Oracle Cloud Infrastructure 2022 Architect Professional (1z0-997-22) Free Practice Test

Question 1

A global media organization is working on a project which lets users upload their videos to the site. After upload is complete, the video should be automatically processed by an Al algorithm. The algorithm will try to recognize certain actions in the videos so that it can be used to show related advertisements in future. The development team wants to focus on writing Al code and not worry about underlying infrastructure for high availability, scalability, security and monitoring.
Which Oracle Cloud Infrastructure (OCI) services would meet these requirements?

A. Oracle Container Engine for Kubernetes, OCI Notifications and OCI Object Storage.

B. OCI Resource Manager, OCI Functions and OCI Events service.

C. OCI Object Storage, OCI Events service and OCI Functions.

D. OCI Events, Oracle Container Engine for Kubernetes and OCI Digital Assistant.

Correct Answer: C

Question 2

Your organization is planning on using Oracle Cloud Infrastructure (OCI) File Storage Service (FSS). You will be deploying multiple compute instance in Oracle Cloud Infrastructure (OCI) and mounting the file system to these compute instances. The file system will hold payment data processed by a Database instance and utilized by compute instances to create a overall inventory report. You need to restrict access to this data for specific compute instances and must be allowed/blocked per compute instance's CIDR block.
Which option can you use to secure access?

A. Use stateless Security List rule to restrict access from known IP addresses only.

B. Create a new VCN security list, choose SOURCE TYPE as Service and SOURCE SERVICE as FSS. Add stateless ingress and egress rules for specific P address and CIDR blocks.

C. Create and configure OCI Web Application Firewall service with built in DNS based intelligent routing.

D. Use 'Export option' feature of FSS to restrict access to the mounted file systems.

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

You are helping a customer troubleshoot a problem. The customer has several Oracle Linux servers in a private subnet within a Virtual Cloud Network (VCN). The servers are configured to periodically communicate to the Internet to get security patches for applications Installed on them.
The servers are unable to reach the Internet. An Internet Gateway has been deployed In the public subnet in the VCN and the appropriate routes are configured in the Route Table associated with the public subnet.
Based on cost considerations, which option will fix this Issue?

A. Create a NAT gateway in the VCN and configure the NAT gateway as the route target for the private subnet.

B. Create another Internet Gateway and configure it as route target for the private subnet.

C. Create a Public Load Balancer In front of the servers and add the servers to the Backend Set of the Public Load Balancer.

D. Implement a NAT instance In the public subnet of the VCN and configure the NAT instance as the route target for the private subnet.

Correct Answer: A

Question 4

A2Z corporation is into e-commerce business and is the choice of millions for the best offers it launches. It has a rich set of intelligent applications that runs 24x7 and are very critical to their business.
Continuous infrastructure management and maintenance, rise in customer base and workloads, have made them to think of migrating all workloads to cloud. They have selected Oracle Cloud Infrastructure for migrating both their application and database workload.
You, as an oracle pre-sales consultant has been asked to provide complete migration strategy for their source database workloads which includes oracle and MSSQL. They are particularly concerned about their oracle databases which cannot afford any downtime. They would be establishing fast connect from their data center to oracle data center to avoid any network impact. Their oracle database is around 90TB and MSSQL is around 10TB.
How would you propose the safe migration of customer database while meeting their availability requirement?

A. Propose the use of zero-downtime migration tool for oracle database and use combination of SQL Developer and Oracle GoldenGate for MSSQL migration

B. Propose the use of zero-downtime migration tool for oracle database and use combination of SQL Developer and Oracle SQL Loader for MSSQL migration

C. Propose the use of Oracle datapump for oracle databases and SQL Developer for MSSQL database

D. Propose the use of Oracle GoldenGate to perform zero downtime migration for both MSSQL and Oracle source databases

Correct Answer: A

Question 5

A customer has a Virtual Machine instance running in their Oracle Cloud Infrastructure tenancy. They realized that they wrongly picked a smaller shape for their compute instance. They are reaching out to you to help them fix the issue.
Which of the below options is best recommended to suggest to the customer?

A. Change the shape of the virtual machine instance using the Change Shape feature available in the console.

B. OCI doesn't allow such an operation.

C. Delete the running instance and spin up a new instance with the desired shape.

D. Change the shape of instance without reboot, but stop all the applications running on instance beforehand to prevent data corruption.

Correct Answer: A

Question 6

Multiple departments In your company use a shared Oracle Cloud Infrastructure (OCI) tenancy to Implement their projects. You are in charge of managing the cost of OCI resources in the tenancy and need to obtain better Insights Into department's usage.
Which three options can you implement together to accomplish this?

A. Use the billing cost tracking report to analyze costs

B. Set up different compartments for each department then track and analyze cost per compartment

C. Create a budget that matches your commitment amount and an alert at 100 percent of the forecast

D. Set up a consolidated budget tracking lags to analyze costs in ,1 granular manner

E. Set up a tag default that automatically applies tags to all specified resources created In a compartment then use these tags for cost analysis.

Correct Answer: B,C,E

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 7

You are tasked with building a highly available, fault tolerant web application for your current employer. The security team is concerned about an increase in malicious web-based attacks across the internet and asked what you can do to add a higher level of security to the website.
How should you architect the solution on Oracle Cloud Infrastructure (OCI) to meet all requirements defined by your organization? (Choose the best answer.)

A. Deploy at least 3 web application servers, each in a different fault domain, using a regional public subnet. Use the OCI Traffic Management service to create a load balancing policy that will resolve DNS evenly between all web servers.

B. Deploy at least 3 web application servers, each in a different fault domain, using a regional private subnet. Place a public load balancer in a regional public subnet and create a backend set for all of the web application servers. Create a Geolocation steering policy in Traffic Management and add an answer pool that directs to the public IP address of the load balancer. Configure a global catch-all rule to use this answer pool.

C. Deploy at least 3 web application servers, each in a different fault domain, using a regional public subnet. Ensure that each web application server is assigned a public IP address. Deploy a Web Application Firewall (WAF) and configure one Origin for each public IP address.

D. Deploy at least 3 web application servers, each in a different fault domain, using a regional private subnet. Place a public load balancer in a regional public subnet and create a backend set for all of the web application servers. Deploy a Web Application Firewall (WAF) and configure the load balancer public IP address as the origin.

Correct Answer: D

Question 8

You developed a microservices based application that runs on Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE). Your security team wants to use SSL termination for this application. What should you do to create a secure SSL termination for this application using fewest steps?

A. Generate a self-signed certificate using Let's Encrypt. Use that certificate on OCI Load Balancer. Create the Kubernetes service usingthis load balancer.

B. Create a self-signed certificate and it's corresponding key. Create a Kubernetes secret using the certificate and the key. Then add these an notations to the Kubernetes service:
annotations:
service.beta.kubernetes.io/oci-load-balancer-ssl-ports: "443"
service.beta.kubernetes.io/oci-load-balancer-security-list-management-mode:"Frontend"

C. Add these annotationsto the Kubernetes service:
annotations:
service.beta.kubernetes.io/oci-load-balancer-ssl-ports: "443"
service.beta.kubernetes.io/oci-load-balancer-ssl-secret-key: ssl-secret-key

D. Create a self-signed certificate and it's corresponding key. Create a Kubernetes secret using then add these annotationsto the Kubernetes service.
Service.beta.kubernete.io/oci-load-balancer-ssl-ports: "443" Service.beta.kubernete.io/oci-load-balancer-tls-secret:SSL-CERTIFICATE-SECRET

Correct Answer: D

Question 9

You work for a retail company and they developed a Microservices based shopping application that needs to access Oracle Autonomous Database from the application. As an Architect, you have been tasked to treat all of the application components as Kubernetes native objects, such as the microservices, Oracle Autonomous database, Kubernetes services, etc.
What should you do to make sure that you can use Kubernetes constructs to manage the life cycle of the application components, including Oracle Autonomous Database? (Choose the best answer.)

A. Create a service from the Kubernetes cluster and point to the Oracle Autonomous Database using its FQDN.

B. Install and secure the OCI Service Broker for Kubernetes. Then provision and bind to the required Oracle Cloud Infrastructure services.

C. Provision an Oracle Autonomous Database and then use OCI Service Broker to access the database as a native component to your Kubernetes cluster.

D. Create an Oracle Cloud Infrastructure (OCI) Service Gateway and connect to the Oracle Autonomous Database using the private IP address from the microservice.

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 10

You work for a large bank where security and compliance are critical. As part of the security overview meeting, your company decided to minimize the installation of local tools on your laptop. You have been running Ansible and kubectl to spin up Oracle Container Engine for Kubernetes (OKE) clusters and deployed your application.
For authentication, you are using an Oracle Cloud Infrastructure (OCI) CLI config file that contains OCIDs, Fingerprint, and a locally stored PEM file. Your security team doesn't want you to store any local API key and certificate, or any other local tools.
Which two actions should you perform to spin up the OKE cluster and interact with it? (Choose two.)

A. Create a developer workstation on OCI. Install Ansible and kubectl on it. Use resource principal to authenticate against OCI API and create the OKE Cluster.

B. Work on OCI Cloud Shell to use built-in Ansible and kubectl to deploy the OKE cluster. Use OCI_CLI_AUTH=instance_obo_user environment variable to authenticate using built-in token.

C. Develop your own code using OCI SDK to deploy the OKE cluster.

D. Work on OCI Cloud Shell to use built-in Ansible and kubectl to deploy the OKE cluster. Bring in your own config file and certificate to authenticate against OCI API.

E. Create a developer workstation on OCI. Install Ansible and kubectl on it. Use instance principal to authenticate against OCI API and create the OKE Cluster.

Correct Answer: B,E

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 11

A company runs a public-facing application that uses a Java-based web service via a RESTful API in their on-premises data center. Use of the API is expected to double with a new product launch. The business wants to migrate their application to Oracle Cloud Infrastructure (OCI) to meet the scale and reliability requirements. In order to achieve this, they will divert only 40% of the traffic to the new Apache Tomcat web servers running on OCI and serve the remaining 60% traffic through their on-premises infrastructure. Once the migration is complete and application works fine, they will divert all traffic to OCI. How can these requirements be met with the LEAST amount of effort?

A. Use OCI Traffic management service with Load Balancing steering policy and distribute the traffic between OCI and on premises infrastructure.

B. Use an OCI load Balancer and distribute the traffic between OCI and on premises infrastructure.

C. Use OCI Traffic management service with failover steering policy and distribute the traffic between OCI and on premises infrastructure.

D. Use VPN connectivity between on premises Infrastructure and OCI and create routing tables to distribute the traffic between them.

Correct Answer: A

Question 12

An OCI Architect is working on a solution consisting of analysis of data from clinical trials of a pharmaceutical company. The data is being stored in OCI Autonomous Data Warehouse (ADW) having 8 CPU Cores and 70 TB of storage. The architect is planning to setup autoscaling to respond to dynamic changes in the workload.
Which of the following needs to be considered while configuring auto scaling? Choose two

A. Auto scaling also scales IO throughput linearly along with CPU

B. Enabling auto scaling does not change the concurrency and parallelism settings

C. The database memory SGA and PGA will not get affected by the changes in the number of CPUs during auto scaling

D. The maximum CPU cores that will be automatically allocated for this database is 16 CPUs

Correct Answer: A,B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 13

An E-commerce company which sells computers, tablets, and other electronics items has recently decided to move all of their on-premises infrastructure to Oracle Cloud Infrastructure (OCI). One of their on-premises application is running on an NGINX server and the Oracle Database is running in a 2 node Oracle Real Application Clusters (RAC) configuration.
They cannot afford to have any application down time when they do the migration.
What is an effective mechanism to migrate the customer application to OCI and set up regular automated backups?

A. Launch a compute instance for both the NGINX application server and the database server. Attach block volumes on the database server compute instance and enable backup policy to backup the block volumes.

B. Launch a compute instance and run an NGINX server to host the application. Deploy a 2 node VM DB Systems with Oracle RAC enabled. Import the on-premises database to OCI VM DB Systems using Oracle Data Pump and then enable automatic backups.

C. Launch a compute instance and run an NGINX server to host the application. Deploy a 2 node VM DB Systems with Oracle RAC enabled. Setup Oracle GoldenGate to synchronize data from their on-premises database to OCIVM Database. Export and Import the on-premises database to OCIVM DB Systems using Oracle Data Pump, apply the GoldenGate trail files to sync up the OCI database with the on-premises database. Enable automatic backups for the OCIVM database and then cutoverthe application from on-premises to OCI.

D. Launch a compute instance and run an NGINX server to host the application. Deploy Exadata Quarter Rack, enable automatic backups and import the database using Oracle Data Pump.

Correct Answer: C

Question 14

A company has an application that processes confidential dat
a. The data is currently stored in an on-premises data center. A solution architect needs to move this data to Oracle Cloud Infrastructure (OCI) Object Storage and ensure data is encrypted in-transit to OCI.
Which two steps should the solution architect perform to set up the most cost-effective connection between on-premises data center and OCI?

A. Configure a private peering connection on the Oracle FastConnect

B. Attach an Internet Gateway to Virtual Cloud network(VCN).

C. Set up VPN Connect between the customer equipment and the Dynamic Routing Gateway.

D. Configure a service gateway accessing Object Storage.

E. Set up an IPsec tunnel between the customer equipment and software VPN on an oci instance

F. Set up private end point for accessing Object Storage.

Correct Answer: C,D

Question 15

You are developing a Serverless function for your company's IoT project. This function should access Oracle Cloud Infrastructure (OCI) Object Storage to store some files. You choose Oracle Functions to deploy this function on OCI. However, your security team doesn't allow you to carry any API Token or RSA Key to authenticate the function against the OCI API to access the Object Storage.
What should you do to get this function to access OCI Object Storage without carrying any static authentication files? (Choose the best answer.)

A. Option D

B. Option C

C. Option A

D. Option B

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

Oracle Cloud Infrastructure 2022 Architect Professional (1z0-997-22) Free Practice Test