NEW QUESTION 1

You have hired a new employee to run reports from the Autonomous Data Warehouse (ADW) and are not confident in their SQL writing ability.
Into which consumer group will you assign this individual to minimize the impact of their code?

• A. Lowest
• B. Medium
• C. Highest
• D. High
• E. Low

Answer: E

Explanation:
in ADW, The tnsnames.ora file provided with the credentials zip file contains three database service names identifiable as high, medium, and low. The predefined service names provide different levels of performance and concurrency for Autonomous Data Warehouse.
high: The High database service provides the highest level of resources to each SQL statement resulting in the highest performance, but supports the fewest number of concurrent SQL statements. Any SQL statement in this service can use all the CPU and IO resources in your database. The number of concurrent SQL statements that can be run in this service is 3, this number is independent of the number of OCPUs in your database.
medium: The Medium database service provides a lower level of resources to each SQL statement potentially resulting a lower level of performance, but supports more concurrent SQL statements. Any SQL statement in this service can use multiple CPU and IO resources in your database. The number of concurrent SQL statements that can be run in this service depends on the number of OCPUs in your database.
low: The Low database service provides the least level of resources to each SQL statement, but supports the most number of concurrent SQL statements. Any SQL statement in this service can use a single CPU and multiple IO resources in your database. The number of concurrent SQL statements that can be run in this service can be up to 300 times the number of OCPUs.
The predefined service names provide different levels of performance and concurrency for Autonomous DB Choose whichever database service offers the best balance of performance and concurrency.
Use the low database service name. to minimize the impact of their SQLs to by low consumer group

NEW QUESTION 2

You are designing a networking infrastructure in multiple Oracle Cloud Infrastructure regions and require connectivity between workloads in each region. You have created a dynamic routing gateway (DRG) and a remote peering connection. However, your workloads are unable to communicate with each other.
What are two reasons for this? (Choose two.)

• A. The security lists associated with subnets in each virtual cloud network (VCN) do not have the appropriate ingress rules
• B. Identity and Access Management (IAM) policies have not been defined to allow connectivity across the two VCNs in different regions
• C. A local peering gateway needs to be created in each VCN with a default route rule added in the route table forwarding the traffic to the local peering gateway
• D. An Internet gateway needs to be created in each VCN with a default route rule added in the route table forwarding the traffic to the Internet Gateway
• E. The route table associated with subnets in each VCN do not have a route rule defined to forward the traffic to their respective DRGs

Answer: AE

Explanation:
Setting Up a Remote Peering
Create the RPCs: Each VCN administrator creates an RPC for their own VCN's DRG. Share information: The administrators share the basic required information.
Set up the required IAM policies for the connection: The administrators set up IAM policies to enable the connection to be established.
Establish the connection: The requestor connects the two RPCs (see Important Remote Peering Concepts the definition of the requestor and acceptor).
Update route tables: Each administrator updates their VCN's route tables to enable traffic between the peered VCNs as desired.
Update security rules: Each administrator updates their VCN's security rules to enable traffic between the peered VCNs as desired.

NEW QUESTION 3

Which storage service is used on OCI for a Data Transfer Service job?

• A. An instance with enough storage to accommodate the job
• B. An object bucket
• C. A File System service instance
• D. Block Volume

Answer: B

Explanation:
https://docs.cloud.oracle.com/en-us/iaas/Content/DataTransfer/Concepts/overview.htm

NEW QUESTION 4

Which statement is true about Oracle Cloud Infrastructure Object Storage Service?

• A. An Archive Object Storage tier bucket can be upgraded to the Standard Object Storage tier.
• B. You cannot directly download an object from an Archive Object Storage bucket.
• C. An existing Standard Object Storage tier bucket can be downgraded to the Archive Object Storage tier.
• D. Data retrieval in Archive Object Storage is instantaneous.

Answer: B

NEW QUESTION 5

You are designing a lab exercise for your team that has a large number of graphics with large file sizes. The application becomes unresponsive if the graphics are embedded in the application. You have uploaded the graphics to Oracle Cloud Infrastructure and only added the URL in the application. You need to ensure these graphics are accessible without requiring any authentication for an extended period of time.
How can you achieve these requirements?

• A. Create pre-authenticated requests (PAR) and specify 00:00:0000 as the expiration time.
• B. Make the object storage bucket private and all objects public and use the URL found in the Object “Details”.
• C. Make the object storage bucket public and use the URL found in the Object “Details”.
• D. Create PARs and do not specify an expiration date.

Answer: C

Explanation:
Pre-authenticated requests provide a way to let you access a bucket or an object without having your own credentials. For example, you can create a request that lets you upload backups to a bucket without owning API keys.
When you create a bucket, the bucket is considered a private bucket and the access to the bucket and bucket contents requires authentication and authorization. However, Object Storage supports anonymous, unauthenticated access to a bucket. You make a bucket public by enabling read access to the bucket.
pre-authenticated requests have to select expiration date

NEW QUESTION 6

Which three must be configured for a load balancer to accept incoming traffic? (Choose two.)

• A. a listener
• B. a back-end server
• C. a back end set
• D. a security list that is open on a listener port
• E. a certificate

Answer: ABC

Explanation:
https://docs.cloud.oracle.com/iaas/Content/Balance/Tasks/managingloadbalancer.htm?tocpath=Services%7CLoa The essential components for load balancing include:• A load balancer with pre-provisioned bandwidth.• A backend set with a health check policy. See Managing Backend Sets.• Backend servers for your backend set. See Managing Backend Servers.• One or more listeners . See Managing Load Balancer Listeners.• Load balancer subnet security rules to allow the intended traffic. To learn more about these rules, see Security Rules.• Optionally, you can associate your listeners with SSL server certificate bundles to manage how your system handles SSL traffic. See Managing SSL Certificates.

NEW QUESTION 7

Your customer is using an Oracle Cloud Infrastructure (OCI) compartment named Production that hosts several resources such as compute instances, DB Systems and File Systems. Each resource in the Production compartment is tagged.
The customer's security team wants to restrict access to DB Systems to only the authorized group of DBAs. Which OCI Tagging capability can be used to meet this requirement?

• A. Tags Defaults with predefined values
• B. Tag Defaults
• C. Cost-Tracking Tags
• D. Tag-based Access Control

Answer: D

Explanation:
Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Tagging/Tasks/managingaccesswithtags.htm#about

NEW QUESTION 8

You are deploying a highly available web application In Oracle Cloud Infrastructure and have decided to use a public load balancer. The back-end web servers will be distributed across all three availability domains (ADs).
How many subnets should you create to deliver a secure, highly available application?

• A. two subnets in total; one regional private subnet to host your back-end web servers and one regional public subnet to host your public load load balancer.
• B. two subnets in total; one regional public subnet to host your back-end web servers and one regional private subnet to host your public load load balancer.
• C. three subnets in total; one regional public subnet to host your back-end web servers and two AD specific private subnets to host your private load load balancer.
• D. one subnet in total; one regional private subnet to host your back-end web servers and your public load balancer.

Answer: A

Explanation:
To accept traffic from the internet, you create a public load balancer. The service assigns it a public IP address that serves as the entry point for incoming traffic. You can associate the public IP address with a friendly DNS name through any DNS vendor.
A public load balancer is regional in scope. If your region includes multiple availability domains, a public load balancer requires either a regional subnet (recommended) or two availability domain-specific
(AD-specific) subnets, each in a separate availability domain. With a regional subnet, the Load Balancing service creates a primary load balancer and a standby load balancer, each in a different availability
domain, to ensure accessibility even during an availability domain outage.
If you create a load balancer in
two AD-specific subnets, one subnet hosts the primary load balancer and the other hosts a standby load balancer. If the primary load balancer fails, the public IP address switches to the secondary load balancer. The service treats the two load balancers as equivalent and you cannot specify which one is "primary".
Whether you use regional or AD-specific subnets, each load balancer requires one private IP address from its host subnet. The Load Balancing service supplies a floating public IP address to the primary load balancer. The floating public IP address does not come from your backend subnets.
You cannot specify a private subnet for your public load balancer.
The backend servers (Compute instances) associated with a backend set can exist anywhere, as long as the associated network security groups (NSGs), security lists, and route tables allow the intended traffic flow. Oracle recommends that you create your load balancer in a regional subnet.
Oracle recommends that you distribute your backend servers across all availability domains within the region.

NEW QUESTION 9

Your company uses the Oracle Cloud Infrastructure (OCI) Object Storage service to share large data sets with its data science team. The data science team consists of 20 people who work from offices in Washington, D.C., and Tokyo. While working in these offices, employees are assigned an IP address from the public IP range 129.146.31.0/27
Which two steps should you take to ensure that the Object Storage bucket used in this scenario was only accessible from these office locations? (Choose two.)

• A. Write an IAM policy that includes the conditional statement where request.networkSource.name=CorpNet
• B. Set the bucket visibility to public and only share the URL with the data science team via email
• C. Create a pre-authenticated request for each data set and only share with the data science team via email
• D. Create a Network Source named CorpNetwork with a CIDR block of 129.146.31.0/27
• E. Create a Network Source named CorpNetwork with a CIDR block of 129.146.0.0/16
• F. Write an IAM policy that includes the conditional statement where request.region = 129.146.31.0/27

Answer: CE

NEW QUESTION 10

A financial firm is designing an application architecture for its online trading platform that must have high availability and fault tolerance.
Their solutions architect configured the application to use an Oracle Cloud Infrastructure Object Storage bucket located in the US West (us-phoenix-1) region to store large amounts of financial data. The stored financial data in the bucket must not be affected even if there is an outage in one of the Availability Domains or a complete region.
What should the architect do to avoid any costly service disruptions and ensure data durability?

• A. Create a new Object Storage bucket in another region and configure lifecycle policy to move data every 5 days.
• B. Create a lifecycle policy to regularly send data from Standard to Archive storage.
• C. Copy the Object Storage bucket to a block volume.
• D. Create a replication policy to send data to a different bucket in another OCI region.

Answer: A

NEW QUESTION 11

You are about to upload log file (5 TiB size) to Oracle Cloud Infrastructure object storage and have decided to use multipart upload capability for a more efficient and resilient upload.
Which two statements are true about multipart upload? (Choose two.)

• A. Individual object parts can be as small as 10 MiB or as large as 50 GiB
• B. While a multipart upload is still active, you cannot add parts even if the total number of parts is less than 10,000
• C. The maximum size for an uploaded object is 10 TiB
• D. You do not have to commit the upload after you have uploaded all the object parts

Answer: AC

Explanation:
With multipart upload, you split the object you want to upload into individual parts. Individual parts can be as large as 50 GiB or as small as 10 MiB. (Object Storage waives the minimum part size restriction for the last uploaded part.) Decide what part number you want to use for each part. Part numbers can range from 1 to 10,000. You do not need to assign contiguous numbers, but Object Storage constructs the object by ordering part numbers in ascending order.
The maximum size for an uploaded object is 10 TiB
While a multipart upload is still active, you can keep adding parts as long as the total number is less than 10,000.
https://docs.cloud.oracle.com/en-us/iaas/Content/Object/Tasks/usingmultipartuploads.htm

NEW QUESTION 12

You have a shared file system between two web servers using File Storage Service (FSS) and you were tasked to create a backup plan for this environment to protect the data placed into the shared file system.
What is the recommended approach to create this backup using FSS features?

• A. Implement a backup policy to execute a snapshot of the shared volume.
• B. Implement a backup policy to copy data from the shared volume to object storage.
• C. Compress the data that is in the shared volume and copy it into a different folder on the boot volume disk.
• D. Use the rsync tool to send data from the shared volume to a boot volume disk.
• E. Use the rsync tool to send data from the shared volume to a block volume.

Answer: A

NEW QUESTION 13

for IP addresses or CIDR
You create an autoscaling configuration of Linux compute instances in Oracle Cloud Infrastructure (OCI). You noticed that your application is running slow.
After checking your compute instances, you noticed that autoscaling is not launching additional instances, even though the existing compute instances already have high memory usage.
How can you resolve this issue?

• A. Modify the scaling policy to monitor memory usage and scale up the number of instances when it meets the threshold.
• B. Modify the scaling policy to monitor CPU usage and scale up the number of instances when it meets the threshold.
• C. Install the monitoring agent to all compute instances which will trigger the autoscaling group.
• D. Install OCI SDK in all compute instances and create a script that will trigger the autoscaling event if there is high memory usage.

Answer: B

NEW QUESTION 14

You are in the process of setting up a highly available student registration website on Oracle Cloud Infrastructure (OCI). You use a load balancer and a database service on OCI. You launch two compute instances each in a different subnet and add them to the back end set of a public load balancer. The load balancer is configured correctly and working. You then deploy the student registration application on these two compute instances. The application can communicate with the database service. However, when you type the URL of this student registration application in your browser, no web page appears.
What could be the cause?

• A. The security lists of the subnets on which the two instances are located do not have “allow” rules for port 80 and 443.
• B. The load balancer performed a health check on the application and found that compute instances were not in a healthy state and terminated the instances.
• C. The client requested https access to the application and the load balancer service does not support end-to-end SSL from the client to the listener to the back-end set.
• D. The Dynamic Routing Gateway is preventing the client traffic from your data center network from reaching the public IP of the load balancer.

Answer: A

NEW QUESTION 15

As an Oracle Cloud Infrastructure tenancy administrator, you created predefined lists of values and associated them with tag key definitions.
One of the users in your tenancy complains that she cannot see these predefined values. What is causing this issue?

• A. The user is trying to use free-form tags.
• B. Some of the predefined values are null.
• C. The user is not part of an Identity and Access Management group that gives access to tagging.
• D. The user has breached either the quota or service limit for using tags.

Answer: A

Explanation:
Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Tagging/Tasks/usingpredefinedvalues.htm

NEW QUESTION 16

You are working for a financial institution that is currently running two web applications in Oracle Cloud Infrastructure (OCI). All resources were created in the root compartment.
Your manager asked you to deploy new resources to support a proof-of-concept (PoC) for Oracle FlexCube. D18912E1457D5D1DDCBD40AB3BF70D5D
You must ensure that the FlexCube resources are secured and cannot be affected by the team that manages the two web applications.
Which two tasks should you complete to ensure the required security of your resources? (Choose two.)

• A. Create a new compartment for the two web applications and move the existing resources into thecompartmen
• B. Deploy the FlexCube application into the root compartmen
• C. Create a new policy in the rootcompartment that gives the FlexCube project team the ability to manage all resources in the tenancy.
• D. Create a new policy in the root compartment for the FlexCube project tea
• E. Assign a policy statement that grants the FlexCube project team the ability to manage all resources in the tenancy, where a specific tag key and tag value are present.
• F. Create a Tag Default within the root compartment with a default value of ${iam.principle.name} so that each new resource created is tagged with the name of the person who created i
• G. Create a new IAMpolicy that allows users to only modify resources they created.
• H. Create a new compartment for the two web applications and move the existing resources into this compartmen
• I. Modify the existing policy for the team that manages these applications so that the scopeof access is defined as this new compartment.
• J. Create a new compartment for the FlexCube application deploymen
• K. Create a policy in this compartment for the project team that gives them the ability to manage all resources within the scope of thiscompartment.

Answer: CD

NEW QUESTION 17

D18912E1457D5D1DDCBD40AB3BF70D5D
Which two methods are supported for migrating your on-premises Oracle database to an Oracle Autonomous Transaction Processing (ATP) database in Oracle Cloud Infrastructure? (Choose two.)

• A. Load text files into ATP using SQL Developer.
• B. Use RMAN duplicate.
• C. Use Oracle Data Pump.
• D. Transfer the physical database files and re-create the database.
• E. Use database backup and restore.

Answer: CD

Explanation:
Reference: https://docs.oracle.com/en/solutions/migrate-to-atp/index.html#GUID-28E5A683-6DC6-4A07- BB1C-55F020D4C1CD

NEW QUESTION 18

Which two statements are true about restoring a volume from a block volume backup in Oracle Cloud Infrastructure Block Volume service?

• A. You can restore a volume from any full volume backup but not from an Incremental backup.
• B. You can only restore a volume to the same availability domain in which the original block volume resides.
• C. You can restore a block volume backup to a larger volume size.
• D. You can restore a volume to any availability domain within the same region where the backup is stored.
• E. You can restore only one volume from a manual block volume backup.

Answer: CD

Explanation:
Reference https://docs.cloud.oracle.com/en-us/iaas/Content/Block/Tasks/restoringavolumefromabackup.htm

NEW QUESTION 19

A customer has launched a compute Instance in the Virtual Cloud Network (VCN), which has an Internet gateway, a service gateway, a default security lists and a default route table. Customer has opened up Port 22 in the security lists attached to the compute instance subnet, however is still unable to connect to compute instances using ssh.
Which option would remedy this situation?

• A. Modify the route table associated with the VCN subnet in which the instance reside
• B. Add a following route to the route table.Destination CIDR: 0.0.0.0/0 Target: Internet Gateway (IGW)
• C. Modify the security list associated with the VCN subnet in which the instance reside
• D. Add a stateful egress rule to allow icmp traffic in addition to the port 22.
• E. Modify the route table associated with the VCN subnet in which the instance reside
• F. Add a following route to the route table.Destination CIDR: 0.0.0.0/0Target: Dynamic Routing Gateway (DRG)
• G. Modify the route table associated with the VCN subnet in which the instance reside
• H. Add a following route to the route table.Destination CIDR: 0.0.0.0/0 Target: Service Gateway (SGW)

Answer: A

Explanation:
You create an internet gateway in the context of a specific VCN. In other words, the internet gateway is automatically attached to a VCN. However, you can disable and re-enable the internet gateway at any time.
For traffic to flow between a subnet and an internet gateway, you must create a route rule accordingly in the subnet's route table (for example, destination CIDR = 0.0.0.0/0 and target = internet gateway). If the internet gateway is disabled, that means no traffic will flow to or from the internet even if there's a route rule that enables that traffic.
For the purposes of access control, you must specify the compartment where you want the internet gateway to reside. If you're not sure which compartment to use, put the internet gateway in the same compartment as the cloud network.

NEW QUESTION 20

When creating a subnet, one or more placeholder security lists are often associated with the subnet. Why?

• A. Each operator needs its own security list.
• B. Each protocol needs its own security list.
• C. Each network endpoint or instance in the subnet needs its own security list.
• D. It is not possible to add or remove security lists after a subnet is created.

Answer: C

Explanation:
References: https://docs.cloud.oracle.com/iaas/Content/Network/Concepts/securitylists.htm?tocpath=Services%7CNetworki

NEW QUESTION 21

Which of the following statements is true about the Oracle Cloud Infrastructure (OCI) Object Storage serverside encryption?

• A. Encryption of data encryption keys with a master encryption key is optional.
• B. Customer-provided encryption keys are always stored in OCI Vault service.
• C. Encryption is enabled by default and cannot be turned off.
• D. Each object in a bucket is always encrypted with the same data encryption key.

Answer: B

Explanation:
Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Object/Tasks/usingyourencryptionkeys.htm

NEW QUESTION 22
......