Oracle Cloud Infrastructure Architect Professional practice questions

1. Question 1 of 25

   A consulting company that employs Oracle Cloud Infrastructure (OCI) architects has successfully completed resource migration from Microsoft Azure to OCI, and no longer requires the OCI FastConnect circuit to Azure. The project manager has asked you to delete all resources involved in this inter-cloud connectivity. From the Azure side, you delete the Resource Group. After a while, you notice that all Azure resources have been deleted, except for the Azure ExpressRoute circuit. What could be a potential reason for this issue?

   • AYou need to first delete the OCI FastConnect circuit for the ExpressRoute circuit to be decommissioned, and then you can delete the ExpressRoute virtual circuit.
   • BYour bill from the OCI side needs to be paid in full before you can remove the Azure ExpressRoute circuit.
   • CYou need to remove all routes that point to the inter-cloud connection on both OCI and Azure before you can delete the circuit.
   • DYou need to remove the Azure ExpressRoute Partner Service Key from the OCI FastConnect circuit, and then you can delete the ExpressRoute virtual circuit.

   Show answer

   Correct answer: A

   How others answered

   • A100%

   Explanation

   yes, A. You need to first delete the OCI FastConnect circuit for the ExpressRoute circuit to be decommissioned, and then you can delete the ExpressRoute virtual circuit.

   Adapted from community discussion by jackhsu0704 · 2023-02-11 · 3 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Oracle documentation

   View community discussion2

   Candidate context

   Question 1 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-997 or CertExamHQ.

   1. J

      jackhsu0704

      2023-02-11

      3 upvotes

      yes, A. You need to first delete the OCI FastConnect circuit for the ExpressRoute circuit to be decommissioned, and then you can delete the ExpressRoute virtual circuit.

   2. P

      p55p

      2023-08-05

      Selected A1 upvote

      A agree https://docs.oracle.com/en-us/iaas/Content/Network/Troubleshoot/fastconnecttroubleshoot2.htm

2. Question 2 of 25

   Select 2

   You designed and deployed your Autonomous Data Warehouse (ADW) so that it is accessible from your on-premise data center and servers running on both private and public networks in Oracle Cloud Infrastructure (OCI).

   

   As you are testing the connectivity to your ADW database from the different access paths, you notice that the server running on the private network is unable to connect to ADW. Which two steps do you need to take to enable connectivity from the server on the private network to ADW? (Choose two.)

   • AAdd an entry in the Security List of the ADW allowing ingress traffic for CIDR block 10.2.2.0/24
   • BAdd an entry in the route table (associated with the private subnet) with destination of 0.0.0.0/0; target type of Internet Gateway, add a stateful egress rule to the security list (associated with the private subnet) with destination of 0.0.0.0/0 and for all IP protocols.
   • CAdd an entry in the access control list of ADW for IP address 129.146.160.11
   • DAdd an entry in the access control list of ADW for CIDR block 10.2.2.0/24.
   • EAdd an entry in the route table (associated with the private subnet) with destination of 0.0.0.0/0; target type of NAT Gateway, add a stateful egress rule to the security list (associated with the private subnet) with destination of 0.0.0.0/0 and for all IP protocols.

   Show answer

   Correct answer: C, E

   How others answered

   • CE100%

   View community discussion1

   Candidate context

   Question 2 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-997 or CertExamHQ.

   1. W

      WannaBeCertified

      2023-12-25

      2 upvotes

      It's DE since the rule private subnet CIDR is missing from the ACL

3. Question 3 of 25

   Your customer needs to move their on-premises applications to Oracle Cloud Infrastructure (OCI). One of their applications is running on an NGINX server and a 2-node Oracle Real Application Clusters (RAC) database. What is the most cost-effective mechanism to migrate the customer application to OCI and set up regular automated backups?

   • ALaunch a compute instance and run an NGINX server to host the application. Deploy Autonomous Database and import the database using Oracle Data Pump.
   • BLaunch a compute instance and run an NGINX server to host the application. Deploy a 2-node VM DB Systems with Oracle RAC enabled. Import the on-premises database to OCI VM DB Systems using Oracle Data Pump and then enable automatic backups.
   • CLaunch a compute instance for both the NGINX application server and the database server. Attach block volumes on the database server compute instance and enable backup policy to backup the block volumes.
   • DLaunch a compute instance and run an NGINX server to host the application. Deploy a 1-node VM DB Systems with Oracle RAC enabled. Import the on-premises database to OCI VM DB Systems using data pump and then enable automatic backups.

   Show answer

   Correct answer: B

   How others answered

   • B100%

   View community discussion1

   Candidate context

   Question 3 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-997 or CertExamHQ.

   1. P

      p55p

      2023-08-05

      Selected B1 upvote

      If a requirement would be to keep RAC then only B can be correct.

4. Question 4 of 25

   A retail company has recently adopted a hybrid architecture. They have the following requirements for their end-to-end connectivity model between their on-premises data center and the Oracle Cloud Infrastructure (OCI) region. Highly available connection with service level redundancy Dedicated network bandwidth with low latency Which connectivity setup is the most cost-effective solution for this scenario?

   • ASet up the FastConnect virtual circuit as your primary connection, and a second FastConnect virtual circuit as a backup connection. Make sure your FastConnect physical connectivity is redundant. Use a single edge device in your on-premises data center for each connection. From your edge device, advertise more specific routes via the primary FastConnect virtual circuit, and less specific routes through the backup FastConnect virtual circuit.
   • BSet up the FastConnect virtual circuit as your primary connection, and an IPSec VPN as a backup connection. Use separate edge devices in your on-premises data center for each connection. From your edge devices, advertise more specific routes through the FastConnect virtual circuit, and less specific routes through the backup IPSec VPN path.
   • CSet up IPSec VPN as your primary connection, and a second IPSec VPN as a backup connection. Use separate edge devices in your on-premises data center for each connection. From your edge devices, advertise more specific routes via the primary IPSec VPN, and less specific routes through the backup IPSec VPN.
   • DSet up IPSec VPN as your primary connection, and a FastConnect virtual circuit as a backup connection. Use separate edge devices in your on-premises data center for each connection. From your edge devices, advertise more specific routes through the IPSec VPN, and less specific routes through the backup FastConnect virtual circuit.

   Show answer

   Correct answer: B

   How others answered

   • B50%
   • A50%

   Only 50% agreed on this answer — treat it as contested rather than settled.

   View community discussion1

   Candidate context

   Question 4 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-997 or CertExamHQ.

   1. P

      p55p

      2023-08-05

      Selected B1 upvote

      If it should be cost effective then I believe B is better than A. Also in A it says it uses single edge device on-prem which is means it is not redundant.

5. Question 5 of 25

   An Oracle Cloud Infrastructure (OCI) Public Load Balancers SSL certificate is expiring soon. You notice that the Load Balancer is configured with SSL Termination only. When the certificate expires, data traffic can be interrupted and could compromise security. What steps do you need to take to prevent this situation?

   • AAdd the new SSL certificate to the Load Balancer and implement end-to-end SSL so it can encrypt the traffic from clients all the way to the backend servers.
   • BAdd the new SSL certificate to the Load Balancer, update listeners and backend sets so they can use the new certificate bundle.
   • CAdd the new SSL certificate to the Load Balancer, update backend servers to work with a new certificate and edit listeners so they can use the new certificate bundle.
   • DAdd the new SSL certificate to the Load Balancer and update listeners to use the new certificate bundle.
   • EAdd the new SSL certificate to the Load Balancer and update backend servers to use the new certificate bundle.

   Show answer

   Correct answer: D

   How others answered

   • D100%

   Explanation

   SSL termination only means the SSL goes up to the load balancer listener, so the certificate only needs to be updated there

   Adapted from community discussion by rotten · 2023-03-29 · 3 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   View community discussion1

   Candidate context

   Question 5 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-997 or CertExamHQ.

   1. R

      rotten

      2023-03-29

      Selected D3 upvotes

      SSL termination only means the SSL goes up to the load balancer listener, so the certificate only needs to be updated there

6. Question 6 of 25

   Select 2

   Your company has recently deployed a new web application that uses Oracle Functions. Your manager instructs you to implement monitoring metrics to manage your systems more effectively. You know that Oracle Functions automatically monitors functions on your behalf and reports metrics through Service Metrics. Which TWO metrics are collected and made available by this feature? (Choose two.)

   • ALength of time a function runs
   • BNumber of times a function is invoked
   • CAmount of CPU used by a function
   • DNumber of concurrent connections
   • ENumber of times a function is removed

   Show answer

   Correct answer: A, B

   How others answered

   • AB100%

   View community discussion1

   Candidate context

   Question 6 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-997 or CertExamHQ.

   1. D

      DannyKang5649

      2023-07-18

      1 upvote

      It's correct Check the below contents on Oracle documents: Overview of the OCI Functions Service Metrics OCI Functions monitors function execution, and collects and reports metrics such as: - The number of times a function is invoked. - The length of time a function runs for. - The number of requests to invoke a function that failed with an error response (including the error code and error message). - The number of requests to invoke a function that returned a '429 Too Many Requests' error in the response (known as 'throttled function invocations'). While frequency varies by metric, default service metrics typically have a frequency of 60 seconds (that is, at least one data point posted per minute).

7. Question 7 of 25

   Your company developed a function that needs to access the Oracle Database to inject some data to it at runtime. You are tasked to move this function to the Oracle Cloud Infrastructure (OCI) and use Oracle Functions and access Oracle Autonomous Database. You created a Dockerfile below to run this function, however, you are getting this error "cx_Oracle.DatabaseError: ORA-12560: TNS:protocol adapter error".

   

   What should you do to make sure that Oracle Functions can run this Dockerfile properly?

   • AUse --privileged flag while running the Docker container to add runtime privilege.
   • BUse –cap-add-ALL flag while running the Docker container to add runtime capability.
   • CYou need to run this Container as root, so add this line: USER root
   • DAdd these two lines to your Dockerfile: groupadd --gid 1000 fn && \ adduser --uid 1000 --gid fn fn

   Show answer

   Correct answer: D

   How others answered

   • D100%

   Supporting references

   • Oracle documentation

   View community discussion1

   Candidate context

   Question 7 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-997 or CertExamHQ.

   1. A

      awsmonster

      2023-02-22

      Selected D3 upvotes

      https://docs.oracle.com/en-us/iaas/Content/Functions/Tasks/functionsrunningasunprivileged.htm#Permissions_Granted_to_Containers_Running_Functions

8. Question 8 of 25

   You have 10 Oracle Linux Compute instances within the ociarchpro compartment running in Oracle Cloud Infrastructure (OCI). The instances are placed in a private subnet inside a Virtual Cloud Network (VCN). You plan to leverage the Oracle Vulnerability Scanning service to gain visibility into potential vulnerabilities. Your goal is to improve the overall security posture. You create a Scan recipe with the following settings: Type: Compute - Name: ociproscanrecipe - CIS benchmark scanning: Enabled - CIS benchmark profile: Medium (More than 40% of the benchmarks failing is a high risk) Schedule: Daily - You create a target with the following settings: Type: Compute - Compartment: ociarchpro - Scan recipe: ociproscanrecipe - Targets: All compute instances in the selected target compartment and its sub-compartments However, you are not able to see the result of host scans for the compute target. For the given scenario, which is NOT a valid troubleshooting task?

   • ACheck whether the target was created less than 24 hours ago.
   • BEnable the scanning plugin on the Oracle Cloud Agent if you manually disabled it on the target compute instances.
   • CCreate a service gateway for the Virtual Cloud Network (VCN) and configure a route rule.
   • DDisable agent-based scanning in the recipe.

   Show answer

   Correct answer: D

   How others answered

   • D100%

   Supporting references

   • Oracle documentation

   View community discussion1

   Candidate context

   Question 8 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-997 or CertExamHQ.

   1. P

      p55p

      2023-08-05

      Selected D1 upvote

      I believe that D is correct. C is valid troubleshooting option https://docs.oracle.com/en-us/iaas/scanning/using/troubleshoot.htm

9. Question 9 of 25

   Given this compartment structure:

   

   You are managing a compute instance that currently resides in the Compute compartment. The Virtual Cloud Network (VCN) into which the compute instance was originally deployed, also resides in this compartment. To support a project-related task, you need to move just the compute instance to the SysTest-Team compartment. You log into your Oracle Cloud Infrastructure (OCI) account and use the Move Resource option to place the compute instance in the new compartment. What will be the result of your attempt to move the compute instance to the new compartment?

   • AThe move will fail and you will be prompted to move the VCN first. Once VCN is moved to the target compartment, the compute instance can be moved.
   • BAfter moving the compute instance, you must move the compute instance VNIC as a separate action. The public and private IP addresses of the instance will remain unchanged and it will still be associated with the VCN from the source compartment.
   • CThe move will be successful. The compute instance's public and private IP addresses will stay the same. The compute instance will remain associated with the VCN from the source compartment.
   • DThe move will be successful. However, the compute instance's public and private IP addresses will change, and it will be associated to the first VCN that was created in the new, target compartment.

   Show answer

   Correct answer: C

   View community discussion1

   Candidate context

   Question 9 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-997 or CertExamHQ.

   1. D

      daws08322

      2023-09-30

      1 upvote

      c https://www.examtopics.com/discussions/oracle/view/37656-exam-1z0-997-20-topic-1-question-45-discussion/

10. Question 10 of 25

    Your team is conducting a root cause analysis (RCA) following a recent, unplanned outage. One of the block volumes attached to your production WebLogic server was deleted and you have been tasked with identifying the source of the action. You search the Audit logs and find several Delete actions that occurred in the previous 24 hours. The simple excerpt of this event is given below:

    

    Which item from the event log will help you identify the individual or service that initiated the Delete Volume API call?

    • ArequestOrigin
    • BeventId
    • CrequestAgent
    • DprincipalID
    • EeventSource

    Show answer

    Correct answer: D

    View community discussion1

    Candidate context

    Question 10 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-997 or CertExamHQ.

    1. D

       daws08322

       2023-09-30

       2 upvotes

       Correct: data.identity.principalId The OCID of the principal.

11. Question 11 of 25

    Select 2

    You work for a public health care company based in the United States. Their existing patient records system runs in an on-premise data center and the customer sends their tape backups offsite as part of their disaster recovery plan. You develop an alternative archival solution using Oracle Cloud Infrastructure (OCI) that will save the company a significant amount of money on a yearly basis. The solution involves storing data in an OCI Object Storage bucket. After reviewing your solution with their customer Global Risk and Compliance (GRC) team, they highlight four security requirements: All data less than 1 year old must be accessible within 2 hours All data must be retained for at least 10 years and be accessible within 48 hours All data must be encrypted at rest No data may be transmitted across the public Internet Which TWO options meet the requirements outlined by the customer GRC team? (Choose two.)

    • ACreate an OCI Object Storage Standard tier bucket. Configure a lifecycle policy to archive any object that is older than 365 days.
    • BCreate an OCI Object Storage Standard tier bucket. Configure a lifecycle policy to delete any object that is older than 7 years.
    • CCreate a VPN connection between your on-premises data center and OCI. Create a Virtual Cloud Network (VCN) along with an OCI Service Gateway for OCI Object Storage.
    • DProvision a FastConnect link to the closest OCI region and configure a public peering virtual circuit.
    • EProvision a FastConnect link to the closest OCI region and configure a private peering virtual circuit.

    Show answer

    Correct answer: A, D

    How others answered

    • AD100%

    View community discussion2

    Candidate context

    Question 11 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-997 or CertExamHQ.

    1. D

       DannyKang5649

       2023-07-19

       1 upvote

       D is correct after reading some information: Public peering: To access public services in Oracle Cloud Infrastructure without using the internet. For example, Object Storage, the Oracle Cloud Infrastructure Console and APIs, or public load balancers in your VCN. Communication across the connection is with IPv4 public IP addresses. Without FastConnect, the traffic destined for public IP addresses would be routed over the internet. With FastConnect, that traffic goes over your private physical connection. Now I'm agree with the answer A&D

    2. D

       daws08322

       2023-09-30

       1 upvote

       BC is correct. Even if it is possible to access object storage through Private Peering Circuit, the main purpose of the Private peering circuit is to extend the network of the client to OCI. Whereas Public Peering has the purpose of accessing OCI services over the public infrastructure without passing through internet. https://www.ateam-oracle.com/post/fastconnect-design#:~:text=Private%20Peering%20(Green%20Line)%3A,customer's%20network%20to%20the%20cloud. https://www.oracle.com/cloud/networking/fastconnect-services.html

12. Question 12 of 25

    A hospital in Austin has hosted its web-based medical records portal entirely in Oracle Cloud Infrastructure (OCI) using compute instances for its web-tier and DB System database for its data tier. To validate compliance with Health Insurance Portability and Accountability (HIPAA), the hospital hired an IT security professional to check their systems. It was found that there were a lot of unauthorized requests coming from a set of IP addresses originating from a country in Southeast Asia. Which option can mitigate this type of attack?

    • ABlock the attacking IP addresses by creating a Network Security Group rule to deny access to the compute instance where the web server is running.
    • BBlock the attacking IP addresses by implementing an OCI Web Application Firewall policy using Access Control Rules.
    • CBlock the attacking IP addresses by creating a Security List rule to deny access to the subnet where the web server is running.
    • DImplementing a OCI Web Application Firewall Bot Management policy to identify the attacking IP addresses and mitigate the threat.

    Show answer

    Correct answer: B

    View community discussion1

    Candidate context

    Question 12 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-997 or CertExamHQ.

    1. D

       daws08322

       2023-09-30

       1 upvote

       WAF can protect any internet facing endpoint, providing consistent rule enforcement across a customer's applications. Access rules can limit based on geography or the signature of the request.

13. Question 13 of 25

    You are running a mission-critical database application in Oracle Cloud Infrastructure (OCI). You take regular backups of your DB system to OCI Object Storage. Recently, you notice a failed database backup status in the console. What troubleshooting action can you perform to determine the cause of the backup failure?

    • AEnsure that the database is not active and running while the backup is in progress.
    • BEnsure that your database host can connect to OCI Object Storage.
    • CEnsure that the dcsagent program is not restarted in case of a stop/waiting status.
    • DEnsure the database archiving mode is set to NOARCHIVELOG.

    Show answer

    Correct answer: B

    How others answered

    • B100%

    Supporting references

    • Oracle documentation

    View community discussion1

    Candidate context

    Question 13 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-997 or CertExamHQ.

    1. N

       Nots

       2023-10-08

       Selected B1 upvote

       "Object Store Connectivity Issues" section. https://docs.oracle.com/en-us/iaas/dbcs/doc/troubleshoot-backup-failures.html

14. Question 14 of 25

    You are responsible for a web application deployed on a set of compute VM instances in Oracle Cloud Infrastructure (OCI). Your application stores data on block volumes. In production, the business requirement is a Recovery Point Objective (RPO) of two hours and that data should be recoverable in case of a regional failure. How would you meet the RPO requirement in the event of a failure?

    • ACreate a user-defined storage backup policy and attach a schedule of type "Hourly" and automatically copy to another region. Apply this policy to a volume group containing the block volumes.
    • BStore hourly block volume backups to an NVMe device attached to a compute instance in a different Availability Domain (AD).
    • CConfigure your application to use synchronous primary-secondary data replication between ADs.
    • DSet up cross-region volume replication to replicate the block volumes to a different OCI region.

    Show answer

    Correct answer: D

    How others answered

    • D100%

    View community discussion1

    Candidate context

    Question 14 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-997 or CertExamHQ.

    1. D

       DannyKang5649

       2023-07-18

       1 upvote

       Replicating a Volume The Block Volume service provides you with the capability to perform ongoing automatic asynchronous replication of block volumes, boot volumes, and volume groups to other regions and availability domains. There are two types of replication: Cross region, for replication between regions. Cross availability domain, for replication between availability domains within the same region. en you enable replication for a volume or volume group, the process includes an initial sync of the data from the source to the replica. Depending on volume size and amount of data written to volumes, this sync can take hours. After the initial synchronization process is complete, the replication process is continuous, with the typical Recovery Point Object (RPO) target rate being less than thirty minutes for replication across regions, however the RPO can vary.

15. Question 15 of 25

    A telecom company has an application running in Oracle Cloud Infrastructure (OCI) Germany Central (eu-frankfurt-1) region. They want to configure Disaster Recovery (DR) site in the OCI UK South (uk-london-1) region. Which is the most cost effective option to help set up application and persistence layers in the DR site?

    • AApplication layer: configure Events service rule in eu-frankfurt-1 region to filter Health Checks event failure and route traffic to uk-london-1 region in the event of a disaster. Persistence layer: set up policy to schedule cross-region automated backups of block volumes between eu-frankfurt-1 and uk-london-1 regions.
    • BApplication layer: configure Traffic Management steering policy with Load Balancing policy between servers in eu-frankfurt-1 and uk-lordon-1 regions. Persistence layer: set up policy to schedule cross-region automated backups of block volumes between eu-frankfurt-1 and uk-london-1 regions.
    • CApplication layer: set up a public load balancer in the eu-frankfurt-1 region. Create a backend set with instances running in both uk-frankfurt-1 and uk-london-1 regions. Persistence layer: set up OCI Object Storage replication from eu-frankfurt-1 region to uk-london-1 region.
    • DApplication layer: configure Traffic Management steering policy with Failover policy between servers in eu-frankfurt-1 and uk-london-1 regions. Persistence layer: set up policy to schedule cross-region automated backups of file systems in File Storage service between eu-frankfurt-1 and uk-london-1 regions.

    Show answer

    Correct answer: B

    Supporting references

    • Oracle documentation

    View community discussion3

    Candidate context

    Question 15 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-997 or CertExamHQ.

    1. R

       Raffounz

       2023-02-13

       3 upvotes

       Failover Policy seems suit better https://docs.oracle.com/en-us/iaas/Content/TrafficManagement/Tasks/trafficmanagement.htm

    2. D

       daws08322

       2023-10-01

       1 upvote

       Option D suggests using Traffic Management steering policy with Failover, which can work for failover scenarios but doesn't provide load balancing benefits. answer B

    3. F

       FPM

       2023-05-02

       1 upvote

       Yes, true, but persistence layer doesn't make sense to use File Storage service

16. Question 16 of 25

    Select 2

    As part of a migration exercise for an existing on-premises application to Oracle Cloud Infrastructure (OCI), you are required to transfer a 7 TB file to OCI Object Storage. You have decided to upload it using OCI Object Storage multipart upload functionality. Which two statements are true? (Choose two.)

    • AAfter initiating a multipart upload by making a CreateMultiPartUpload REST API call, the upload remains active until you explicitly commit or abort it.
    • BIt is not possible to split a 7 TB file into multiple parts using multipart functionality.
    • CIt is possible to split this file into multiple parts using clone tool provided by OCI Object Storage.
    • DContiguous numbers need to be assigned for each part so that OCI Object Storage constructs the object by ordering part numbers in ascending order.
    • EActive multipart upload can be checked by listing all parts that have been uploaded, however it is not possible to list information for an individual object part in an active multipart upload.

    Show answer

    Correct answer: A, E

    How others answered

    • AE100%

    Supporting references

    • Oracle documentation

    View community discussion1

    Candidate context

    Question 16 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-997 or CertExamHQ.

    1. N

       Nots

       2023-10-10

       Selected A, E1 upvote

       I vote A & E. From the description in the following two sections: Initiating an Upload Uploading Object Parts https://docs.oracle.com/en-us/iaas/Content/Object/Tasks/usingmultipartuploads.htm

17. Question 17 of 25

    You are working as a solution architect with a global automotive provider who is looking to create a multi-cloud solution. They want to run their application tier in Microsoft Azure while utilizing the Oracle DB Systems in the Oracle Cloud Infrastructure (OCI). What is the most-fault tolerant and secure solution for this customer?

    • ACreate an encrypted, Virtual Private Network connection between the Microsoft Azure Virtual Network that contains the application tier and the OCI Virtual Cloud Network (VCN) that contains the Oracle Databases.
    • BCreate a FastConnect virtual circuit with Microsoft Azure as the provider to establish a private Interconnect between the application tier running in the Azure Virtual Network and the OCI VCN that contains the Oracle Databases.
    • CUse an OCI Virtual Cloud Network remote peering connection to create a remote network connection between the application tier running in Microsoft Azure Virtual Network and Oracle Databases running in the OCI Virtual Cloud Network (VCN).
    • DDeploy the Oracle database system into a public subnet in your VCN and assign a public IP address. Connect your application tier running in Azure to the public IP address of the database system over the internet.

    Show answer

    Correct answer: B

    Supporting references

    • Oracle documentation

    View community discussion1

    Candidate context

    Question 17 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-997 or CertExamHQ.

    1. D

       daws08322

       2023-11-05

       1 upvote

       Answer should B: https://docs.oracle.com/en/solutions/learn-azure-oci-interconnect/index.html#GUID-FBE38C70-A4CF-40C5-A37A-121241D21199

18. Question 18 of 25

    A cloud consultant is working on an implementation project on Oracle Cloud Infrastructure (OCI). As part of the compliance requirements, the objects placed in OCI Object Storage should be automatically archived first and then deleted. He is testing a lifecycle policy on Object Storage and created a policy as below:

    

    What will happen after this policy is applied?

    • AAll objects with names starting with “doc” will be deleted after 5 days of object creation.
    • BAll the objects having file extension “doc” will be archived for 5 days and will be deleted 10 days after object creation.
    • CAll the objects having file extension “doc” will be archived 5 days after object creation.
    • DAll the objects with names starting with “doc” will be archives 5 days after object creation and will be deleted 5 days after archival.

    Show answer

    Correct answer: A

    How others answered

    • A100%

    Explanation

    a Object Lifecycle Management works by defining rules that instruct Object Storage to archive or delete objects on your behalf within a given bucket. A bucket's lifecycle rules are collectively known as an object lifecycle policy. You can use a rule to either archive or delete objects and specify the number of days until the specified action is taken. A rule that deletes an object always takes priority over a rule that would archive that same object.

    Adapted from community discussion by daws08322 · 2023-11-05 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    View community discussion1

    Candidate context

    Question 18 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-997 or CertExamHQ.

    1. D

       daws08322

       2023-11-05

       2 upvotes

       a Object Lifecycle Management works by defining rules that instruct Object Storage to archive or delete objects on your behalf within a given bucket. A bucket's lifecycle rules are collectively known as an object lifecycle policy. You can use a rule to either archive or delete objects and specify the number of days until the specified action is taken. A rule that deletes an object always takes priority over a rule that would archive that same object.

19. Question 19 of 25

    The finance department of your company has reached out to you. They have customer sensitive data on compute instances in Oracle Cloud Infrastructure (QC), which they want to store in OCI Object Storage for long-term retention and archival. In keeping with their security requirements, they want to ensure this data is NOT transferred over the public Internet, even if encrypted. Which option meets this requirement?

    • AUse the NAT gateway with appropriate route table when transferring data. Then use NAT gateway’s toggle (on/off), once data transfer is complete.
    • BUse the Storage gateway with appropriate firewall rule.
    • CUse the Service gateway with the appropriate route table.

    Show answer

    Correct answer: B

    How others answered

    • B100%

    Explanation

    Correct Answer: C Service Gateway is virtual router that you can add to your VCN. It provides a path for private network traffic between your VCN and supported services in the Oracle Services Network like Object Storage) so compute Instances in a private subnet in your VCN can back up data to Object Storage without needing public IP addresses or access to the intern

    Adapted from community discussion by daws08322 · 2023-10-01 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    View community discussion1

    Candidate context

    Question 19 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-997 or CertExamHQ.

    1. D

       daws08322

       2023-10-01

       2 upvotes

       Correct Answer: C Service Gateway is virtual router that you can add to your VCN. It provides a path for private network traffic between your VCN and supported services in the Oracle Services Network like Object Storage) so compute Instances in a private subnet in your VCN can back up data to Object Storage without needing public IP addresses or access to the intern

20. Question 20 of 25

    Select 2

    You are a principal cloud consultant at a retail firm. You are tasked with importing a certificate issued by a third-party certificate authority (CA) using the Oracle Cloud Infrastructure (OCI) Certificates service. While performing the import, you upload the Certificate, Certificate Chain, and Private Key under Certificate Configuration. However, you receive the following error message: “The certificate chain in the configuration details of the certificate is invalid” Which two certificate settings can help resolve this error? (Choose two.)

    • AIn the basic constraints extension, if the path length is specified, the number of intermediate certificates in the certificate chain hierarchy should exceed it.
    • BConfirm that the certificate chain includes all CA certificates up to and including the root certificate.
    • CEnsure that the certificate’s common name is non-null.
    • DIf the key usage extension is present, it should not include KEY_CERT_SIGN.
    • EIn the basic constraints extension, set isCA parameter to false.

    Show answer

    Correct answer: B, C

    How others answered

    • BC100%

    Supporting references

    • Oracle documentation

    View community discussion3

    Candidate context

    Question 20 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-997 or CertExamHQ.

    1. D

       daws08322

       2023-11-05

       1 upvote

       B. Confirm that the certificate chain includes all CA certificates up to and including the root certificate. This is a critical requirement for a valid certificate chain. Ensure that all necessary intermediate CA certificates and the root CA certificate are included in the chain. The certificate chain should be complete. D. If the key usage extension is present, it should not include KEY_CERT_SIGN. In a typical TLS/SSL certificate chain, the key usage extension should not include the KEY_CERT_SIGN flag. This flag is typically associated with CA certificates. If it's present in an end-entity certificate, it can cause validation issues.

    2. N

       Nots

       2023-10-10

       Selected B, C1 upvote

       Confirm that the certificate chain includes all certificate authority (CA) certificates up to and including the root certificate. ... - The certificate's common name is non-null. ... https://docs.oracle.com/en-us/iaas/Content/certificates/invalidcertificatechain.htm

    3. D

       daws08322

       2023-11-11

       1 upvote

       correction BC The certificate's common name is non-null. In the basic constraints extension, the isCA bit is set to true. In the basic constraints extension, if the path length is specified, the number of intermediate certificates in the certificate chain hierarchy does not exceed it. If the key usage extension is present, it includes KEY_CERT_SIGN.

21. Question 21 of 25

    You work for a Travel company and your travel portal application is a collection of microservices that run on Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE). You have noticed that Oracle has published a newer image of the Operating System (OS) for worker nodes. You want to upgrade your worker nodes to the latest version of the OS, at the same time ensuring that the application does not face any downtime. Which procedure should you follow to upgrade without application downtime?

    • A1. Create a new node pool using the latest available OS image 2. Run kubectl taint nodes --all node-role.kubernetes.io/master- 3. Delete the old node pool
    • B1. Run kubectl cordon against all the worker nodes in the old pool to stop any new application pods to get scheduled 2. Run kubectl drain --delete-local-data –force –ignore-daemonsets to evict any Pods that are running 3. Download the patches for the new OS image 4. Patch the worker nodes to the latest OS image
    • C1. Create a new node pool using the latest available OS image 2. Run kubectl cordon against all the worker nodes in the old pool to stop any new application pods to get scheduled 3. Run kubectl drain --delete-local-data –force –ignore-daemonsets to evict any Pods that are running 4. Delete the old node pool
    • D1. Shutdown the worker nodes 2. Create a new node pool 3. Manually schedule the pods on the newly built node pool

    Show answer

    Correct answer: C

    Supporting references

    • Oracle documentation

    View community discussion1

    Candidate context

    Question 21 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-997 or CertExamHQ.

    1. D

       daws08322

       2023-11-05

       1 upvote

       c is correct https://docs.oracle.com/en-us/iaas/Content/ContEng/Tasks/contengupgradingimageworkernode.htm

22. Question 22 of 25

    Select 3

    A cloud engineer needs to enable routing between two Virtual Cloud Networks (VCN) from his tenancy. The VCNs are in the same region but in different compartments. After reviewing the IPv4 CIDR prefixes of the two VCNs, he notices that there are no overlapping CIDR blocks. Which THREE are valid Oracle Cloud Infrastructure (OCI) options for connecting and routing between the two VCNs? (Choose three.)

    • ACreate two DRGs in the tenancy. Attach one VCN to one of the DRGs; attach the other VCN to the second DRG. In each one of the DRGs, create a Virtual Circuit Attachment. Select FastConnect Partner as the FastConnect type. Select any vendor from the list and complete the circuit at the partner site. Once the FastConnect IPv4 BGP field is in the UP state in each one of the Virtual Circuits, add a route rule in each one of the VCNs' route table to the other VCN using the DRG as the next hop.
    • BCreate two DRGs in the tenancy. Attach one VCN to one of the DRGs; attach the other VCN to the second DRG. In each one of the DRGs, create a Remote Peering Connection (RPC). Establish a connection from one RPC to the other. In each one of the VCNs' route table, add a route rule to the other VCN using the DRG as the next hop.
    • CCreate a DRG in the tenancy; add one of the VCN as a VCN attachment. In the other VCN, create a Local Peering Gateway (LPG). Peer the DRG to the LPG. In the VCN attached to the DRG, add a route rule in the route table that points to the DRG as the next hop. In the other VCN, add a route rule in the route table that points to the LPG as the next hop.
    • DAdd an LPG to each one of the VCNs. In one of the LPG, establish a Peering Connection to the other LPG. In each one of the VCN route table, add a route rule to the other VCN using the LPG as the next hop.
    • ECreate a DRG in the tenancy; add one of the VCNs as a VCN attachment. In the other VCN, create a Local Peering Gateway (LPG). Peer the DRG to the LPG. In the VCN attached to the DRG, enable BGP routing for the route to propagate to the VCN. In the other VCN add a route rule in the route table that points to the LPG as the next hop.
    • FCreate a Dynamic Routing Gateway (DRG) in the tenancy, add the two VCNs as VCN attachments and add routes in each one of the VCN route tables with the DRG as the next hop for the CIDR prefix of the other VCN.

    Show answer

    Correct answer: B, D, F

    How others answered

    • BDF100%

    View community discussion1

    Candidate context

    Question 22 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-997 or CertExamHQ.

    1. P

       p55p

       2023-08-05

       Selected B, D, F1 upvote

       D and F are correct. B can be probably used as well but no one would do it that way.

23. Question 23 of 25

    You are a cloud architect at a financial organization. The development team is tasked with creating a cloud native application to be hosted on Oracle Cloud Infrastructure (OCI). The development team has followed a microservices-based approach and created containerized images of the cloud-native application and pushed them to OCI Registry (OCIR). How can you deploy a load balanced application to your OCI Container Engine for Kubernetes (OKE) cluster using these images?

    • ACreate a load balancer using the OCI load balancer service, add the load balancer service IP in the manifest file, add the location of the docker image to the manifest file, and deploy the manifest file.
    • BCreate a named secret, add the secret to the manifest file, add the location of the docker image to the manifest file, add the service of type LoadBalancer in the manifest file, and deploy the manifest file.
    • CCreate an auth token, add the auth token to the manifest file, add the location of the docker image to the manifest file, add the service of type LoadBalancer in the manifest file, and deploy the manifest file.
    • DAdd the location of the docker image to the manifest file, deploy the manifest file. All applications are load-balanced by default in OKE

    Show answer

    Correct answer: B

    How others answered

    • B100%

    Supporting references

    • Oracle documentation

    View community discussion2

    Candidate context

    Question 23 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-997 or CertExamHQ.

    1. P

       p55p

       2023-08-05

       Selected B1 upvote

       most probably B but only if TLS is needed. https://docs.oracle.com/en-us/iaas/Content/ContEng/Tasks/contengcreatingloadbalancer.htm

    2. F

       FPM

       2023-04-13

       1 upvote

       B looks correct, but I don't get why adding a named secret unless we assume it's a microservices best practice (which it is).

24. Question 24 of 25

    Your organization needs to migrate legacy monolithic applications into cloud-native containerized RESTful microservices. The development team is testing the use of packaged procedures with containers in a fully serverless environment. Before migrating the existing code to production, the team decides to perform a lift and shift of the monolithic application and code the new features that are essential for serverless microservices. You want to carry out a steady migration to the Oracle Cloud Infrastructure (OCI) platform, making the new microservice functionalities available while maintaining the monolithic application for all the other activities. You also want to integrate the legacy monolithic application with the new microservices to have a single interface with simplified management for auditing and monitoring while meeting operational and compliance requirements. How can you meet this requirement?

    • APush the container image to OCIR, build a serverless function using the OCI Functions serviceBYOD (Bring-Your-Own-Dockerfile) feature, build an API deployment specification with serverless functions as the back-end, and use an OCI API gateway to provide front-end access to that function.
    • BPush the container image to the OCI code repository, create an instance template with a Docker container running the image, and create an instance pool with autoscaling configuration. Use the OCI load balancer to provide an API endpoint to connect with the microservice.
    • CPush the container image to the OCI code repository, build a serverless function using the OCI Functions service BYOD feature, build an API deployment specification with serverless functions as the back-end, and use an OCI API gateway to provide front-end access to that function.
    • DPush the container image to OCIR, create an instance template with a Docker container running the image, and create an instance pool with autoscaling configuration. Use the OCI load balancer to provide an API endpoint to connect with the microservice.

    Show answer

    Correct answer: A

    How others answered

    • A100%

    View community discussion1

    Candidate context

    Question 24 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-997 or CertExamHQ.

    1. A

       a66030

       2023-06-09

       1 upvote

       there is nothing called OCI code repo. OCIR should be the answer

25. Question 25 of 25

    Select 3

    Which three scenarios are suitable for the use of Oracle Cloud Infrastructure (OCI) Autonomous Transaction Processing - Serverless (ATP-S) deployment? (Choose three.)

    • AA well-established, online auction marketplace is running an application where there is database usage 24x7, but also has peaks of activity that are hard to predict. When the peaks happen, the total activities may reach 3 times the normal activity level.
    • BA midsize company is considering migrating its legacy on-premises MongoDB database to Oracle Cloud Infrastructure (OCI). The database has significantly higher workloads on weekends than weekdays.
    • CA manufacturing company is running Oracle E-Business Suite application on-premises. They are looking to move this application to OCI and they want to use a managed database offering for their database tier.
    • DA developer working on an internal project needs to use a database during work hours but doesn't need it during nights or weekends. The project budget requires her to keep costs low.
    • EA small startup is deploying a new application for eCommerce and it requires a database to store customers' transactions. The team is unsure of what the load will look like since it is a new application.

    Show answer

    Correct answer: A, D, E

    View community discussion3

    Candidate context

    Question 25 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-997 or CertExamHQ.

    1. P

       p55p

       2023-08-05

       2 upvotes

       ABE. D cannot be correct as it requires to switch off the DB over the weekend.

    2. P

       p55p

       2023-08-05

       1 upvote

       sorry ADB-S can be stopped but still if a requirement is to keep budget low I believe that ABE is better answer.

    3. D

       daws08322

       2023-09-29

       1 upvote

       not B,MongoDB database to Oracle Cloud Infrastructure (OCI) is not transaction processing/ ADE

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

1Z0-997 practice, question 1 of 25