1z0-997-22 Oracle Cloud Infrastructure 2022 Architect Professional Questions and Answers

Setup IPsec VPN as your primary connection, and a FastConnect virtual circuit as a backup connection. Use separate edge devices in your on-premises data canter for each connection from your edge devices, advertise more specific routes IPSec VPN, and specific routes through the backup FastConnect virtual circuit.

Setup FastConnect virtual circuit as your primary connection, and a second FastConnect virtual circuit as a backup connection. Use separate edge devices in your FastConnect physical connectivity is redundant Use a single edge device in your on premises data center for each connection From yc device, advertise more specific routes via primary FastConnect virtual circuit, and less specific routes through t backup FastConnect circuit.

Setup FastConnect virtual circuit as your primary connection, and an IPSec VPN as a backup connection. Use separate edge devices in your on-premises data center for each connection. From your edge devices, advertise more specific routes through FastConnect virtual circuit, and more specific routes through the backup IPSec VPN path.

Setup IPSec VPN as your primary connection, and a second IPSec VPN as a backup connection. Use separate edge devices in your on p data center for each connection. From your edge devices, advertise more specific routes via primary IPSec VPN. and less specific rod the backup IPSec VPN.

Allow group Eng-group to inspect instance-family in compartment Dev-Team:Compute and attach the policy to ‘Engineering’ Compartment

Allow group Eng-group to inspect instance-family in compartment Dev-Team: Compute and attach the policy to 'SysTest Team' Compartment

Allow group Eng-group to read instance-family in compartment Compute and attach the policy to 'Engineering' Compartment.

Allow group Eng-group to read instance-family in compartment Dev-Team-.Compute and attach the policy to'Dev-Team'

Use Oracle Data Guard to keep on premises database always active during migration

Retain changes to Oracle shipped privileges, stored procedures or views In the on-premises databases.

Use Oracle GoldenGate replication to keep on premises database online during migration.

Convert on-premises databases to PDB, upgrade to 19c, and encrypt Migration.

Retain all legacy structures and unsupported features (e.g. taw U>Bs) In the onuses databases for migration.

Create a user-defined storage backup policy and attach a schedule of type "Hourly" and automatically copy to another region. Apply this policy to a volume group containing the block volumes.

Store hourly block volume backups to an NVMe device attached to a compute instance in a different Availability Domain (AD).

Configure your application to use synchronous primary-secondary data replication between ADs.

Set up cross-region volume replication to replicate the block volumes to a different OCI region.

Support business continuity requirements of reducing the risk of outages or data mutation over time.

Meet compliance and regulatory requirements for data to remain unchanged over time, so that it can be retrieved for audit purposes.

Rapidly duplicate an environment in seconds to test configuration changes without impacting your production environment.

Retain a copy of data in a volume, so that you can duplicate an environment later or preserve the data for future use.

Create a file system and mount target in the OCI File Storage service. Mount it into all the required compute instances. Take snapshots of the file system before each update.

Create block volume, attach it with read/write, shareable access type to all the required compute instances. Take a backup of the volume before each update.

Create an Object Storage bucket with object versioning enabled. Provision a compute instance to host the Storage Gateway and share the bucket via NFS, Mount the NFS into all the required compute instances.

Create a connection with the on-premises data center via FastConnect. Mount the shared NFS hosted on-premises.

Upload files to an OCI Object storage bucket. Every time a file is uploaded, an event is emitted. Write a rule to filter these events with an action to trigger a function in Oracle Functions. The function processes the image in the file and stores the thumbnails back in an Object storage bucket.

Upload files to an OCI Object storage bucket. Every time a file is uploaded, trigger an event with an action to provision a compute instance with a cloud-init script to access the file, process it and store it back in an Object storage bucket. Terminate the instance using Autoscaling policy after the processing is finished.

Build a web application to ingest the files and save them to a NoSQL Database. Configure OCI Events service to trigger a notification using Oracle Notification Service (ONS). ONS invokes a custom application to process the image files to generate thumbnails. Store thumbnails in a NoSQL Database table.

Upload all files to an Oracle Streaming Service (OSS) stream. Set up a cron job to invoke a function in Oracle Functions to fetch data from the stream. Invoke another function to process the image files and generate thumbnails. Store thumbnails in another OSS stream.

Define the following policy in compartment Dev:

Allow group G1 to manage instance-family in compartment A

Define the following policies in compartment Dev:

Allow group G1 to manage instance-family in compartment A

Allow group admins to manage instance-family in compartment Ops: Dev: A

Define the following policy in compartment: Dev:

Allow group admins to manage instance-family in compartment Ops: Dev: A

Mo change in any policy statement is required as all the policies associated with a compartment being moved is automatically updated

Attach more Block volumes as the data volume increase, use Oracle Notification Service (ONS) to distribute tasks to a pool of compute instances working In parallel, and Auto Scaling to dynamically size the pool of Instances depending on the number of notifications received from the Notification Service. Use Resource Manager stacks to replicate your architecture to another region.

Change your architecture to use an OCI Object Storage standard tier bucket, replace the single bare metal instance with a Oracle Streaming Service (OSS) to ingest the Incoming requests and distribute the tasks to a group of compute Instances with Auto Scaling

Upgrade your architecture to use a pool of Bare metal servers and configure them to use their local SSDs for faster data access Set up Oracle Streaming Service (OSS) to distribute the tasks to the pool of Bare metal Instances with Auto Scaling to dynamically increase or decrease the pool of compute instances depending on the length of the Streaming queue.

Upgrade your architecture to use more Block volumes as the data volume Increases. Replace the single bare metal instance with a group of compute instances with Auto Scaling to dynamically increase or decrease the compute instance pools depending on the traffic.

Block the attacking IP address by creating by Network Security Group rule to deny access to the compute Instance where the web server Is running

Block the attacking IP address by implementing a OCI Web Application Firewall policy using Access Control Rules

Mitigate the attack by changing the Route fable to redirect the unauthorized traffic to a dummy Compute instance

Block the attacking IP address by creating a Security List rule to deny access to the subnet where the web server Is running

Create a default tag for each compartment, which ensure that appropriate tags are applied at the time of resource creation.

Create an OCI Identity and Access Management policy requiring users to tag resources with their user name.

Create an OCI Identity and Access Management policy to automatically tag a resource with the user name.

Create tag variables to automatically tag a resource with the user name.

OCI Object Storage, OCI Events service and OCI Functions.

Oracle Container Engine for Kubernetes, OCI Notifications and OCI Object Storage.

OCI Events, Oracle Container Engine for Kubernetes and OCI Digital Assistant.

OCI Resource Manager, OCI Functions and OCI Events service.

122 for the VCN; 124 for the subnets

/23 for the VCN; /25 for the subnets

/24 for the VCN; /24 for the subnets

/22 for the VCN; /25 for the subnets

requestAgent

eventource

principalld

requestOrigin

eventId

A well-established, online auction marketplace is running an application where there is database usage 24x7, but also has peaks of activity that are hard to predict. When the peaks happen, the total activities may reach 3 times the normal activity level.

A midsize company is considering migrating its legacy on-premises MongoDB database to Oracle Cloud Infrastructure (OCI). The database has significantly higher workloads on weekends than weekdays.

A manufacturing company is running Oracle E-Business Suite application on-premises. They are looking to move this application to OCI and they want to use a managed database offering for their database tier.

A developer working on an internal project needs to use a database during work hours but doesn't need it during nights or weekends. The project budget requires her to keep costs low.

A small startup is deploying a new application for eCommerce and it requires a database to store customers' transactions. The team is unsure of what the load will look like since it is a new application.

Add an internet gateway to your VCN and add a route rule to your private subnet route table.

CIDR: 0.0.0.0/0

Target: Internet Gateway

Add a remote peering connection from your VCN to the ATP VCN

Add a stateful egress rule to the security list associated with your private subnet.

Destination CIDR: 0.0.0.0/0

Protocols: All Protocols

Create a NAT Gateway and add the following route rule to the route table of private subnet.

CIDR: 0.0.0.0/0

Target: NAT Gateway

Configure the credentials to use Transparent Data Encryption (TDE) to automatically allow the web server to make API calls to the OCI Object Storage.

Configure the credentials using OCI Registry (OCIR) to automatically connect with OKE allowing the web server to make API calls to the OCI Object Storage.

Configure the credentials using OCI Vault to allow an instance to make API calls and grant access to OCI Object Storage.

Configure the credentials using Instance Principals to allow the web server to make API calls to the OCI Object Storage.

Configure auto scaling policy and it to WAF instance.

Configure Control Rules to send traffic to multiple web servers

Configure multiple origin servers

Configure new rules based on now vulnerabilities and mitigations

Object Storage

File System Storage

Archive storage

Block Volume

instance.compartment.id -the OCID of the compartment where the instance resides.

instance.tenancy.id -the OCID of the tenancy where the instance resides.

tag...value -the tag namespace and tag key.

iam.policy.id - the OCID of the IAM policy to apply to the group.

Use clusterlP service type in Kubernetesfor each of yourservice endpointand use a load balancerto expose the endpoints.

Use separate load balancerinstancefor each service but use the 100 Mbps loadbalanceroption.

Deploy an Ingress controllerand use it to expose each endpointwith its own routing endpoint.

Use NodePort service type in Kubernetesfor each of yourservice endpointand use node's public IP address to acccess the applications.