1Z0-997 practice questions 41–50

1. Question 41 · 52 in bank

   You are working as a solution architect with a global automotive provider who is looking to create a multi-cloud solution. They want to run their application tier in Microsoft Azure while utilizing the Oracle DB Systems in the Oracle Cloud Infrastructure (OCI). What is the most-fault tolerant and secure solution for this customer?

   • ACreate an encrypted, Virtual Private Network connection between the Microsoft Azure Virtual Network that contains the application tier and the OCI Virtual Cloud Network (VCN) that contains the Oracle Databases.
   • BCreate a FastConnect virtual circuit with Microsoft Azure as the provider to establish a private Interconnect between the application tier running in the Azure Virtual Network and the OCI VCN that contains the Oracle Databases.
   • CUse an OCI Virtual Cloud Network remote peering connection to create a remote network connection between the application tier running in Microsoft Azure Virtual Network and Oracle Databases running in the OCI Virtual Cloud Network (VCN).
   • DDeploy the Oracle database system into a public subnet in your VCN and assign a public IP address. Connect your application tier running in Azure to the public IP address of the database system over the internet.

   Show answer

   Answer: B

   References

   • Oracle documentation

   Next question

2. Question 42 · 52 in bank

   A cloud consultant is working on an implementation project on Oracle Cloud Infrastructure (OCI). As part of the compliance requirements, the objects placed in OCI Object Storage should be automatically archived first and then deleted. He is testing a lifecycle policy on Object Storage and created a policy as below:

   

   What will happen after this policy is applied?

   • AAll objects with names starting with “doc” will be deleted after 5 days of object creation.
   • BAll the objects having file extension “doc” will be archived for 5 days and will be deleted 10 days after object creation.
   • CAll the objects having file extension “doc” will be archived 5 days after object creation.
   • DAll the objects with names starting with “doc” will be archives 5 days after object creation and will be deleted 5 days after archival.

   Show answer

   Answer: A

   Explanation

   a Object Lifecycle Management works by defining rules that instruct Object Storage to archive or delete objects on your behalf within a given bucket. A bucket's lifecycle rules are collectively known as an object lifecycle policy. You can use a rule to either archive or delete objects and specify the number of days until the specified action is taken. A rule that deletes an object always takes priority over a rule that would archive that same object.

   Source: Adapted from community discussion — daws08322

   Next question

3. Question 43 · 52 in bank

   The finance department of your company has reached out to you. They have customer sensitive data on compute instances in Oracle Cloud Infrastructure (QC), which they want to store in OCI Object Storage for long-term retention and archival. In keeping with their security requirements, they want to ensure this data is NOT transferred over the public Internet, even if encrypted. Which option meets this requirement?

   • AUse the NAT gateway with appropriate route table when transferring data. Then use NAT gateway’s toggle (on/off), once data transfer is complete.
   • BUse the Storage gateway with appropriate firewall rule.
   • CUse the Service gateway with the appropriate route table.

   Show answer

   Answer: B

   Explanation

   Correct Answer: C Service Gateway is virtual router that you can add to your VCN. It provides a path for private network traffic between your VCN and supported services in the Oracle Services Network like Object Storage) so compute Instances in a private subnet in your VCN can back up data to Object Storage without needing public IP addresses or access to the intern

   Source: Adapted from community discussion — daws08322

   Next question

4. Question 44 · 52 in bank

   A SaaS startup that hosts its application on-premises is experiencing rapid growth. Due to cost and flexibility considerations, they have decided to run some module of their application in the cloud with a multi-cloud approach. The proposed solution architecture has the application entry point on-premises, where a load balancer redirects the request to the appropriate module and provides a failover mechanism. In each location, the module instances are exposed via a public IP. You have been asked to review the above architecture and avoid any ‘single point of failure’. How can you change your architecture to meet the above requirement?

   • ACreate a DNS zone in Oracle Cloud Infrastructure (OCI) for your application. Create a Traffic Management Steering Failover policy for each module. Add an Answer Group for each datacenter location with a type A answer to point to the module public IP. Adopt the policy domain as the entry point for each module.
   • BCreate a DNS zone in Oracle Cloud Infrastructure (OCI) for your application. Create an A record for each module public IP. Create a Load Balancer Service instance with a Virtual Hostname associated with each A record domain name. Configure different weight to each backend server.
   • CCreate a DNS zone in Oracle Cloud Infrastructure (OCI) for your application. Add a CNAME record for each module. Create a Load Balancer Service instance with the least connection policy. Configure the path routing to redirect the traffic based on the CNAME records.
   • DCreate a Traffic Management Steering policy with IP Prefix Steering policy type for each module. Add an Answer Group for each datacenter location with a type A answer to point to the module public IP. Setup the rule to redirect the traffic to the appropriate datacenter location.

   Show answer

   Answer: A

   Next question

5. Question 45 · 52 in bank

   You have been asked to deploy a mission critical workload into production on Oracle Cloud Infrastructure (OCI). The application is write-intensive and performs lots of disk IO. For this reason, you have decided to deploy it on a DenseIO VM shape with local NVMe drives. As the application is mission critical, you must both protect against NVMe device failure and maximise write performance. How should you achieve this?

   • AConfigure RAID 1 for the NVMe devices.
   • BUse rsync to copy all the data to a new identical VM instance if an NVMe drive fails on the original VM instance.
   • CMirror the NVMe devices to OCI object Storage using a Storage Gateway.
   • DConfigure RAID 10 for the NVMe devices.

   Show answer

   Answer: D

   Next question

6. Question 46 · 52 in bank

   Select 2

   You are a principal cloud consultant at a retail firm. You are tasked with importing a certificate issued by a third-party certificate authority (CA) using the Oracle Cloud Infrastructure (OCI) Certificates service. While performing the import, you upload the Certificate, Certificate Chain, and Private Key under Certificate Configuration. However, you receive the following error message: “The certificate chain in the configuration details of the certificate is invalid” Which two certificate settings can help resolve this error? (Choose two.)

   • AIn the basic constraints extension, if the path length is specified, the number of intermediate certificates in the certificate chain hierarchy should exceed it.
   • BConfirm that the certificate chain includes all CA certificates up to and including the root certificate.
   • CEnsure that the certificate’s common name is non-null.
   • DIf the key usage extension is present, it should not include KEY_CERT_SIGN.
   • EIn the basic constraints extension, set isCA parameter to false.

   Show answer

   Answer: BC

   References

   • Oracle documentation

   Next question

7. Question 47 · 52 in bank

   You work for a Travel company and your travel portal application is a collection of microservices that run on Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE). You have noticed that Oracle has published a newer image of the Operating System (OS) for worker nodes. You want to upgrade your worker nodes to the latest version of the OS, at the same time ensuring that the application does not face any downtime. Which procedure should you follow to upgrade without application downtime?

   • A1. Create a new node pool using the latest available OS image 2. Run kubectl taint nodes --all node-role.kubernetes.io/master- 3. Delete the old node pool
   • B1. Run kubectl cordon against all the worker nodes in the old pool to stop any new application pods to get scheduled 2. Run kubectl drain --delete-local-data –force –ignore-daemonsets to evict any Pods that are running 3. Download the patches for the new OS image 4. Patch the worker nodes to the latest OS image
   • C1. Create a new node pool using the latest available OS image 2. Run kubectl cordon against all the worker nodes in the old pool to stop any new application pods to get scheduled 3. Run kubectl drain --delete-local-data –force –ignore-daemonsets to evict any Pods that are running 4. Delete the old node pool
   • D1. Shutdown the worker nodes 2. Create a new node pool 3. Manually schedule the pods on the newly built node pool

   Show answer

   Answer: C

   References

   • Oracle documentation

   Next question

8. Question 48 · 52 in bank

   Your organization is developing serverless applications with Oracle Functions. Many of these functions will need to store state data in a database which will require the use of appropriate credentials. However, your corporate security standards mandate the encryption of secret information, such as database passwords. As a solutions architect, which approach would you direct your team to follow to satisfy this security requirement?

   • AUse the OCI Console to enter the password in the function configuration section in the provided Input field.
   • BEncrypt the password using the OCI Vault service, then decrypt this password in your function code with the generated key.
   • CLeverage application-level configuration variables to store passwords because they are automatically encrypted by Oracle Functions.
   • DUse the OCI Vault service to auto-encrypt the password, then set an application-level configuration variable to reference the auto-decrypted password inside your function container.

   Show answer

   Answer: B

   Next question

9. Question 49 · 52 in bank

   Select 3

   A cloud engineer needs to enable routing between two Virtual Cloud Networks (VCN) from his tenancy. The VCNs are in the same region but in different compartments. After reviewing the IPv4 CIDR prefixes of the two VCNs, he notices that there are no overlapping CIDR blocks. Which THREE are valid Oracle Cloud Infrastructure (OCI) options for connecting and routing between the two VCNs? (Choose three.)

   • ACreate two DRGs in the tenancy. Attach one VCN to one of the DRGs; attach the other VCN to the second DRG. In each one of the DRGs, create a Virtual Circuit Attachment. Select FastConnect Partner as the FastConnect type. Select any vendor from the list and complete the circuit at the partner site. Once the FastConnect IPv4 BGP field is in the UP state in each one of the Virtual Circuits, add a route rule in each one of the VCNs' route table to the other VCN using the DRG as the next hop.
   • BCreate two DRGs in the tenancy. Attach one VCN to one of the DRGs; attach the other VCN to the second DRG. In each one of the DRGs, create a Remote Peering Connection (RPC). Establish a connection from one RPC to the other. In each one of the VCNs' route table, add a route rule to the other VCN using the DRG as the next hop.
   • CCreate a DRG in the tenancy; add one of the VCN as a VCN attachment. In the other VCN, create a Local Peering Gateway (LPG). Peer the DRG to the LPG. In the VCN attached to the DRG, add a route rule in the route table that points to the DRG as the next hop. In the other VCN, add a route rule in the route table that points to the LPG as the next hop.
   • DAdd an LPG to each one of the VCNs. In one of the LPG, establish a Peering Connection to the other LPG. In each one of the VCN route table, add a route rule to the other VCN using the LPG as the next hop.
   • ECreate a DRG in the tenancy; add one of the VCNs as a VCN attachment. In the other VCN, create a Local Peering Gateway (LPG). Peer the DRG to the LPG. In the VCN attached to the DRG, enable BGP routing for the route to propagate to the VCN. In the other VCN add a route rule in the route table that points to the LPG as the next hop.
   • FCreate a Dynamic Routing Gateway (DRG) in the tenancy, add the two VCNs as VCN attachments and add routes in each one of the VCN route tables with the DRG as the next hop for the CIDR prefix of the other VCN.

   Show answer

   Answer: BDF

   Next question

10. Question 50 · 52 in bank

    You are a cloud architect at a financial organization. The development team is tasked with creating a cloud native application to be hosted on Oracle Cloud Infrastructure (OCI). The development team has followed a microservices-based approach and created containerized images of the cloud-native application and pushed them to OCI Registry (OCIR). How can you deploy a load balanced application to your OCI Container Engine for Kubernetes (OKE) cluster using these images?

    • ACreate a load balancer using the OCI load balancer service, add the load balancer service IP in the manifest file, add the location of the docker image to the manifest file, and deploy the manifest file.
    • BCreate a named secret, add the secret to the manifest file, add the location of the docker image to the manifest file, add the service of type LoadBalancer in the manifest file, and deploy the manifest file.
    • CCreate an auth token, add the auth token to the manifest file, add the location of the docker image to the manifest file, add the service of type LoadBalancer in the manifest file, and deploy the manifest file.
    • DAdd the location of the docker image to the manifest file, deploy the manifest file. All applications are load-balanced by default in OKE

    Show answer

    Answer: B

    References

    • Oracle documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

1Z0-997 practice, question 41. 52 questions available.