI CLI to perform the delete. (*)
5. Identify the correct statement after you edit the configuration
of a Node Pool in OKE cluster.
(0/1) Points
The configuration changes affect only the new nodes created after edit. (*)
No nodes are affected with the edits till you restart the entire OKE cluster.
The new configuration affects existing nodes and the new nodes created after edit.
The new configuration affects only existing nodes in the pool.
1. Which Disaster Recovery strategy provides data protection and availability for Oracle Database by maintaining an exact physical replica of the production copy at a remote location that is open read-only while replication is active?
(1/1) Points
Golden Gate
Active Data Guard (*)
Oracle Streams
Physical Standby
2. Which three key elements should be considered when designing high availability architecture?
(Choose all correct answers)
(0/1) Points
Monitoring (*)
Virtualization
Redundancy (*)
Scalability
Failover (*)
3. Which two statements are true about Availability Domains (AD)?
(Choose all correct answers)
(0/1) Points
They provide high availability for application resources within a Fault Domain.
A regional subnet can be shared between two ADs. (*)
One region can have only one AD.
Multiple ADs will never share physical infrastructure. (*)
4. How many Fault Domains does one Availability Domain contain?
(1/1) Points
three (*)
four
two
one
5. Which are the two main metrics to measure the effectiveness of a Disaster Recovery setup?
(Choose all correct answers)
(1/1) Points
Minimum Time to Recover (MITR)
Mean Time to Recover (MMTR)
Recovery Point Objective (RPO) (*)
Recover Time Objective (RTO) (*)
1. Identify the correct statement for DB system scalability in OCI.
(1/1) Points
Virtual Machine DB systems have flexible storage and CPU. (*)
Bare Metal DB system have flexible storage capability.
VM DB systems are scalable as they use NVMe local storage.
Both Bare Metal systems and Virtual Machine DB systems are flexible.
2. In Oracle Database Cloud Service, which edition features Active Data Guard?
(0/1) Points
Enterprise Edition Extreme Performance (*)
Standard Edition 2
Enterprise Edition High Performance
Enterprise Edition
3. Which term is used to refer to three-way mirroring?
(0/1) Points
Low redundancy
Extreme redundancy
Medium redundancy
High redundancy (*)
4. Which operation is NOT supported for DB systems in OCI?
(1/1) Points
Scaling of CPU
Convert from VM DB system to Bare Metal DB system. (*)
Manual Backups
Moving DB system to another compartment.
5. Which command will you use to get the port number that is being used by the enterprise manager database console?
(1/1) Points
emctl systeminfo
emctl dbconsole –getport
emctl check dbconsole
emctl status dbconsole (*)
1. Which two are required for Autonomous Database Manual Backups?
(Choose all correct answers)
(0/1) Points
The name format for the bucket in object storage must follow backup_<databasename> (*)
The object bucket name must be in uppercase.
The object bucket name must be in lowercase. (*)
The name format for the bucket in object storage must follow
2. Which statements are true about Autonomous Database Cloning? (Choose two)
(Choose all correct answers)
(0/1) Points
Containing just the metadata of the source Autonomous Database (*)
Containing just the data of the source Autonomous Database
As a refreshable (read-write) clone of the source Autonomous Database
As a refreshable (read-only) clone of the source Autonomous Database (*)
3. Which three are required for provisioning an Oracle Autonomous Database instance?
(Choose all correct answers)
(0/1) Points
Workload Type (*)
Number of Tablespaces
Number of CPUs (*)
Database Name (*)
Backup Location FRA Size
4. Which type of Autonomous Database will you deploy for decision support systems?
(1/1) Points
JSON
Transaction Processing
Data Warehouse (*)
APEX
5. What is true for Auto Scaling of Autonomous database? (Choose two)
(Choose all correct answers)
(1/1) Points
The database experiences a downtime when scaling down.
Auto Scaling Max limit is twice the number of current OCPUs.
The storage will automatically scale up when OCPUs are increased.
Scaling up or down can be done online. (*)
OCPU can be scaled up or down (*)
1. Within Terraform configuration files, which block represents cloud infrastructure components?
(0/1) Points
State
Components
Resource (*)
Data Source
2. Which two statements are true about Terraform?
(Choose all correct answers)
(0/1) Points
Configuration can be in a single file or split across multiple files. (*)
Terraform works on files with .tf or .tf.json extensions in the current working directory. (*)
Terraform works on files with .tf or .tf.json extensions in the current working directory and its subdirectories by default.
If there are any unsupported file formats present in the directory, Terraform returns an error.
3. Which Terraform command will you execute to display the list of resources to be added?
(0/1) Points
terraform info
terraform resource
terraform stat
terraform plan (*)
4. Which configuration format is supported by Terraform?
(1/1) Points
HCL (*)
Java
PHP
SQL
5. In which file is variable definition for Terraform projects done?
(0/1) Points
terraform.tfvars.tf
terraform.tfvars (*)
terraform.json
terraform.tf.json
1. How many replicas are maintained by a vSAN3 Node cluster?
(0/1) Points
two (*)
one
five
three
2. Which two components are required to establish a connection between on-premises and OCVS?
(Choose all correct answers)
(0/1) Points
NAT Gateway
FastConnect (*)
VMWare WAF
VMware HCX (*)
3. Which two statements are true for a Software-Defined Data Center?
(Choose all correct answers)
(0/1) Points
It makes use of a vSphere cluster. (*)
It can support a maximum of 32 hosts.
All elements of the infrastructure—networking, storage, CPU, and security—are virtualized and delivered as a service. (*)
It consumes more resources compared to a physical data center.
4. Which is the FastConnect equivalent on Azure to make the connection between the two?
(0/1) Points
Express Link
Dynamic Routing Gateway
Virtual Network Gateway
ExpressRoute (*)
5. In an SDDC, where do customers configure their network segments, security, virtual distributed switches, and other components?
(1/1) Points
NSX-X
NSX-V
NSX-H
NSX-T (*)
1. Which type of migration is supported if you have a direct connection to your on-premises database without a firewall configuration?
(1/1) Points
Both online and offline migration are supported. (*)
offline migration only
online migration only
Migration is not possible because the firewall is not configured.
2. Under which category does Data Migration via Data Pump or GoldenGate fall?
(0/1) Points
Offline Migration
Logical Migration (*)
Physical Migration
Direct Migration
3. For offline transportation of data, which command-line software will you use to prepare the data transfer disks for shipment to Oracle?
(0/1) Points
Data Migration Utility
Data Transfer Utility (*)
Data Pump Utility
Data Transportation Utility
4. Which statements are true about Data Transfer Disk? (Choose two)
(Choose all correct answers)
(0/1) Points
It is an online data transfer solution.
A customer rents one or more Data Transfer Appliances from Oracle (150 TBs), loads data, and sends it to a Data Transfer Site.
After data is ingested into the customer’s account, the devices are wiped clean to NIST 800-88 standards. (*)
Data is encrypted (AES-256) before transit. (*)
5. Which statements are true about Storage Gateways? (Choose two)
(Choose all correct answers)
(0/1) Points
It is installed as a Linux Docker instance on one or more hosts in your on-premises data center. (*)
It is a free service for all Oracle Cloud Infrastructure customers. (*)
It can be used as a general purpose network-attached storage server.
NFS to API translation needs to be done by the customer in order to use
Storage Gateways.
 Incorrect
 
1. Which two statements are true about OCI WAF?
(Choose all correct answers)
(0/1) Points
It includes over 250 predefined rule sets to protect against the most known attackers on web applications. (*)
It cannot protect against Layer 7 distributed denial-of-service (DDoS) attacks.
It can protect multi-cloud environments but not on-premises environments.
It is PCI-compliant. (*)
2. Which sign-in option should be used to sign in to OCI and then navigate to other Oracle Cloud services without reauthenticating?
(0/1) Points
Federation
IDCS (*)
Direct Sign in
Local user
3. Which two are customer responsibilities for an OCI WAF deployment?
(Choose all correct answers)
(0/1) Points
Configure WAF onboarding dependencies (DNS, ingress rules, network). (*)
Monitor WAF for distributed denial-of-service (DDoS) attacks.
Keep WAF infrastructure patched and up to date.
Onboard/configure the WAF policy for the web application. (*)
4. Which OCI security feature can be used to dynamically block bad bots?
(0/1) Points
Data Vault
Cloud Guard
Security Zone
Web Application Firewall (*)
5. Which security type ensures that a specific URL is accessible by humans only?
(0/1) Points
JavaScript Challenge
Black Hat Challenge
CAPTCHA Challenge (*)
Vicarious Challenge
1. What is true about OCI Architecture solutions? (Choose three)
(Choose all correct answers)
(0/1) Points
Solutions can be deployed to your tenancy. (*)
It only provides documentation for popular architectures.
You may use services like Vault, Cloud guard, and Service connector hub during provisioning. (*)
These stacks or solutions cannot be customized.
Solution stacks are available on GitHub for deployment. (*)
2. What is true about deploying a security architecture from OCI architecture center? (Choose three)
(Choose all correct answers)
(0/1) Points
Service policies for deployed services are written by Tenancy Admins after the deployment.
It is a based on a two-tier network topology.
Service policies for deployed services are written automatically. (*)
You can deploy these solutions to your OCI account tenancy directly. (*)
Components are isolated using compartments. (*)
3. Identify the correct steps to deploy an OCI architecture into your tenancy from OCI architecture center.
(Choose all correct answers)
(0/1) Points
Choose the reference architecture and export it to a Terraform plan file in the object storage bucket.
Choose the reference architecture and click Deploy to point to your OCI tenancy login. (*)
Use resource manager to read the Terraform Stack file from GitHub. (*)
Use resource manager to read the Terraform Stack file from Object storage bucket.
Choose a solution and print the necessary steps and follow them using OCI CLI.
4. The Architecture supports traffic coming from an on-premises network through the Hub and then talks to a VCN.
(0/1) Points
Hub-Spoke Architecture (*)
Hub-Hub Architecture
HPC Architecture
Security Architecture
5. What is true about OCI architecture center? (Choose two)
(Choose all correct answers)
(0/1) Points
Limited to Oracle Apps and Oracle database solutions
Has build and deploy series with customer testimonials (*)
Provides reference architecture about best practices for performance, security, and costs. (*)
Extra cost to customer
1. Which statements are true about Autonomous Transaction Processing? (Choose two)
(Choose all correct answers)
(0/1) Points
Data is stored in row format. (*)
Missing indexes are detected and created. (*)
Data is stored in columnar format.
Complex SQL queries are optimized.
2. Which operations are included in automated data center operations?
(1/1) Points
Provisioning a database
Patching a database
Online backups of a database
Automatically handling failures and errors
All of the above (*)
3. Which statement is true about Autonomous Data Warehouse?
(1/1) Points
Response time is optimized for queries.
Missing indexes are detected and created.
Data is stored in columnar format. (*)
Data is stored in row format.
4. Which two actions can be performed from the OCI Console for an Oracle Autonomous Database?
(Choose all correct answers)
(1/1) Points
Increase Storage allocated for Database (*)
Increase Network Bandwidth
Scale up/down Memory
Scale up/down CPU (*)
5. Which statement is true about Autonomous Transaction Processing?
(1/1) Points
Data is stored in columnar format.
It is used for analytic workloads.
It is used with data marts and machine learning.
It is used for OLTP and mixed workloads. (*)
6. Which statements are true about using Oracle Cloud Infrastructure? (Choose three)
(Choose all correct answers)
(0/1) Points
It provides complete lifecycle automation. (*)
It supports only Virtual Machine and Bare Metal DB Systems.
It supports only Exadata systems.
It supports only Bare Metal DB Systems.
It provides high availability and scalability. (*)
It enables you to run everything from small VMs to large bare metal clusters. (*)
1. Which Traffic Management Steering policy distributes DNS traffic to different endpoints based on the location of the end user?
(0/1) Points
Load balancer
Geolocation steering (*)
IP prefix steering
ASN steering
2. Which two statements are true about boot volumes?
(Choose all correct answers)
(0/1) Points
When you launch a virtual machine (VM) or bare metal instance based on a platform image or custom image, a new boot volume for the instance is created in the same compartment. (*)
When you terminate the instance, you can preserve the boot volume and its data. (*)
When you terminate your instance, you can keep the associated boot volume and use it to launch a new instance, but it must be of the same shape and size as the original instance.
You cannot group boot volumes with block volumes into the same volume group
3. When triggered, an alarm sends an alarm message to the configured topic. In which service is the topic configured?
(0/1) Points
Synchronization
Monitoring
Management
Notification (*)
4. Which four layers of access control are used by the File Storage service?
(Choose all correct answers)
(0/1) Points
Network security (*)
NFS export option (*)
Web application firewall
NFS v.3 Unix security (*)
Oracle Cloud Infrastructure (OCI) policy (*)
Key management
5. Which two statements are true about Object Storage?
(Choose all correct answers)
(0/1) Points
Archive is the default tier for Object Storage buckets.
You can back up a DB system to Object Storage only via the Internet.
It is a regional service and is not tied to any specific compute instance. (*)
It supports private access from Oracle Cloud Infrastructure resources in a VCN through a service gateway. (*)
6. You want to make a point-in-time snapshot of the data on a block volume. Under which condition can you make a block volume backup?
(0/1) Points
When it is attached to an instance or while it is detached (*)
Only when it is attached to an instance
OCI does not provide point-in-time backup of data on a block volume.
Only when it is detached from all instances
7. Which block volume performance level is recommended for throughput-intensive workloads with large sequential I/O, such as streaming, log processing, and data warehouses?
(0/1) Points
Lower cost (*)
Ultra-high performance
Balanced
High performance
8. Which OCI networking method must you use to divide your network into multiple VCNs based on departments, with each VCN having direct, private access to the others while avoiding traffic flowing over the Internet or through your on-premises network?
(0/1) Points
NAT gateway
Site-to-site VPN
VCN peering (*)
FastConnect
9. Which three components are managed by the customer and not by Oracle in a shared security model of OCI?
(Choose all correct answers)
(0/1) Points
Physical networks
Application (*)
Accounts and identities (*)
Physical hosts
Data (*)
10. Which Object Storage tier would you use for data that you need to access quickly, immediately, and frequently?
(1/1) Points
Infrequent access tier
High performance tier
Ultra-high performance tier
Standard tier (*)
Archive tier
11. Examine these two policies:
Allow group GroupAdmins to manage groups in tenancy where all {target.group.name=/A-*/,target.group.name!='A-Admins'}
Allow group GroupAdmins to inspect groups in tenancy
Which statement is true?
(0/1) Points
GroupAdmins can create, update, or delete any groups whose names start with "A."
GroupAdmins can create, update, or delete any groups whose names end with "A-", except for the A-Admins group.
GroupAdmins can create, update, or delete any groups whose names start with "A."
GroupAdmins can create, update, or delete any groups whose names start with "A-", except for the A-Admins group. (*)
12. You have enabled versioning for a bucket. What happens when you upload an object with the same name as an existing object?
(0/1) Points
The existing object becomes a previous version and the newly uploaded object becomes the latest version. (*)
The object is overwritten and the overwritten object is not retained or recoverable.
The existing object is moved to a different bucket which has been marked for archival.
It returns an error.
13. Which two statements are true about a block volume clone?
(Choose all correct answers)
(0/1) Points
It creates a single point-in-time copy of a volume without having to go through the backup and restore process. (*)
You can clone a volume group. (*)
It is slower than a block volume backup.
It makes use of Object Storage.
14. Which Oracle Database edition is required to deploy a two-node Oracle RAC DB system?
(0/1) Points
Enterprise Edition - Extreme Performance (*)
Enterprise Edition - High Performance
Enterprise Edition
Standard Edition
15. What happens to traffic if there is no route rule that matches the network traffic you intend to route outside the VCN?
(1/1) Points
It is sent over the Internet gateway
It is sent over the NAT gateway
It is sent over FastConnect.
It is dropped. (*)
16. Examine this policy:
Allow group GroupMgr to manage volumes in tenancy where request.permission != 'VOLUME_DELETE'
Which three actions can a user belonging to the GroupMgr group perform?
(Choose all correct answers)
(0/1) Points
Create volumes. (*)
Delete volumes.
Move volumes. (*)
Update volumes. (*)
17. Which two statements are true about local VCN peering?
(Choose all correct answers)
(0/1) Points
The two VCNs must have overlapping CIDRs.
It uses an Internet gateway.
You can use a single DRG for local peering. (*)
The VCNs can be in different Oracle Cloud Infrastructure tenancies but in the same region. (*)
18. Which network security service allows you to separate the VCN's subnet architecture from your application security requirements?
(0/1) Points
Flow logs
Network security group (*)
Security lists
Access control
19. What is used to specify the actions that Cloud Guard can take when detectors identify problems?
(0/1) Points
Responder (*)
Alarms
Threshold
Metrics
20. At which layer of the OSI model does a web application firewall help to filter traffic?
(0/1) Points
Application layer (*)
Presentation layer
Transport layer
Datalink layers
21. Which three other components are emitted along with raw data points or timestamp-value pairs as metrics to the Monitoring service?
(Choose all correct answers)
(0/1) Points
Namespace (*)
Attribute
Dimension (*)
Data
Metadata (*)
22. What is the allowable VCN size range?
(0/1) Points
/8 through /16
/0 through /32
/16 through /30 (*)
/8 through /24
23. Database admins and app developers want to run OLTP and OLAP workloads directly from their MySQL database, thus eliminating the need for complex, time-consuming, and expensive data movement and integration with a separate analytics database? Which feature of MySQL database service enables this?
(0/1) Points
ElastiCache
Exalogic
Heatwave (*)
Automatic Memory Management
24. For maximum cost efficiency, when launching compute instances, which capacity type must you select for workloads that run periodically or for short periods of time and that don’t require continuous availability?
(0/1) Points
Pre-emptible capacity (*)
Reserved capacity
On-demand capacity
Dedicated capacity
25. An instance running in a development compartment needs to make API calls to other OCI services. How can you achieve this without configuring user credentials or setting up a configuration file?
(0/1) Points
Create a dynamic group with matching rules to include your instance.
Create a dynamic group with matching rules to include your instance and write a policy for this dynamic group. (*)
The requirement cannot be achieved with configuring user credentials or setting up a configuration file.
Instances can automatically make calls to other OCI services; hence no configuration is needed.
26. Which TWO statements are true about site-to-site VPN?
(Choose all correct answers)
(0/1) Points
It provides a site-to-site IPSec connection between your on-premises network and your virtual cloud network (VCN). (*)
It encrypts IP traffic before the packets are transferred from the source to the destination and decrypts the traffic when it arrives. (*)
You cannot use multiple site-to-site connections between your on-premises network and virtual cloud network (VCN).
You need a dynamic routing gateway when you are trying to connect your VCN to the Internet by using site-to-site VCN.
27. Which gateway allows resources within a VCN to communicate with the Internet but prevents any inbound traffic?
(0/1) Points
NAT gateway (*)
Service gateway
Dynamic routing gateway
Internet gateway
28. Which two statements are true about application-based load balancers?
(Choose all correct answers)
(0/1) Points
They are based on IP address and destination ports only.
They act only on the TCP layer variables.
They perform content-based routing. (*)
They support both HTTP and HTTPS. (*)
29. Which co-managed database service applies the combined power of Exadata and Oracle Cloud Infrastructure while enabling you to meet your organization's data-residency requirements?
(0/1) Points
Exadata Cloud@Customer (*)
Bare metal and virtual machine DB systems
Exadata Cloud Service
Autonomous Database
30. Which three encryption algorithms are supported by OCI Vault?
(Choose all correct answers)
(0/1) Points
IDEA
HMAC
AES (*)
RSA (*)
ECDSA (*)
31. You want to forbid the creation of public buckets in Object Storage.
Which OCI security feature can you use to achieve this?
(0/1) Points
Event notifications and topics
Security zone and security zone recipe (*)
Roving Edge infrastructure and data sets
Triggers and procedure
32. Which type of load balancer distributes traffic based on IP address and destination ports only?
(1/1) Points
Layer-2
Layer-6
Layer-7
Layer-4 (*)
33. Which type of logs are emitted by API gateways, events, and Object Storage?
(0/1) Points
Archive logs
Service logs (*)
Audit logs
Custom logs
34. For which TWO types of workloads must you use a bare metal compute instance?
(Choose all correct answers)
(0/1) Points
Virtualized workloads
Workloads that require a specific hypervisor (*)
Performance-sensitive workloads (*)
Workload that do not require BYO image
35. You want users of the NetworkAdmin group to manage a cloud network in any compartment of a tenancy. What must you allow the NetworkAdmin group to do?
(0/1) Points
Manage instance-family in compartment ABC.
Use virtual-network-family in compartment XYZ.
Manage virtual-network-family in tenancy. (*)
Manage network-catalog-listing in tenancy.
36. Which TWO conditions must be met for an instance to communicate directly with the Internet?
(Choose all correct answers)
(0/1) Points
Instance must have a public IP address.
(*)
Public subnet must have route tables without any security lists.
Instance's VCN must have an Internet gateway. (*)
Instance must be in a private subnet.
37. Which two statements are true about auth tokens?
(Choose all correct answers)
(0/1) Points
Every user can generate up to two auth tokens. (*)
They make use of a public key/private key pair.
They can be used to authenticate third-party APIs. (*)
They expire after 14 days by default.
38. Which protocol is used by FastConnect?
(0/1) Points
DNS routing
IPSec
BGP (*)
OSPF
39. Which two statements are true about NoSQL Cloud Service?
(Choose all correct answers)
(0/1) Points
Throughput capacity is measured in write units and read units. (*)
Storage capacity is managed in each NoSQL cluster.
It interoperates with NoSQL Database Enterprise edition through a single programmatic interface with no application code modification. (*)
Database deployment can be at on-premises data centers, or BYOL with Oracle Cloud or other cloud vendors.
40. Which TWO statements are true about private IP objects?
(Choose all correct answers)
(0/1) Points
Secondary private IPs must be manually deleted when you terminate the mapped instance.
A private IP can have a public IP assigned to it. (*)
You can add a secondary private IP to either the primary VNIC or a secondary VNIC of an instance after it's launched. (*)
Each instance receives a primary private IP object and a secondary private IP object at launch.
41. When changing the performance level of boot volumes, which two performance levels can you select?
(Choose all correct answers)
(0/1) Points
Ultra-high performance
Balanced (*)
High performance (*)
Lower costs
42. Which autonomous database type is specialized for developing NoSQL-style applications that use JavaScript Object Notation documents?
(0/1) Points
Autonomous Transaction Processing
Oracle APEX Application Development
Aunomous JSON Database (*)
Autnomous Data Warehouse
43. You have two objects in a bucket: ObjectX and ObjectY. ObjectX was last modified 14 months ago and Object Y was last modified 3 months ago. You create a retention rule with a duration of 1 year. Which two statements are true?
(Choose all correct answers)
(0/1) Points
Object X cannot be modified or deleted for the next 2 months.
Object Y can be modified or deleted immediately.
Object Y cannot be modified or deleted for the next 9 months. (*)
Object X can be modified or deleted immediately. (*)
44. When you create a block volumne, what is its default performance level?
(0/1) Points
Balanced (*)
Lower cost
High performance
Ultra-high performance
45. Which policy is automatically applied when you create a cloud account?
(0/1) Points
Allow Group Administrator to manage all-resources in tenancy (*)
Allow Group Administrator to manage all-resources in regions
Allow Group Administrator to manage all-resources in all-domains
Allow Group Administrator to manage all-resources in all-compartments
46. At which level are retention rules configured?
(0/1) Points
Bucket level (*)
Namespace level
Compartment level
Object level
47. You want a specific set of users, who do not have IAM user credentials, to access a bucket for a duration of 2 days. Which mechanism can help you achive this?
(0/1) Points
Converting the bucket to a public bucket
Pre-authenticated requests (*)
Auto config file creation
Moving the bucket to an archive tier
48. Which OCI security feature can you use to ensure that unwanted bots are mitigated while desirable bots are allowed to enter?
(0/1) Points
Security zone
Web application firewall (*)
Cloud Guard
Data Vault
49. Which three security services provide infrastructure protection?
(Choose all correct answers)
(0/1) Points
Cloud Guard
DdoS Protection (*)
WAF (*)
Key Vault
Securtiy lists (*)
50. Compartment A is a child compartment of root.
Compartment B is a child compartment of Compartment A.
Compartment C is a child compartment of Compartment B.
You have attached the following policy to Compartment A:
Allow group NetworkAdmins to manage virtual-network-family in Compartment A.
For which compartments can a user of the NetwrokAdmin group manage VCNs?
(0/1) Points
Compartment B and Compartment C only
Compartment A, Compartment B, and Compartment C only (*)
Root compartment, Compartment A, Compartment B, and Compartment C
Compartment A only
51. Which TWO statements are true about the OS Management service?
(Choose all correct answers)
(0/1) Points
If the OS Management service fails while updating a package, you must contact Oracle Support to identify the cause of failure.
Actions such as installing or removing updates are synchronous and do not initiate work requests.
It allows you to specify a date and time when a managed instance will be updated. (*)
If a managed instance is terminated, the OS Management service will automatically remove it from the managed instance list. (*)
52. Which three statements are true about a master encryption security key protected by software?
(Choose all correct answers)
(0/1) Points
It is stored in an HSM device.
It can be exported from a server. (*)
It cannot be exported from HSM.
Cryptographic operations are allowed on clients. (*)
It is stored in a server. (*)
53. When you enable auto tiering, objects larger than 1 MiB are automatically moved from the Standard tier to which tier?
(0/1) Points
Backup tier
Infrequent Access tier (*)
Redundancy tier
Archive tier
54. Which three statements are true about compartments?
(Choose all correct answers)
(0/1) Points
Compartments can be nested. (*)
One compartment can have resources from multiple regions. (*)
You cannot control the type of resources that can be created within a compatment.
Multiple compartments can share a single resource.
You can set a budget on a compartment such that you are notified as soon as the budget is exceeded. (*)
 Incorrect
 
 55. Which FOUR types of images can be used in Oracle Cloud Infrastructure?
(Choose all correct answers)
(0/1) Points
Prebuilt application images from Oracle available in the OCI Marketplace (*)
Oracle-provided Windows images (*)
Oracle-provided Solaris images
Custom images created from existing images in OCI (*)
Oracle-provided Linux images (*)
56. Your application or workload includes big data and analytics, media processing, or content management. You require Portable Operating System Interface (POSIX)-compliant file system access semantics and concurrently accessible storage. Which storage servce must you use?
(0/1) Points
Block Storage
Vault Storage
File Storage (*)
Object Storage
57. Which TWO statements are true about autoscaling?
(Choose all correct answers)
(0/1) Points
For autoscaling to work, you must configure a load balancer.
Metric-based autoscaling relies on performance metrics that are collected by the Tracking service.
Each instance pool can have only one autoscaling configuration. (*)
An autoscaling configuration can include one or more autoscaling policies. (*)
58. Which TWO connectivity options can you use to give your virtual cloud network (VCN) access to the Internet?
(Choose all correct answers)
(0/1) Points
FastConnect
Service gateway
Internet gateway (*)
NAT gateway (*)
59. Which Oracle-defined backup policy includes weekly incremental backups that run on Sunday, also includes a full backup that runs yearly during the first part of January, and is retained for five years?
(1/1) Points
Bronze policy
Platinum policy
Gold policy
Silver policy (*)
60. Which TWO statements are true about security lists?
(Choose all correct answers)
(0/1) Points
Each subnet can have only one security list associated with it.
The default security list allows TCP traffic on destination port 22 (SSH) from authorized source IP addresses and any source port. (*)
The default security list does not include a rule to allow ping requests. (*)
They are