Oracle OCI Architect Associate 2020 — Sample Questions Dump with Answers
By: Harold Finch
Tags: Oracle Cloud, Oracle, Oracle Certification, Technology, Architects

1. Which two components cannot be deleted in your Oracle Cloud Infrastructure Virtual Cloud Network?

a. Default route table

b. Routing gateway

c. Default security list

d. Service gateway

e. Default subnet

Risposte: A-C

https://docs.cloud.oracle.com/en-us/iaas/Content/Network/Tasks/managingroutetables.htm

https://docs.cloud.oracle.com/en-us/iaas/Content/Network/Concepts/securitylists.htm

https://docs.cloud.oracle.com/en-us/iaas/Content/Network/Concepts/overview.htm

2. Which two options are valid for loading data directly into Oracle Autonomous Data Warehouse (ADW)?

a. Data Transfer Service

b. rsync

c. Oracle Data Integrator

d. SQL*Loader

e. Data Pump

Risposte: D — E

https://docs.oracle.com/en/cloud/paas/autonomous-data-warehouse-cloud/user/load-data.html#GUID-1351807C-E3F7-4C6D-AF83-2AEEADE2F83E

3. Which statement is true about interconnecting Virtual Cloud Network (VCN)?

a. VCNs must be in the same tenancy to be peered.

b. Peering VCNs should not have overlapping CIDR blocks.

c. The only way to interconnect VCNs is through peering.

d. VCNs support transitive peering.

Risposta: C à B

https://docs.cloud.oracle.com/en-us/iaas/Content/Network/Tasks/VCNpeering.htm

4. You are running an online gaming application hosted on a VM.Standard2.1 instance shape in Oracle Cloud Infrastructure. As the game becomes popular, you identify network throughput as a bottleneck on your instance when uploading user data.

Though you want to resolve the issue, you want to observe the demand for a week before adding new application instances.

Which action is the most efficient way to resolve this issue?

a. Delete the instance while preserving boot volume and spin up a new higher network bandwidth instance with this boot volume.

b. Change the shape of the instance to a higher network bandwidth instance.

c. Add a secondary virtual network interface card (VNIC).

d. Change the performance tier of attached block volume to High Performance.

Risposta: B

https://docs.cloud.oracle.com/en-us/iaas/Content/Compute/Tasks/resizinginstances.htm

5. You created a public subnet and an internet gateway in your virtual cloud network (VCN) of Oracle Cloud Infrastructure. The public subnet has an associated route table and security list. However, after creating several compute instances in the public subnet, none can reach the Internet.

Which two are possible reasons for the connectivity issue?

a. A NAT gateway is needed to enable the communication flow to the internet.

b. There is no dynamic routing gateway (DRG) associated with the VCN.

c. There is no stateful ingress rule in the security list associated with the public subnet.

d. The route table has no default route for routing traffic to the internet gateway.

e. There is no stateful egress rule in the security list associated with the public subnet.

Risposte: D — E

6. As a solution architect, you are showcasing the Oracle Cloud Infrastructure (OCI) Object Storage feature about Object Versioning to a customer.

Which statement is true in regards to OCI Object Storage Versioning?

a. Object versioning does not provide data protection against accidental or malicious object update, overwrite, or deletion.

b. A bucket that is versioning-enabled can have only and always will have the latest version of the object in the bucket.

c. Object are physically deleted from a bucket when versioning is enabled.

d. By default, object versioning is disabled on a bucket.

Risposta: D

https://docs.cloud.oracle.com/en-us/iaas/Content/Object/Tasks/usingversioning.htm

7. With regard to Oracle Cloud Infrastructure Load Balancing service, which two actions will occur when a backend server that is registered with a backend set is marked to drain connections?

a. All connections to this backend server are forcibly closed after a timeout period.

b. Requests to this backend server are redirected to a user-defined error page.

c. All existing connections to this backend server will be immediately closed.

d. All new connections to this backend server are disallowed.

e. Connections to this backend server will remain open until all in-flight requests are completed.

Risposte: D — E

Explain the concept of Drain Connection.

8. You have been asked to create an Identity and Access Management (IAM) user that will authenticate to Oracle Cloud Infrastructure (OCI) API endpoints. This user must not be given credentials that would allow them to log into the OCI console.

Which two authentication options can you use?

a. PEM Certificate file

b. Auth token

c. SSL certificate

d. API signing key

e. SSH key pair

Risposte: B — D

https://docs.cloud.oracle.com/en-us/iaas/Content/Identity/Concepts/usercredentials.htm

9. You are working for a financial institution that is currently running two web applications in Oracle Cloud Infrastructure (OCI). All resources were created in the root compartment.

Your manager asked you to deploy new resources to support a proof-of-concept (PoC) for Oracle FlexCube. You must ensure that the Flexcube resources are secured and cannot be affected by the team that manages the two web applications.

Which two tasks should you complete to ensure the required security of your resources?

a. Create a new policy in the root compartment for the FlexCube project team. Assign a policy statement that grants the FlexCube project team the ability to manage all resources in the tenancy, where a specific tag key and tag value are present.

b. Create a Tag Default within the root compartment with a default value of $(iam.principle.name) so that each new resource created is tagged with the name of the person who created it. Create a new IAM policy that allows users to only modify the resources they created.

c. Create a new compartment for the FlexCube application deployment. Create a policy in this compartment for the project team that gives them the ability to manage all resources within the scope of this compartment.

d. Create a new compartment for the two web applications and move the existing resources into the compartment. Deploy the FlexCube application into the root compartment. Create a new policy in the root compartment that gives the FlexCube project team the ability to manage all resources in the tenancy.

e. Create a new compartment for the two web applications and move the existing resources into this compartment. Modify the existing policy for the team that manages these applications so that the scope of access is defined as this new compartment.

Risposte: C ed E

https://docs.cloud.oracle.com/en-us/iaas/Content/Security/Reference/iam_security.htm#Securing_IAM

10. Which of the following statements is true about cloning a volume in the Oracle Cloud Infrastructure Block Volume service?

a. Creating a clone takes longer than creating a backup of a volume.

b. You can change the block volume size when cloning a volume.

c. You can clone a volume to another region.

d. You need to detach a volume before cloning it.

Risposta: B

https://docs.cloud.oracle.com/en-us/iaas/Content/Block/Tasks/cloningavolume.htm

11. Which of the following statements is true about the Oracle Cloud Infrastructure (OCI) Object Storage server-side encryption?

a. Encryption of data encryption keys with a master encryption key is optional.

b. Customer-provided encryption keys are always stored in OCI Vault service.

c. Encryption is enabled by default and cannot be turned off.

d. Each object in a bucket is always encrypted with the same data encryption key.

Risposta: C

https://docs.cloud.oracle.com/en-us/iaas/Content/Object/Concepts/objectstorageoverview.htm

https://docs.cloud.oracle.com/en-us/iaas/Content/Object/Tasks/usingyourencryptionkeys.htm

12. As a solution architect, you designed the network infrastructure of a three-tier web application on Oracle Cloud Infrastructure (OCI) and the back-end database servers are put in a private subnet. One of your database administrator requests to have private access to OCI object storage service.

How should you fulfill this request?

a. Create a dynamic routing gateway (DRG) and attach it to your virtual cloud network (VCN). Add a default route rule to the private subnets route table and set the target as DRG.

b. Add a new route rule to the private subnet route table to route default traffic to the internet gateway.

c. Create a service gateway, add a new route rule to the private subnet route table that uses object storage as the target type.

d. Attach a public IP address to the instances in the private subnet, and then add a new route rule to the private subnet route table to route default traffic to the internet gateway.

Risposta: C

https://docs.cloud.oracle.com/en-us/iaas/Content/Network/Tasks/servicegateway.htm

13. Which two statements are true when Oracle Data Guard is configured (using the Console) between two Virtual Machine DB Systems deployed in Oracle Cloud Infrastructure?

a. Primary is a 1-node RAC DB system and Standby is a 1-node RAC DB system.

b. Primary is a 2-node RAC DB system and Standby is a 2-node RAC DB system.

c. Primary is a 1-node RAC DB system and Standby is a 2-node RAC DB system.

d. Primary is a Bare Metal DB system and Standby is a 1-node RAC DB system.

e. Primary is a 2-node RAC DB system and Standby is a 1-node RAC DB system.

Risposte: A — B

https://docs.cloud.oracle.com/en-us/iaas/Content/Database/Tasks/usingdataguard.htm

14. Which statement is NOT true about the Oracle Cloud Infrastructure Object Storage service?

a. Immutable option for data stored in the Object Storage can be set via retention rules.

b. Object lifecycle rules can be used to either archive or delete objects.

c. Object versioning is enabled at the namespace level.

d. Object storage resources can be shared across tenancies.

Risposta: C

https://docs.cloud.oracle.com/en-us/iaas/Content/Object/Tasks/usingversioning.htm

https://docs.cloud.oracle.com/en-us/iaas/Content/Object/Tasks/usingretentionrules.htm

https://docs.cloud.oracle.com/en-us/iaas/Content/Object/Tasks/usinglifecyclepolicies.htm

https://docs.cloud.oracle.com/en-us/iaas/Content/Object/Concepts/accessingresourcesacrosstenancies.htm

15. Which two statements are true about restoring a volume from a block volume backup in Oracle Cloud Infrastructure Block Volume service?

a. You can restore a block volume backup to a larger volume size.

b. You can restore a volume from any full volume backup but not from incremental backup.

c. You can only restore a volume to the same availability domain in which the original block volume resides.

d. You can restore a volume to any available domain within the same region where the backup is stored.

e. You can restore only one volume from a manual block volume backup.

Risposte: A — D

https://docs.cloud.oracle.com/en-us/iaas/Content/Block/Tasks/restoringavolumefromabackup.htm

16. You hired a new employee to run reports from the Oracle Autonomous Data Warehouse (ADW) and are not confident in their SQL writing ability.

Into which consumer group will you assign this individual to minimize the impact of their code?

a. High

b. Lowest

c. Highest

d. Medium

e. Low

Risposta: E

https://docs.oracle.com/en/cloud/paas/autonomous-data-warehouse-cloud/user/manage-priorities.html#GUID-80E464A7-8ED4-45BB-A7D6-E201DD4107B7

17. Your company uses the Oracle Cloud Infrastructure (OCI) Object Storage service to share large data sets with its data science team. The data science team consists of 20 people who work from offices in Washington, D.C., and Tokyo. While working in these offices, employees are assigned an IP address from the public IP range 129.146.31.0/27.

Which two steps should you take to ensure that the object Storage bucket used in this scenario was only accessible from these office locations?

a. Create a pre-authenticated request for each data set and only share it with the data science team via email.

b. Write an IAM policy that includes the conditional statement where request.networkSource.name = CorpNet.

c. Set the bucket visibility to public and only share the URL with the data science team via email.

d. Write an IAM policy that includes the conditional statement where request.region = 129.146.31.0/27.

e. Create a Network Source named CorpNetwork with a CIDR block of 129. 146.0.0/16.

f. Create a Network Source named CorpNetwork with a CIDR block of 129. 146.31.0/27.

Risposte: B — F

https://docs.cloud.oracle.com/en-us/iaas/data-safe/doc/required-permission-enabling-oracle-data-safe.html

https://docs.cloud.oracle.com/en-us/iaas/Content/Identity/Tasks/managingnetworksources.htm

18. You are responsible for creating and maintaining an enterprise application that consists of multiple storage volumes across multiple compute instances in Oracle Cloud Infrastructure (OCI).

The storage volumes includes boot volumes and block volumes for your data storage. You need to create backups of these storage volumes in the most time-efficient manner.

How can you meet this requirement?

a. Create on-demand full backups of boot volumes, and copy data in block volumes to Object Storage using OCI CLI.

b. Create on-demand full backups of block volumes, and create custom images from the boot volumes.

c. Create clones of all boot volumes and block volumes one at a time.

d. Group together multiple storage volumes in a volume group and create volume group backups.

Risposta: D

https://docs.cloud.oracle.com/en-us/iaas/Content/Block/Concepts/volumegroups.htm#:~:text=The%20Oracle%20Cloud%20Infrastructure%20Block,volumes%20for%20your%20data%20storage.

19. Which two statements are true about Oracle Cloud Infrastructure storage services?

a. You can take incremental snapshots of Block Volumes, File Storage file systems and Object Storage buckets.

b. You can move Object Storage buckets, Block Volumes, and File Storage mount targets between compartments.

c. File Storage uses the network file system (NFS) protocol, whereas Block Volume uses iSCSI.

d. Block Volume service scales to Exabytes per instance, while File Storage service offers unlimited scalability.

e. File storage mount target does not provide a private IP address, while the Object Storage bucket provides one.

Risposte: B — C

- A is false, Object Storage does not support snapshot

- D is false, Block volume can scale only up to 32 tb

- E is false, Object storage does not provide an IP address, It has a URL.

https://docs.cloud.oracle.com/en-us/iaas/Content/Identity/Tasks/managingcompartments.htm

https://docs.cloud.oracle.com/en-us/iaas/Content/Block/Concepts/overview.htm#Overview_of_Block_Volume

https://docs.cloud.oracle.com/en-us/iaas/Content/File/Concepts/filestorageoverview.htm

20. Your customer is using an Oracle Cloud Infrastructure (OCI) compartment named Production that hosts several resources such as compute instances, DB Systems and File Systems. Each resource in the Production compartment is tagged.

The customer’s security team wants to restrict access to DB Systems to only the authorized group of DBAs.

Which OCI Tagging capability can be used to meet this requirement?

a. Tag Defaults

b. Cost-Tracking Tags

c. Tag-based Access Control

d. Tags Defaults wit predefined values

Risposta: A à C

https://docs.cloud.oracle.com/en-us/iaas/Content/Tagging/Tasks/managingaccesswithtags.htm

https://docs.cloud.oracle.com/en-us/iaas/Content/Identity/Concepts/policyadvancedfeatures.htm

21. You create an autoscaling configuration of Linux compute instances in Oracle Cloud Infrastructure (OCI). You noticed that your application is running slow.

After checking your compute instances, you noticed that autoscaling is not launching additional instances, even though the existing compute instances already have high memory usage.

How can you resolve this issue?

a. Modify the scaling policy to monitor CPU usage and scale up the number of instances when it meets the threshold.

b. Install OCI SDK in all compute instances and create a script that will trigger the autoscaling event if there is high memory usage.

c. Install the monitoring agent to all compute instances which will trigger the autoscaling group.

d. Modify the scaling policy to monitor memory usage and scale up the number of instances when it meets the threshold.

Risposta: D

https://docs.cloud.oracle.com/en-us/iaas/Content/Compute/Tasks/autoscalinginstancepools.htm

22. You are managing a tier-1 OLTP application on an Oracle Autonomous Transaction Processing (ATP) database. Your business needs to run hourly batch processes on this ATP database that may consume more CPUs than what is available on the server.

How can you limit these batch processes to not interfere with the OLTP transactions?

a. Disable automated backup during the batch process operations.

b. ATP is designed for OLTP workload only, you cannot run batch processes on ATP.

c. Configure ATP resource management rules to change CPU/IO shares for the consumer group of batch processes.

d. Copy OLTP data into new tables in a new table space and run batch processes against these new tables.

Risposta: C

https://docs.oracle.com/en/cloud/paas/atp-cloud/atpug/manage-cpu-shares.html#GUID-8FEE49FF-CDEE-4433-B812-0AAABA8DEC7F

https://majanto.com/you-are-managing-a-tier-1-oltp-application-on-an-autonomous/

23. Which two methods are supported for migrating your on-premises Oracle database to an Oracle Autonomous Transaction Processing (ATP) database in Oracle Cloud Infrastructure?

a. Load text files into ATP using SQL Developer.

b. Use Oracle Data Pump.

c. Use RMAN duplicate.

d. Use database backup and restore.

e. Transfer the physical database files and re-create the database.

Risposte: A — B

https://www.oracle.com/a/ocom/docs/migration-database-oci-l200.pdf

24. You have been notified of an application failure indicating that one or more of the Oracle Cloud Infrastructure (OCI) resources have become unavailable. After scanning the Compute and Database consoles, you notice that one on the DB Systems is missing.

What should you do to identify the reason for this missing resource?

a. Create a serial console connection to the DB System that does not appear in the management console. Connect to the serial console connection, and then review the system logs under /var/log/messages.

b. Navigate to the Audit console and search the previous 24 hours for all DELETE request actions to get a list of any resource that was deleted in the past 24 hours.

c. Navigate to the Audit console and search the previous 24 hours for all GET request actions to get a list of every event that occurred in the past 24 hours.

d. View the service limits associated with your account to ensure that you have not exceed the allowable number of DB Systems in your tenancy.

Risposta: B

https://docs.cloud.oracle.com/en-us/iaas/Content/Audit/Tasks/viewinglogevents.htm

25. Which two statements are true about an Oracle Cloud Infrastucture (OCI) virtual cloud network (VCN)?

a. A VCN covers a single, contiguous IPv4 CIDR block of your choice.

b. A VCN can have multiple CIDR blocks associated with it.

c. In regions with multiple Availability Domains (AD), each AD should have their own VCN assigned to it.

d. If you own a block of public IPs, you can assign it to one of your VCNs.

e. To delete a VCN, its subnets must contain no resources.

Risposte: A — E

https://docs.cloud.oracle.com/en-us/iaas/Content/Network/Concepts/overview.htm

https://docs.cloud.oracle.com/en-us/iaas/Content/Network/Tasks/managingVCNs.htm#VCNs_and_Subnets

26. You need to set up instance principals so that an application running on an instance can call Oracle Cloud Infrastructure (OCI) public services, without the need to configure user credentials.

A developer in your team has already configured the application built using an OCI SDK to authenticate using the instance principals provider.

Which is NOT a necessary step to complete this set up?

a. Create a policy granting permissions to the dynamic group to access services in your compartment or tenancy.

b. Create a dynamic group with matching rules to specify which instances you want to allow to make API calls against services.

c. Deploy the application and the SDK to all the instances that belong to the dynamic group.

d. Generate Auth Tokens to enable instances in the dynamic group to authenticate with APIs.

Risposta: D

https://docs.cloud.oracle.com/en-us/iaas/Content/Identity/Tasks/callingservicesfrominstances.htm

27. You have compartment C and D under the root compartment in your Oracle Cloud Infrastructure (OCI) tenancy; compartment C contains a sub-compartment also named D, You are trying to move this sub-compartment D to the parent compartment D like shown in the picture, but the move fails.

What is the reason for this error?

a. Both parent and child compartments cannot have the same name.

b. You need to move all the compartments in the hierarchy to the new parent compartment.

c. Sub-compartment D needs to be empty before it can be moved.

d. You cannot move a sub-compartment to another parent compartment.

Risposta: A

https://docs.cloud.oracle.com/en-us/iaas/Content/Identity/Tasks/managingcompartments.htm

28. A customer launched a compute instance in the Virtual Cloud Network (VCN), which has an internet gateway, a service gateway, a default security lists and a default route table. The customer opened up Port 22 in the security lists attached to the compute instance subnet, however is still unable to connect to compute instances using SSH.

Which action can resolve this issue?

a. Modify the route table associated with the VCN subnet in which the instance resides. Add a following route to the route table.

Destination CIDR: 0.0.0.0/0

Target: Internet Gateway (IGW)

b. Modify the route table associated with the VCN subnet in which the instance resides. Add a following route to the route table.

Destination CIDR: 0.0.0.0/0

Target: Service Gateway (SGW)

c. Modify the route table associated with the VCN subnet in which the instance resides. Add a following route to the route table.

Destination CIDR: 0.0.0.0/0

Target: Dynamic Routing Gateway

d. Modify the security list associated with the VCN subnet in which the instance resides. Add a stateful egress rule to allow ICMP traffic in addition to the port 22.

Risposta: A

https://docs.cloud.oracle.com/en-us/iaas/Content/Network/Tasks/managingroutetables.htm

29. When you try to create an instance on Oracle Cloud Infrastructure (OCI), what are three valid sources to choose the image from?

a. Object Storage

b. Platform Images

c. Partner Images

d. Instance Pools

e. Dedicated VM Host

f. Bare Metal Instance

g. Custom Image

Risposte: B — C — G

https://docs.cloud.oracle.com/en-us/iaas/Content/Compute/Tasks/launchinginstance.htm

30. You have an application server running in a public subnet on a compute instance in US West (us-phoenix-1) region of Oracle Cloud Infrastructure (OCI). The data sitting on this instance needs to be copied to OCI Object storage bucket available in the same region without traversing over the internet. To enable the connectivity between the instance and Object Storage, you created a service gateway with service CIDR of all Object Storage in us-phoenix-1 enabled. You also modified the security rules to allow the desired traffic.

However when you tried sending the data to the Object Storage bucket, you notice that the data is going over the internet and not via the service gateway.

What could be the possible reason for this behaviour?

a. Identity and Access Management (IAM) policies restrict the access to the object storage bucket.

b. The route table associated with the subnet has no route rule where the destination is object storage service.

c. The security list associated with the subnet has an egress rule that allows all traffic to be forwarded to a destination CIDR 0.0.0.0/0.

d. The service gateway created in the VCN resides in a different availability domain.

Risposta: B

https://docs.cloud.oracle.com/en-us/iaas/Content/Network/Tasks/managingroutetables.htm

https://docs.cloud.oracle.com/en-us/iaas/Content/Network/Tasks/servicegateway.htm#Access_to_Oracle_Services_Service_Gateway

31. Which option is NOT a valid action within the Oracle Cloud Infrastructure (OCI) Block Volume Service?

a. Shrink an existing volume in place with offline resizing.

b. Restore from a volume backup to a larger volume.

c. Clone an existing volume to a new, larger volume.

d. Expand an existing volume in place with offline resizing.

Risposta: A

https://docs.cloud.oracle.com/en-us/iaas/Content/Block/Tasks/resizingavolume.htm

32. You are deploying a highly available web application in Oracle Cloud Infrastructure and have decided to use a public load balancer. The back-end web servers will be distributed across all three availability domains (ADs).

How many subnets should you create to deliver a secure, highly available application?

a. One subnet in total; one regional private subnet to host your back-end web servers and your public load balancer.

b. Three subnets in total; one regional public subnet to host your back-end web servers and two AD specific private subnets to host your private load balancer.

c. Two subnets in total; one regional private subnet to host your back-end web servers and one regional public subnet to host your public load balancer.

d. Two subnets in total; one regional public subnet to host your back-end web servers and one regional private subnet to host your public load balancer.

Risposta: C

https://docs.oracle.com/en/solutions/design-ha/plan-high-availability-network-resources1.html#GUID-F664E62E-B4BB-4152-A784-BB0EE320A121

33. Which two statements about Oracle Cloud Infrastructure File Storage Service are accurate?

a. Communication with file systems in a mount target is encrypted via HTTPS.

b. Customer can encrypt data in their file system using their own Vault encryption key.

c. File systems use Oracle-managed keys by default.

d. Mount targets use Oracle-managed keys by default.

e. Customer can encrypt the communication to a mount target via export options.

Risposte: B — C

https://docs.cloud.oracle.com/en-us/iaas/Content/File/Concepts/filestorageoverview.htm

34. You have to setup your environment as shown below with the Mount Target “MT” successfully mounted on both compute instances CLIENT-X and CLIENT-Y.

For security reasons, you want to control the access to the File System A in such a way that CLIENT-X has READ/WRITE and CLIENT-Y has READ only permission.

What you should do?

a. Update the OS firewall in CLIENT-X to allow READ/WRITE access.

b. Update the security list TWO to restrict CLIENT-Y access to read-only.

c. Update the security list ONE to restrict CLIENT-Y access to read-only.

d. Update the mount target export options to restrict CLIENT-Y access to read only.

Risposta: D

https://docs.cloud.oracle.com/en-us/iaas/Content/File/Tasks/exportoptions2.htm#Working_with_NFS_Export_Options

35. You have multiple applications installed on a compute instance and these applications generate a large amount of log files. These log files must reside on the boot volume for a minimum of 15 days.

Any log files age over 15 days shouldn’t be on boot volume but still must be retained for at least 60 days. The 60-day retention requirement is causing an issue with available disk space.

What are two Oracle recommended methods to retain the log files for 60 days without filling up the boot volume?

a. Create and attach a block volume to the compute instance and copy the log files.

b. Write a custom script to remove the log files on a daily basis and free up the space on the boot volume.

c. Terminate the instance while preserving the boot volume. Create a new instance from the boot volume and select a DenseIO shape to take advantage of local NVMe storage.

d. Create an object storage bucket and use a script that runs daily to move log files older than 15 days to the bucket.

e. Resize the boot volume of the instance.

Risposte: D — E

https://docs.cloud.oracle.com/en-us/iaas/Content/Block/Tasks/resizingavolume.htm#Resizing_a_Volume

https://docs.cloud.oracle.com/en-us/iaas/Content/Object/Concepts/objectstorageoverview.htm

36. Your application front end consists of several Oracle Cloud Infrastructure compute instances behind a public load balancer. You have configured the load balancer to perform health checks on these instances.

What will happen if an instance fails to pass the configured health checks?

a. The load balancer stops sending traffic to that instance.

b. The instance is terminated automatically by the load balancer.

c. The instance is replaced automatically by the load balancer.

d. The instance is taken out of the backend set by the load balancer.

Risposta: A

https://docs.cloud.oracle.com/en-us/iaas/Content/Balance/Concepts/balanceoverview.htm

37. Which two tagging related items are valid attributes that may be included in payload of an audit log event?

a. Cost-tracking tags

b. Defined tags

c. Predefined values

d. Free-form tags

e. Default tags

f. Tag variables

Risposte: A — F -> corretta B-D

https://docs.cloud.oracle.com/en-us/iaas/Content/Audit/Reference/logeventreference.htm

38. A financial firm is designing an application architecture for its online trading platform that must have high availability and fault tolerance.

Their solutions architect configured the application to use an Oracle Cloud Infrastructure Object Storage bucket located in the US West (us-phoenix-1) region to store large amounts of financial data. The stored financial data in the bucket must not be affected even if there is an outage in one of the Availability Domains or a complete region.

What should the architect do to avoid any costly service disruptions and ensure data durability?

a. Create a new Object Storage bucket in another region and configure lifecycle policy to move data every 5 days.

b. Copy the Object Storage bucket to a block volume.

c. Create a lifecycle policy to regularly send data from Standard to Archive storage.

d. Create a replication policy to send data to a different bucket in another OCI region.

Risposta: D

https://docs.cloud.oracle.com/en-us/iaas/Content/Object/Tasks/usingreplication.htm

39. What happens after you successfully run the following command on your Oracle Cloud Infrastructure Container Engine for Kubernetes (OKE) using the YAML file defined below?

kubectl create –f definition.yml

YAML file — definition.yml

apiVersion: v1

kind: Pod

metadata:

name: myapp

labels:

app: myapp

spec:

containers:

- name: nginx-image

image : nginx

- name: mysql-image

image: mysql

a. A single Pod with a single container is created.

b. No Pod gets created.

c. Two Pods with a container each are created.

d. A single Pod with two containers is created.

Risposta: D

https://kubernetes.io/docs/concepts/workloads/pods/

https://kubernetes.io/docs/reference/generated/kubectl/kubectl-commands

40. You are designing a lab exercise with an application that includes a large number of graphics with large file sizes. The application becomes unresponsive if the graphics are embedded in the application. You have uploaded the graphics to the Oracle Cloud Infrastructure Object Storage bucket and added the URL paths for the individual objects in the application. You need to ensure these graphics are accessible without requiring any authentication for an extended period of time.

How can you achieve requirements?

a. Make the Object Storage bucket private, make all objects public, and use the URL found in the object “Details”.

b. Make the Object Storage bucket public and use the URL path for the individual objects.

c. Create pre-authenticated requests (PAR) and do not specify any expiration time

d. Create pre-authenticated requests (PAR) and specify 00:00:0000 as the expiration time.

Risposta: B

https://docs.cloud.oracle.com/en-us/iaas/Content/Object/Tasks/usingpreauthenticatedrequests.htm

41. You work for a health insurance company that stores a large number of patient health records in an Oracle Cloud Infrastructure (OCI) Object Storage bucket named “HealthRecords”.

Each record needs to be securely stored for a period of 5 years for regulatory compliance purposes and cannot be modified, overwritten or deleted during this time period.

What can you do to meet this requirement?

a. Create an OCI Object Storage time-bound Retention Rule on the HealthRecords bucket for five years. Enable Retention Rule Lock on this bucket.

b. Enable encryption on the HealthRecords bucket using your own vault master encryption keys.

c. Create an OCI Object Storage Lifecycle Policies rule to archive objects in the HealthRecords bucket for five years.

d. Enable versioning on the HealthRecords bucket.

Risposta: A

Write once read many (WORM) compliance requires that objects cannot be deleted or modified. Use retention rules to achieve WORM compliance. Retention rules are configured at the bucket level and are applied to all individual objects in the bucket. You cannot update, overwrite, or delete objects or object metadata until the retention rule is deleted (indefinite rule) or for the duration specified (time-bound rules).

https://docs.cloud.oracle.com/en-us/iaas/Content/Object/Tasks/usingretentionrules.htm#Using_Retention_Rules_to_Preserve_Data

42. You have a AI/ML application running on Oracle Cloud Infrastructure. You identified that the application needs GPU and at least 20Gbps Network throughput.

The application is currently using a VM.Standard2.1 compute without any block storage attached to it.

Which two options allow you to get your required performance for your application?

a. Terminate the compute instance preserving the boot volume. Create a new compute instance using the BM.GPU2.2 shape using the boot volume preserved and attach a new block volume to host your application.

b. Terminate the compute instance preserving the boot volume. Create a new compute instance using the BM.HPC2.36 shape using the boot volume preserved and use the NVMe devices to host your application.

c. Terminate the compute instance preserving the boot volume. Create a new compute instance using the BM.GPU2.2 shape using the boot volume preserved, but no block volume attached.

d. Terminate the compute instance preserving the boot volume. Create a new compute instance using the VM.Standard2.2 shape using the boot volume preserved, but no block volume attached.

e. Terminate the compute instance preserving the boot volume. Create a new compute instance using the VM.GPU3.4 shape using the boot volume preserved and use the NVMe devices to host your application.

Risposte: C — E

43. You provisioned an Oracle Autonomous Data Warehouse (ADW) on Oracle Cloud Infrastructure (OCI) and imported data into ADW.

You want to give your business analyst the ability to connect to the ADW database and run queries.

Which two actions can help you meet this requirement?

a. Grant the predefined database role DWROLE to the database user.

b. Create a database user account for the business analyst.

c. Grant unlimited tablespace privilege to the database user.

d. Grant the predefined database role DWUSER to the database user.

e. Grant the predefined database role DWADW to the database user.

Risposte: A — B

https://docs.oracle.com/en/cloud/paas/autonomous-data-warehouse-cloud/user/manage-users-privileges.html#GUID-50450FAD-9769-4CF7-B0D1-EC14B465B873

Manage User Privileges with Autonomous Data Warehouse

Autonomous Data Warehouse databases come with a predefined database role named DWROLE . This role provides the common privileges for the data warehouse developer or for a data scientist to perform real-time analytics. Depending on the usage requirements you may also need to grant individual privileges to users.

1. To grant DWROLE role, connect to the database as ADMIN user using any SQL client tool. For example, connect using Oracle SQL Developer (see Connect with Oracle SQL Developer (18.2 or later)).

2. As the ADMIN user grant DWROLE . For example, the following command grants DWROLE to the user ADBUSER :

GRANT DWROLE TO adbuser;

44. As an Oracle Cloud Infrastructure tenancy administrator, you created lists of values and associated them with tag key definitions.

One of the users in your tenancy complains that she cannot see these predefined values.

What is causing the issue?

a. The user is trying to use free-form tags.

b. The user is not part of an Identity and Access Management group that gives access to tagging.

c. Some of the predefined values are null.

d. The user has breached either the quota or service limit for using tags.

Risposta: B ->Corretta A

https://docs.cloud.oracle.com/en-us/iaas/Content/Tagging/Tasks/usingpredefinedvalues.htm

45. Which two resources reside exclusively in a single Oracle Cloud Infrastructure Availability Domain?

a. Web Application Firewall policy

b. Block Volume

c. Object Storage

d. Compute Instance

e. Identity and Access Management Groups

Risposte: B — D

https://docs.cloud.oracle.com/en-us/iaas/Content/General/Concepts/regions.htm

Availability Domain-Specific Resources

· DB systems (Oracle Database service)

· ephemeral public IPs

· instances: They can be attached only to volumes in the same availability domain.

· subnets: When you create a subnet, you choose whether it is regional or specific to an availability domain. Oracle recommends using regional subnets.

· volumes: They can be attached only to an instance in the same availability domain.

46. You are designing a networking infrastructure in multiple infrastructure regions and require connectivity between workloads in each region. You have created a dynamic routing gateway (DRG) and a remote peering connection. However, your workloads are unable to communicate with each other.

What are two reasons for this?

a. Identity and Access Management (IAM) policies have not been defined to allow connectivity across the two VCNs in different regions.

b. A local peering gateway needs to be created in each VCN with a default route rule added in the route table forwarding the traffic to the local peering gateway.

c. An internet gateway needs to be created in each VCN with a default route rule added in the route table forwarding the traffic to the internet gateway.

d. The route table associated with subnets in each VCN do not have a route rule defined to forward the traffic to their respective DRGs.

e. The security lists associated with subnets in each virtual cloud network (VCN) do not have the appropriate ingress rule.

Risposte: D — E

https://docs.cloud.oracle.com/en-us/iaas/Content/Network/Tasks/remoteVCNpeering.htm

47. An Oracle Cloud Infrastructure tenancy administrator is not able to delete a user in the tenancy.

What can cause this issue?

a. Users can be blocked but not deleted.

b. User needs to be deleted from federation Identity Provider (IdP) before deleting from IAM.

c. User is member of an Identity and Access Management (IAM) group.

d. User has multi-factor authentication (MFA) enabled.

Risposta: B-> corretta C

https://docs.cloud.oracle.com/en-us/iaas/Content/Identity/Tasks/managingusers.htm

48. Which two are Regional resources in Oracle Cloud Infrastructure?

a. Dynamic groups

b. Compute images

c. Block Volume backups

d. Compartments

e. Ephemeral public IPs

Risposte: B — C

https://docs.cloud.oracle.com/en-us/iaas/Content/General/Concepts/regions.htm

Regional Resources

· alarms

· applications (Data Flow service)

· applications (Functions service)

· blockchain platforms (Blockchain Platform service)

· buckets: Although buckets are regional resources, they can be accessed from any location if you use the correct region-specific Object Storage URL for the API calls.

· clusters (Big Data service)

· clusters (Container Engine for Kubernetes service)

· cloudevents-rules

· config work requests (Logging Analytics)

· configuration source providers

· customer-premises equipment (CPE)

· dashboards (Management Dashboard)

· data catalogs

· DB Systems (MySQL Database service)

· DHCP options sets

· dynamic routing gateways (DRGs)

· encryption keys

· entities (Logging Analytics)

· functions

· images

· internet gateways

· jobs

· load balancers

· local peering gateways (LPGs)

· log groups (Logging Analytics)

· management agent install keys

· management agents

· metrics

· models

· NAT gateways

· network security groups

· node pools

· notebook sessions

· object collection rules (Logging Analytics)

· problems (Cloud Guard; regional to reporting region)

· projects

· queryjob work requests (Logging Analytics)

· repositories

· reserved public IPs

· route tables

· runs

· saved searches (Management Dashboard)

· scheduled tasks (Logging Analytics)

· secrets

· security lists

· service connectors

· service gateways

· stacks

· storage work requests (Logging Analytics)

· subnets: When you create a subnet, you choose whether it’s regional or specific to an availability domain. Oracle recommends using regional subnets.

· subscriptions

· tables

· tickets (Support Management service)

· topics

· vaults

· virtual cloud networks (VCNs)

· volume backups: They can be restored as new volumes to any availability domain within the same region in which they are stored.

· workspaces

49. Which two choices are true for Oracle Autonomous Database with Shared Exadata Infrastructure?

a. Billing stops for both CPU and storage usage when autonomous database is stopped.

b. Billing for compute usage stops when autonomous database is stopped.

c. Autonomous database does not support per-second billing.

d. Billing for storage usage continues when autonomous database is stopped.

e. Billing does not stop when autonomous database is terminated.

Risposta: B — D

https://www.oracle.com/database/technologies/datawarehouse-bigdata/adb-faqs.html

What is the minimum compute requirement for Oracle Autonomous Database?

One OCPU is required to do any work, but the compute portion of the service instance can be turned off and billing for compute will be halted. Billing for storage continues as long as the service instance exists.

50. You deployed a database on a Standard Compute instance in Oracle Cloud Infrastructure (OCI) due to cost concerns. The database requires additional storage with high I/O and you decided to use OCI Block Volume service for it.

With this requirement in mind, which elastic performance option should you choose for the Block Volume?

a. Lower cost

b. Extreme performance

c. Higher performance

d. Balanced performance

Risposta: D

https://docs.cloud.oracle.com/en-us/iaas/Content/Block/Concepts/blockvolumeperformance.htm

Balanced Performance

The Balanced elastic performance option provides a good balance between performance and cost savings for most workloads, including those that perform random I/O such as boot volumes. This option provides linear peformance scaling with 60 IOPS/GB up to 25,000 IOPS per volume. Throughtput scales at 480 KBPS/GB up to a maximum of 480 MBPS per volume.

51. You are a system administrator of your company and you are asked to manage updates and patches across all your compute instances running Oracle Linux in Oracle Cloud Infrastructure (OCI). As part of your task, you need to apply all the latest kernel security updates to all instances.

Which OCI service will allow you to complete this task?

a. Storage Gateway

b. OS Management

c. Registry

d. Resource Manager

e. Streaming

Risposta: B

https://docs.cloud.oracle.com/en-us/iaas/os-management/osms/osms-linux-packages.htm#osms-package-management

- A is false: Storage Gateway is a cloud storage gateway that lets you connect your on-premises applications with Oracle Cloud Infrastructure. Applications that can write data to an NFS target can also write data to the Oracle Cloud Infrastructure Object Storage, without requiring application modification to uptake the REST APIs.

- C is false: Registry is an Oracle-managed registry that enables you to simplify your development to production workflow. Oracle Cloud Infrastructure Registry makes it easy for you as a developer to store, share, and manage development artifacts like Docker images.

- D is false: Resource Manager is an Oracle Cloud Infrastructure service that allows you to automate the process of provisioning your Oracle Cloud Infrastructure resources. Using Terraform, Resource Manager helps you install, configure, and manage resources through the “infrastructure-as-code” model.

- E is false: The Oracle Cloud Infrastructure Streaming service provides a fully managed, scalable, and durable storage solution for ingesting continuous, high-volume streams of data that you can consume and process in real time. Streaming can be used for messaging, ingesting high-volume data such as application logs, operational telemetry, web click-stream data, or other use cases in which data is produced and processed continually and sequentially in a publish-subscribe messaging model.

52. Your company decided to move a few applications to Oracle Cloud Infrastructure (OCI) in the US West (us-phoenix-1) region.

You need to design a cloud-based disaster recovery (DR) solution with a requirement to deploy the DR resources in the US East (us-ashburn-1) region to minimize network latency.

What is the recommended deployment?

a. Deploy production and DR applications in two separate VCNs in different availability domains (ADs) within the primary region, and then use a VCN remote peering connection for connectivity.

b. Deploy production and DR applications in two separate virtual cloud networks (VCNs), each in different regions, and then use VCN local peering gateways for connectivity.

c. Deploy production and DR applications in the same VCN. Create production subnets in one AD, and DR subnets in another AD (assume a multi-AD region).

d. Deploy production and DR applications in two separate VCNs, each in different regions. Connect them using a VCN remote peering connection.

Risposta: D

https://docs.cloud.oracle.com/en-us/iaas/Content/Network/Tasks/remoteVCNpeering.htm

53. You are running a mission-critical database application in Oracle Cloud Infrastructure (OCI). You take regular backups of your DB system to OCI object storage. Recently, you notice a failed database backup status in the console.

What step can you take to determine the cause of the backup failure?

a. Make sure that the database is not active and running while the backup is in progress.

b. Ensure that your database host can connect to OCI object storage.

c. Ensure the database archiving mode is set to NOARCHIVELOG.

d. Don’t restart the dcsagent program even if it has a status of stop/waiting.

Risposta: B

https://docs.cloud.oracle.com/en-us/iaas/Content/Database/Troubleshooting/Backup/backupfail.htm

- C is false because db must be set to ARCHIVELOG

- D is false because you have to restart dcsagent in case.

- A is false because the database must be active and running during the backup is in progress.

54. You developed a microservices based application that runs on Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE). You want to provide access to this cluster to other team members.

What should you do to provide access to this cluster using as fewest steps as possible?

a. Create a group in OCI Infrastructure Access Management (IAM). Create a policy to grant access to the OKE cluster. Create individual users and access token for each team member. Other team members should use OCI Cloud Shell to generate the kubeconfig into their own cloud shell environment and access the cluster using kubectl form cloud shell.

b. Create a group in OCI Infrastructure Access Management (IAM). Create a policy to grant access to the OKE cluster. Other team members should install oci cli and kubectl locally on their laptop. Use the oci cli to generate the kubeconfig and use kubectl to access the cluster.

c. Create a group in OCI Infrastructure Access Management (IAM). Create a policy to grant access to the OKE cluster. Other team members should use OCI Cloud Shell to generate the kubeconfig into their own cloud shell environment and access the cluster using kubectl form cloud shell.

d. Create a group in OCI Infrastructure Access Management (IAM). Create a policy to grant access to the OKE cluster. Create a cluster role and cluster role binding to provide access to the cluster for each team member. Other team members should install oci cli and kubectl locally on their laptop. Use the oci cli to generate the kubeconfig and use kubectl to access the cluster.

Risposta: B — Selezionato C

https://docs.cloud.oracle.com/en-us/iaas/Content/ContEng/Concepts/contengaboutaccesscontrol.htm#About_Access_Control_and_Container_Engine_for_Kubernetes

https://docs.cloud.oracle.com/en-us/iaas/Content/ContEng/Concepts/contengaboutaccesscontrol.htm

55. You are about to upload a large log file (5 TiB size) to Oracle Cloud Infrastructure object storage and have decided to use multipart upload capability for a more efficient and resilient upload.

Which two statements are true about multipart upload?

a. The maximum size for an uploaded object is 10 TiB.

b. You do not have to commit the upload after you have uploaded all the object parts.

c. While a multipart upload is still active, you cannot add parts even if the total number of parts is less than 10,000.

d. Individual object parts can be as small as 10 MiB or large as 50 GiB.

Risposte: A — D

https://docs.cloud.oracle.com/en-us/iaas/Content/Object/Tasks/usingmultipartuploads.htm#:~:text=The%20Oracle%20Cloud%20Infrastructure%20Object,uploads%2C%20especially%20for%20large%20objects.&text=Oracle%20recommends%20that%20you%20perform,uploaded%20object%20is%2010%20TiB.

Multipart uploads can accommodate objects that are too large for a single upload operation. Oracle recommends that you perform a multipart upload to upload objects larger than 100 MiB. The maximum size for an uploaded object is 10 TiB. Object parts must be no larger than 50 GiB. For large uploads performed through the API, you have the flexibility of pausing between the uploads of individual parts, and resuming the upload when your schedule and resources allow.

Committing the Upload

When you have uploaded all object parts, commit the upload. Use the CommitMultipartUpload request parameters to specify the Object Storage namespace, bucket name, and upload ID. Include the part number and corresponding ETag value for each part in the body of the request. When you commit the upload, Object Storage constructs the object from its constituent parts. The object is stored in the specified bucket and Object Storage namespace. You can treat it like you would any other object. Garbage collection releases storage space occupied by any part numbers you uploaded, but did not include in the CommitMultipartUpload request.

You cannot list or retrieve parts from a completed upload. You cannot append or remove parts from the completed upload either. If you want, you can replace the object by initiating a new upload.

If you decide to abort a multipart upload instead of committing it, wait for in-progress part uploads to complete and then use the AbortMultipartUpload operation. If you abort an upload while part uploads are still in progress anyway, Object Storage cleans up both completed and in-progress parts. Upload IDs from aborted multipart uploads cannot be reused.

While a multipart upload is still active, you can keep adding parts as long as the total number is less than 10,00

56. Your company has been running several small applications in Oracle Cloud Infratructure and is planning a proof-of-concept (POC) to deploy Oracle PeopleSoft.

If your existing resources are being maintained in the root compartment, what is the recommended approach for defining security for the upcoming POC?

a. Create a new tenancy for the POC and provision all new resources into the root compartment. Grant appropriate permissions to create and manage resources within the root compartment.

b. Create a new compartment for the POC and grant appropriate permissions to create and manage resources within the compartment.

c. Provision all new resources into the root compartment. Grant permissions that only allow for creation and management of resources specific to the POC.

d. Provision all new resources into the root compartment. Use defined tags to separate resources that belong to different applications.

Risposta: B

57. Which statement is true about Data Guard implementation in Oracle Cloud Infrastructure (OCI) bare metal and virtual machine database systems?

a. Primary and Standby databases must be in the same OCI region.

b. Primary and Standby database versions and editions need not to be identical.

c. Database Systems need not be the same shape type (e.g, primary database can be a virtual machine, and standby database a bare metal shape, and vice versa).

d. Both database systems must be in the same compartment.

Risposta: D

https://docs.cloud.oracle.com/en-us/iaas/Content/Database/Tasks/usingdataguard.htm#:~:text=The%20Oracle%20Cloud%20Infrastructure%20Database,one%20in%20a%20standby%20role.&text=Oracle%20Data%20Guard%20maintains%20the,data%20from%20the%20primary%20database.

58. In Oracle Cloud Infrastructure Container Engine for Kubernetes (OKE), what does a Replica Set do?

a. It provides declarative updates for Pods.

b. It ensures that all Nodes run a copy of a Pod.

c. It exposes an application running on a set of Pods.

d. It maintains a stable set of replica running at any given time.

Risposta: D

ReplicaSet

A ReplicaSet’s purpose is to maintain a stable set of replica Pods running at any given time. As such, it is often used to guarantee the availability of a specified number of identical Pods.

https://kubernetes.io/docs/concepts/workloads/controllers/replicaset/

59. You have an Oracle Cloud Infrastructure (OCI) load balancer distributing traffic via an evenly-weighted round robin policy to your back-end web servers. You notice that one of your web servers is receiving more traffic than other web servers.

How can you resolve this to make sure traffic is evenly distributed across all back-end webservers?

a. Create separate listeners for each backend web server.

b. Disable cookie-based session persistence on your backend set.

c. Disable SSL configuration associated with your backend set.

d. Change keep-alive setting between the load balancer and backend server.

Risposta: B

https://docs.cloud.oracle.com/en-us/iaas/Content/Balance/Reference/sessionpersistence.htm#Session_Persistence

60. You created a virtual cloud network (VCN) with three private subnets. Two of the subnets contain application servers and the third subnet contains a DB System. The application requires a shared file system so you have provisioned one using the file storage service (FSS).

You also created the corresponding mount target in one of the application subnets. The VCN security lists are properly configured so that both application servers and the DB system can access the file system. The security team determines that the DB System should have read-only access to the file system.

What change should you make to satisfy this requirement?

a. Modify the security list associated with the subnet where the mount target resides. Change the ingress rules corresponding to the DB System subnet to be stateless.

b. Connect via SSH to one of the application servers where the file system has been mounted. Use the Unix command chmod to change permissions on the file system directory, allowing the database user read only access.

c. Create an instance principal for the DB System. Write an Identity and Access Management (IAM) policy that allows the instance principal read-only access to the file storage service.

d. Create an NFS export option that allows READ_ONLY access where the source is the CIDR range of the DB System subnet.

Risposta: D

- A is wrong: the security rules are all stateful

https://docs.cloud.oracle.com/en-us/iaas/Content/File/Tasks/securitylistsfilestorage.htm#Configuring_VCN_Security_Rules_for_File_Storage

In this scenario, the mount target that exports the file system is in a different subnet than the instance you want to mount the file system to. Security rules must be configured for both the mount target and the instance either in a security list for each subnet, or a network security group (NSG) for each resource.

Set up the following the following security rules for the mount target. Specify the instance IP address or CIDR block as the source for ingress rules and the destination for egress rules:

· Stateful ingress from ALL ports in the source instance CIDR block to TCP ports 111, 2048, 2049, and 2050.

· Stateful ingress from ALL ports in the source instance CIDR block to UDP ports 111 and 2048.

· Stateful egress from TCP ports 111, 2048, 2049, and 2050 to ALL ports in the destination instance CIDR block.

· Stateful egress from UDP port 111 ALL ports in the destination instance CIDR block.

61. You deployed an Oracle Cloud Infrastructure (OCI) compute instance (VM.Standard2.16) to run a SQL database. After a few weeks, you need to increase disk performance by using NVMe disks but keeping the same number of CPUs. As a first step, you terminate the instance and preserve the boot volume.

What is the next step?

a. Create a new instance using a VM.DenseIO2.16 shape using the preserved boot volume and move the SQL Database data to NVMe disks.

b. Create a new instance using a VM.DenseIO2.8 shape using the preserved boot volume and move the SQL Database data to NVMe disks.

c. Create a new instance using a VM.DenseIO2.16 shape using the preserved boot volume and move the SQL Database data to block volume.

d. Create a new instance using a VM.DenseIO1.16 shape using the preserved boot volume and move the SQL Database data to NVMe disks.

Risposta: A

- C is useless

- B changes OCPU

- Lower network bandwidth

https://docs.cloud.oracle.com/en-us/iaas/Content/Compute/References/computeshapes.htm

62. Which two statements below are correct with respect to adding secondary Virtual Network Interface Cards (VNICs) to an existing compute instance in Oracle Cloud Infrastructure?

a. The secondary VNIC is required to be in the same Virtual Cloud Network (VCN), but can be in different subnet, as the primary VNIC.

b. You cannot assign an Ephemeral Public IP to a secondary VNIC.

c. You can remove the primary VNIC after the secondary VNIC’s attachment is complete.

d. The primary and secondary VNIC association can be in different virtual cloud networks (VCNs).

e. The primary and secondary VNIC association must be in the same availability domain.

Risposte: D — E

https://docs.cloud.oracle.com/en-us/iaas/Content/Network/Tasks/managingVNICs.htm

About Secondary VNICs

You can add secondary VNICs to an instance after it’s launched. Each secondary VNIC can be in a subnet in the same VCN as the primary VNIC, or in a different subnet that is either in the same VCN or a different one. However, all the VNICs must be in the same availability domain as the instance.

https://docs.cloud.oracle.com/en-us/iaas/Content/Network/Tasks/managingpublicIPs.htm#Public_IP_Addresses

63. As an Oracle Cloud Infrastructure tenancy administrator, you created lists of values and associated them with tag key definitions.

One of the users in your tenancy complains that she cannot see these predefined values.

What is causing the issue?

a. The user is working in a different region other than the home region.

b. The user is not part of a group that allow access to predefined values.

c. The user is trying to use free-form tags.

d. The user has breached either the quota or service limit for using tags.

e. Some of the predefined values are null.

Risposta: B-C

https://docs.cloud.oracle.com/en-us/iaas/Content/Tagging/Tasks/usingpredefinedvalues.htm

Predefined values are a feature of defined tags. To allow users to work with predefined values, use the same IAM policy for working with tag namespaces and tags.

You can use predefined values with defined tags and default tags. You cannot create lists of predefined values for free-form tags.

To apply tags to a resource when using the Console, a user must have permissions to inspect tag-namespaces in tenancy . If the user does not have this permission, the list of tag namespaces cannot be presented to the user in the dialog menu.

64. You are running your warehouse using Oracle Autonomous Data Warehouse (ADW) service and you noticed that a newly configured batch job is always running in serial even though nothing else is running in the database. All your other jobs are configured to run with parallelism enabled.

What could be the reason for this batch job to run in serial?

A. The parallelism of batch job depends on the number of ADW databases involved in the query.

B. The new batch job is connected to LOW consumer group.

C. The new batch job runs on database tables that are not enabled for parallel execution.

D. Parallelism on the database is controlled by the application, not the database.

E. The batch job depends on only one table and parallelism cannot be enabled on a single-table queries.

Risposta: B

https://docs.oracle.com/en/cloud/paas/autonomous-data-warehouse-cloud/user/manage-priorities.html#GUID-80E464A7-8ED4-45BB-A7D6-E201DD4107B7

Database Service Names Overview

You are required to select a service when you connect to the database. The service names are in the format:

· databasename_high

· databasename_medium

· databasename_low

These services map to the LOW , MEDIUM , and HIGH consumer groups. For example, if you provision an Autonomous Data Warehouse service with the name ADW1, your service names are:

· adw1_high

· adw1_medium

· adw1_low

For example, a user connecting with the adw1_low service uses the consumer group LOW .

The basic characteristics of these consumer groups are:

· HIGH: Highest resources, lowest concurrency. Queries run in parallel.

· MEDIUM: Less resources, higher concurrency. Queries run in parallel.

· LOW: Least resources, highest concurrency. Queries run serially.

65. Which two statements about Oracle Cloud Infrastructure Fault Domains are true?

A. At instance creation, a Fault Domain is selected automatically to optimize capacity and anti-affinity. It cannot be specified by the instance creator.

B. A Fault Domain is a grouping of hardware and infrastructure within an Availability Domain.

C. A Fault Domain is spread across multiple regions.

D. Each Availability Domain contains at least three Fault Domains.

E. When an instance in one Fault Domain fails it is automatically relaunched in a different Fault Domain.

Risposte: B-D

https://docs.cloud.oracle.com/en-us/iaas/Content/General/Concepts/regions.htm

Fault Domains

A fault domain is a grouping of hardware and infrastructure within an availability domain. Each availability domain contains three fault domains. Fault domains provide anti-affinity: they let you distribute your instances so that the instances are not on the same physical hardware within a single availability domain. A hardware failure or Compute hardware maintenance event that affects one fault domain does not affect instances in other fault domains. In addition, the physical hardware in a fault domain has independent and redundant power supplies, which prevents a failure in the power supply hardware within one fault domain from affecting other fault domains.

To control the placement of your compute instances, bare metal DB system instances, or virtual machine DB system instances, you can optionally specify the fault domain for a new instance or instance pool at launch time. If you don’t specify the fault domain, the system selects one for you. Oracle Cloud Infrastructure makes a best-effort anti-affinity placement across different fault domains, while optimizing for available capacity in the availability domain. To change the fault domain for a compute instance, edit the fault domain. To change the fault domain for a bare metal or virtual machine DB system instance, terminate it and launch a new instance in the preferred fault domain.

Use fault domains to do the following things:

· Protect against unexpected hardware failures or power supply failures.

· Protect against planned outages because of Compute hardware maintenance.

Scenario 2: Single Web Server and Database Instance Architecture

In this scenario your application architecture is not highly available, for example you have one web server and one database instance. In this scenario both the web server and the database instance must be placed in the same fault domain. This ensures that your application will only be impacted by the failure of that single fault domain.

66. You have multiple applications running on a compute instance that generate a large amount of log files. You have requirements for these log files to be retained for a total of 60 days: at least 15 days on the boot volume, and then an additional 45 days in any location.

What is the most cost-effective way to meet the 15-day boot volume retention requirement, and the 60-day total retention requirement?

A. Terminate the instance while preserving the boot volume. Create a new instance from the boot volume and select a DenseIO shape to take advantage of local NVMe storage.

B. Do not delete any logs but resize the boot volume of the instance every time additional space is needed.

C. Create an object storage bucket and use a script that runs daily to move log files older than 15 days from the boot volume to the bucket. Create a lifecycle rule for the bucket to delete any logs over 60 days old.

D. Attach a block volume and use a script that moves log files older than 15 days to the new volume and deletes them completely after 60 days.

Risposta: C

Answer B is time-consuming:

https://docs.cloud.oracle.com/en-us/iaas/Content/Block/Tasks/resizingavolume.htm#OnlineResize

Object storage is cheaper than block volume

67. You have an AI/ML application running on Oracle Cloud Infrastructure. You identified that the application needs GPU and at least 20 Gbps of network throughput.

The application is currently using a VM.Standard2.1 compute instance with no attached block volumes.

Which two options allow you to meet the requirements for your application?

A. Terminate the compute instance preserving the boot volume. Create a new compute instance using the VM.GPU3.4 shape using the preserved boot volume.

B. Create an instance configuration using your existing instance and use the configuration to create a new instance pool with a VM.GPU3.4 shape.

C. Clone your boot volume. Create a new instance with a VM.Standard2.8 shape and select your cloned volume as the boot volume for your new instance.

D. Terminate the compute instance preserving the boot volume. Create a new compute instance using the BM.GPU2.2 shape using the preserved boot volume.

E. Terminate the compute instance preserving the boot volume. Create a new compute instance using the VM.GPU2.1 shape using the preserved boot volume.

Risposte: A-D

https://docs.cloud.oracle.com/en-us/iaas/Content/Compute/References/computeshapes.htm

68. Which is NOT a valid action within the Oracle Cloud Infrastructure (OCI) Block Volume service?

A. Restore from a volume backup to a larger volume.

B. Attach a block volume to an instance in a different availability domain.

C. Clone an existing volume to a new, larger volume.

D. Expand an existing volume in place with offline resizing.

Risposta: B

https://docs.cloud.oracle.com/en-us/iaas/Content/Block/Tasks/resizingavolume.htm

Resizing a Volume

The Oracle Cloud Infrastructure Block Volume service lets you expand the size of block volumes and boot volumes. You have several options to increase the size of your volumes:

· Expand an existing volume in place with online resizing. See Online Resizing of Block Volumes Using the Console for the steps to do this.

· Restore from a volume backup to a larger volume. See Restoring a Backup to a New Volume and Restoring a Boot Volume.

· Clone an existing volume to a new, larger volume. See Cloning a Volume and Cloning a Boot Volume.

· Expand an existing volume in place with offline resizing. See Offline Resizing of Block Volumes Using the Console for the steps to do this.

https://docs.cloud.oracle.com/en-us/iaas/Content/Block/Concepts/overview.htm

Volumes are only accessible to instances in the same availability domain . You cannot move a volume between availability domains or regions, they are only accessible within the region or availability domain they were created in.

69. A company currently uses Microsoft Active Directory as its identity provider. They recently subscribed to Oracle Cloud Infrastructure (OCI) to leverage the cloud platform for test and development. As the administrator, you configured the OCI tenancy to be federated with Microsoft Active Directory. Your development team users are already part of an Microsoft Active Directory group called AD-Developers-grp.

Which step should you perform to provide management access to a compartment named Dev-Compartment to your development team users?

A. On OCI create group called Developers-grp, map it to AD-Developers-grp, and then create on OCI policy to grant management access to the compartment Dev-Compartment for the group Developers-grp.

B. On OCI create group called Developers-grp, create a new user account for each user and add them to the Developers-grp group and then create a policy to provide management access to Dev-Compartment for that group.

C. On OCI create group called Developers-grp, map it to AD-Developers-grp, and then create a policy on Microsoft Active Directory to grant management access to the compartment Dev-Compartment for the group AD-Developers-grp.

D. On OCI create group called Developers-grp, create a new user account for each user and add them to the Developers-grp group and then create a policy to provide management access to Dev-Compartment for each user account.

Risposta: A

https://docs.cloud.oracle.com/en-us/iaas/Content/Identity/Tasks/federatingADFS.htm

Set up the mappings between Active Directory groups and IAM groups in Oracle Cloud Infrastructure. A given Active Directory group can be mapped to zero, one, or multiple IAM groups, and vice versa. However, each individual mapping is between only a single Active Directory group and a single IAM group. Changes to group mappings take effect typically within seconds in your home region, but may take several minutes to propagate to all regions.

Step 7: Give your federated users the name of the tenant and URL to sign in

The federated users need the URL for the Oracle Cloud Infrastructure Console (for example, https://console.us-ashburn-1.oraclecloud.com) and the name of your tenant. They’ll be prompted to provide the tenant name when they sign in to the Console.

70. You are responsible for creating and maintaining an enterprise application that consists of multiple storage volumes across multiple compute instances in Oracle Cloud Infrastructure (OCI).

The storage volumes include boot volumes and block volumes for your data storage. You need to create backup for the boot volumes that will be done daily and a backup for the block volumes that will be done every six hours.

How can you meet this requirement?

A. Group the boot volumes into a volume group and create a custom backup policy. Group the block volumes and create a custom backup policy.

B. Group together multiple storage volumes in a volume group and create volume group backups.

C. Create on-demand full backups of block volumes, and create custom images from the boot volumes. Using a function to run at a specific time to start the back up process.

D. Create clones of all boot volumes and block volumes one at a time.

Risposta: A

https://docs.cloud.oracle.com/en-us/iaas/Content/Block/Concepts/volumegroups.htm

https://www.oracle.com/cloud/storage/block-volumes-faq.html

What is a volume group backup? How does it work?

A coordinated point-in-time crash consistent backup of the entire set of volumes that are in a volume group. This operation creates a volume group backup. There is no impact to the source volume group and volumes during the backup process.

Volume group backups are replicated across all Availability Domains within the region where the source volume group resides. A volume group backup can then be used to create a new volume group to any Availability Domain within the region the backup resides, by restoring all the volumes data that are in the volume group.

Can I use policy-based automated scheduled backup for a volume group?

Currently, no. Be on the lookout for future updates for this capability.

71. You created a virtual cloud network (VCN) with three private subnets. Two of the subnets contain application servers and the third subnet contains a DB System. The application requires a shared file system so you have provisioned one using the file storage service (FSS).

You also created the corresponding mount target in one of the application subnets. The VCN security lists are properly configured so that the application servers can access file storage service (FSS). The security team changed the settings for the DB System to have read-only access to the file system. However when they went to test this they are unable to access the (FSS).

What change should you make to allow access to (FSS)?

A. Create an instance principal for the DB System. Write an Identity and Access Management (IAM) policy that allows the instance principal read-only access to the file storage service.

B. Modify the security list associated with the subnet where the mount target resides. Change the ingress security rules corresponding to the DB System subnet to be stateful.

C. Modify the security list associated with the subnet where the mount target resides. Change the ingress security rules corresponding to the DB System subnet to be stateless.

D. Create an NFS export option that allows READ_ONLY access where the source is the CIDR range of the DB System subnet.

Risposta: B

https://docs.cloud.oracle.com/en-us/iaas/Content/File/Tasks/exportoptions.htm

NFS Export Options

NFS export options are a set of parameters within the export that specify the level of access granted to NFS clients when they connect to a mount target. An NFS export options entry within an export defines access for a single IP address or CIDR block range.

Each separate client IP address or CIDR block you want to define access for needs a separate export options entry in the export. For example, if you want to set options for NFS client IP addresses 10.0.0.6, 10.0.08, and 10.0.0.10, you need to create three separate entries, one for each IP address.

File Storage service considers the listed order of each export options entry for the export. During an NFS request by a client, File Storage service applies the first set of options that matches the client Source IP address. Only the first set is applied; the rest are ignored.

For example, consider the following two export options entries specifying access for an export:

Entry 1: Source: 10.0.0.0/16, Access: Read Only

Entry 2: Source: 10.0.0.8, Access: Read/Write

In this case, clients who connect to the export from IP address 10.0.0.8 have Read Only access. The request Source IP address is contained in the CIDR block specified in the first entry, and File Storage Service applies the options in the first match.

72. Which two are NOT valid attributes that may be included in payload of an audit log event on Oracle Cloud Infrastructure?

A. Data.faultDomain

B. Data.compartmentId

C. Data.freeformTags

D. Data.availabilityDomain

E. Data.vcnId

Risoste: A-E

https://docs.cloud.oracle.com/en-us/iaas/Content/Audit/Reference/logeventreference.htm#Contents_of_an_Audit_Log_Event

73. Your company has been running several small applications in Oracle Cloud Infrastructure and is planning a proof-of-concept (POC) to deploy Oracle PeopleSoft.

If your existing resources are being maintained in the root compartment, what approach should you use in defining security for the upcoming POC?

A. Create a compartment for the POC, create a user account in the new compartment and use that user for creation and management of resources specific to the POC.

B. Create a new compartment for the POC and grant appropriate permissions to create and manage resources within the compartment.

C. Provision a new VCN for the POC and create all the resources into it.

D. Create a new tenancy for the POC and grant appropriate permissions to create and manage resources within the tenancy.

Risposta: B

74. Your application front end consists of several Oracle Cloud Infrastructure compute instances configured as backend servers in a public load balancer backend set. You configured the load balancer to perform the appropriate health check on these backend servers.

What will happen if one of the backend server fails to pass the configured health check?

A. The load balancer stop sending traffic to the backend server and the backend set health status is set to CRITICAL.

B. The load balancer stop sending traffic to the backend server and the backend set health status is set to WARNING.

C. The backend server is restarted automatically by the load balancer the backend set health status is set to OK.

D. The backend server is removed from the backend set and the backend set health status is set to WARNING.

Risposta: B

https://docs.cloud.oracle.com/en-us/iaas/Content/Balance/Tasks/managingbackendsets.htm

Backend Set Health Summary

The Console list of a load balancer’s backend sets provides health status summaries that indicate the overall health of each backend set. Health status indicators have four levels. The meaning of each level is:

· OK: All backend servers in the backend set return a status of OK.

· WARNING: Both of the following conditions are true:

o Half or more of the backend set’s backend servers return a status of OK.

o At least one backend server returns a status of WARNING, CRITICAL, or UNKNOWN.

· CRITICAL: Fewer than half of the backend set’s backend servers return a status of OK.

· UNKNOWN: At least one of the following conditions is true:

o More than half of the backend set’s backend servers return a status of UNKNOWN.

o The system could not retrieve metrics for any reason.

o The backend set does not have a listener attached.

https://docs.cloud.oracle.com/en-us/iaas/Content/GSG/Tasks/loadbalancing.htm

Enter the Health Check details.

Load Balancing automatically checks the health of the instances for your load balancer. If it detects an unhealthy instance, it stops sending traffic to the instance and reroutes traffic to healthy instances. In this step, you provide the information required to check the health of servers in the backend set and ensure that they can receive data traffic.

75. Which of the following statements is true about cloning a volume in Oracle Cloud Infrastructure Block Volume service?

a. Creating a clone takes longer than creating a backup of a volume.

b. You can clone a volume to another region.

c. You need to detach a volume before cloning it.

d. Creating a clone of a boot volume requires you to stop the instance.

e. Cloning a volume is faster than creating a backup.

f. You can clone a boot volume while the instance is still running.

Risposta: E — F

You can only create a clone for a volume within the same region, availability domain and tenant. You can create a clone for a volume between compartments as long as you have the required access permissions for the operation.

👋 Join FAUN today and receive similar stories each week in your inbox! ️ Get your weekly dose of the must-read tech stories, news, and tutorials.

Follow us on Twitter 🐦 and Facebook 👥 and Instagram 📷 and join our Facebook and Linkedin Groups 💬