Oracle 1z0-997-21 問題集

質問 1：
Your organization is planning on using Oracle Cloud Infrastructure (OCI) File Storage Service (FSS). You will be deploying multiple compute instance in Oracle Cloud Infrastructure(OCI) and mounting the file system to these compute instances.
The file system will hold payment data processed by a Database instance and utilized by compute instances to create a overall inventory report. You need to restrict access to this data for specific compute instances and must be allowed/blocked per compute instance's CIDR block.
Which option can you use to secure access?
A. Use 'Export option' feature of FSS to restrict access to the mounted file systems.
B. Use stateless Security List rule to restrict access from known IP addresses only.
C. Create and configure OCI Web Application Firewall service with built in DNS based intelligent routing.
D. Create a new VCN security list, choose SOURCE TYPE as Service and SOURCE SERVICE as FSS. Add stateless ingress and egress rules for specific IP address and CIDR blocks.
正解：A

質問 2：
You have deployed art application server irt a private Subnet irt your virtual cloud network (VCN). For the database, you have provisioned an Autonomous Transaction Processing (ATP) serverless instance. However, you are unable to connect to the database instance from your application server.
Which two steps would you need to enable this connectivity?
A. Add an internet gateway to your VCN and add a route rule to your private subnet route table.
CIDR: 0.0.0.0/0
Target: Internet Gateway
B. Create a NAT Gateway and add the following route rule to the route table of private subnet.
CIDR: 0.0.0.0/0
Target: NAT Gateway
C. Add a stateful egress rule to the security list associated with your private subnet.
Destination CIDR: 0.0.0.0/0
Protocols: All Protocols
D. Add a remote peering connection from your VCN to the ATP VCN
正解：B,C

質問 3：
A company has an urgent requirement to migrate 100 TB of data to Oracle Cloud Infrastructure (OCI) in two weeks. They have a 100 Mbps Internet line but the connection is intermittent due to problems with their internet provider. In this scenario, what is the most time-efficient mechanism to migrate data to OCI?
A. Upload data using OCI Object Storage multipart upload capability.
B. Use OCI File Storage Service to copy data from your data center to OCI.
C. Set up an OCI Storage Gateway to connect your data center to your Virtual Cloud Network and upload data.
D. Set up an IPSec VPN tunnel between your data center and OCI. Upload all data to OCI using OCI Storage Gateway.
E. Set up hybrid network by launching a 1 Gbps FastConnect virtual circuit between your data center and OCI. Use OCI Object Storage multipart upload capability to automate the migration of your data to OCI.
正解：E

質問 4：
An Oracle Cloud Infrastructure (OCI) Public Load Balancer's SSL certificate is expiring soon. You noticed the Load Balancer is configured with SSL Termination only. When the certificate expires, data traffic can be interrupted and security compromised.
What steps do you need to take to prevent this situation?
A. Add the new SSL certificate to the Load Balancer, update listeners and backend sets so they can use the new certificate bundle.
B. Add the new SSL certificate to the Load Balancer and update backend servers to use the new certificate bundle.
C. Add the new SSL certificate to the Load Balancer and update listeners to use the new certificate bundle.
D. Add the new SSL certificate to the Load Balancer, update backend servers to work with a new certificate and edit listeners so they can use the new certificate bundle.
E. Add the new SSL certificate to the Load Balancer and implement end to end SSL so it can encrypt the traffic from clients all the way to the backend servers.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Which of the below options is true regarding Oracle Cloud Infrastructure's load balancing service?
A. When you create a private load balancer, the service requires 2 or more subnets to host both the primary and standby load balancers.
B. You can dynamically change the load balancer shape to handle more incoming traffic.
C. A public load balancer is Availability Domain specific in scope.
D. The public load balancer applies a floating public IP address to the primary load balancer.
正解：D

質問 6：
You have been asked to implement a bespoke financial application in Oracle Cloud Infrastructure using virtual machine instances controlled by Autoscaling across multiple Availability Domains. The application stores transaction logs, intermediate transaction data, and audit data and needs to store this on a persistent, durable data store accessible from all of the application servers. The application requires the file system to be mounted in the /audit folder on the Linux file system. The system needs to tolerate the failure of two or more Fault Domains and still maintain data integrity. The solution should be as low maintenance as possible.
What storage architecture should you suggest?
A. Use locally attached NVMe instances and configure RAID 0 replication between servers.
B. Use File Storage Service(FSS). Configure FSS to operate from all Availability Domains the application servers operate in and mount the file system in the /audit folder.
C. Store the data on Oracle Object Storage mounted at the /audit mount point on all the Linux instances using the default mount options.
D. Implement a single instance and install an NFS server, configure and create an NFS share, and mount this as /audit on the application instances.
正解：B

質問 7：
A customer is in a process of shifting their web based Sales application from their own data center located in US West to OCI India West (Mumbai) region. They want to do it in a controlled manner and initially only 1% of the traffic will be steered to the servers in OCI. After verification of everything is working as expected, the company is gradually planning to increase the ratio until they are comfortable with fully migrating all traffic to OCI.
Which of the following solution can be used in this situation?
A. OCI DNS and Traffic Management with Geolocation Steering policy
B. OCI DNS and OCI Load Balancer Service
C. OCI DNS and Traffic Management with Failover Steering policy
D. OCI DNS and Traffic Management with Load Balancer Steering policy
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 8：
An automobile company wants to deploy their CRM application for Oracle Database on Oracle Cloud Infrastructure (OC1) DB Systems for one of major clients. In compliance with the Business Continuity Program of the client, they need to provide a Recovery Point objective (RPO) of 24 hours and a Recovery time objective (RTO) of 24 hours and Recovery Time Objective (RTO) of 1 hour.
The CRM application should be available oven in me event that an entire on Region is down.
Which approach Is the most suitable and cost effective configuration for this scenario?
A. Deploy a 1 node VM Oracle database in one region and replicate the database to a 1 node VM Oracle database in another region using a manual setup and configuration of Oracle Data Guard.
B. Deploy a 1 node VM Oracle database in one region. Manual Configure a Recovery Manager (RMAN) database backup schedule to take hourly database backups. Asynchronously copy the database backups to object storage in another OCI region, If the primary OCI region is unavailable launch a new 1 new VM Database in the other OCI region restore the production database from the backup.
C. Deploy a 2 node Virtual Machine (VM) Oracle RAC database in one region and replicate the database to a 2 node VM Oracle RAC database in another region using a manual setup and configuration of Oracle Data Guard.
D. Deploy an Autonomous Transaction Processing (Serverless) database in one region and replicate it to an Autonomous Transaction Processing (Serverless) database in another region Oracle GoldenGate.
正解：A
解説: (Topexam メンバーにのみ表示されます)