Oracle Cloud Infrastructure 2021 Architect Professional (1z0-997-21) Free Practice Test

Question 1

You work for a large bank where security and compliance are critical. As part of the security overview meeting, your company decided to minimize the installation of local tools on your laptop. You have been running Ansible and kubectl to spin up Oracle Container Engine for Kubernetes (OKE) clusters and deployed your application.
For authentication, you are using an Oracle Cloud Infrastructure (OCI) CLI config file that contains OCIDs, Fingerprint, and a locally stored PEM file. Your security team doesn't want you to store any local API key and certificate, or any other local tools.
Which two actions should you perform to spin up the OKE cluster and interact with it? (Choose two.)

A. Create a developer workstation on OCI. Install Ansible and kubectl on it. Use resource principal to authenticate against OCI API and create the OKE Cluster.

B. Work on OCI Cloud Shell to use built-in Ansible and kubectl to deploy the OKE cluster. Use OCI_CLI_AUTH=instance_obo_user environment variable to authenticate using built-in token.

C. Develop your own code using OCI SDK to deploy the OKE cluster.

D. Work on OCI Cloud Shell to use built-in Ansible and kubectl to deploy the OKE cluster. Bring in your own config file and certificate to authenticate against OCI API.

E. Create a developer workstation on OCI. Install Ansible and kubectl on it. Use instance principal to authenticate against OCI API and create the OKE Cluster.

Correct Answer: B,E

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

You developed a microservices based application that runs on Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE). Your security team wants to use SSL termination for this application. What should you do to create a secure SSL termination for this application using fewest steps?

A. Generate a self-signed certificate using Let's Encrypt. Use that certificate on OCI Load Balancer. Create the Kubernetes service usingthis load balancer.

B. Create a self-signed certificate and it's corresponding key. Create a Kubernetes secret using the certificate and the key. Then add these an notations to the Kubernetes service:
annotations:
service.beta.kubernetes.io/oci-load-balancer-ssl-ports: "443"
service.beta.kubernetes.io/oci-load-balancer-security-list-management-mode:"Frontend"

C. Add these annotationsto the Kubernetes service:
annotations:
service.beta.kubernetes.io/oci-load-balancer-ssl-ports: "443"
service.beta.kubernetes.io/oci-load-balancer-ssl-secret-key: ssl-secret-key

D. Create a self-signed certificate and it's corresponding key. Create a Kubernetes secret using then add these annotationsto the Kubernetes service.
Service.beta.kubernete.io/oci-load-balancer-ssl-ports: "443"
Service.beta.kubernete.io/oci-load-balancer-tls-secret:SSL-CERTIFICATE-SECRET

Correct Answer: D

Question 3

An insurance company is storing critical financial data in the Oracle Cloud Infrastructure block volume. This volume is currently encrypted using oracle managed keys. Due to regulatory compliance, the customer wants to encrypt the data using the keys that they can control and not the keys which are controlled by Oracle.
What of the following series of tasks are required to encrypt the block volume using customer managed keys?

A. Create a vault, create a master encryption key in the vault, assign this master encryption key to the block volume.

B. Create a master encryption key, create a data encryption key, decrypt the block volume using existing oracle managed keys, encrypt the block volume using the data encryption key.

C. Create a vault import your master encryption key into the vault, generate data encryption key, assign data encryption key to the block volume.

D. Create a master encryption key, create a new version of the encryption key, decrypt the block volume using existing oracle managed keys and encrypt using new version of the encryption key.

Correct Answer: A

Question 4

You are responsible for migrating your on premises legacy databases on 11.2.0.4 version to Autonomous Transaction Processing Dedicated (ATP-D) In Oracle Cloud Infrastructure (OCI). As a solution architect, you need to plan your migration approach.
Which two options do you need to implement together to migrate your on premises databases to OCI?

A. Convert on-premises databases to PDB, upgrade to 19c, and encrypt Migration.

B. Use Oracle Data Guard to keep on premises database always active during migration

C. Retain changes to Oracle shipped privileges, stored procedures or views In the on-premises databases.

D. Retain all legacy structures and unsupported features (e.g. taw U>Bs) In the onuses databases for migration.

E. Use Oracle GoldenGate replication to keep on premises database online during migration.

Correct Answer: A,E

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

Which of the following features is NOT supported by Oracle Cloud Infrastructure Multi-factor authentication (MFA)?

A. Members of the Administrators group can disable MFA for other users.

B. Members of the Administrators group can enable MFA for other users.

C. Users can disable MFA for their own accounts.

D. Only the user can enable MFA for their own account.

Correct Answer: B

Question 6

You notice that a majority of your Oracle Cloud Infrastructure (OCI) resources like compute instances, block volumes, and load balancers are not tagged. You have received a mandate from your CIO to add a predefined set of tags to identify owners for respective OCI resources. E.g. if Chris and Larry each create compute instances in a compartment, the instances that Chris creates include tags that contain his name as the value, while the instances that Larry creates have his name.
Which option is the simplest way to implement this new tagging requirement?

A. Create an OCI Identity and Access Management policy requiring users to tag resources with their user name.

B. Create an OCI Identity and Access Management policy to automatically tag a resource with the user name.

C. Create a default tag for each compartment, which ensure that appropriate tags are applied at the time of resource creation.

D. Create tag variables to automatically tag a resource with the user name.

Correct Answer: D

Question 7

You are currently working for a public health care company based in the United Stats. Their existing patient records runs in an on-premises data center and the customer is sending tape backups offsite as part of their recovery planning.
You have developed an alternative archival solution using Oracle Cloud Infrastructure (OCI) that will save the company a significant amount of mom on a yearly basis. The solution involves storing data in an OCI Object Storage bucket After reviewing your solution with the customer global Compliance (GRC) team they have highlighted the following security requirements:
* All data less than 1 year old must be accessible within 2 hour.
* All data must be retained for at least 10 years and be accessible within 48 hours
* AH data must be encrypted at rest
* No data may be transmitted across the public Internet
Which two options meet the requirements outlined by the customer GRC team?

A. Create an OCI Object Storage Standard tier bucket Configure a lifecycle policy to archive any object that Is older than 365 days

B. Provision a FastConnect link to the closest OCI region and configure a private peering virtual circuit.

C. Provision a FastConnect link to the closest OCI region and configure a public peering virtual circuit

D. Create an OCI Object Storage Standard tier bucket. Configure a lifecycle policy to delete any object that is older than 7 years

E. Create a VPN connection between your on premises data center and OCI. Create a Virtual Cloud Network (VCN) along with an OCI Service Gateway for OCI Object Storage.

Correct Answer: A,C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 8

Give this compartment structure:

You want to move a compute instance that is in 'Compute' compartment to 'SysTes-Team'.
You login to your Oracle Cloud Infrastructure (OCI)account and use the 'Move Resource' option.
What will happen when you attempt moving the compute resource?

A. The move will fail and you will be prompted to move the VCN first. Once VCN is moved to the target compartment, the Compute instance can be moved.

B. The move will be successful though Compute Instance and its Public and Private IP address will stay the same. The Compute instance VNIC will need to be moved separately. The Compute instance will still be associated with the original VCN.

C. The move will be successful though Compute Instance and its Public and Private IP address will stay the same. The Compute instance VNIC will still be associated with the original VCN.

D. The move will be successful though Compute Instance Public and Private IP address changed, and it will be associated to the VCN in target compartment.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 9

You are creating a compute instance using Oracle Cloud Infrastructure (OCI) Console. You decide to use Oracle provided image for the compute instance launch. Which option is TRUE when using Oracle provided images?

A. If you choose a non-Windows image, the only way to download and update packages is by running apt or yum commands.

B. For a Linux based image, access to host over the internet is permitted only via SSH protocol and all other remote access is disabled.

C. Oracle provided images do not support the ability to supply a custom metadata during instance launch.

D. On Windows images, custom user data scripts are executed using cloud-init to perform various tasks such as enabling GPU support.

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 10

You are responsible for migrating your on-premises legacy databases on 11.2.0.4 version to Autonomous Transaction Processing - Dedicated (ATP-D) in Oracle Cloud Infrastructure (OCI). As a solution architect, you need to plan your migration approach.
Which three options do you need to implement together to migrate your on-premises databases to OCI?

A. Launch Autonomous Transaction Processing - Dedicated database in OCI.

B. Use Oracle GoldenGate replication to keep on-premises database online during migration.

C. Use Oracle Data Guard to keep on-premises database always active during migration.

D. Convert on-premises databases to PDB, upgrade to 19c, and encrypt.

E. Retain all legacy structures and unsupported features (e.g. legacy LOBs) in the on-premises databases for migration.

F. Retain changes to Oracle shipped privileges, stored procedures or views in the on-premises databases.

Correct Answer: A,B,D

Welcome to TestSimulate

Oracle Cloud Infrastructure 2021 Architect Professional (1z0-997-21) Free Practice Test