Labour Day Special - 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: c4sdisc65

Note! 1z0-997-22 has been withdrawn. The new exam code is 1z0-997-23

1z0-997-22 Practice Exam Questions with Answers Oracle Cloud Infrastructure 2022 Architect Professional Certification

Question # 6

An upcoming e-commerce company has deployed their online shopping application on OCI. The application was deployed on compute instances with autoscaling configuration for application servers fronted by a load balancer and OCI Autonomous Transaction Processing (ATP) in the backend.

In order to promote their e-commerce platform 50% discount was announced on all the products for a limited period. During the day 1 of promotional period it was observed that the application is running slow and company's hotline is flooded with complaints.

What could be two possible reasons for this situation?

A.

The health check on some of the backend servers has failed and the load balancer has taken those servers temporarily out of rotation

B.

As part of autoscaling, the load balancer shape has dynamically changed to a larger shape to handle more incoming traffic and the system was slow for a short time during this change

C.

The health check on some of the backend servers has failed and the load balancer was rebooting these servers.

D.

The autoscaling has already scaled to the maximum number of instances specified in the configuration and there is no room of scaling

Full Access
Question # 7

An automobile company wants to deploy their CRM application for Oracle Database on Oracle Cloud Infrastructure (OC1) DB Systems for one of major clients. In compliance with the Business Continuity Program of the client, they need to provide a Recovery Point objective (RPO) of 24 hours and a Recovery time objective (RTO) of 24 hours and Recovery Time Objective (RTO) of 1 hour.

The CRM application should be available oven in me event that an entire on Region is down.

Which approach Is the most suitable and cost effective configuration for this scenario?

A.

Deploy a 1 node VM Oracle database in one region and replicate the database to a 1 node VM Oracle database in another region using a manual setup and configuration of Oracle Data Guard.

B.

Deploy a 2 node Virtual Machine (VM) Oracle RAC database in one region and replicate the database to a 2 node VM Oracle RAC database in another region using a manual setup and configuration of Oracle Data Guard.

C.

Deploy a 1 node VM Oracle database in one region. Manual Configure a Recovery Manager (RMAN) database backup schedule to take hourly database backups. Asynchronously copy the database backups to object storage in another OCI region, If the primary OCI region is unavailable launch a new 1 new VM Database in the other OCI region restore the production database from the backup.

D.

Deploy an Autonomous Transaction Processing (Serverless) database in one region and replicate it to an Autonomous Transaction Processing (Serverless) database in another region Oracle GoldenGate.

Full Access
Question # 8

An online Stock trading application is deployed to multiple Availability Domains in the us phoenix-1 region. Considering the high volume of transactions that the trading application handles, the company has hired you to ensure that the data stored by the application available, and disaster resilient. In the event of failure, the Recovery lime Objective (UK)) must be less than 2 hours to meet regulator requirements.

Which Disaster Recovery strategy should be used to achieve the RTO requirement In the event of system failure?

A.

Configure hourly block volumes backups through the Storage Gateway service.

B.

Configure hourly block volumes backups using the Oracle Cloud Infrastructure (OCI) Command Line Interface (CLI)

C.

Store hourly block volumes backup to NVMe device under a compute instance and generate a custom Image every 5 minutes.

D.

Configure your application to use synchronous master slave data replication between Availability Domains.

Full Access
Question # 9

You have configured backups for your Oracle Cloud Infrastructure (OCI) 2-node RAC DB systems on virtual machines. In the console, the database backup displays a Failed status.

Which of the following options is the most likely reason for this backup issue?

A.

The master key stored in OCI Key Management for encryption and decryption of data in the database is not accessible to the backup service.

B.

The auth token being used by the Object Store Swift endpoint is incorrect.

C.

The allocated storage on the OCI File Storage service file system attached with the database is full.

D.

The RMAN backup agent is not compatible with the version of database being used.

Full Access
Question # 10

To serve web traffic for a popular product, your cloud engineer has provisioned four BM.Standard2.52 instances, event spread across two availability domains in the us-asburn-1 region: LoadBalancer is used to deliver the traffic across instances.

After several months, the product grows even more popular and you need additional compute capacity. As a result, an engineer provisioned two additional VM.Standard2.8 instances.

You register the two VM. Standard2. 8 Instances with your load Balancer Backend sot and quickly find that the VM Standard2.8 Instances running at 100% of CPU utilization but the BM.Standard2 .52 instances have significant CPU capacity that's unused.

Which option is the most cost effective and uses instances capacity most effectively?

A.

Configure your Load Balance, with weighted round robin policy to distribute traffic to the compute instances, with more weight assigned to bare metal instances.

B.

Configure Autoscaling instance pool with LoadBalancer to add up to 3 more BM.Standard2.52 Instances when triggered. Shut off VM.Standard2.8 instances.

C.

Route traffic to BM.Standard2.52 and VM Standard2.8 instances directly using DNS and Health Checks. Shut off the load Balances.

D.

Configure LoadBalancer with two VM Standard2.8 instances and use Autoscalling Instant pool to add up to two additional VM instances. Shut off BM.Standard2.52 instances.

Full Access
Question # 11

You have to migrate your application to Oracle Cloud Infrastructure (OCI). The database is constantly being updated and needs to be online without interruptions. How can you transition the database to OCI without interrupting its use?

A.

It is impossible to migrate without interruption.

B.

Use an on-premises database with two-way synchronization to a cloud-based database and allow clients to connect to either databases.

C.

Use an on-premises database with one-way synchronization to a cloud-based database and allow clients to connect only to the cloud database.

D.

Use an on-premises database with one-way synchronization to a cloud-based database and allow clients to connect only to the on-premises database until it is synchronized.

Full Access
Question # 12

A company has an application that processes confidential data. The data is currently stored in an on-premises data center. A solution architect needs to move this data to Oracle Cloud Infrastructure (OCI) Object Storage and ensure data is encrypted in-transit to OCI.

Which two steps should the solution architect perform to set up the most cost-effective connection between on-premises data center and OCI?

A.

Set up private end point for accessing Object Storage.

B.

Attach an Internet Gateway to Virtual Cloud network(VCN).

C.

Configure a service gateway accessing Object Storage.

D.

Set up an IPsec tunnel between the customer equipment and software VPN on an oci instance

E.

Configure a private peering connection on the Oracle FastConnect

F.

Set up VPN Connect between the customer equipment and the Dynamic Routing Gateway.

Full Access
Question # 13

You are designing the network infrastructure for an application consisting of a web server (server-1) and a Domain Name Server (server-2) running in two different subnets inside the same Virtual Cloud Network (VCN) in Oracle Cloud Infrastructure (OCI). You have a requirement where your end users will access server-1 from the internet and server-2 from your customer's on-premises network. The on-premises network is connected to your VCN over a FastConnect virtual circuit.

How should you design your routing configuration to meet these requirements?

A.

Configure a single routing table with two set of rules: one that has route to internet via an Internet Gateway and another that propagates specific routes for the on-premises network via a Dynamic Routing Gateway. Don't associate this routing table with any of the subnets in the VCN.

B.

Configure a single routing table with two set of rules: one that has route to internet via an Internet Gateway and another that propagate specific routes to the on-premises network via a Dynamic Routing Gateway. Associate the routing table with all the VCN subnets.

C.

Configure two routing tables: first one with a route to internet via an Internet gateway; associate this route table to the subnet containing server-1 .Configure the second route table to propagate specific routes to the on-premises network via a Dynamic Routing Gateway; associate this route table to subnet containing server-2.

D.

Configure two routing tables that have rules to route all traffic via a Dynamic Routing Gateway. Associate the two routing tables with all the VCN subnets.

Full Access
Question # 14

You are working as a security consultant with a global insurance organization which is using Microsoft Azure Active Directory (AD) as identity provided to manager user login/passwords. When a user logs in to Oracle Cloud infrastructure (OCI) console, it should get authenticated by Azure AD.

Which set of steps are required to configure at OCI side in order to get it enabled

A.

Setup Azure AD as an Enterprise Application, map Azure AD users and groups and policies to OCI groups and users

B.

Setup Azure AD as an Identity Provider, Import users and groups from Azure AD to OCI, set up IAM policies to govern access to Azure AD groups

C.

Setup Azure AD as an Enterprise Application, configure OCI for single sign-on, map Azure AD groups to OCI groups, set up the IAM policies to govern access to Azure AD groups

D.

Setup Azure AD as an Identity Provider, map Azure AD groups to OCI groups, set up the IAM policies to govern access to Azure AD groups

Full Access
Question # 15

Your organization is planning on using Oracle Cloud Infrastructure (OCI) File Storage Service (FSS). You will be deploying multiple compute instance in Oracle Cloud Infrastructure (OCI) and mounting the file system to these compute instances. The file system will hold payment data processed by a Database instance and utilized by compute instances to create a overall inventory report. You need to restrict access to this data for specific compute instances and must be allowed/blocked per compute instance's CIDR block.

Which option can you use to secure access?

A.

Use stateless Security List rule to restrict access from known IP addresses only.

B.

Create a new VCN security list, choose SOURCE TYPE as Service and SOURCE SERVICE as FSS. Add stateless ingress and egress rules for specific P address and CIDR blocks.

C.

Use 'Export option' feature of FSS to restrict access to the mounted file systems.

D.

Create and configure OCI Web Application Firewall service with built in DNS based intelligent routing.

Full Access
Question # 16

You work for a retail company and they developed a Microservices based shopping application that needs to access Oracle Autonomous Database from the application. As an Architect, you have been tasked to treat all of the application components as Kubernetes native objects, such as the microservices, Oracle

Autonomous database, Kubernetes services, etc.

What should you do to make sure that you can use Kubernetes constructs to manage the life cycle of the application components, including Oracle Autonomous

Database? (Choose the best answer.)

A.

Create an Oracle Cloud Infrastructure (OCI) Service Gateway and connect to the Oracle Autonomous Database using the private IP address from the microservice.

B.

Provision an Oracle Autonomous Database and then use OCI Service Broker to access the database as a native component to your Kubernetes cluster.

C.

Create a service from the Kubernetes cluster and point to the Oracle Autonomous Database using its FQDN.

D.

Install and secure the OCI Service Broker for Kubernetes. Then provision and bind to the required Oracle Cloud Infrastructure services.

Full Access
Question # 17

Your customer has gone through a recent reorganization. As part of this change, they are organizing their Oracle Cloud Infrastructure (OCI) compartment structure to align with the company's new organizational structure. (Refer to the exhibit)

1z0-997-22 question answer

They have made the following change:

Compartment A is moved, and its new parent compartment is compartment Dev.

Policy defined in compartment A: Allow group G1 to manage instance-family in compartment A

Policy defined in root compartment: Allow group admins to manage instance-family in compartment Ops: Test: A

After the compartment move, which action will provide users of group G1 and admins with similar privileges as before the move?

A.

Define the following policy in compartment Dev:

Allow group G1 to manage instance-family in compartment A

B.

Define the following policies in compartment Dev:

Allow group G1 to manage instance-family in compartment A

Allow group admins to manage instance-family in compartment Ops: Dev: A

C.

Define the following policy in compartment: Dev:

Allow group admins to manage instance-family in compartment Ops: Dev: A

D.

Mo change in any policy statement is required as all the policies associated with a compartment being moved is automatically updated

Full Access
Question # 18

Your Oracle database is deployed on-premises and has produced 100 TB database backup locally. You have a disaster recovery plan that requires you to create redundant database backups in Oracle Cloud Infrastructure (OCI).

Once the initial backup is completed, the backup must be available for retrieval in less than 30 minutes to support the Recovery Time Objective (RTO) of your solution.

Which is the most cost effective option to meet these requirements?

A.

Setup an IPsec VPNConnect between on-premises data center and OCI. Then to use OCI CLI command to upload database backups to OCI Object Storage Archive tier as the final destination.

B.

Use OCI Storage Gateway to transfer the backup files to OCI Object Storage Archive tier as the final destination.

C.

Setup a FastConnect connection between on-premises data center and OCI. Then to use OCI CLI command to upload database backups to OCI Object Storage Standard tier as the final destination.

D.

Use OCI Storage Gateway to transfer the backup files to OCI Object Storage Standard tier as the final destination.

Full Access
Question # 19

A hospital in Austin has hosted its web based medical records portal entirely In Oracle cloud Infrastructure (OCI) using Compute Instances for its web-tier and DB system database for its data tier. To validate compliance with Health Insurance Portability and Accountability (HIPAA), the security professional to check their systems it was found that there are a lot of unauthorized coming requests coming from a set of IP addresses originating from a country in Southeast Asia.

Which option can mitigate this type of attack?

A.

Block the attacking IP address by creating by Network Security Group rule to deny access to the compute Instance where the web server Is running

B.

Block the attacking IP address by implementing a OCI Web Application Firewall policy using Access Control Rules

C.

Mitigate the attack by changing the Route fable to redirect the unauthorized traffic to a dummy Compute instance

D.

Block the attacking IP address by creating a Security List rule to deny access to the subnet where the web server Is running

Full Access
Question # 20

You have 10 Oracle Linux Compute instances within the ociarchpro compartment running in Oracle Cloud Infrastructure (OCI). The instances are placed in a private subnet inside a Virtual Cloud Network (VCN). You plan to leverage the Oracle Vulnerability Scanning service to gain visibility into potential vulnerabilities. Your goal is to improve the overall security posture.

You create a Scan recipe with the following settings:

Type: Compute -

Name: ociproscanrecipe -

CIS benchmark scanning: Enabled -

CIS benchmark profile: Medium (More than 40% of the benchmarks failing is a high risk)

Schedule: Daily -

You create a target with the following settings:

Type: Compute -

Compartment: ociarchpro -

Scan recipe: ociproscanrecipe -

Targets: All compute instances in the selected target compartment and its sub-compartments

However, you are not able to see the result of host scans for the compute target.

For the given scenario, which is NOT a valid troubleshooting task?

A.

Check whether the target was created less than 24 hours ago.

B.

Enable the scanning plugin on the Oracle Cloud Agent if you manually disabled it on the target compute instances.

C.

Create a service gateway for the Virtual Cloud Network (VCN) and configure a route rule.

D.

Disable agent-based scanning in the recipe.

Full Access
Question # 21

You are running a legacy application in a compute instance on Oracle Cloud Infrastructure (OCI). To provide enough space for it to store internal data, a block volume is attached to the instance in paravirtualized mode.

Your application is not resilient to crash-consistent backup.

What should you do to backup the block volume in a secure and cost effective way? (Choose the best answer.)

A.

Save your application data, detach the block volume and create a clone.

B.

Create a volume group, add the boot volume and then run the volume group backup.

C.

Create a backup, detach the block volume and save your application data.

D.

Save your application data, detach the block volume and create a backup.

Full Access
Question # 22

You are tasked with backing up your data using Oracle Cloud Infrastructure Block Volume service.

When you are finalizing your block volume backup schedule, which of the following two are valid considerations for your backup plan? (Choose Two)

A.

Number of stored backups: How many backups you need to keep available and the deletion schedule for those you no longer need.

B.

Governance: Tagging of backups so you can capture backup related API calls through the Audit service.

C.

Frequency: How often you want to back up your data.

D.

Location: Determine the Object Store Bucket where the backups will be stored.

E.

Encryption: Whether to use your own key to encrypt your volume backups.

Full Access
Question # 23

You have deployed art application server irt a private Subnet irt your virtual cloud network (VCN). For the database, you have provisioned an Autonomous Transaction Processing (ATP) serverless instance. However, you are unable to connect to the database instance from your application server.

Which two steps would you need to enable this connectivity?

A.

Add an internet gateway to your VCN and add a route rule to your private subnet route table.

CIDR: 0.0.0.0/0

Target: Internet Gateway

B.

Add a remote peering connection from your VCN to the ATP VCN

C.

Add a stateful egress rule to the security list associated with your private subnet.

Destination CIDR: 0.0.0.0/0

Protocols: All Protocols

D.

Create a NAT Gateway and add the following route rule to the route table of private subnet.

CIDR: 0.0.0.0/0

Target: NAT Gateway

Full Access
Question # 24

You are a solutions architect for a global health care company which has numerous data centers around the globe. Due to the ever growing data that your company is storing, you were Instructed to set up a durable, cost effective solution to archive you data from your existing on-premises tape based backup Infrastructure to Oracle Cloud Infrastructure (OCI).

What is the most-effective mechanism to Implement this requirement?

A.

Use the File Storage Service in OCI and copy the data from your existing tape based backup to the shared file system

B.

Setup an on premises OCI Storage Gateway which will back up your data to OCI Object Storage Archive tier.

C.

Setup an on premises OCI Storage Gateway which will back up your data to OCI object Storage Standard tier. Use Object Storage life cycle policy management to move any data older than 30 days from Standard to Archive tier.

D.

Setup an on-promises OCI Storage Gateway which will back up your data to OCI Object Storage Standard

E.

Setup fastConnect to connect your on premises network to your OCI VCN and use rsync tool to copy your data to OCI Object Storage Archive tier.

Full Access