Oracle 1z0-997-21 問題集

質問 1：
A hospital in Austin has hosted its web based medical records portal entirely In Oracle cloud Infrastructure (OCI) using Compute Instances for its web-tier and DB system database for its data tier. To validate compliance with Health Insurance Portability and Accountability (HIPAA), the security professional to check their systems it was found that there are a lot of unauthorized coming requests coming from a set of IP addresses originating from a country in Southeast Asia.
Which option can mitigate this type of attack?
A. Block the attacking IP address by implementing a OCI Web Application Firewall policy using Access Control Rules
B. Mitigate the attack by changing the Route fable to redirect the unauthorized traffic to a dummy Compute instance
C. Block the attacking IP address by creating by Network Security Group rule to deny access to the compute Instance where the web server Is running
D. Block the attacking IP address by creating a Security List rule to deny access to the subnet where the web server Is running
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 2：
You are working as a solutions architect for an online retail store In Frankfurt which uses multiple compute instance VMs spread among three availability domains In the eu-frankfurt-1 region.
You noticed the website Is having very high traffic, so you enabled autoscaling to sun tee me no f your application but, you observed that one of the availability domains is not receiving any traffic.
What could be wrong In this situation?
A. Autoscaling can be enabled for multiple availability domains only in uk-london t region.
B. You have to manually acid all three availability domains to your load balancer configuration.
C. Autoscaling only works with single availability domains.
D. You forgot to attach a load balancer to your instance pool configuration.
E. Autoscaling is using an Instance Pool configured to create instances in two availability Domains.
正解：E
解説: (Topexam メンバーにのみ表示されます)

質問 3：
You work for a German company as the Lead Oracle Cloud Infrastructure architect. You have designed a highly scalable architecture for your company's business critical application which uses the Load Balancer service auto which uses the Load Balancer service, autoscaling configuration for the application servers and a 2 Node VM Oracle RAC database. During the peak utilization period of the- application yon notice that the application is running slow and customers are complaining. This is resulting in support tickets being created for API timeouts and negative sentiment from the customer base.
What are two possible reasons for this application slowness?
A. The Load Balancer configuration is not sending traffic to the listener of the application servers.
B. Autoscaling configuration for the application servers didn't happen due to service limit breach of the VM shapes used by the application servers
C. Autoscaling configuration for the application servers didn't happen due to IAM policy that's blocking access to the application server compartment
D. Autoscaling configuration for the application servers didn't happen due to compartment quota breach of the VM shapes used by the application servers.
E. The Load Balancer doesn't have a Network Security Group to allow traffic to the application servers.
正解：B,D
解説: (Topexam メンバーにのみ表示されます)

質問 4：
A retail company has recently adopted a hybrid architecture. They have the following requirements for their end-to-end Connectivity model between their on-premises data center and Oracle Cloud Infrastructure (OC1) region
* Highly available connection with service level redundancy
* Dedicated network bandwidth with low latency
Which connectivity setup is the most cost effective solution for this scenario?
A. Setup FastConnect virtual circuit as your primary connection, and a second FastConnect virtual circuit as a backup connection. Use separate edge devices in your FastConnect physical connectivity is redundant Use a single edge device in your on premises data center for each connection From yc device, advertise more specific routes via primary FastConnect virtual circuit, and less specific routes through t backup FastConnect circuit.
B. Setup IPsec VPN as your primary connection, and a FastConnect virtual circuit as a backup connection. Use separate edge devices in your on-premises data canter for each connection from your edge devices, advertise more specific routes IPSec VPN, and specific routes through the backup FastConnect virtual circuit.
C. Setup FastConnect virtual circuit as your primary connection, and an IPSec VPN as a backup connection. Use separate edge devices in your on-premises data center for each connection. From your edge devices, advertise more specific routes through FastConnect virtual circuit, and more specific routes through the backup IPSec VPN path.
D. Setup IPSec VPN as your primary connection, and a second IPSec VPN as a backup connection. Use separate edge devices in your on p data center for each connection. From your edge devices, advertise more specific routes via primary IPSec VPN. and less specific rod the backup IPSec VPN.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 5：
You are designing the network infrastructure for two application servers: appserver-1 and appserver-2 running in two different subnets inside the same Virtual Cloud Network (VCN) Oracle Cloud Infrastructure (OCI). You have a requirement where your end users will access appserver-1 from the internet and appserver-2 from the on-premises network. The on-premises network is connected to your VCN over a FastConnect virtual circuit.
How should you design your routing configuration to meet these requirements?
A. Configure two routing tables: Route Table-1 that has a route to internet via the Internet gateway. Associate this route table to the subnet containing appserver-1. Route Table-2 that propagate specific routes for the on-premises network via the Dynamic Routing Gateway (DRG) Associate this route table to subnet containing appserver-2.
B. Configure a single routing table (Routing Table-1) that has two set of rules: one that has route to internet via the Internet Gateway and another that propagates specific routes for the on-premises network via Dynamic Routing Gateway (DRG). Associate the routing table with the VCN.
C. Configure two routing table (Route table-1 Route Table-2) that have rule to route all traffic via the Dynamic Routing Gateway (DRG) Associate the two routing tables with all the VCN subnets.
D. Configure a single routing table (Route Table-1) that has two set of rules. One that has route to internet via the internet Gateway and another that propagate specific routes for the on-premise network via the Dynamic Routing Gateway. Associate the routing table with all the VCN subnets.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 6：
You are responsible for migrating your on-premises legacy databases on 11.2.0.4 version to Autonomous Transaction Processing - Dedicated (ATP-D) in Oracle Cloud Infrastructure (OCI). As a solution architect, you need to plan your migration approach.
Which three options do you need to implement together to migrate your on-premises databases to OCI?
A. Use Oracle Data Guard to keep on-premises database always active during migration.
B. Convert on-premises databases to PDB, upgrade to 19c, and encrypt.
C. Use Oracle GoldenGate replication to keep on-premises database online during migration.
D. Retain changes to Oracle shipped privileges, stored procedures or views in the on-premises databases.
E. Launch Autonomous Transaction Processing - Dedicated database in OCI.
F. Retain all legacy structures and unsupported features (e.g. legacy LOBs) in the on-premises databases for migration.
正解：B,C,E

質問 7：
You are a solutions architect for a global health care company which has numerous data centers around the globe. Due to the ever growing data that your company is storing, you were Instructed to set up a durable, cost effective solution to archive you data from your existing on-premises tape based backup Infrastructure to Oracle Cloud Infrastructure (OCI).
What is the most-effective mechanism to Implement this requirement?
A. Setup fastConnect to connect your on premises network to your OCI VCN and use rsync tool to copy your data to OCI Object Storage Archive tier.
B. Setup an on premises OCI Storage Gateway which will back up your data to OCI object Storage Standard tier. Use Object Storage life cycle policy management to move any data older than 30 days from Standard to Archive tier.
C. Setup an on premises OCI Storage Gateway which will back up your data to OCI Object Storage Archive tier.
D. Setup an on-promises OCI Storage Gateway which will back up your data to OCI Object Storage Standard
E. Use the File Storage Service in OCI and copy the data from your existing tape based backup to the shared file system
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 8：
You have deployed a multi-tier application with multiple compute instances in Oracle Cloud Infrastructure. You want to back up these volumes and have decided to use Volume Group's feature. The Block volume and Compute instances exist in different compartments within your tenancy.
Periodically. a few child compartments are moved under different parent compartments, and you notice that sometimes volume group backup fails.
What could be the cause?
A. You have the same block volume attached to multiple compute instances; if these compute instances are in different compartments then all concerned compartments must be moved at the same time.
B. The Identity and Access Management policy allowing backup failed to move when the compartment was moved.
C. You are exceeding your volume group backup quota configured.
D. Compute instance with multiple block volumes attached cannot move when a compartment is moved.
正解：B
解説: (Topexam メンバーにのみ表示されます)