Latest Oracle 1z0-997-21 Actual Free Exam Questions & Community Discussion, Page 3

Question #21

Which of the following features is NOT supported by Oracle Cloud Infrastructure Multi-factor authentication (MFA)?

A. Members of the Administrators group can enable MFA for other users.

B. Only the user can enable MFA for their own account.

C. Users can disable MFA for their own accounts.

D. Members of the Administrators group can disable MFA for other users.

Discussion 0

Correct Answer: A Vote an answer

Question #22

You are tasked with migrating an online shopping website to Oracle Cloud Infrastructure (OCI) and decide to use a Load Balancer. You have configured the backend set with the round robin policy. During the testing phase, you noticed that users are losing items from their shopping carts when they navigate to different pages.
How should you implement a solution to this problem?

A. Configure a set of path route rules that will route to different backend sets based on the URI requested by the customer's browser.

B. Set up a Traffic Management Steering Policy to redirect traffic to a different backend set that is deployed exclusively for the purpose of holding all Items placed in the shopping cart.

C. Set up session persistence at the Load Balancer backend set.

D. Replace the round robin policy with least connections policy at the backend set.

Discussion 0

Correct Answer: D Vote an answer

Question #23

An Oracle Cloud Infrastructure (OCI) Public Load Balancer's SSL certificate is expiring soon. You noticed the Load Balancer is configured with SSL Termination only. When the certificate expires, data traffic can be interrupted and security compromised.
What steps do you need to take to prevent this situation?

A. Add the new SSL certificate to the Load Balancer, update backend servers to work with a new certificate and edit listeners so they can use the new certificate bundle.

B. Add the new SSL certificate to the Load Balancer and implement end to end SSL so it can encrypt the traffic from clients all the way to the backend servers.

C. Add the new SSL certificate to the Load Balancer, update listeners and backend sets so they can use the new certificate bundle.

D. Add the new SSL certificate to the Load Balancer and update listeners to use the new certificate bundle.

E. Add the new SSL certificate to the Load Balancer and update backend servers to use the new certificate bundle.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #24

A digital marketing company is planning to host a website on Oracle Cloud Infrastructure (OCI) and leverage OCI Container Engine for Kubernetes (OKE). The web server will make API calls to access OCI Object Storage to store all images uploaded by users.
For security purposes, your manager instructed you to ensure that the credentials used by the web server to allow access not stored locally on the compute instance.
What solution results in an Implementation with the least effort for this scenario?

A. Configure the credentials using OCI Key Management to allow an instance to make API calls and grant access to OCl Object Storage.

B. Configure the credentials using Instance Principal to allow the web server to make API calls to OCl Object Storage

C. Configure the credentials using OCI Registry (OC1R) which will automatically connect with OKE allowing the web server to make API calls to OCI Object Storage.

D. Configure the credentials to use Transparent Data Encryption (TDE) which will automatically allow the web server to make API calls to OCl Object Storage.

Discussion 0

Correct Answer: B Vote an answer

Question #25

Which of the following is NOT a good use case for using the functionality available in the Oracle Cloud Infrastructure (OCI) Events service?

A. Triggers Function using Oracle Functions when new files are uploaded in an OCI Object Storage bucket.

B. Publish all events in a specific compartment to Oracle Streaming service for later analysis.

C. Publish a notification when long lived tasks complete, such as OCI Autonomous Database backup completion.

D. Capture Monitoring Alarms and invoke Autoscaling of compute instances.

E. Trigger a notification when a function completes its execution.

Discussion 0

Correct Answer: D Vote an answer

Question #26

A customer is in a process of shifting their web based Sales application from their own data center located in US West to OCI India West (Mumbai) region. They want to do it in a controlled manner and initially only 1% of the traffic will be steered to the servers in OCI. After verification of everything is working as expected, the company is gradually planning to increase the ratio until they are comfortable with fully migrating all traffic to OCI.
Which of the following solution can be used in this situation?

A. OCI DNS and Traffic Management with Failover Steering policy

B. OCI DNS and Traffic Management with Geolocation Steering policy

C. OCI DNS and OCI Load Balancer Service

D. OCI DNS and Traffic Management with Load Balancer Steering policy

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #27

A fast growing E-commerce company has deployed their online shopping application on Oracle Cloud Infrastructure. The application was deployed on compute instances with Autoscaling configuration for application servers fronted by a load balancer and OCI Autonomous Transaction Processing (ATP) in the backend. In order to promote their e-commerce platform 50% discount was announced on all the products for a limited period. During the day 1 of promotional period it was observed that the application is running slow and company's hotline is flooded with complaints.
What could be two possible reasons for this situation?

A. The health check on some of the backend servers has failed and the load balancer was rebooting these servers.

B. The health check on some of the backend servers has failed and the load balancer has taken those servers temporarily out of rotation.

C. As part of Autoscaling, the load balancer shape has dynamically changed to a larger shape to handle more incoming traffic and the system was slow for a short time during this change.

D. Autoscaling has already scaled to the maximum number of instances specified in the configuration and there is no room for scaling further.

Discussion 0

Correct Answer: B,D Vote an answer

Question #28

An insurance company is storing critical financial data in the Oracle Cloud Infrastructure block volume. This volume is currently encrypted using oracle managed keys. Due to regulatory compliance, the customer wants to encrypt the data using the keys that they can control and not the keys which are controlled by Oracle.
What of the following series of tasks are required to encrypt the block volume using customer managed keys?

A. Create a master encryption key, create a new version of the encryption key, decrypt the block volume using existing oracle managed keys and encrypt using new version of the encryption key.

B. Create a master encryption key, create a data encryption key, decrypt the block volume using existing oracle managed keys, encrypt the block volume using the data encryption key.

C. Create a vault, create a master encryption key in the vault, assign this master encryption key to the block volume.

D. Create a vault import your master encryption key into the vault, generate data encryption key, assign data encryption key to the block volume.

Discussion 0

Correct Answer: C Vote an answer

Question #29

Your company will soon start moving critical systems Into Oracle Cloud Infrastructure (OCI) platform. These systems will reside in the us-phoenix-1and us-ashburn 1 regions. As part of the migration planning, you are reviewing the company's existing security policies and written guidelines for the OCI platform usage within the company. you have to work with the company managed key.
Which two options ensure compliance with this policy?

A. When you create a new compute instance through OCI console, you use the default options for "configure boot volume" to speed up the process to create this compute instance.

B. When you create a new compute instance through OCI console, you use the default shape to speed up the process to create this compute instance.

C. You do not need to perform any additional actions because the OCI Block Volume service always encrypts all block volumes, boot volumes, and volume backups at rest by using the Advanced Encryption Standard (AES) algorithm with 256-bit encryption.

D. When you create a new OCI Object Storage bucket through OCI console, you need to choose "ENCRYPT USING CUSTOMER-MANAGED KEYS" option.

E. When you create a new block volume through OCI console, select Encrypt using Key Management checkbox and use encryption keys generated and stored in OCI Key Management Service.

Discussion 0

Correct Answer: D,E Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #30

You are responsible for migrating your on premises legacy databases on 11.2.0.4 version to Autonomous Transaction Processing Dedicated (ATP-D) In Oracle Cloud Infrastructure (OCI). As a solution architect, you need to plan your migration approach.
Which two options do you need to implement together to migrate your on premises databases to OCI?

A. Convert on-premises databases to PDB, upgrade to 19c, and encrypt Migration.

B. Retain all legacy structures and unsupported features (e.g. taw U>Bs) In the onuses databases for migration.

C. Retain changes to Oracle shipped privileges, stored procedures or views In the on-premises databases.

D. Use Oracle Data Guard to keep on premises database always active during migration

E. Use Oracle GoldenGate replication to keep on premises database online during migration.

Discussion 0

Correct Answer: A,E Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Oracle 1z0-997-21 Actual Free Exam Questions & Community Discussion

Download Free Oracle 1z0-997-21 Demo