1Z0-997-21 Online Practice Questions and Answers

All three Data Guard Configuration are fully supported on Oracle Cloud infrastructure (OCI). You want to deploy a maximum availability architecture (MAA) for database workload. Which option should you consider while designing your Data Guard configuration to ensure best RTO and PRO without causing any data loss?

A. Configure "Maximum Protection" mode which provides zero data loss If the primary database fails.

B. Configure "Maximum Performance" mode In SYNC mode between two availability domains (same region) which provides, the highest level of data protection that is possible without affecting the performance of the primary database.

C. Configure ''Maximum Scalability" mode which provides the highest level of scalability without compromising the availability of the primary database.

D. Configure ''Maximum Availability" mode in SYNC mode between two availability domains (same region), and use the Maximum Availability mode in SYNC mode between two regions.

A hospital in Austin has hosted its web based medical records portal entirely In Oracle cloud Infrastructure (OCI) using Compute Instances for its web-tier and DB system database for its data tier. To validate compliance with Health Insurance Portability and Accountability (HIPAA), the security professional to check their systems it was found that there are a lot of unauthorized coming requests coming from a set of IP addresses originating from a country in Southeast Asia. Which option can mitigate this type of attack?

A. Block the attacking IP address by creating by Network Security Group rule to deny access to the compute Instance where the web server Is running

B. Block the attacking IP address by implementing a OCI Web Application Firewall policy using Access Control Rules

C. Mitigate the attack by changing the Route fable to redirect the unauthorized traffic to a dummy Compute instance

D. Block the attacking IP address by creating a Security List rule to deny access to the subnet where the web server Is running

Which three options are available to migrate an Oracle database 12.x from an on-premises environment to Oracle Cloud Infrastructure (OCI)?

A. Leverage OCI Storage Gateway asynchronous database migration option.

B. Use Oracle Data Pump Export/Import to migrate the database.

C. Configure RMAN cross-platform transportable tablespace backup sets.

D. Setup OCI schema and data transfer tool with Bare Metal DB Systems as the target.

E. Create a backup of your on-premises database In OCI DB Systems.

You are trying to delete a compartment. The delete operation is falling and you need to troubleshoot the

problem.

Which step should NOT be considered when troubleshooting this issue?

A. Verify that there are no policies In the root compartment that reference the compartment you are trying to delete.

B. Verify that you have removed all resources from the compartment.

C. Make sure you have at least one more compartment in your tenancy other than the root compartment.

D. Search for resources in the compartment for each region that your tenancy is subscribed to.

Which of the following is NOT a good use case for using the functionality available in the Oracle Cloud Infrastructure (OCI) Events service?

A. Publish all events in a specific compartment to Oracle Streaming service for later analysis.

B. Triggers Function using Oracle Functions when new files are uploaded in an OCI Object Storage bucket.

C. Publish a notification when long lived tasks complete, such as OCI Autonomous Database backup completion.

D. Capture Monitoring Alarms and invoke Autoscaling of compute instances.

E. Trigger a notification when a function completes its execution.

You are creating an Oracle Cloud Infrastructure Dynamic Group. To determine the members of this group

you are defining a set of matching rules.

Which of the following are the supported variables to define conditions in the matching rules? (Choose

Two)

A. instance.compartment.id -the OCID of the compartment where the instance resides.

B. instance.tenancy.id -the OCID of the tenancy where the instance resides.

C. tag...value -the tag namespace and tag key.

D. iam.policy.id - the OCID of the IAM policy to apply to the group.

You are part of a project team working in the development environment created in Oracle Cloud Infrastructure (OCI). You realize that the CIDR block specified for one of the subnets in a Virtual Cloud Network (VCN) is not correct and want to delete the subnet. While deleting you get an error indicating that there are still resources that you must delete first. The error includes the OCID of the VNIC that is in the subnet. Which of the following action you will take to troubleshoot this issue?

A. Use OCI CLI to call "network vnic" and "compute vnic-attachment" operations to find out the parent resource of the VNIC.

B. Use OCI CLI to delete the VNIC first and then delete the subnet.

C. Use OCI CLI to delete the subnet using -force option.

D. Copy and paste OCID of the VNIC in the search box of the OCI Console to find out the parent resource of the VNIC.

A company is running High Performance Computing workloads on Oracle Cloud Infrastructure and are

using OCI bare metal compute shape. They have decided to create a custom image of the bare metal

instance's boot disk and use it to launch other instances.

Which of the following is a NOT a true statement?

A. Before you create a custom image of an instance, you must disconnect all iSCSI attachments and remove all iscsid node configurations from the instance.

B. Editing custom Windows images is not supported due to hardware differences between shapes.

C. Custom images do not include the data from any attached block volumes.

D. You can create additional custom images of an instance while the instance is engaged in the image creation process.

You are tasked with building a highly available, fault tolerant web application for your current employer. The security team is concerned about an increase in malicious web-based attacks across the internet and asked what you can do to add a higher level of security to the website. How should you architect the solution on Oracle Cloud Infrastructure (OCI) to meet all requirements defined by your organization? (Choose the best answer.)

A. Deploy at least 3 web application servers, each in a different fault domain, using a regional private subnet. Place a public load balancer in a regional public subnet and create a backend set for all of the web application servers. Deploy a Web Application Firewall (WAF) and configure the load balancer public IP address as the origin.

B. Deploy at least 3 web application servers, each in a different fault domain, using a regional private subnet. Place a public load balancer in a regional public subnet and create a backend set for all of the web application servers. Create a Geolocation steering policy in Traffic Management and add an answer pool that directs to the public IP address of the load balancer. Configure a global catch-all rule to use this answer pool.

C. Deploy at least 3 web application servers, each in a different fault domain, using a regional public subnet. Ensure that each web application server is assigned a public IP address. Deploy a Web Application Firewall (WAF) and configure one Origin for each public IP address.

D. Deploy at least 3 web application servers, each in a different fault domain, using a regional public subnet. Use the OCI Traffic Management service to create a load balancing policy that will resolve DNS evenly between all web servers.

Your company developed a function that needs to access the Oracle Database to inject some data to it at runtime. You are tasked to move this function to the Oracle Cloud Infrastructure (OCI) and use Oracle Functions and access Oracle Autonomous Database. You created a Dockerfile below to run this function, however, you are getting this error "cx_Oracle.DatabaseError: ORA""12560: TNS:protocol adapter error".

What should you do to make sure that Oracle Functions can run this Dockerfile properly? (Choose the best answer.)

A. Add these two lines to your Dockerfile: groupadd """"gid 1000 fn andand \ adduser """"uid 1000 """"gid fn fn

B. Use """"privileged flag while running the Docker container to add runtime privilege

C. Use """"cap""add=ALL flag while running the Docker container to add runtime capability

D. You ned to run this Container as root, so add this line: USER root