Oracle 1Z0-997-20 問題集

質問 1：
Your security team has informed you that there are a number of malicious requests for your web application coming from a set of IP addresses originating from a country in Europe.
Which of the following methods can be used to mitigate these type of unauthorized requests?
A. Delete Internet Gateway from Virtual Cloud Network.
B. Web Application Firewall policy using access control rules
C. Deny rules in Virtual Cloud Network Security Group for the specific set of IP addresses.
D. Deny rules in Virtual Cloud Network Security Lists for the specific set of IP addresses.
正解：B

質問 2：
You are working with a social media company as a solution architect. The media company wants to collect and analyze large amounts of data being generated from their websites and social media feeds to gain insights and continuously improve the user experience. In order to meet this requirement, you have developed a microservices application hosted on Oracle Container Engine for Kubernetes. The application will process the data and store the result to an Autonomous Data Warehouse (ADW) instance.
Which Oracle Cloud Infrastructure (OCI) service can you use to collect and process a large volume of unstructured data in real time?
A. OCI Events
B. OCI Resource Manager
C. OCI Streaming
D. OCI Notifications
正解：C

質問 3：
An Oracle Cloud Infrastructure (OCI) Public Load Balancer's SSL certificate is expiring soon. You noticed the Load Balancer is configured with SSL Termination only. When the certificate expires, data traffic can be interrupted and security compromised.
What steps do you need to take to prevent this situation?
A. Add the new SSL certificate to the Load Balancer, update listeners and backend sets so they can use the new certificate bundle.
B. Add the new SSL certificate to the Load Balancer and update backend servers to use the new certificate bundle.
C. Add the new SSL certificate to the Load Balancer and update listeners to use the new certificate bundle.
D. Add the new SSL certificate to the Load Balancer, update backend servers to work with a new certificate and edit listeners so they can use the new certificate bundle.
E. Add the new SSL certificate to the Load Balancer and implement end to end SSL so it can encrypt the traffic from clients all the way to the backend servers.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 4：
Which of the following is NOT a good use case for using the functionality available in the Oracle Cloud Infrastructure (OCI) Events service?
A. Publish all events in a specific compartment to Oracle Streaming service for later analysis.
B. Capture Monitoring Alarms and invoke Autoscaling of compute instances.
C. Triggers Function using Oracle Functions when new files are uploaded in an OCI Object Storage bucket.
D. Trigger a notification when a function completes its execution.
E. Publish a notification when long lived tasks complete, such as OCI Autonomous Database backup completion.
正解：B

質問 5：
You have deployed a multi-tier application with multiple compute instances in Oracle Cloud Infrastructure. You want to back up these volumes and have decided to use 'Volume Groups' feature. The Block volume and Compute instances exist in different compartments within your tenancy.
Periodically, a few child compartments are moved under different parent compartments, and you notice that sometimes volume group backup fails.
What could be the cause?
A. You have the same block volume attached to multiple compute instances; if these compute instances are in different compartments then all concerned compartments must be moved at the same time.
B. A compute instance with multiple block volumes attached cannot move when a compartment is moved.
C. The Identity and Access Management policy allowing backup failed to move when the compartment was moved.
D. You are exceeding your volume group backup quota configured.
正解：C

質問 6：
You have an Oracle database system in a virtual cloud network (VCN) that needs to be accessible on port 1521 from your on-premises network CIDR 172.17.0.0/24.
You have the following configuration currently.
Virtual cloud network (VCD) is associated with a Dynamic Routing Gateway (DRG), and DRG has an active IPSec connection with your on-premises data center.
Oracle database system is hosted in a private subnet
The private subnet route table has the following configuration
The private subnet route table has following configuration.

However, you are still unable to connect to the Oracle Database system.
Which action will resolve this issue?
A)
Add an EGRESS rule in network security group as following.

B)
Add a route rule in the private subnet route table as following.

C)
Add an EGRESS rule in private subnet scurity list as following.

D)
Add an EGRESS rule in private subnet security list as following.

A. Option A
B. Option C
C. Option D
D. Option B
正解：B

質問 7：
You have decided to migrate your application to Oracle Cloud Infrastructure and use Oracle Functions to deploy your microservices.
Which monitoring metrics are available to help you calculate your total cost for using Oracle Functions per month? (Choose Two)
A. Length of time a function runs.
B. Number of times a function is invoked.
C. Network bandwidth used by your functions.
D. Amount of storage used by your functions.
E. Amount of RAM used by your functions.
正解：A,B