The Oracle Cloud Infraestructure Block Volume service lets you expand the size
of block and boot volumes.Which three options below can you use to increase
the size of your block volumes? Take a backup of your existing volume and restore from the volume backup to a larger
volume Expand an existing volume in place with online resizing Expand an existing volume in place with offline resizing You can only expand block volumes and not boot volumes Clone an existing volume to a new, larger volume.
Your application consists of multiple compute instances,each running a boot
volume and serveral block volumes.Your manager asked you to create
backups of these block volumes in the most time-efficient and time-consistent
manner.How can you meet his request? Create on-demand,one-off backups of both boot and block volumes Use scripts to automate the backup of boot and block volumes Create clones of block and boot volumes one at a time Group together multiple boot and block volumes in a volume group and create volume
group backups.
Which two staments are true regarding cloning a block volume? You can change the block volume size when creating a clone You can skip block volume encryption when creating a clone You can change the block volume performance when creating a clone You can clone block volumes across regions.
You have an application deployed Oracle Cloud Infraestructure running in the US East region.You
have been asked to create a disaster recovery plan that will protect against the loss of critical data.
The DR site must be at least a few hundred miles from your primary site and data transfer between
the two sites must not traverse the public internet. Which is the lowest latency and lowest cost
recommended disaster recovery plan? Create a DR environment in the US West region.Associate a Dynamic Routing Gateway(DRG)
with the VCN in each region and create a remote peering connection between the two VCNs Create a DR environment in the US West region and provision a FastConnect virtual circuit
using Dynamic Routing Gateways between the regions Create a DR environment in the US West region.Associate a Dynamic Rounting Gateway(DRG)
with the VCN in each region and configure an IPsec VPN connection between the two regions Create a DR environment in the US West region.Associate a Local Peering GateWay with the
VCN in each region and create a local peering connection between the two VCNs.
You have deployed a compute instance(VM.Standard2.24) to run an Oracle
database.With this set up, you run into some performance issues and want to
leverage an OCI Dense IO shape(VM.Densel0.2.24),with whitch you get 25.6
TB local NVMe SSD.You do not want to lose the configuration changes you made
to the instance.Which of the following TWO steps ARE NOT required to make this
transition? Terminate the VM.Standard2.24 instance and do not preserve the boot volume Create a new instance using the VM.DenselO2.24 shape using the preserved boot
volume and move the Oracle Database data to NVMe disks Create a new instance using a VM.DenselO2.24 shape using the preserved boot
volume and move the Oracle Database data to block volumes Terminate the VM.Standard2.2.4 instance and preserve the boot volume.
You are running several Linux based operating systems in your on-premises
environment that you want to import to OCI as custom imagen.You can launch
your imported images as OCI compute Virtual machines.Which two modes below
can be used to launch these imported Linux VMs? Enmulated Native Paravirtualized Mixed.
Which two Oracle Cloud Infraestructure services use a Dynamic Routing Gateway? OCI FastConnect Private Peering OCI IPSec VPN Connect Local Peering OCI FastConnect Public Peering Internet GateWay.
Whitch two statements are true about Oracle Cloud Infrastructure IPSec VPN
Connect? Each OCI IPSec VPN consists of multiple redundant IPSec tunnels OCI IPSec VPN can be configured in transport mode only OCI IPSec VPN can be configured in tunnel mode only OCI IPSec VPN tunnel supports only stactic routes to route traffic.
You have an instance running in a development compartment that needs to
make API calls against other OCI services,but you do not want to configure
user credentials or a store a configuration file on the instance.How can you
meet this requirement? Instances can automatically make calls to other OCI services Instances are secure and cannot make calls to other OCI services Create a dynamic group with matching rules to include your instance and
write a policy for this dynamic group Create a dynamic group with matching rules to include your instance.
You have created a new compartment called Production to host some
production apps.You have also created users in your tenancy and added
them to a Group called "production_group".Your users are still unable to
access the Production compartment.How can you resolve this situation? Write an IAM Policy for "production_group" granting it access to the production
compartment Write an IAM Policy for each specific user granting them access to the production
compartment Every compartment you create comes with a predefined set of policies,so no further
action is needed Your users get automatic access to all compartments,so no further action is needed.
You have the following compartment structure in your tenancy.
Root compartment->Training->Training-sub1->Training-sub2
You create a policy in the root compartment to allow the default admin for the account
(Administrators) to manage block volumes in compartment Training-sub2.What policy
would you write to meet this requirement? Allow group Administrators to manage volume-family in compartment Trainig:Training-sub1:
Training-sub2 Allow group Administrators to manage volume-family in root compartment Allow group Administrators to manage volume-family in compartment Training-sub2 Allow group Administrators to manage volume-family in compartment Training-sub1:Training-sub2.
You have two line of business operations(LOB1,LOB2) leveraging Oracle Cloud
Infrastructure.LOB1 is deployed in VCN1 in the OCI US East region,while LOB2 is
deployed in VCN2 in the US West region.You need to peer VCN1 and VCN2 for disaster
recovery and data backup purposes.To ensure you can utilize the OCI Virtual Cloud
Network remote peering feature,which CIDR ranges should be used? VCN1(172.16.1.0/24)and VCN2(172.16.1.0/27) VCN1(192.168.0.0/16)and VCN2(192.168.1.0/27) VCN1(10.0.0.0/16)and VCN2(172.16.0.0/16) VCN1(10.0.0.0/16)and VCN2(10.0.1.0/24).
You have launched a compute instance running Oracle database in a private subnet in the Oracle
Cloud Infrastructure US East region.You have also created a Service Gateway to back up the data
files to OCI Object Storage in the same region.You have modified the security list associated with
the private subnet to allow traffic to the Service Gateway,but your instance still cannot access OCI
Object Storage.How can you resolve this issue? Add a stateful rule that enables egress HTTPS(TCP port 443)traffic to OCI Object Storage in
the security list associated with the private subnet Add a rule in the Route Table associated with the private subnet with Target type as "Service
Gateway" and destination service as "all IAN services in the Oracle Service Network" Add a stateful rule that enables ingress HTTPS(TCP port 443)traffic to OCI Object Storage in the
security list associated with the private subnet Use the default Security List,whicj has ports open for OCI Object Storage.
You deployed a web server in Oracle Cloud Infrastructure using a Ephemeral Public IP
address.While making configuration changes,an admin inadvertently deleted your web
server.You redeploy your web server,but many of your LOB apps depend on this web
server's public IP address and would need an update.What can you do to prevent this
from happening again? Create a reserved public IP and associate it with the virtual NIC of your compute
instance Create a reserved public IP and associate it with the host file of your web server Create a reserved public IP and associate it with the security lis for the subnet being used by
your compute instance Create a reserved public IP and associate it with the subnet of your compute instance.
Which three items must be configured for a load balancer to accept incoming
traffic? A route table entry pointing to the listener IP address SSL certificate A security list that is open on the listener port A listener A backend set with at least one backend server.
You are a network architect of an application running on Oracle Cloud Infrastructure (OCI).
Your security team has informed you about a security patch that needs to be applied
immediately to one of the backend web servers.What should you do to ensure that the OCI
load balancer does not forward traffic to this backend server during maintenance? Create another OCI load balancer for the backend web servers,which are active and
handling traffic. Drain all existing connections to this backend server and mark the backend web
server offline. Edit the security list associated with the subnet to avoid traffic connectivity to this
backend server Stop the load balancer for maintenance and restart the load balancer after the maintenance is finished.
Your application consists of three Oracle Cloud Infrastructure compute
instances running behind a public load balancer.You have configured the
load balancer to perform health checks on these instances, but one of the
three instances fails to pass the configured health check.Which of the following
action will the load balancer perform? Stop the instances that failed health check Remove the instance that failed the health check from the backend set Stop sending traffic to the instance that failed health check Terminate the instance that failed health check.
Your IT department wants to cut down storage costs,but also meet compliance requirements as set
up by the central audit group.You have a legacy bucket with both Word docs(*.docx)and Excel files
(*.xlsx).Your auditors want to retain only Excel files for compliance purposes.Your IT departments
wants to keep all other files for 365 days only.What two steps can you take to meet this
requirement? it is not possible to meet this requirement Create Object Storage Lifecycle rules to delete objects from the legacy bucket after 365 without any
pattern matching Create Object Storage Lifecycle rules to delete objects from the legacy bucket after 365 with a filter
type-exclude by pattern:*.xlsx Create Object Storage Lifecycle rules to archive objects from the legacy bucket after 365 days without
any pattern matching Create Object Storage Lifecycle rules to delete objects from the legacy bucket after 365 days with a filter
type-include by pattern:*.docx.
Which of the following statement is true regarding Oracle Cloud Infrastructure Object Storage
Pre-Authenticated Requests? it is not possible to create pre-authenticated requests for "archive"storage ties it is not possible to create pre-authenticated requests fro the bucket,but only for the
object Changing the bucket visibility does not change existing pre-authenticated requests
Pre-authenticated requests don't have an expiration.
You have a working application in the US East region.The app is a 3-tier app with a database
backend - you take regular backups of the database into OCI Object Storage in the US East region.
For Business continuity,you are leveraging OCI Object Storage cross-region copy feature to copy
database backups to the US West region.Wich of the following three steps do you need to execute
to meet your requirement? provide a destination object name Write an IAM policy and authorize the Object Storage service to manage objects on your behalf Provide an option to choose bulck copying of objects Specify an existing destination bucket Choose an overwrite rule Specify the bucket visibility for both the source and destination buckets.
You have two NFS clients running in two different subnets within the same
Oracle Cloud Infrastructure (OCI)Virtual Cloud Network(VCN).You have
created a shared file system for the two NFS clients who want to connect to
the same file system,but you want to restrict one of the clients to have READ
access while the other has READ/Write access.Which OCI Feacture would you
leverage to meet this requirement? Use OCI Identify Access Management to control access for the NFS clients Use NFS security to control access for the NFS clients Use File Storage NFS Export Options to control access for the NFS clients Use VCN security rules to control access for the NFS clients.
Which statement is true about the Oracle Cloud Infrastructure File Storage
Service Snapshots? You can restore the whole snapshot,but not the individual files it is not possible to create snapshots from OCI console,but just the CLI Snapshots are created under the root folder of file system,in a hidden directory
named.snapshot Snapshots are not incremental.
Which statement is true about the Oracle Cloud infrastructure File Storage
Service Mount Target? Each mount target requires six internal IP addresses in the subnet to function Mount target lives in a single subnet of your choice,but is not highly available You can access multiple file systems through a single mount target Mount target has a public IP address and DNS name.
Which of the following is a key benefit of Database as a Service on Oracle
Cloud Infrastructure? Automated backups to Object Storage Integration with Identity and Access Management Automatic index creation Automatic database indices creation.
Which is a customer's responsibility on an Oracle Cloud Infrastructure DB
System? Installing the operating system(OS),Grid Infrastructure,and database software Creating the first database on the DB System Applying patches to the database and OS Creating an ASM diskgroup for data file or temp file storage.
Which two characteristics do you need to consider when choosing a method to
migrate a database to Oracle Cloud Infrastructure (OCI)? On-premises database version and quantity of data,including indexex On-premises connectivity using remote and local virtual cloud network(VCN)peering On-premises database character set and application version On-premises host operation system platform and network bandwidth.
Which two statements are true about Oracle Cloud Infrastructure(OCI)DB
Systems Data Guard service? Data guard implementation for Bare Metal shapes requires two DB Systems,one
containing the primary database and one containing the standby database. Both DB systems must use the same VCN,and port 1521 must be open. Data guard implementation requires two DB Systems,one running the primary
database on a virtual machine and the standby database running on bare metal. Data guard configuration on the OCI is limited to a virtual machine only.
Which of the following two tasks can be performed in the Oracle Cloud infrastructure Console for
Autonomous Data Warehouse? Scale up/down CPU Adjust Network Bandwidth Scale up/down Memory Increase Storage allocated for Database.
Which two statements are true about Autonomous Data Warehouse (ADW) backups? You must backup ADW database to object storage bucket named ADW_backup Oracle Cloud Infrastructure(OCI)recommends backing up ADW databases manually
to on-premises storage devices You can backup ADW databse only to a standard bucket type in OIC object storage You can perform manual backups to OCI object storage in addition to automated
backups available on ADW.
Which two options are avaible within the service console of Autonomous
Transaction Processing? Configure resource management rules and reset the admin password Perform a manual backup the ATP database Fine tune a long running query using optimizer hints Monitor the health of the database server including CPU,memory and query
performance.
Which two statements are true about restoring a block volume from a manual or policy-based block volume backup? (Choose two.) It can be restored as new volumes with different sizes from the backups It can be restored as a new volume to any AD across different regions It must be restored as a new volume to the same availability domain (AD) on which the original block volume backup resides It can be restored as a new volume to any AD in the same region.
Which two statements define the types of DNS resolvers that exist? (Choose two.) A custom resolver allows instances to use the host names of the hosts in your on-prem network that are connected to your VCN by an IPSec VPN connection. A VCN resolver allows instances to use the host names of the hosts in your on-prem network that are connected to your VCN by an IPSec VPN connection. A VCN resolver allows instances to use host names to communicate with instances on other VCNs in your tenancy. An Internet resolver allows instances to use the host names that are published on the Internet.
For a compute instance that is launched in a private subnet in a Virtual Cloud Network (VCN), which action needs to be performed to connect to the Internet, assuming that the required security list is properly set up? Assign a Public IP address to the compute instance. Create and configure Network Address Translation (NAT) in a public subnet and route all traffic to it. There is no way for an instance in a private subnet to connect to the Internet. Create a default route entry in the route table to forward all traffic to the Internet gateway.
Which three load-balancing policies can be used with a backend set? (Choose three.) throughput IP hash weighted round robin
CPU utilization least connections.
You are designing a two-tier web application in Oracle Cloud Infrastructure (OCI). Your clients want to access the web servers from anywhere, but want to prevent access to the database servers from the Internet. Which is the recommended way to design the network architecture? Create public subnets for web servers and private subnets for database servers in your virtual cloud network (VCN), and associate separate internet gateways for each subnet. Create a public subnet for web servers and associate a dynamic routing gateway with that subnet, and a private subnet for database servers with no association to dynamic routing gateway. Create public subnets for web servers and private subnets for database servers in your VCN, and associate separate security lists and route tables for each subnet. Create a single public subnet for your web servers and database servers, and associate only your web servers to internet gateway.
What does Terraform use to create, manage, and manipulate infrastructure resources? resources provisioner instances provider.
Your company is moving an Internet-facing, 2-tier web application into Oracle Cloud Infrastructure. The application must have a highly available architecture.Which two design options would you consider? (Choose two.) Configure a Dynamic Route Gateway in your VCN and make it highly available. Configure a NAT instance in your Virtual Cloud Network (VCN). Create a route rule by using the private IP of the NAT instance as a route target for all the private subnets in your VCN Create an Internet Gateway and attach it to your VCN. Deploy public load balancer nodes into two Available Domains. Place all web servers behind a public load balancer.
A customer wants to do development on premise while leveraging services such as Java Cloud, Mobile Developer Cloud, and App Builder Services. The customer would also like to scale out the application, stretching from on-premises to the cloud by using a common API.Which two Infrastructure options can the customer leverage to do this? (Choose two.) Oracle Cloud at Customer
Oracle Cloud Infrastructure Classic Oracle Cloud Ravello service Oracle Cloud Infrastructure.
Your company has decided to move a few applications to Oracle Cloud and you have been asked to design it for both High Availability (HA) and DisasterRecovery (DR).Which two should you consider while designing your Oracle Cloud Infrastructure architecture? (Choose two.) Region
Instance Shape Compartments Availability Domain
.
You are the Cloud Architect of a company, and are designing a solution on Oracle Cloud Infrastructure where you want to have all your compute instances resistant to hardware failure. Which two are recommended best practices to achieve the requirement on Oracle Cloud Infrastructure? (Choose two.) Create a custom image of your system drive each time you change the image. Attach block volumes from different Availability Domains to compute instances in different Availability Domains for high availability. Design your system with redundant compute modes in different Availability Domains to support the failover capability. Create backups of your block volumes that are associated with compute instances in different regions.
At the end of a terraform apply operation, what is the default output? nothing by default statistics about what was added, changed, and destroyed the entire state file statistics about what was added, changed, and destroyed, and the values of outputs.
Which statement is true about restoring a block volume from a manual or policy-based block volume backup? It can be restored as new volumes to any Availability Domain within the same region. It must be restored as new volumes to the same Availability Domain on which the original block volume backup resides. It can be restored as new volumes to any Availability Domain across different regions. It can be restored as new volumes with different sizes from the backups.
You are about to upload a large log file (5 TiB size) to Oracle Cloud Infrastructure object storage and have decided to use multipart upload capability for a more efficient and resilient upload. Which two statements are true about multipart upload? (Choose two.) Individual object parts can be as small as 10 MiB or as large as 50 GiB
While a multipart upload is still active, you cannot add parts even if the total number of parts is less than 10,000 The maximum size for an uploaded object is 10 TiB
You do not have to commit the upload after you have uploaded all the object parts.
You are implementing Oracle Cloud Infrastructure (OCI) FastConnect to access OCI public access points (e.g. – object storage). You want other internet traffic from your on-premises environment to use your existing connection with your ISP.What is the correct way to establish OCI FastConnect to access these OCI public end points? Configure private peering on your FastConnect link. Redistribute BGP routes learned into your existing routing table and advertise a default from your network infrastructure to OCI. Configure private peering on your FastConnect link with a static route that points to OCI object storage service. Configure public peering on your FastConnect link with a static route that points to OCI object storage service. Configure public peering on your FastConnect link. Redistribute BGP routes learned into your existing routing table and advertise a specific route for your network infrastructure to OCI.
You have an application deployed in Oracle Cloud Infrastructure running only in the Phoenix region. You were asked to create a disaster recovery (DR) plan that will protect against the loss of critical data. The DR site must be at least 500 miles from your primary site and data transfer between the two sites must not traverse the public internet. Which is the recommended disaster recovery plan? Create a new virtual cloud network (VCN) in the Phoenix region and create a subnet in one availability domain (AD) that is not currently being used by your production systems. Establish VCN peering between the production and DRsites. Create a DR environment in Ashburn. Associate a DRG with the VCN in each region and create a remote peering connection between the two VCNs. Create a DR environment in Ashburn and provision a FastConnect virtual circuit using DRG between the regions. Create a DR environment in Ashburn. Associate a dynamic routing gateway (DRG) with the VCN in each region and configure an IPsec VPN connection between the two regions.
Which two statements are true about Oracle Cloud Infrastructure Compute Service? (Choose two.) You can launch a virtual or bare metal instance by using the same LaunchInstance API. You cannot launch a bare metal server in Oracle Cloud Infrastructure Compute Service. You can attach a block volume in an Availability Domain other than your compute instance. You can share custom images across tenancies and regions.
You create a public Load Balancer instance and configure a back end set "BES1" with one back end server running a service on port 80. You also create a listener on port 80 and configure that listener to use the back end set "BES1". A client makes one HTTP request to the Load Balancer with the correct protocol and port.How many connections does the Load Balancer maintain? 1 2 4 3.
Which two statements about fault domains are true? (Choose two.) A fault domain is a grouping of hardware and infrastructure within an availability domain Each availability domain contains three fault domains
A failed instance in a fault domain is automatically relaunched A fault domain is selected automatically based on usage data.
What is a valid option when exporting a custom image? object storage URL archive storage URL file storage service block volume.
Which service is NOT supported by Oracle Cloud Infrastructure CLI?
load balancer compute database block volumes.
Which does NOT set a variable in Terraform? Passing the variable with a var statement to Terraform
Setting the variable as key value pairs in a file in a subdirectory named tfvar A default value in the variable declaration within a TF plan file Setting the environment variable using a TF_VAR_ predicate in front of the variable name.
Which two configuration formats does Terraform support? (Choose two.) YAML JSON
HCL
XML.
Which two statements about file storage service (FSS) are accurate? (Choose two.) FSS leverages UNIX user group and permission checking for file access security Encryption of file system in FSS is optional Identity and Access Management (IAM) controls which file systems are mountable by which instances Security lists can be used as a virtual firewall to prevent an instance from mounting an FSS mount target within the same subnet Data in transit to an FSS mount target is encrypted.
Which two are true for achieving High Availability on Oracle Cloud Infrastructure? (Choose two.) Store your database across multiple regions so that half of the data resides in one region and the other half resides in another region. Attach your block volume form Availability Domain 1 to a compute instance in Availability Domain 2 (and vice versa) so that they are highly available. Configure your database to have Data Guard in another Availability Domain in Sync mode within a region. Store your database files on Object Storage so that they are available in all Availability Domains in all regions. Distribute your application servers across all Availability Domains within a region.
Which two features are offered natively on Oracle Cloud Infrastructure Database Cloud Service (DBCS)? (Choose two.) Data Guard in Async mode within a region GoldenGate replication between two regions Data Guard in Maximum Protection mode backup to Object Storage otros.
What is the maximum CIDR range that can be assigned when configuring a virtual cloud network? /16 /26 /24 /8.
Your company has decided to move a few applications to Oracle Cloud Infrastructure (OCI) and you have been asked to design a cloud-based disaster recovery(DR) solution. One of the requirements is to deploy the DR resources at least 300 miles from the home OCI region and minimize the network latency. What will be the recommended deployment?
Deploy production and DR applications in the same VCN. Create production subnets in one AD, and DR subnets in another AD. Deploy production and DR applications in two separate VCNs in different availability domains (ADs) within your home region, and then use a VCN remote peering connection for connectivity. Deploy production and DR applications in two separate VCNs, each in different regions. Connect them using a VCN remote peering connection. Deploy production and DR applications in two separate virtual cloud networks (VCNs), each in different regions, and then use VCN local peering gateways for connectivity.
Which two are a valid image source when launching a new compute instance? (Choose two.) bare metal instance
object storage custom image
boot volume.
Your application front end consists of several Oracle Cloud Infrastructure compute instances behind a load balancer. You have configured the load balancer to perform health checks on these instances.What will happen if an instance fails to pass the configured health checks? The instance is replaced automatically by the load balancer. The instance is terminated automatically by the load balancer. The instance is taken out of the backend set by the load balancer. The load balancer stops sending traffic to that instance.
.
A company currently uses Microsoft Active Directory as its identity provider. The company recently purchased Oracle Cloud Infrastructure (OCI) to leverage the cloud platform for its test and development operations. As the administrator, you are now tasked with giving access only to developers so that they can start creating resources in their OCI accounts. Which step will you perform to achieve this requirement? Create a group for developers on OCI and map the group to a similar group in Microsoft Active Directory during the federation process. Federate all Microsoft Active Directory groups with OCI to allow users to use their existing credentials. Create a new user account for each user, and then create policies to provide access to developers. Create a group for developers on OCI, export all the developers from Microsoft Active Directory, and then import them into the Identity and Access Management (IAM) group.
Which two statements are true about policies?
You can use read, write, manage, and inspect as verbs for defining a policy. A policy is a document that specifies who can access which Oracle Cloud Infrastructure resources that your company has, and how. Users need not do anything but still have to be added to a group with appropriate policies defined. You can deny access to a group via policies.
Which two statements are true about data guard service on DB Systems in Oracle Cloud Infrastructure (OCI)? (Choose two.) Data guard implementation requires two DB Systems, one running the primary database on a virtual machine and the standby database running on bare metal Data guard configuration on the OCI is limited to one standby database per primary database Data guard configuration on the OCI is limited to a virtual machine only Data guard implementation requires two DB Systems, one containing the primary database and one containing the standby database.
Which statement is true about a pre-authenticated request in Oracle Cloud Infrastructure Object Storage? You can create only 1, 000 pre-authenticated requests per bucket. You can create a pre-authenticated request only for public buckets. You cannot retire a pre-authenticated request before it expires. You cannot extend the expiration date on a pre-authenticated request.
.
Which tool can automatically install Oracle Cloud Infrastructure CLI?
Python RPM APT PIP.
Why are two subnets required to create a public load balancer when additional subnets are often used for back-end servers? (Choose two.) Routing is simpler when the load balancer is not in the same subnet as the back-end server. Performance is higher when more subnets are used. Additional subnets for back-end servers allow for separate route tables for these servers. Additional subnets for back-end servers allow for separate security lists for these servers.
Which two statements are true about DB Systems in Oracle Cloud Infrastructure? (Choose two.) Customers can consolidate multiple database homes on a single virtual machine database host. Customers have no control over database patching. Customers can manage the TDE Wallet after DB Systems is provisioned. The database and backups are encrypted by default.
You have been notified of an application failure indicating that one or more of the Oracle Cloud Infrastructure (OCI) resources have become unavailable. After scanning the Compute and Database consoles, you notice that one of the DB Systems is missing.What would you do to identify the reason for this missing resource? Navigate to the Audit console and search the previous 24 hours for all List actions to get a list of every event that occurred in the past 24 hours. Navigate to the Audit console and search the previous 24 hours for all Delete actions to get a list of any resource that was deleted in the past 24 hours. Create a serial console connection to the DB System that does not appear in the management console. Connect to the serial console connection, and then review the system logs under /var/log/messages. View the service limits associated with your account to ensure that you have not exceeded the allowable number of DB System in your tenancy.
Which three types of credentials are used to manage Oracle Cloud Infrastructure Identity and Access Management (IAM)? (Choose three.) Windows Password API Signing Key Swift Password SSH Key Console Password.
When terminating a compute instance, you want to preserve the boot volume and its data.Which step will you need to perform? You cannot preserve the boot volume; it will always be deleted when you terminate the instance. Reboot the instance first, and then terminate the instance. Disable the default option to delete the boot volume when terminating an instance. Before terminating the instance, you must detach the boot volume.
Which deployment architecture is offered when you deploy the Platform Service Manager based Database Cloud Service (DBCS) onto Oracle CloudInfrastructure? Two node Primary RAC database leveraging ACFS for the shared file system Single Instance database with a Single Instance Data Guard in Maximum Performance mode Single Instance database with a Single Instance Data Guard in Maximum Protection mode Two node Primary RAC database with a two node RAC Data Guard Standby in Maximum Performance mode.
Which two statements are true about encryption on Oracle Cloud Infrastructure (OCI)? (Choose two.) By default, Object Storage and Block Storage are encrypted at rest.
A customer is responsible for data encryption in all services of OCI. By default, DBCS offers an encrypted database. By default, NVMe drives are encrypted, but the block volume service is not.
Your company is developing a new database application in Oracle Cloud Infrastructure. You need to test application functionality including a hardware failure scenario. Since the application is still in the development phase, you want to minimize infrastructure costs.Which database service deployment option meets this requirement? two node real application cluster (RAC) system Autonomous Data Warehouse (ADW) system as it provides auto fail over functionality two node bare metal system with data guard enabled single node bare metal system.
A customer has established an Oracle Cloud Infrastructure (OCI) FastConnect connection to OCI. The virtual circuit is up and routes are being advertised from the customer’s end, however the customer is unable to ping from compute instances inside the virtual cloud network (VCN) to servers residing in its on-premises data center. Which two options on OCI would remedy this situation? (Choose two.) Modify the route table associated with the VCN subnet in which the instance resides. Add a route to the customer’s on-premises network via the Dynamic Routing Gateway (DRG). Modify the security list associated with the VCN subnet in which the instance resides. Add a stateful egress rule to allow ICMP traffic to the customer’s onpremises network. Modify the security list associated with the VCN subnet in which the instance resides. Add a stateful ingress rule to allow ICMP traffic from anywhere. Modify the default VCN route table to add a route back to the customer’s on-premises network via the DRG.
For what business need should you use Database Cloud Service (DBCS) instead of Oracle database on a compute instance? to bring your own license on a compute service to lower license and infrastructure cost to implement Oracle RAC for high availability to build an Oracle database on a compute service.
You have provisioned an Autonomous Transaction Processing (ATP) database and logged into the ATP service console.What are three abilities that can be performed from this service console? (Choose three.) scale up/down the CPUs
create ATP database users reset the admin password set resource management rules monitor database activity and SQL queries.
Which two use Oracle dynamic routing gateway (DRG) for connectivity? (Choose two.) Remote virtual cloud network (VCN) peering across region Oracle IPsec VPN Local VCN peering Oracle Cloud Infrastructure FastConnect public peering.
You have just created an Autonomous Data Warehouse (ADW) and you want to connect to the ADW using SQL Developer.What three items are needed to connect to the ADW using SQL Developer? (Choose three.) the keystore password a security list with an ingress rule for TCP port 1521 the client credentials file the public IP address of the ADW server the admin password
.
You are running a mission-critical database application in Oracle Cloud Infrastructure (OCI). You take regular backups of your DB system to OCI object storage.Recently, you notice a failed database backup status in the console.What two steps can you take to determine the cause of the backup failure? (Choose two.) Ensure the database archiving mode is set to NOARCHIVELOG Ensure that your database host can connect to the OCI object storage Restart the dcsagent program if it has a status of stop or waiting Make sure that the database is not active and running while backup is in progress.
Which is a customer’s responsibility on an Oracle Cloud Infrastructure database? patching the database and OS creating the first default database on the DBCS server creating an ASM diskgroup for data file or temp file storage installing the operating system (OS), Grid Infrastructure, and database software.
You had an outage in your application caused by the loss of a shared volume provisioned by File Storage Service (FSS). At this point, you need to restore the data from a snapshot you created of the FSS. What are the steps to restore the data? Access the directory where the shared volume is mounted, then cd into .snapshot folder, find the snapshot folder you want to recover and use cp or rsync tool to copy the files to the original location. Open OCI Console, select File Storage Service, find the shared storage, then click on snapshot and restore. Open OCI Console, select File Storage Service, find the snapshot you created and click restore. Access the directory, where you mounted the shared volume, then cd into .snapshot folder and find the snapshot folder you want to recover and rename that folder to the original folder name.
You are managing a tier-1 OLTP application on an Autonomous Transaction Processing (ATP) database. Your business needs to run hourly batch processes on this ATP database that may consume more CPUs than what is available on the server.How can you limit these batch processes to not interfere with the OLTP transactions? Copy OLTP data into new tables in a new table space and run batch processes against these new tables ATP is designed for OLTP workload only; you should not run batch processes on ATP Disable automated backup during the batch process operations Configure ATP resource management rules to manage runtime and IO consumption for the consumer group of batch processes.
What is true about data guard set up with fast-start failover (FSFO) in Oracle Cloud Infrastructure (OCI)? The best practice for high availability and durability is to run the primary, standby, and observer in separate availability domains (ADs). When you configure data guard using OCI console, the default mode is set to maxprotection. You cannot create the standby DB system in a different AD from the primary DB system. You cannot use database command line interface (CLI) to set up data guard with FSFO.
You are tasked with creating a highly available clustered application on Oracle Cloud Infrastructure consisting of three nodes. The round-trip latency between nodes must be less than 500µs (micro-seconds) and your cluster should be resilient to hardware failure.What is the recommended deployment strategy? Deploy the cluster nodes in a single region and deploy each node into a different AD. Select the same fault domain in each AD to ensure consistency. Deploy the cluster nodes in two separate regions and take advantage of multiple availability domains (ADs) in each region. Deploy the cluster nodes in a single region and deploy each node into a different AD. Deploy the cluster nodes in a single region and deploy each node in different fault domains within a single AD.
Which two resources are available by default when your Oracle Cloud Infrastructure tenancy is provisioned? (Choose two.) an NVMe SSD boot disk for each instance, whose size is determined by the image and shape of the instance a range of public IP addresses that are reserved for your tenancy a set of images, where each image is a template of a virtual hard drive that consists of the OS and installed software and applications a variety of shapes, where each shape determines the number of CPUs and memory allocated to an instance.
You are running your warehouse using Autonomous Data Warehouse (ADW) service and you noticed that a newly configured batch job is always running in serial even though nothing else is running in the database. All your jobs are configured to run with parallelism enabled.What could be the reason for this batch job to run in serial?¿Cuál es tu tercera pregunta? * The batch job depends on only one table and parallelism cannot be enabled on single-table queries. The parallelism of batch job depends on the number of ADW databases involved in the query. The new batch job is connected to LOW consumer group. The new batch job runs on database tables that are not enabled for parallel execution. Parallelism on the database is controlled by the application, not the database.
When deploying a highly available, Internet-facing, 2-tier web application on Oracle Cloud Infrastructure (OCI), which design option would you use? Deploy all web servers into one Availability Domain and behind a public load balancer, and deploy two single-node OCI database systems in the same Availability Domain with Data Guard enabled. Deploy all web servers into multiple Availability Domains and behind a public load balancer, and deploy two single-node OCI database systems across two Availability Domains with Data Guard enabled. Deploy all web servers into multiple Availability Domains and behind a private load balancer, and deploy two single-node OCI database systems across two Availability Domains with Data Guard enabled. Deploy all web servers into one Availability Domain, and deploy a single-node OCI database system into a different Availability Domain.
Within your tenancy you have a compute instance with a boot volume and a block volume attached. The boot volume contains the OS and the attached block volume contains the instance’s important data. Logs on the boot volume have filled the boot volume and are causing issues with the OS.What should you do to resolve this situation? Stop the instance that is full. Create a manual backup of the block storage before making changes. Detach the block volume, create a new instance of the same shape with a larger custom boot volume and attach the block volume to thenew instance. Configure the OS and any related application(s) to access the block volume under the same mount point as before. Create a new instance with a larger boot volume size as well a new block volume which is the same size or larger than the one attached to the full instance. rsync the state of the boot volume and the state of the block volume betweenthe two instances. Detach the block volume from the full instance. Create a new instance of the same shape with a larger boot volume and rsync the state of the boot volume between the instances. Attach the block volume to the new instance. Create a manual backup of the block storage instance. Create a custom image of the full instance. Once that completes deploy the custom image to a new instance.
Your organization has deployed a large, complex application across multiple compute instances in Oracle Cloud Infrastructure (OCI). These compute instances also have block volume storage attached to them. You want to create a time consistent backup of these block volume storage. Which implementation strategy should be used? Create a manual backup of each volume Use scripts available in OCI to backup block volume storage Group volumes in a volume group first and then use available scripts in OCI Group volumes in a volume group and create a manual backup of the volume group.
Which storage service is used on OCI for a Data Transfer Service job? An instance with enough storage to accommodate the job An object bucket A File System service instance Block Volume.
You have created a virtual cloud network (VCN) with three private subnets. Two of the subnets contain application servers and the third subnet contains a DBSystem. The application requires a shared file system so you have provisioned one using the file storage service (FSS). You also created the corresponding mount target in one of the application subnets. The VCN security lists are properly configured so that both application servers and the DB System can access the file system. The security team determines that the DB System should have read-only access to the file system. What change would you make to satisfy this requirement? Create an NFS export option that allows READ_ONLY access where the source is the CIDR range of the DB System subnet. Connect via SSH to one of the application servers where the file system has been mounted. Use the Unix command chmod to change permissions on the file system directory, allowing the database user read only access. Modify the security list associated with the subnet where the mount target resides. Change the ingress rules corresponding to the DB System subnet to be stateless. Create an instance principal for the DB System. Write an Identity and Access Management (IAM) policy that allows the instance principal read-only access to the file storage service.
You have an application server that needs to copy data on Oracle Cloud Infrastrucutre (OCI) object storage in the same region. You have created a service gateway for OCI object storage in your virtual cloud network (VCN) and modified security lists associated with the subnet to allow traffic to the service gateway.You are able to connect to the OCI object storage, however, you notice that the connectivity is over the Internet instead of the service gateway. What is the reason for this behavior? The route table associated with the subnet has no route rule where the destination is object storage service The service gateway created in the VCN resides in a different availability domain The security list associated with the subnet has an egress rule that allows all traffic to be forwarded to a destination CIDR 0.0.0.0/0 Identity and Access Management (IAM) policies restrict the access to the object storage bucket.
What happens when you run terraform plan? It configures, reconfigures, and instantiates resources and their dependencies. It shows the operator the course of action that would be taken if a change is applied. It deletes all existing resources and re-creates them. It shows a dependency graph.
There are multiple options of migrating Oracle Databases from on-premises to Oracle Cloud Infrastructure. Which two characteristics do you need to consider when choosing a migration method? (Choose two.)
On-premises database character set and application version On-premises database version and quantity of data, including indexes
On-premises host operating system platform and network bandwidth
On-premises connectivity using remote and local VCN peering.
Which two statements are true about data guard service on DB Systems in Oracle Cloud Infrastructure (OCI)? (Choose two.) * Data guard implementation requires two DB Systems, one running the primary database on a virtual machine and the standby database running on bare metal. Data guard implementation requires two DB Systems, one containing the primary database and one containing the standby database. Data guard configuration on the OCI is limited to a virtual machine only. Both DB Systems must use the same VCN, and port 1521 must be open.
Which scaling option does Database Cloud Service (DBCS) on Bare Metal Shape offer? network bandwidth CPU storage memory.
You have an Oracle Cloud Infrastructure (OCI) load balancer distributing traffic via an evenly-weighted round robin policy to your backend web servers. You notice that one of your web servers is receiving more traffic than other web servers. How can you resolve this imbalance? Check security lists and route tables of your virtual cloud network (VCN) and fix any issues associated with the rules Create separate listeners for each backend web server Delete and re-create your OCI load balancer Disable session persistence on your backend set.
Where do you find the tnsnames.ora for your Autonomous Data Warehouse (ADW) database? You can download tnsnames.ora from Oracle Cloud Infrastructure web console under ADW details page The tnsnames.ora file is included in credentials.zip file that you download from service console of ADW The ADW database will place the tnsnames.ora file in an object storage bucket
You are automatically prompted to download the tnsnames.ora file upon creation of the ADW database.
Which three actions need to be performed before attempting a data transfer service job? Obtain an available host machine which can run the dts utility on-premise with SATA or USB drives attached for the transfer job. Get access to a high-speed internet connection Data Transfer Service and Storage Service Limits should be checked and raised if required. Set up SSH access to a host on OCI to coordinate the transfer job. Create an object bucket to receive the job.
.
You are planning to deploy a multi-region web application in Oracle Cloud Infrastructure (OCI). You have customers in North America, Asia and Europe who will access the application. What service is available in OCI to help you choose the regions the lowest latency to these markets? Internet Intelligence
FastConnect IPsec VPN DNS Zone Management.
Which three components can you configure in Oracle Infrastructure Identity and Access Management? (Choose three.) Groups
Users
Instances Policies
VCNs.
Which two parameters are required in a back end set’s HTTP health check? (Choose two.) response body URL path timeout port status code.
You must implement a backup solution for your Autonomous Data Warehouse (ADW) that will enable you to restore data as old as one year with a recovery point objective (RPO) of 10 days. Which database backup strategy would you select? Take weekly manual backups to supplement the automated backups and preserve them for 12 months. Use the automated backups. Take monthly manual backups to supplement the automated backups and preserve them for 12 months. Take quarterly manual backups to supplement the automated backups and preserve them for 12 months.
Which two statements are true about DB Systems? (Choose two.) * Data Guard as a Service is offered between regions. You cannot manage the database as sys/sysdba. You have full control over the automatic backup schedule and retention periods. You can manage Oracle database initialization parameters at a global level.
What is the default backup location for database backup on Database Cloud Service (DBCS)? Object Storage on Oracle Cloud Infrastructure ASM diskgroup block volume locally attached NVMe on Virtual Machine.
Your on-premises hosted application uses Oracle database server. Your database administrator must have access to the database server for managing the application. Your database server is sized for seasonal peak workloads, which results in high licensing costs. You want to move your application to Oracle CloudInfrastructure (OCI) to take advantage of CPU scaling options. Which database offering on OCI would you select? bare metal DB systems VM DB systems Autonomous Transactions Processing (ATP) Autonomous Data Warehouse (ADW).
What is the maximum number of security lists that can be associated with a subnet? four three five two.
Which option lists Virtual Cloud Networks (VCNs) that can be peered? VCN A (172.16.0.0/24) and VCN B (172.16.0.0/28) VCN A (10.0.0.0/16) and VCN B (10.1.0.0/16) VCN A (10.0.2.0/16) and VCN B (10.0.2.0/25) VCN A (10.0.0.0/16) and VCN B (10.0.16.0/24).
Which two statements are true about an Oracle Cloud Infrastructure (OCI) virtual cloud network (VCN)? (Choose two.) A VCN can reside in multiple OCI regions and availability domains. A VCN covers a single, contiguous IPv4 CIDR block of your choice. The allowable VCN size range is: /16 to /30.
A VCN creates the dynamic routing gateway by default.
You are responsible for setting up access for all the cloud users of a large enterprise. You log in to the Phoenix region and start creating users and policies. You then realize that some users might be creating resources in the Ashburn region.Which step should you perform to enable those users? You can assign a region to each of the users at the time of creation. IAM users are global and non-admin users can add resources to any region by default. You need to log in to each region separately to create users for that particular region. IAM users are global. As an administrator, make sure that you subscribe to the Ashburn region.
Which three methods can you use to manage Oracle Cloud Infrastructure services? (Choose three.) Oracle Cloud Infrastructure Desktop Client Oracle Cloud Infrastructure Console SSH or RDP Command-line Interface REST API.
You are designing a networking infrastructure in multiple Oracle Cloud Infrastructure regions and require connectivity between workloads in each region. You have created a dynamic routing gateway (DRG) and a remote peering connection. However, your workloads are unable to communicate with each other. What are two reasons for this? (Choose two.) The security lists associated with subnets in each virtual cloud network (VCN) do not have the appropriate ingress rules Identity and Access Management (IAM) policies have not been defined to allow connectivity across the two VCNs in different regions A local peering gateway needs to be created in each VCN with a default route rule added in the route table forwarding the traffic to the local peering gateway An internet gateway needs to be created in each VCN with a default route rule added in the route table forwarding the traffic to the internet gateway The route table associated with subnets in each VCN do not have a route rule defined to forward the traffic to their respective DRGs.
Which three are default Virtual Cloud Network (VCN) components? (Choose three.) Security List
Dynamic Routing Gateway DHCP options Internet Gateway Route Table.
Which statement is true regarding Autonomous Transaction Processing (ATP)? A database name cannot be used concurrently for both an Autonomous Data Warehouse (ADW) and an ATP database After terminating a database, the database name is available for immediate reuse A maximum of 8 cores can be enabled for an ATP database A maximum of 2 TB of storage can be enabled for an ATP database.
You are an administrator with an application running on Oracle Cloud Infrastructure (OCI). The company has a fleet of OCI compute virtual instances behind a load balancer. The load balancer backend set health check API is providing a ‘Critical’ level warning. You have confirmed that your application is running healthy on the backend servers.What is the possible reason for this ‘Critical’ warning? The load balancer listener is not configured correctly. A user does not have correct Identity and Access Management (IAM) credentials on the backend servers. The security list associated with the subnet in which the backend server is provisined does not include the IP range for the source of the health check requests. The route table associated with the subnet in which the backend server is provisoned does not include the route for OCI load balancer.
Which two identity providers can your administrator federate with Oracle Cloud Infrastructure? (Choose two.) Microsoft Active Directory
Oracle Identity Cloud Services
AWS Directory Services Google Directory Federation Services.
Which two statements are true about adding secondary VNICs to an existing compute instance? (Choose two.) The primary and secondary VNIC association must be in the same availability domain You can assign an Ephemeral Public IP to a secondary VNIC
You can remove the primary VNIC after the secondary VNIC’s attachment is complete The primary and secondary VNIC association can be in different virtual cloud networks (VCNs).
You need to create a high performance shared file system service, and have been advised to use OCI File Storage Service. You have logged into the OCIConsole, created a File System in an availability domain, and followed the steps to mount the shared file system on your Oracle Linux virtual Instance. However, you are still unable to access the shared file system from your Linux instance.What is the likely reason for this? There are no security list rules for mount target traffic
There is no internet gateway set up for mount target traffic There is no Identity and Access Management (IAM) policy set up to allow you to access the mount target There is no route in your VCN’s route table for mount target traffic.
You are in the process of setting up a highly available student registration website on Oracle Cloud Infrastructure (OCI). You use a load balancer and a database service on OCI. You launch two compute instances each in a different subnet and add them to the back end set of a public load balancer. The load balancer is configured correctly and working. You then deploy the student registration application on these two compute instances. The application can communicate with the database service. However, when you type the URL of this student registration application in your browser, no web page appears.What could be the cause? The security lists of the subnets on which the two instances are located do not have "allow" rules for port 80 and 443. The load balancer performed a health check on the application and found that compute instances were not in a healthy state and terminated the instances. The client requested https access to the application and the load balancer service does not support end-to-end SSL from the client to the listener to the backend set. The Dynamic Routing Gateway is preventing the client traffic from your data center network from reaching the public IP of the load balancer.
Where are DB Systems backups stored by default?
ASM disk group locally attached NVMe on virtual machine block volume object storage on Oracle Cloud Infrastructure.
You deployed a compute instance (VM.Standard2.16) to run a SQL database. After a few weeks, you need to increase disk performance by using NVMe disks; the number of CPUs will not change. As a first step you terminate the instance and preserve the boot volume. What is the next step? Create a new instance using a VM.DenseIO2.16 shape using the preserved boot volume and move the SQL Database data to block volume Create a new instance using a VM.DenseIO2.8 shape using the preserved boot volume and move the SQL Database data to NVMe disks Create a new instance using a VM.Standard1.16 shape using the preserved boot volume and move the SQL Database data to NVMe disks Create a new instance using a VM.DenseIO2.16 shape using the preserved boot volume and move the SQL Database data to NVMe disks.
You have successfully configured identity federation between Oracle Cloud Infrastructure (OCI) and Oracle Identity Cloud Services (IDCS). A new project manager wants access to OCI for her team and provides the name of an existing group within IDCS to use when granting access.How do you configure federation to allow the project team access to OCI resources? Create a new IAM group in OCI and map it to the existing IDCS group. Create a new policy in IDCS and reference the name of the IAM group. Create a new Identity and Access Management (IAM) policy in OCI and reference the name of the IDCS group in each policy statement. Create a new compartment in OCI with the same name as the existing IDCS group. Create an IAM policy that references the new compartment and the name of the IDCS group. Create a new IAM group in OCI and map it to the existing IDCS group. Create a new IAM policy and reference the name of the IAM group in each policy statement.
You have multiple applications installed on a compute instance and these applications generate a large amount of log files. These log files must reside on the boot volume for a minimum of 15 days and must be retained for at least 60 days. The 60-day retention requirement is causing an issue with available disk space.What are the two recommended methods to provide additional boot volume space for this compute instance? (Choose two.) Terminate the instance while preserving the boot volume. Create a new instance from the boot volume and select a DenseIO shape to take advantage of local NVMe storage. Create an object storage bucket and use a script that runs daily to move log files older than 15 days to the bucket. Create and attach a block volume to the compute instance and copy the log files. Create a custom image and launch a new compute instance with a larger boot volume size. Write a custom script to remove the log files on a daily basis and free up the space on the boot volume.
You are asked to create a user that will access programmatic endpoints in Oracle Cloud Infrastructure. The user must not be allowed to authenticate by username and password.Which two authentication options can you use? (Choose two.) PEM Certificate file Auth tokens
API signing key
Windows password SSH key pair.
You have hired a new employee to run reports from the Autonomous Data Warehouse (ADW) and are not confident in their SQL writing ability. Into which consumer group will you assign this individual to minimize the impact of their code? Lowest Medium Highest High Low.
Which two are true for Oracle Cloud Infrastructure DNS? (Choose two.) It can function only as a primary DNS. It supports other cloud providers such as AWS and Azure.
It supports segregation of traffic by using the private pool.
It does not provide DDoS protection.
You are responsible for creating and maintaining an enterprise application that consists of multiple storage volumes across multiple instances. The storage volumes include boot volumes and block volumes for your data storage. You need to create backups of these storage volumes in the most time-efficient manner. How can you meet this requirement? You can create clones of storage volumes one at a time You can group together multiple storage volumes in a volume group and create volume group backups You can create on-demand one-off backups of boot volumes, but not block volumes You can create on-demand one-off backups of block volumes, but not boot volumes.
An instance is launched with a primary VNIC that is created during instance launch.Which two operations are true when you add secondary VNICs to an existing instance? (Choose two.) You can remove the primary VNIC after the secondary VNIC’s attachment is complete. You can remove the secondary VNIC later if it is not needed.
The primary and secondary VNIC association should be within the same Availability Domain. It is not possible to connect two VNICs to an instance.
You have an external facing web server running in the Oracle Cloud Infrastructure (OCI) London region. You are notified that customers in North America and Australia are facing high latency while connecting to your web server. Which services are available on OCI that can help you get current latency statistics to your web server from these markets? Use DNS Zone Management service to check latency over that connection
Setup an IPsec VPN with customers in those markets and check latency over that connection
Use the Internet Intelligence tool. Run tests using the web server’s public IP address review traceroute details from different vantage points Setup a FastConnect with customers in those markets and check latency over that connection.
How can you provide users access to an existing compartment? by granting users access to a compartment when the compartment is created by adding users to a group and defining a policy to provide the group access to the compartment by adding users to a compartment, all users in the compartment will have access to the objects in the compartment. by granting access directly to the user when the user is created.
Which service would you use if your big data workload required shared access and NFS-based connectivity? block volume archive storage object storage file storage.
Which two options are true for Autonomous Transaction Processing (ATP) database? You can add/remove Diskgroup in ATP You can scale storage up or down in ATP You can scale CPU up or down in ATP You can add more Pluggable Databases for consolidating multiple databases in ATP You can add new ORACLE_HOME for bringing older versions of on-premises databases to ATP.
You are designing a high bandwidth, redundant connection between your data center and Oracle Cloud Infrastructure (OCI). While researching for OCIFastConnect locations, you notice that you are co-located with Oracle at one of the Oracle FastConnect locations in the Ashburn region. What is the recommended design in this scenario? Create a cross-connect group and have two or more cross-connects in that group. Create an IPsec VPN connection on this group. Setup two IPsec connections between your data center and OCI Ashburn region. Create an OCI load balancer to distribute the traffic across the two connections. Create a cross-connect group and have at least two or more cross-connects in that group. Create at least two or more virtual circuits in the group. Create a cross-connect group and have at least one cross-connect in that group. Create at least one virtual circuit in the group.
When terminating a compute instance, which statement is true? The instance needs to be stopped first, and then terminated The boot volume is always deleted. All block volumes attached to the instance are terminated. Users can preserve the boot volume associated with the instance.
.
Your company has been running several small applications in Oracle Cloud Infrastructure and is planning a proof-of-concept (POC) to deploy PeopleSoft. If your existing resources are being maintained in the root compartment, what is the recommended approach for defining security for the upcoming POC? Create a new compartment for the POC and grant appropriate permissions to create and manage resources within the compartment. Provision all new resources into the root compartment. Grant permissions that only allow for creation and management of resources specific to the POC Provision all new resources into the root compartment. Use defined tags to separate resources that belong to different applications. Create a new tenancy for the POC. Provision all new resources into the root compartment. Grant appropriate permissions to create and manage resources within the root compartment.
You have been tasked with creating one virtual cloud network (VCN) each for two line of business (LOB) applications. LOB A and LOB B will need to communicate with each other. To ensure that you can utilize VCN peering, which network CIDR ranges should be used? VCN A (10.0.0.0/16) and VCN B (10.1.0.0/16)
VCN A (10.0.2.0/16) and VCN B (10.0.2.0/25) VCN A (10.0.0.0/16) and VCN B (10.0.16.0/24) VCN A (172.16.0.0/24) and VCN B (172.16.0.0/28).
Which three are valid Terraform configuration components? (Choose three.) variable
region metadata instance resource
data source.
Which statement is true about cloning a volume?
You can clone a volume in another region. You need to detach a volume before cloning it. A cloned volume is the same as a snapshot that has a dependency on the source volume. You can change the block volume size when cloning a volume.
You have a shared file system between two web servers using File Storage Service (FSS) and you were tasked to create a backup plan for this environment to protect the data placed into the shared file system.What is the recommended approach to create this backup using FSS features? Implement a backup policy to execute a snapshot of the shared volume. Implement a backup policy to copy data from the shared volume to object storage. Compress the data that is in the shared volume and copy it into a different folder on the boot volume disk. Use the rsync tool to send data from the shared volume to a boot volume disk. Use the rsync tool to send data from the shared volume to a block volume.
A new employee has just started working for your company. You create an Oracle Cloud Infrastructure user account for this employee, following which they are able to log in, but still cannot create any resources.What should you do to resolve this? Send the employee API Signing Keys to log in. Delete the account and create another one. Make sure that the employee is logging in to the Oracle Cloud Infrastructure account from your corporate network only. Add the employee to a group with policies to grant access to relevant resources.
Which two are NOT an image source when launching a new compute instance? (Choose two.) boot volume custom image Object Storage bare metal instance
.
Which two statements are true about the Oracle Cloud Infrastructure object storage service? (Choose two.) It provides higher IOPS than block storage. It can be directly attached to or detached from a compute instance. Data is stored redundantly in a single AD. Data is stored redundantly across multiple availability domains (ADs).
It provides strong consistency.
.
Which two are valid options when migrating a database from on-premise to Oracle Cloud Infrastructure? (Choose two.) snapping or cloning storage form on-premise to Oracle Cloud Infrastructure performing a backup to Oracle Cloud Infrastructure Object Storage, and then restoring to a database server on Oracle Cloud Infrastructure performing RMAN backup to an on-premise storage device, and then shipping to Oracle Cloud Infrastructure converting the Oracle database to a NoSQL database and migrating to Oracle Cloud Infrastructure by using rsync file copy.
Which two are required to create an IPSec VPN connection? (Choose two.) security list
static route CIDR
name compute instance.
Which statement is true about Oracle Cloud Infrastructure FastConnect? For private peering, FastConnect extends your existing infrastructure to allow you to consume object storage from your on-premises data center For private peering, FastConnect extends your existing infrastructure to a virtual cloud network The FastConnect provider network offers only 1 Gbps port connection speed increments For public peering, a dynamic routing gateway must be configured and attached to the virtual cloud network (VCN).
Which two statements are true about subnets within a VCN? (Choose two.) You can have multiple subnets in an Availability Domain for a given VCN. Private and Public subnets cannot reside in the same Availability Domain for a given VCN. Subnets can have their IP addresses overlap with other subnets in another network for a given VCN. Instances obtain their private IP and the associated security list from their subnets.
Which five are the required parameters to launch an instance in Oracle Cloud Infrastructure? subnet Availability Domain
Virtual Cloud Network
host name instance shape
image operating system
private IP address.
Which two options are valid for loading data directly into Autonomous Data Warehouse (ADW)? (Choose two.) Data Integrator Data Pump Data Transfer Service SQL*Loader
.
Which two are required parameters to create a public load balancer instance? (Choose two.) certificate load balancer name listener back end set
two public subnets.
ou are the Solutions Architect of a large company and are tasked with migrating all your services to Oracle Cloud Infrastructure. As part of this, you first design a Virtual Cloud Network (VCN) with a public subnet and a private subnet. Then in order to provide Internet connectivity to the instances in your private subnet, you create an Oracle Linux instance in your public subnet and configure NAT on it. However, even after adding all related security list rules and routes in theRoute Table, your private subnet instances still cannot connect to the Internet.Which action should you perform to enable Internet connectivity? Disable "Source and Destination Check" on the VNIC of your Linux instance.
There is no way that a private subnet can connect to the Internet. Create a Dynamic Routing Gateway (DRG) and route your private IP traffic to the DRG. Restart the NAT instance.
You currently manage an e-commerce application that utilizes 25 identical compute resources to handle customer traffic. The stakeholders have asked you to create another 25 identical compute resources in order to deploy and test a new version of the software?What is the most efficient process to create 25 additional compute resources that are identical to the first 25? Create a custom image from 1 of the 25 servers. Use this custom image to provision 25 more servers Create a manual backup of each boot volume belonging to the 25 servers. Restore each backup to create 25 new boot volumes, from which you will provision 25 more servers Provision a new server and configure it to be identical to the first 25. Create a custom image from the new server, then use the custom image to provision 24 more servers Clone the boot volume of 1 of the 25 servers. Use the boot volume clone to provision 25 more servers.
You have created a public subnet and an internet gateway in your virtual cloud network (VCN). The public subnet has an associated route table and security list.However, after creating several compute instances in the public subnet, none can reach the Internet.Which two are possible reasons for the connectivity issue? (Choose two.) The route table has no default route for routing traffic to the internet gateway There is no stateful egress rule in the security list associated with the public subnet There is no dynamic routing gateway (DRG) associated with the VCN There is no stateful ingress rule in the security list associated with the public subnet.
Which certificate format is used with the load balancer? PFX PEM
PKCS12 CRT.
You are designing a lab exercise for your team that has a large number of graphics with large file sizes. The application becomes unresponsive if the graphics are embedded in the application. You have uploaded the graphics to Oracle Cloud Infrastructure and only added the URL in the application. You need to ensure these graphics are accessible without requiring any authentication for an extended period of time. How can you achieve these requirements? Create pre-authenticated requests (PAR) and specify 00:00:0000 as the expiration time. Make the object storage bucket private and all objects public and use the URL found in the Object "Details". Make the object storage bucket public and use the URL found in the Object "Details". Create PARs and do not specify an expiration date.
You are about to deploy an e-business application on Oracle Cloud Infrastructure and one of the requirements is to use a shared file system that supports the NFS protocol. Which storage service would meet this requirement? object storage block volume data transfer appliance file storage.
Which two resources are availability domain constructs? (Choose two.)
VCN Groups Block Volume
Compute Instance
Object Storage.
In which language are Terraform and Terraform providers written?
Python Go
C Ruby.
Which two will occur when a backend server that is registered with a backend set is marked to drain connections? (Choose two.) It disallows new connections to that back-end server.
It keeps the connections to that instance open and attempts to complete any in-flight requests. It redirects the requests to a user-defined error page. It immediately closes all existing connections to that instance. It forcibly closes all connections to that instance after a timeout period.
Which storage offering supports this application? object storage service archive storage service file storage service block storage service.
Which three are capabilities of the dbaascli utility? (Choose three.)
Patching the primary database deployment Open port 1521 in the VCN to allow for traffic to the listener Start and open the database instance Switchover and failover in an Oracle Guard configuration Clone a DB.
Which two resources reside exclusively in a single availability domain? (Choose two.) compute instance block volume object storage groups virtual cloud network.
In what two ways does Oracle Cloud Infrastructure (OCI) file storage service (FSS) differ from OCI object storage and block volume services? (Choose two.) Block volume service is NVMe based, while FSS is not Object storage and block volume services offer default encryption, but FSS does not A file system is created within an availability domain, whereas object storage buckets exist at the region level FSS uses the network file system (NFS) protocol, whereas block volume uses iSCSI.
Which resource is required when connecting to your on-premise network from your Virtual Cloud Network (VCN) via IPSec VPN or FastConnect? internet Gateway (IGW) Dynamic Routing Gateway (DRG) local peering gateway NAT.
You are designing a shared storage solution for your company in Oracle Cloud Infrastructure. The proposed storage solution should allow users to create a hierarchical structure (similar to the directory structure in Linux or Windows based systems). The solution should provide data encryption and a large amount of storage space. Which would be the best implementation strategy? Use block storage. Create and attach a large block storage volume to one compute instance. Assign a public IP to the compute instance. Store data on the block storage and access it by connecting to the compute instance. Use object storage. Create a single namespace and multiple buckets to create the hierarchical directory structure. Use object storage. Create multiple namespaces with one bucket each. Make the buckets publicly accessible. Use file storage service. Create a file system and a mount target. Share the private IP of the mount target.
Which two statements are true about an Oracle Cloud Infrastructure object storage bucket? (Choose two.) You can associate a bucket with multiple compartments You cannot change a bucket from private to public after it is created You can associate a bucket with only a single compartment
You cannot edit or append data to an object, but you can replace the entire object.
Which two Oracle Cloud Infrastructure database services allow you to dynamically scale both CPU and storage? (Choose two.) bare metal DB system
virtual machine DB system
Autonomous Data Warehouse (ADW) Autonomous Transaction Processing (ATP).
Which statement is true about Oracle Cloud Infrastructure Object Storage Service? An Archive Object Storage tier bucket can be upgraded to the Standard Object Storage tier. You cannot directly download an object from an Archive Object Storage bucket. An existing Standard Object Storage tier bucket can be downgraded to the Archive Object Storage tier. Data retrieval in Archive Object Storage is instantaneous.
Which three actions are required to configure a highly available and secure hybrid network between Oracle Cloud and your data center? (Choose three.) Define a non-overlapping IP Address Space between the data center and the cloud. Configure each of the CPEs to leverage each of the IPSec Tunnels created by the connection process. Create two or more CPEs that map to the private IP addresses of the customer routers used in the IPSec VPN Tunnel. Define a default route table entry for the VCN that directs all traffic to the data center network to a single DRG. Create dynamic routing gateways in more than one AD within your region.
Which two options are available when setting up DNS for your bare metal and virtual machine DB Systems? (Choose two.) Internet and custom resolver Google DNS servers custom resolver Internet and virtual cloud network (VCN) resolver
.
Which DNS resource record type is used to point a host name to an IPv4 address? ALIAS A CNAME AAAA.
You want an Oracle Cloud Infrastructure (OCI) compute instance in your compartment to make API calls to other services within OCI without storing credentials in a configuration file. What do you need to do? Create a dynamic group with appropriate matching rules to include the instance, and reference this group in your IAM policy statement Instances cannot access services outside their compartment VM instances are treated as users. Create a user, assign the user to that VM instance, and reference the instance in your Identity and Access Management (IAM) policy statement By default, all VM instances are created with an instance principal. Reference this instance principal in your IAM policy statement.
Your Operations team has recently created a new, standard image that will be used to launch all new application servers in the Finance compartment. The custom image currently exists in the Operations compartment. You have access to manage all-resources in the Finance compartment and do not have access to the Operations compartment.Which two methods would make the new image available for you to use when deploying new servers in the Finance compartment? (Choose two.) Instruct the Operations team to reassign the custom image to the Finance compartment so you can select it from a drop-down list when launching new compute resources. Instruct the Operations team to export the image to an object storage bucket, create a pre-authenticated request (PAR), and provide you with the URL. Download the custom image to your laptop and import it as a custom image in theFinance compartment. Instruct the Administrators team to grant you access to use instance-images in the Operations compartment. Use the Oracle Cloud Identifier (OCID) of the custom image when launching new compute resources in the Finance compartment. Instruct the Operations team to export the image to an object storage bucket, create a PAR, and provide you with the URL. Use that URL as the source when importing a custom image. Import the custom image into the Financecompartment. Instruct the Operations team to export the image to an object storage bucket. Instruct the Administrators team to grant you access to the object storage bucket where the custom image is stored. Use the download URL of the customimage as the image source when launching new compute resources in the Finance compartment.
When creating a subnet, one or more placeholder security lists are often associated with the subnet. Why? Each operator needs its own security list. Each protocol needs its own security list Each network endpoint or instance in the subnet needs its own security list It is not possible to add or remove security lists after a subnet is created.
You have an application running on Oracle Cloud Infrastructure. You identified that the read and write operations are slowing your application down enough to impair user access. The application is currently using a VM.Standard1.2 compute without any block storage attached to it.Which two options allow you to increase disk performance? (Choose two.) Terminate the compute instance preserving the boot volume. Create a new compute instance using a VM Dense IO shape using the boot volume preserved. Terminate the compute instance preserving the boot volume. Create a new compute instance using a VM Standard shape and attach a new block volume to host your application. Create a backup of the boot volume. Create a new compute instance using a VM Dense IO shape and restore the backup. Terminate the compute instance and create a backup of the boot volume. Create a new compute instance using a VM Dense IO shape and restore the backup.
You are deploying a highly available web application in Oracle Cloud Infrastructure and have decided to use a public load balancer. The back-end web servers will be distributed across all three availability domains (ADs). How many subnets should you create to deliver a secure, highly available application? three subnets in total; one subnet in each AD five subnets in total; two subnets each in the first and second AD with a single subnet in the third AD six subnets in total; two subnets in each AD; one for the load balancer and one for the web servers four subnets in total; one subnet in each AD for the web servers and a single subnet in any one AD for the load balancer.
Where is the tenancy Oracle Cloud Identifier (OCID) located?
given by support on account creation at the bottom of every console page on the Identity – Users page contained within the compartment OCID.
Which three can you achieve by using Terraform? (Choose three.)
Create resources in the right order without regard to the order in the terraform plan file. Automatically re-provision the resources that are tainted or whose configuration has changed. Automatically translate a deployed infrastructure and create a plan. Automatically destroy all the resources that are in tenancy.
Continuously maintain the configuration files in an instance.
Which two tools would you use to manage Database Cloud Service (DBCS)? (Choose two.) psql Oracle Swingbench SQL Developer
Oracle Enterprise Manager
.
Which statement is true about Oracle Cloud Infrastructure (OCI) object storage support for server-side encryption?
You must manually enable server-side encryption for each object as you upload to OCI object storage Objects are automatically encrypted as they are uploaded to object storage and decrypted upon retrieval You must manually decrypt the data when retrieving from OCI object storage Only the object data is encrypted and the user-defined metadata that is associated with the object is not encrypted.
You deployed a web server in Oracle Cloud Infrastructure using an ephemeral public IP. After a few changes in your web server configuration, you rebooted the server and a new public IP was associated to your instance. What should you do to prevent this from happening again? Create a reserved public IP and associate it with the security list that your compute instance is using Create a reserved public IP and associate it with the subnet of your compute instance Create a reserved public IP and associate it with the VNIC of your compute instance Create a reserved public IP and associate it with the hosts file of your web server.
As the Cloud Architect for your company, you have been tasked with designing a high performance compute (HPC) cluster in Oracle Cloud Infrastructure (OCI).The following requirements have been defined: The cluster must be a minimum of three nodes, but may increase to six nodes when demand requires.The cluster must be resilient to any potential infrastructure failures.To minimize latency, all nodes must be deployed within the same availability domain (AD). Adding or replacing nodes within the cluster should take no more than 30 minutes.Which two steps should be performed to satisfy these requirements in OCI? (Choose two.) Deploy the cluster in a single AD with a shared file system that leverages the file storage service (FSS). Deploy a standby cluster in another AD and configure it to use the same shared file system. Deploy the cluster in a single AD. Place each of the nodes in one of the three different fault domains in that AD. Create a backup of your HPC node compute instance boot volume. Launch new compute instances directly from the backup to reduce provisioning time. Create a custom image of your HPC node compute instance. Launch new compute instances using this image to reduce provisioning time. Deploy the cluster in a single AD. Place each of the nodes in a different virtual cloud network (VCN) subnet.
You need to transfer over 12 TB of data from on-premises to your cloud account. You started copying this data over the internet and noticed that it will take too long to complete.Without increasing the costs of your subscription, what is the recommended way to send this amount of data to your cloud account? Use Data Transfer Service to send your data.
Split the data into multiple parts and use the multipart tool. Use a 10 GB FastConnect line to send the data. Send the data over a VPN IPsec tunnel. Compress the data and use the multipart tool.
You are a network architect and have designed the network infrastructure of a three-tier application on Oracle Cloud Infrastructure (OCI). In the architecture, back-end DB servers are in a private subnet. One of your DB administrators requests to have access to OCI object storage service. How can you meet this requirement? Create a service gateway, add a new route rule to the private subnet route table that uses object storage as your service gateway target type Create a dynamic routing gateway (DRG) and attach it to your virtual cloud network (VCN). Add a default route rule to the private subnets route table and set the target as DRG Attach a public IP address to the instances in the private subnet, and then add a new route rule to the private subnet route table to route default traffic to the internet gateway Add a new route rule to the private subnet route table to route default traffic to the internet gateway.
You have five different company locations spread across the US. For a proof-of-concept (POC) you need to setup secure and encrypted connectivity to your workloads running in a single virtual cloud network (VCN) in the Oracle Cloud Infrastructure Ashburn region from all company locations. What would meet this requirement? Create five internet gateways in your VCN and have separate route table for each internet gateway. Create five virtual circuits using FastConnect for each company location and terminate those connections on a single dynamic routing gateway (DRG). Attach that DRG to your VCN. Create five IPsec connections with each company location and terminate those connections on a single DRG. Attach that DRG to your VCN. Create five IPsec VPN connections with each company location and terminate those connections on five separate DRGs. Attach those DRGs to your VCN.
You have provisioned an Autonomous Data Warehouse (ADW) database with 16 enabled OCPUs and need to configure the consumer group for your application.Which two are true when deciding the number of sessions for each application? (Choose two.) The MEDIUM and LOW consumer group can run up to 16 concurrent SQL statements if HIGH consumer group has 0 SQL statements The HIGH consumer group can run up to 16 concurrent SQL statements as long as MEDIUM and LOW consumer groups have 0 SQL statements The MEDIUM consumer group can run 20 concurrent SQL statements when HIGH consumer group has 0 SQL statements The HIGH consumer group can run up to 16 concurrent SQL statements in addition to 32 concurrent SQL statements in MEDIUM and LOW consumer group each The HIGH consumer group can run 3 concurrent SQL statements when MEDIUM consumer group has 0 SQL statements.
Which statement is true about Oracle Cloud Identifiers (OCID)? mytenancy.oc.ocid is a valid OCID. If you delete a user, and them create a new user with the same name, the user will be considered a different user because of different OCIDs. Users can customize OCIDs for all the resources in their compartments. If you delete a user, and then create a new user with the same name, the new user will be assigned the exact same OCIDs as the system remembers.
What is a "transfer package" when transferring data to OCI via the OCI Data Transfer Service? A transfer package is the logical representation of the physical shipment containing the HDD transfer devices that you ship to Oracle to upload to OCI. A transfer package is the software Oracle provides for you to prepare transfer devices for shipment to Oracle A transfer package contains the physical devices. A transfer package is the archive file that the Data Transfer Service Utility (dts) writes to the transfer device.
Which two choices are true for Autonomous Data Warehouse (ADW)? (Choose two.) Billing stops only when the ADW is terminated Billing stops for both CPU usage and storage usage when ADW is stopped Billing for compute stops when ADW is stopped
Billing for storage continues when ADW is stopped
.
Which two options are available when configuring DNS resolution for your virtual cloud network? (Choose two.) Internet and custom resolver Google DNS servers custom resolver
Internet and virtual cloud network (VCN) resolver
.
Which of the following is NOT a valid IAM policy statement? Allow group StorageAdminsto manage file-family in compartment CorpStorage Allow group PHX-Admins to manage all-resources in tenancy where request.region= ‘phx’ Allow user TenancyAdminto manage all-resources in tenancy Allow dynamic-group AppServersto manage object-family in compartment App_Prodwhere target.bucket.name != ‘/confidential-*/’.
Which two resources are considered “Availability-Domain-specific” constructs? Virtual Cloud Network Load Balancer Block Volume Security List Route Table File Storage Service Mount Target.
What are two valid options to migrate your database to Autonomous Data Warehouse (ADW)? Oracle export/import RMAN duplicate Oracle data pump DBCLI tool of DB Systems in Oracle Cloud Infrastructure.
You are asked to configure a VPN connection to connect your on-premnetwork to OCI VCN. Assuming you already created a VCN, what steps do you need to take on OCIin order to create an IPSec tunnel? Create an Internet Gateway (IGW), attach IGW to VCN, update the routing in your route table to use DRG, create a Customer Premise Equipment (CPE) and then configure IGW to open IPSec connection to CPE objec Create a Dynamic Routing Gateway (DRG), attach DRG to VCN, update the routing in your route table to use DRG, create a Customer Premise Equipment (CPE) and then configure DRG to open IPSec connection to CPE object Create an Internet Gateway, Configure Customer Premise Equipment (CPE) and then configure IGW to open IPSec connection Create a Dynamic Routing Gateway, Configure Customer Premise Equipment (CPE) and then configure DRG to open IPSec connection .
Which two statements about the dynamic routing gateway (DRG) are accurate? A dynamic routing gateway can be re-used by detaching and reattaching the DRG to a different VCN. A dynamic routing gateway is created within a compartment and can be concurrently attached to multiple VCNs for re-use of on-premise connectivity across the OCI tenancy. A dynamic routing gateway can only be attached to a single VCN and must reside in the same compartment as VCN. A dynamic routing gateway represents the virtual router between the customer network and the virtual cloud network. For high availability, a hybrid network should have more than one DRG configured.
After performing maintenance on several OCI compute resources, you discover that remote SSH access no longer works. When trying to connect, you encounter, “Permission denied (publickey)” and suspect the maintenance may have removed all SSH public keys from the server. How could you troubleshoot the problem? Stop the affected compute resource. Detach the boot volume and attach it to a running Linux instance for which you still have remote access. Run mkfsto assign an EXT4 filesystem to the volume, then mount it. Check the authorized_keysand make replace the missing sshkeys. Re-attach to the affected instance and start it back up. Stop the affected compute resource. Detach all block storage volumes and attach them to a running Linux instance for which you still have remote access. Mount the block storage volumes, then check the authorized_keysfile. Replace any missing keys, then move the block storage volumes and start the affected instance back up. Stop the affected compute resource. Detach the boot volume and attach it to a running Linux instance for which you still have remote access. Create a directory and mount the boot volume to this directory. Check the authorized_keysand make replace the missing sshkeys. Re-attach to the affected instance and start it back up. Terminate the affected instances and re-create them. There is no way to troubleshoot this issue.
When preparing to execute a Data Transfer, which of the following steps must be completed? Select the answer with all steps in the correct order.
Create a new Compartment; designate the compartment as target for the data transfer; create a data transfer package. Create the required IAM Users / Groups / Policies; create the required Object Storage Bucket; Install the Data Transfer Utility on the host machine that will be used to load data. Create the required Object Storage Bucket; Instantiate the Data Transfer Service virtual machine on the host machine that will be used to load data; Start the Data Transfer bulk upload service. Create the required IAM Users / Groups / Policies; Create a data transfer package; Create an Object Storage Bucket; Install the Data Transfer Utility on your laptop computer.
You have been asked to provision File Storage Service (FSS) resources into an existing VCN that was configured with a private, IPv4 CIDR block. After provisioning the mount target and export path you will use the items together to mount the file system on your server. Which of the following combination accurately represents the mount target and export path that you would be using in this situation? filestorage.oraclecloud.com:example/path /dev/sdb&& /example/path 8.8.8.8:/example/path 10.0.0.6:/example/path 129.146.77.16:/example/path.
You are designing an application architecture for an Oracle PeopleSoft implementation. The project team has mandated that the database tier must be fault-tolerant. Given the compute-intensive nature of PeopleSoft, the database system must also be able to scale up or down depending upon performance requirements. The project team has also stipulated that a public load balancer will be required for all user access to the application, and that all database backups should be stored in Object Storage. What is the most cost-effective approach to implementing a scalable, highly-available database solution in this situation Provision a quarter Exadata rack with a minimum of 42 OCPUs. The quarter rack is capable of scaling up to 84 OCPU’s and down to 2 OCPU’s as demand necessitates. Deploy two VM.Standard2.24 database nodes into separate availability domains and deploy an OCI compute resource into the third availability domain. Install a data replication agent on this compute instance and configure it to pull data from the primary node and insert in the secondary node on 30-minute intervals. Deploy one VM.Standard2.24 database node. Use the OCI Management Console or API to enable DataGuardin order to create a second VM.Standard2.24 database node as the replication target. Enable automated backups Deploy two BM.DenseIO2.52 instances into separate availability domains. Using the OCI Management Console or API, enable DataGuardon the all required databases. You will be able to scale CPU capacity on the primary node when workload demands increase or decrease while capacity of the secondary node may remain minimal.
You have successfully created a VCN with a 3 public subnets. Each subnet has a security list with the following rules:
You deploy several Oracle Linux servers into each subnet, then connect to each server via SSH to install and configure Apache. After verifying on each local system that Apache is configured properly and running, you test the web server from your laptop. The web page fails to load, why?
In order to deploy a web application, you must also deploy a Load Balancer, then configure each web server as a member of a backend set. You must create a stateless, egress rule with a destination CIDR of 0.0.0.0/0, protocol TCP, and destination port of 80 You must create a stateless, egress rule with a destination CIDR of 0.0.0.0/0, protocol TCP, and source port of 80. You must also create a stateless, ingress rule to allow traffic in on port 443.
You have recently provisioned an Autonomous Transaction Processing database to use as the back end for a new e-commerce application. Initial performance tests show slower-thanexpected query performance and CPU utilization is consistently above 80%. What steps would you take to improve the performance? Log into the OCI Management console, navigate to the Autonomous Transaction Processing page, and use the menu there to increase the CPU core count. Log into the OCI Management console, navigate to the Autonomous Transaction Processing page, and use the menu there to increase the amount of RAM allocated to the database. Navigate to the Service Console of your Autonomous Transaction Processing instance and use the menu there to increase CPU core count Navigate to the Service Console of your Autonomous Transaction Processing instance and use the menu there to increase the number parallel queries that can be executed simultaneously.
Which two statements about FastConnectare true? FastConnectprovides an un-encrypted, virtual circuit for the transmission of data between the customer-premises and OCI. FastConnectwith Public Peering allows you to extend the private IP address space of your on-premises, private network to the private network space of the Virtual Cloud Network (VCN). A FastConnectvirtual circuit is a logical construct that can provide redundant connectivity to OCI. A single FastConnectlink is fault-tolerant by design. Customers need only provision a single network circuit through their provider to take advantage of this feature.
Which of the following is the customer responsibility on the Oracle Cloud Infrastructure Database system? Installing the operating system, grid infrastructure, and database software Choosing when to apply patches to the Database and Operating System Creating the first, default database on the system Creating ASM disk groups for the datafile and tempfilestorage.
How can you provide users access to an existing compartment? by granting users access to a compartment when the compartment is created by adding users to a group and defining a policy to provide the group access to the compartment by adding users to a compartment. All users in the compartment will have access to the objects in the compartment. by granting access directly to the user when the user is created.
A critical application table from your Autonomous Transaction Processing database has been dropped causing the application to fail. How would you recover the table while minimizing the potential for data loss? Restore the database to the system change number (SCN) before the table was dropped. Restore the database to the timestamp before the table was dropped. Restore the database to the last backup. Execute the command flashback table <table name> to before the table was dropped.
OCI DNS service supports an alias record type which is specific to OCI DNS. Which of the following statements is true of this alias record? It allows you to specify the mail server responsible for accepting email messages on behalf of a domain name. It can be used to map to OCI public endpoints only. The alias record acts in a similar fashion to a PTR record, although the alias record can be at the apex record of a zone and is visible to external resolvers. It can be used to map to various OCI or private assets. The alias records act in a similar fashion to a cnamerecord, although the alias record can be at the apex record of a zone and is not visible to external resolvers It allows you to secure multiple FQDNs, often needed to secure instances where multiple domains resolve to a single IP address (such as in a shared hosting environment).
When uploading large (> 5GB) objects to Object Storage, which of the following two statements are true? You can split the objects into smaller parts and upload smaller parts in parallel using the multipart upload utility from OCI console. You have to make sure the total size of an object does not exceed 10 TiB. You can pause and resume in-progress, multi-part uploads. You may append a part to an object after the upload has been committed. Multipart upload functionality is supported natively by the Object Storage API.
A third party has requested an access to data stored in an OCI Object Storage Bucket so your Object Storage administrator creates a pre-authenticated request (PAR) for it. Which two statements about the PAR are correct? PARs have an expiration date which determines the length of time the PAR stays active. Once a PAR expires, it can no longer be used. You can’t delete a bucket that has a PAR associated with it. If permissions of the user who create the PAR change –such that they no longer have access to the bucket –it will not affect the functionality of the PAR. You can extend the expiration date of a PAR. You will not be able to create a PAR on public bucket.
In order to setup the connection between your client running on-premises and Autonomous Data Warehouse (ADW), you have downloaded the credentials from the ADW web console and successfully configured the connection on your client. What can you do to ensure that there is no unauthorized access to theADWand that communications between the client and server are fully encrypted and cannot be intercepted or altered? Migrate the client to an instance running on Oracle Cloud Infrastructure and use the NAT Gateway to reach ADW Nothing; each type of connection toADW use certificate authentication and SSL protection using an encrypted key stored in the wallet Create an IPSec Connection to setup a VPN Provision the ADW instance into a private subnet.
You have been asked to configure Oracle Golden Gate for data replication between your on-premises Database and Autonomous Transaction Processing (ATP) on OCI. Which TNS Name you should use? The name you assigned to the ATP instance during the provisioning process The predefined TNS name HIGH You should create a new A-Record in DNS to be used as the TNS name The predefined TNS name LOW.
Your manager instructed you to re-design the architecture of an HR application to mitigate unnecessary service interruptions. To ensure high availability, you set up the HR application to use Load Balancer Services and distribute the incoming requests across a group of Compute Instances in two Availability Domains.
In this scenario, what happens when a Compute instance behind the Load Balancer fails a health check? The Compute instance gets terminated automatically by the Load Balancer The Compute instance gets quarantined by the Load Balancer for root cause analysis The Compute instance is replaced automatically by the Load Balancer The Load Balancer stop sending traffic to the Compute Instance.
|
