Oracle 1z0-997-21 問題集

質問 1：
You have multiple IAM users who launch different types of compute Instances and block volumes every day. As a result, your Oracle cloud Infrastructure (OCF) tenancy quickly hit the service limit and you can no longer create any new instances. As you are cleaning up environment, you notice that the majority of the Instances and block volumes are untagged. Therefore, It is difficult to pinpoint the owner of these resources verify if they are safe to terminate.
Because of this, your company has issued a new mandate, which requires adding compute instances.
Which option is the simplest way to implement this new requirement?
A. Create tag variables to automatically tag a resource with the user name.
B. Create tag variables for each compartment to automatically tag a resource with the user name.
C. Create a default tag for each compartment, which ensure that appropriate tags are applied at resource creation
D. Create a policy to automatically tag a resource with the user name.
E. Create a policy using IAM requiring users to tag specific resources. This will allow a user to launch compute instances on\y if certain tags were defined.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 2：
An insurance company is storing critical financial data in the Oracle Cloud Infrastructure block volume. This volume is currently encrypted using oracle managed keys. Due to regulatory compliance, the customer wants to encrypt the data using the keys that they can control and not the keys which are controlled by Oracle.
What of the following series of tasks are required to encrypt the block volume using customer managed keys?
A. Create a master encryption key, create a new version of the encryption key, decrypt the block volume using existing oracle managed keys and encrypt using new version of the encryption key.
B. Create a vault import your master encryption key into the vault, generate data encryption key, assign data encryption key to the block volume.
C. Create a vault, create a master encryption key in the vault, assign this master encryption key to the block volume.
D. Create a master encryption key, create a data encryption key, decrypt the block volume using existing oracle managed keys, encrypt the block volume using the data encryption key.
正解：C

質問 3：
You are developing a Serverless function for your company's IoT project. This function should access Oracle Cloud Infrastructure (OCI) Object Storage to store some files. You choose Oracle Functions to deploy this function on OCI. However, your security team doesn't allow you to carry any API Token or RSA Key to authenticate the function against the OCI API to access the Object Storage.
What should you do to get this function to access OCI Object Storage without carrying any static authentication files? (Choose the best answer.)

A. Option A
B. Option C
C. Option D
D. Option B
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 4：
A telecom company has an application running in Oracle Cloud Infrastructure (OCI) Germany Central (eu-frankfurt-1) region. They want to configure Disaster Recovery (DR) site in the OCI UK South (uk-london-1) region. Which is the most cost effective option to help set up application and persistence layers in the DR site?
A. Application layer: configure Traffic Management steering policy with Failover policy between servers in eu-frankfurt-1 and uk-london-1 regions.
Persistence layer: set up policy to schedule cross-region automated backups of file systems in File Storage service between eu-frankfurt-1 and uk-london-1 regions.
B. Application layer: configure events service rule in eu-frankfurt-1 region to filter Health Checks event failure and route traffic to uk-london-1 region in the event of a disaster.
Persistence layer: set up policy to schedule cross-region automated backups of block volumes between eu-frankfurt-1 and uk-london-1 regions.
C. Application layer: Set us a public laod balancerin the eu-frankfurt-1 region. Create a backend set with instances running in bothuk-frankfurt-1 and uk-london-1 regions.
Persistence layer: Set up OCI Object Storage replication from eu-frankfurt-1 region to uk-london-1 region.
D. Application layer: configure Traffic Management steering policy with Load Balancing policy between servers in eu-frankfurt-1 and uk-london-1 regions.
Persistence layer: set up policy to schedule cross-region automated backups of block volumes between eu-frankfurt-1 and uk-london-1 regions.
正解：D

質問 5：
You notice that a majority of your Oracle Cloud Infrastructure (OCI) resources like compute instances, block volumes, and load balancers are not tagged. You have received a mandate from your CIO to add a predefined set of tags to identify owners for respective OCI resources. E.g. if Chris and Larry each create compute instances in a compartment, the instances that Chris creates include tags that contain his name as the value, while the instances that Larry creates have his name.
Which option is the simplest way to implement this new tagging requirement?
A. Create an OCI Identity and Access Management policy requiring users to tag resources with their user name.
B. Create a default tag for each compartment, which ensure that appropriate tags are applied at the time of resource creation.
C. Create tag variables to automatically tag a resource with the user name.
D. Create an OCI Identity and Access Management policy to automatically tag a resource with the user name.
正解：C

質問 6：
You are working as a solution architect for a customer in Frankfurt, which uses multiple compute instance VMs spread among three Availability Domains in the Oracle Cloud Infrastructure (OCI) eu-frankfurt-1 region. The compute instances do not have public IP addresses and are running in private subnets inside a Virtual Cloud Network (VCN). You have set up OCI Autoscaling feature for the compute instances, but find out that instances cannot be auto scaled. You have enabled monitoring on the instances.
What could be wrong in this situation?
A. Autoscaling only works with single availability domains.
B. You need to assign a reserved public IP address to the compute instances.
C. You need to set up a Service Gateway to send metrics to the OCI Monitoring service.
D. Autoscaling only works for instances with public IP addresses.
正解：C

質問 7：
You have created compartment called Dev for developers. There are two IAM groups for developers: group-devl and group-dev2. You need to write an Identity and Access Management (IAM) policy to give users in these groups access to manage all resources in the compartment Dev.
Which of the following IAM policy will accomplish this?
A. Allow group /group-dev*/ to manage all resources in compartment Dev
B. Allow group group-devl group-dev2 to manage all resources in compartment Dev
C. Allow any-user to manage all resources in compartment Dev where request.group= /group-dev*/
D. Allow any-user to manage all resources in tenancy where target.comparment= Dev
正解：B

質問 8：
You have been asked to review some network proposals by a major client. The client's IT director needs to provision two Virtual Cloud Network (VCN) for a major application. Both applications use a large number of virtual machine instances, and so will ideally occupy VCNs with as many address spaces as possible. Additionally, in the future, VCN peering will be required to allow communication between the VCNs.
Which of the following are valid IP ranges to consider for the VCNs?
A. 10.0.0.0/16 and 10.0.64.0/24
B. 10.0.1.0/24 and 10.0.1.0/27
C. 10.0.0.0/24 and 10.0.1.0/24
D. 10.0.0.0/8 and 11.0.0.0/8
正解：C