[UPDATED] Oracle 1z0-997-22 Certification Exam Questions [Q63-Q79]

admin 1z0-997-22 Oracle December 10, 2023

Rate this post

[UPDATED] Oracle 1z0-997-22 Certification Exam Questions

Quickly and Easily Pass Oracle Exam with 1z0-997-22 real Dumps

Oracle 1z0-997-22 exam is an excellent opportunity for IT professionals who are looking to enhance their knowledge and skills in the domain of Cloud Computing and Infrastructure. By passing this certification exam, you demonstrate your ability to design, implement, and maintain Oracle Cloud Infrastructure. Additionally, this certification enables you to enhance your professional value and demonstrate to potential employers that you possess the required knowledge and expertise required to perform well in the field of Cloud Computing and Infrastructure.

Oracle 1z0-997-22: Oracle Cloud Infrastructure 2022 Architect Professional exam is an excellent opportunity for professionals who want to validate their skills in designing and implementing cloud infrastructure solutions. 1z0-997-22 exam covers a broad range of topics and is designed to test the knowledge and abilities of the candidates in identifying and troubleshooting issues in the cloud infrastructure. Candidates can prepare for the exam by taking advantage of the various resources available online, including official Oracle Cloud Infrastructure documentation, training courses, and practice tests.

NO.63 You are creating an Oracle Cloud Infrastructure Dynamic Group. To determine the members of this group you are defining a set of matching rules.
Which of the following are the supported variables to define conditions in the matching rules? (Choose Two)

instance.compartment.id -the OCID of the compartment where the instance resides.

instance.tenancy.id -the OCID of the tenancy where the instance resides.

tag.<tagnamespace>.<tagkey>.value -the tag namespace and tag key.

iam.policy.id – the OCID of the IAM policy to apply to the group.

NO.64 You are responsible for migrating your on-premises legacy databases on 11.2.0.4 version to Autonomous Transaction Processing – Dedicated (ATP-D) in Oracle Cloud Infrastructure (OCI). As a solution architect, you need to plan your migration approach.
Which three options do you need to implement together to migrate your on-premises databases to OCI?

Retain all legacy structures and unsupported features (e.g. legacy LOBs) in the on-premises databases for migration.

Use Oracle Data Guard to keep on-premises database always active during migration.

Launch Autonomous Transaction Processing – Dedicated database in OCI.

Retain changes to Oracle shipped privileges, stored procedures or views in the on-premises databases.

Convert on-premises databases to PDB, upgrade to 19c, and encrypt.

Use Oracle GoldenGate replication to keep on-premises database online during migration.

NO.65 An online Stock trading application is deployed to multiple Availability Domains in the us phoenix-1 region. Considering the high volume of transactions that the trading application handles, the company has hired you to ensure that the data stored by the application available, and disaster resilient. In the event of failure, the Recovery lime Objective (UK)) must be less than 2 hours to meet regulator requirements.
Which Disaster Recovery strategy should be used to achieve the RTO requirement In the event of system failure?

Configure hourly block volumes backups through the Storage Gateway service.

Configure hourly block volumes backups using the Oracle Cloud Infrastructure (OCI) Command Line Interface (CLI)

Store hourly block volumes backup to NVMe device under a compute instance and generate a custom Image every 5 minutes.

Configure your application to use synchronous master slave data replication between Availability Domains.

NO.66 You are a solutions architect for a global health care company which has numerous data centers around the globe. Due to the ever growing data that your company is storing, you were Instructed to set up a durable, cost effective solution to archive you data from your existing on-premises tape based backup Infrastructure to Oracle Cloud Infrastructure (OCI).
What is the most-effective mechanism to Implement this requirement?

Use the File Storage Service in OCI and copy the data from your existing tape based backup to the shared file system

Setup an on premises OCI Storage Gateway which will back up your data to OCI Object Storage Archive tier.

Setup an on premises OCI Storage Gateway which will back up your data to OCI object Storage Standard tier. Use Object Storage life cycle policy management to move any data older than 30 days from Standard to Archive tier.

Setup an on-promises OCI Storage Gateway which will back up your data to OCI Object Storage Standard

Setup fastConnect to connect your on premises network to your OCI VCN and use rsync tool to copy your data to OCI Object Storage Archive tier.

NO.67 You are working as a cloud consultant for a major media company. In the US and your client requested to consolidate all of their log streams, access logs, application logs, and security logs into a single system.
The client wants to analyze all of their logs In real-time based on heuristics and the result should be validated as well. This validation process requires going back to data samples extracted from the last 8 hours.
What approach should you take for this scenario?

Create an auto scaling pool of syslog-enabled servers using compute instances which will store the logs In Object storage, then use map reduce jobs to extract logs from Object storage, and apply heuristics on the logs.

Create a bare-metal instance big enough to host a syslog enabled server to process the logs and store logs on the locally attached NVMe SSDs for rapid retrieval of logs when needed.

Set up an OCI Audit service and ingest all the API arils from Audit service pragmatically to a client side application to apply heuristics and save the result in an OCI Object storage.

Stream all the logs and cloud events of Events service to Oracle Streaming Service. Build a client process that will apply heuristics on the logs and store them in an Object Storage.

NO.68 You are tasked with backing up your data using Oracle Cloud Infrastructure Block Volume service.
When you are finalizing your block volume backup schedule, which of the following two are valid considerations for your backup plan? (Choose Two)

Number of stored backups: How many backups you need to keep available and the deletion schedule for those you no longer need.

Governance: Tagging of backups so you can capture backup related API calls through the Audit service.

Frequency: How often you want to back up your data.

Location: Determine the Object Store Bucket where the backups will be stored.

Encryption: Whether to use your own key to encrypt your volume backups.

NO.69 You are designing the network infrastructure for an application consisting of a web server (server-1) and a Domain Name Server (server-2) running in two different subnets inside the same Virtual Cloud Network (VCN) in Oracle Cloud Infrastructure (OCI). You have a requirement where your end users will access server-1 from the internet and server-2 from your customer’s on-premises network. The on-premises network is connected to your VCN over a FastConnect virtual circuit.
How should you design your routing configuration to meet these requirements?

Configure a single routing table with two set of rules: one that has route to internet via an Internet Gateway and another that propagates specific routes for the on-premises network via a Dynamic Routing Gateway. Don’t associate this routing table with any of the subnets in the VCN.

Configure a single routing table with two set of rules: one that has route to internet via an Internet Gateway and another that propagate specific routes to the on-premises network via a Dynamic Routing Gateway. Associate the routing table with all the VCN subnets.

Configure two routing tables: first one with a route to internet via an Internet gateway; associate this route table to the subnet containing server-1 .Configure the second route table to propagate specific routes to the on-premises network via a Dynamic Routing Gateway; associate this route table to subnet containing server-2.

Configure two routing tables that have rules to route all traffic via a Dynamic Routing Gateway. Associate the two routing tables with all the VCN subnets.

NO.70 Which of the two options are true for an autonomous database in dedicated infrastructure deployment? (Choose two.)

You can modify maintenance schedule of the AVM after provisioning, to match your organization maintenance schedules.

The new resource model consists of autonomous exadata infrastructure, autonomous container database and autonomous database.

Unlike autonomous database in shared infrastructure, you can customize the maintenance schedule of the autonomous databases in dedicated infrastructure in OCI public cloud.

The new resource model consists of exadata infrastructure, autonomous Exadata VM cluster, autonomous container database.

Network selection, License model and certificate management are resources configured at AVM level.

NO.71 You work for a bank as the lead Oracle Cloud Infrastructure architect. You designed a highly scalable solution for your company’s banking application. The architecture includes a load balancer, application servers with autoscaling configuration based on CPU utilization, and an Autonomous Database with Transaction Processing workload type running in a Virtual Cloud Network (VCN).
During the peak utilization period, the application users complain that the application runs slow.
What are two possible reasons for the application running slow at times? (Choose two.)

The VCN does not have a Network Security Group configured to allow traffic from the load balancer to all the application servers in the backend set.

Instance pool in autoscaling configuration for the application servers did not scale out due to compartment quota breach of the VM shapes used by the application servers.

The load balancer is not configured correctly to send traffic to all the listeners of the application servers in the backend set.

Instance pool in autoscaling configuration for the Autonomous Database did not scale out due to misconfigured scaling policy.

Instance pool in autoscaling configuration for the application servers did not scale out due to service limit breach of the VM shapes used by the application servers.

NO.72 An Oracle Cloud Infrastructure (OCI) Public Load Balancer’s SSL certificate is expiring soon. You noticed the Load Balancer is configured with SSL Termination only. When the certificate expires, data traffic can be interrupted and security compromised.
What steps do you need to take to prevent this situation?

Add the new SSL certificate to the Load Balancer, update backend servers to work with a new certificate and edit listeners so they can use the new certificate bundle.

Add the new SSL certificate to the Load Balancer, update listeners and backend sets so they can use the new certificate bundle.

Add the new SSL certificate to the Load Balancer and implement end to end SSL so it can encrypt the traffic from clients all the way to the backend servers.

Add the new SSL certificate to the Load Balancer and update backend servers to use the new certificate bundle.

Add the new SSL certificate to the Load Balancer and update listeners to use the new certificate bundle.

NO.73 There are two compartments: Networks and Devlnstances
There are two groups: NetworkAdmins with a user named Nick, and Devs with a user named Dave The following IAM policies are being used:
*Allow group NetworkAdmins to manage virtual-network-family in compartment Networks
*Allow group NetworkAdmins to manage instance-family in compartment Networks
*Allow group Devs to use virtual-network-family in compartment Networks
*Allow group Devs to manage all-resources in compartment Devlnstances
Nick creates a VCN in Networks compartment. Dave creates a VCN in Devlnstances compartment.
Which of the following statements is INCORRECT?

Dave launches instances in Devlnstances using the VCN in Networks compartment

Nick cannot launch new instances in Devlnstances compartment

Nick launches instances in Networks using VCN in Devlnstances compartment

Dave cannot launch new instances in Networks compartment

NO.74 An organization has its IT infrastructure in a hybrid setup with an on-premises environment and an Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN) in the us-phonix-1 region. The on-premise applications communications with compute instances inside the VPN over a hardware VPN connection. They are looking to implement an Intrusion detected and Prevention (IDS/IPS) system for their OCI environment. This platform should have the ability to scale to thousands of compute of instances running inside the VCN.
How should they architect their solution on OCI to achieve this goal?

Set up an OCI Private Load Balance! and configure IDS/IPS related health checks at TCP and/or HTTP level to inspect traffic

Configure each host with an agent that collects all network traffic and sends that traffic to the IDS/IPS platform to inspection

There Is no need to implement an IPS/IDS system as traffic coming over IPSec VPN tunnels Is already encrypt

Configure autoscaling on a compute Instance pool and set vNIC to promiscuous mode to called traffic across the vcn and send it IDS/IPS platform for inspection.

NO.75 Your customer has gone through a recent departmental re structure. As part of this change, they are organizing their Oracle Cloud Infrastructure (OCI) compartment structure to align with the company’s new organizational structure.
They have made the following change:
Compartment x Is moved, and its parent compartment is now compartment c.

Policy defined in compartment A: Allow group networkadmins to manage subnets in compartment X Policy defined in root compartment: Allow group admins to read subnets in compartment Finance:A:X After you move the compartment, which two IAM policies would be required to ensure both groups retain the same permissions to compartment X that they had before? (Choose two.)

Define a policy in the root compartment as follows: Allow group admins to manage subnets in compartment Finance:A:X

Define a policy in compartment HR as follows: Allow group networkadmins to manage subnets in compartment C:X.

Define a policy in the root compartment as follows: Allow group admins to read subnets in compartment HR:C:X

Define a policy in compartment C as follows: Allow group networkadmins to read subnets in compartment X

NO.76 Your company will soon start moving critical systems Into Oracle Cloud Infrastructure (OCI) platform. These systems will reside in the us-phoenix-1and us-ashburn 1 regions. As part of the migration planning, you are reviewing the company’s existing security policies and written guidelines for the OCI platform usage within the company. you have to work with the company managed key.
Which two options ensure compliance with this policy?

When you create a new compute instance through OCI console, you use the default options for “configure boot volume” to speed up the process to create this compute instance.

When you create a new block volume through OCI console, select Encrypt using Key Management checkbox and use encryption keys generated and stored in OCI Key Management Service.

When you create a new compute instance through OCI console, you use the default shape to speed up the process to create this compute instance.

When you create a new OCI Object Storage bucket through OCI console, you need to choose “ENCRYPT USING CUSTOMER-MANAGED KEYS” option.

You do not need to perform any additional actions because the OCI Block Volume service always encrypts all block volumes, boot volumes, and volume backups at rest by using the Advanced Encryption Standard (AES) algorithm with 256-bit encryption.

NO.77 After performing maintenance on an Oracle Linux compute instance the system is returned to a running state You attempt to connect using SSH t to do so. You decide to create an instance console connection to troubleshoot the issue.
Which three tasks would enable you to connect to the console connection and begin troubleshooting?

Use SSH to connect to the public: IP address of the compute Instance and provide the console connection OCID as the username.

edit the Linux boot menu to enable access to console.

Use SSH to connect to the service endpoint of the console connection service

Reboot the compute instance using the Oracle Cloud Infrastructure (OCI) Management Console

Upload an API signing key for console connection authentication.

Stop the compute Instance using the Oracle cloud Infrastructure (OCI) Command Line interface (CLI).

NO.78 You are working on the migration of the web application infrastructure of your company from on-premises to Oracle Cloud Infrastructure. You need to ensure that the DNS cache entries of external clients will not direct them to the on-premises infrastructure after switching to the new infrastructure.
Which of the following options will minimize this problem?

Reduce the TTL of the DNS records after the switch.

DNS changes propagate fast enough that it is not necessary to take any action.

Increase the TTL of the DNS records before the switch.

Increase the TTL of the DNS records after the switch.

Reduce the TTL of the DNS records before the switch.

NO.79 You are working as a solution architect for a customer in Frankfurt, which uses multiple compute instance VMs spread among three Availability Domains in the Oracle Cloud Infrastructure (OCI) eu-frankfurt-1 region. The compute instances do not have public IP addresses and are running in private subnets inside a Virtual Cloud Network (VCN). You have set up OCI Autoscaling feature for the compute instances, but find out that instances cannot be auto scaled. You have enabled monitoring on the instances.
What could be wrong in this situation?

You need to assign a reserved public IP address to the compute instances.

You need to set up a Service Gateway to send metrics to the OCI Monitoring service.

Autoscaling only works for instances with public IP addresses.

Autoscaling only works with single availability domains.