1z0-997-21試験無料問題集（145題）「Oracle Cloud Infrastructure 2021 Architect Professional 認定」

出題：1

You are working as a solution architect for a customer in Frankfurt, which uses multiple compute instance VMs spread among three Availability Domains in the Oracle Cloud Infrastructure (OCI) eu-frankfurt-1 region. The compute instances do not have public IP addresses and are running in private subnets inside a Virtual Cloud Network (VCN). You have set up OCI Autoscaling feature for the compute instances, but find out that instances cannot be auto scaled. You have enabled monitoring on the instances.
What could be wrong in this situation?

A. You need to assign a reserved public IP address to the compute instances.

B. Autoscaling only works with single availability domains.

C. You need to set up a Service Gateway to send metrics to the OCI Monitoring service.

D. Autoscaling only works for instances with public IP addresses.

正解：C 解答を投票する

出題：2

You developed a microservices based application that runs on Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE). Your security team wants to use SSL termination for this application. What should you do to create a secure SSL termination for this application using fewest steps?

A. Create a self-signed certificate and it's corresponding key. Create a Kubernetes secret using then add these annotationsto the Kubernetes service.
Service.beta.kubernete.io/oci-load-balancer-ssl-ports: "443"
Service.beta.kubernete.io/oci-load-balancer-tls-secret:SSL-CERTIFICATE-SECRET

B. Generate a self-signed certificate using Let's Encrypt. Use that certificate on OCI Load Balancer. Create the Kubernetes service usingthis load balancer.

C. Create a self-signed certificate and it's corresponding key. Create a Kubernetes secret using the certificate and the key. Then add these an notations to the Kubernetes service:
annotations:
service.beta.kubernetes.io/oci-load-balancer-ssl-ports: "443"
service.beta.kubernetes.io/oci-load-balancer-security-list-management-mode:"Frontend"

D. Add these annotationsto the Kubernetes service:
annotations:
service.beta.kubernetes.io/oci-load-balancer-ssl-ports: "443"
service.beta.kubernetes.io/oci-load-balancer-ssl-secret-key: ssl-secret-key

正解：A 解答を投票する

出題：3

A global media organization is working on a project which lets users upload their videos on their site. After upload is complete, the video should be automatically processed by an Al algorithm. The algorithm will try to recognize actions in the videos so that it can be used to show related advertisements in future. The development team wants to focus on writing Al code and don't want to worry about underlying infrastructure for high-availability, scalability, security and monitoring.
Which OCI services should you recommend for this project?

A. Use OCI Events service for triggering automatic processing of video, Oracle Container Engine for Kubernetes (OKE) and OCI Digital Assistant

B. Use OCI Resource Manager to manage the underlying infrastructure, OCI Functions and OCI Events service.

C. Use Object Storage for storing videos, OCI Events service and OCI Functions

D. Use Oracle Container Engine for Kubernetes (OKE) for deployment of Al Code, OCI Notifications and Object Storage

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

Which three options are available to migrate an Oracle database 12.x from an on-premises environment to Oracle Cloud Infrastructure (OCI)?

A. Setup OCI schema and data transfer tool with Bare Metal DB Systems as the target.

B. Leverage OCI Storage Gateway asynchronous database migration option.

C. Configure RMAN cross-platform transportable tablespace backup sets.

D. Use Oracle Data Pump Export/Import to migrate the database.

E. Create a backup of your on-premises database In OCI DB Systems.

正解：C,D,E 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

You are developing a Serverless function for your company's IoT project. This function should access Oracle Cloud Infrastructure (OCI) Object Storage to store some files. You choose Oracle Functions to deploy this function on OCI. However, your security team doesn't allow you to carry any API Token or RSA Key to authenticate the function against the OCI API to access the Object Storage.
What should you do to get this function to access OCI Object Storage without carrying any static authentication files? (Choose the best answer.)

A. Option D

B. Option C

C. Option A

D. Option B

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

A civil engineering company is running an online portal In which engineers can upload there constructions photos, videos, and other digital files.
There is a new requirement for you to implement: the online portal must offload the digital content to an Object Storage bucket for a period of 72 hours. After the provided time limit has elapsed, the portal will hold all the digital content locally and wait for the next offload period.
Which option fulfills this requirement?

A. Create a pre authenticated URL for the entire Object Storage bucket to write content with an expiration of 72 hours.

B. Create a pre authenticated URL lot each object that Is uploaded to the Object Storage bucket with an expiration of 72 hours.

C. Create a Dynamic Group with matching rule for the portal compute Instance and grant access to the Object Storage bucket for 72 hours.

D. Create a pre-authenticated URL for the entire Object Storage bucket to read and list the content with an expiration of 72 hours.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

Your company will soon start moving critical systems Into Oracle Cloud Infrastructure (OCI) platform. These systems will reside in the us-phoenix-1and us-ashburn 1 regions. As part of the migration planning, you are reviewing the company's existing security policies and written guidelines for the OCI platform usage within the company. you have to work with the company managed key.
Which two options ensure compliance with this policy?

A. You do not need to perform any additional actions because the OCI Block Volume service always encrypts all block volumes, boot volumes, and volume backups at rest by using the Advanced Encryption Standard (AES) algorithm with 256-bit encryption.

B. When you create a new compute instance through OCI console, you use the default options for "configure boot volume" to speed up the process to create this compute instance.

C. When you create a new OCI Object Storage bucket through OCI console, you need to choose "ENCRYPT USING CUSTOMER-MANAGED KEYS" option.

D. When you create a new compute instance through OCI console, you use the default shape to speed up the process to create this compute instance.

E. When you create a new block volume through OCI console, select Encrypt using Key Management checkbox and use encryption keys generated and stored in OCI Key Management Service.

正解：C,E 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

You are tasked with backing up your data using Oracle Cloud Infrastructure Block Volume service.
When you are finalizing your block volume backup schedule, which of the following two are valid considerations for your backup plan? (Choose Two)

A. Encryption: Whether to use your own key to encrypt your volume backups.

B. Frequency: How often you want to back up your data.

C. Number of stored backups: How many backups you need to keep available and the deletion schedule for those you no longer need.

D. Location: Determine the Object Store Bucket where the backups will be stored.

E. Governance: Tagging of backups so you can capture backup related API calls through the Audit service.

正解：B,C 解答を投票する

出題：9

A retail company runs their online shopping platform entirely on Oracle cloud Infrastructure (OCI). This is a 3-tier web application that Includes a Mbps Load Balancer. Virtual Machine Instances for web and an Oracle DB Systems Virtual Machine Due to unprecedented growth, they noticed an Increase in the Incoming traffic to their website and all users start getting 503 (Service Unavailable) errors.
What is the potential problem in this scenario?

A. The Database Is down hence users can not access the web site

B. The Traffic Management Policy is not set to load Balancer the traffic to the web servers.

C. You did not configure a Service Gateway to allow connection between web servers and load Balance

D. The Load Balancer health check status Indicates critical situation for half of the backend webservers

E. All the web servers are too busy and not able to answer any request from users.

正解：E 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：10

You notice that a majority of your Oracle Cloud Infrastructure (OCI) resources like compute instances, block volumes, and load balancers are not tagged. You have received a mandate from your CIO to add a predefined set of tags to identify owners for respective OCI resources. E.g. if Chris and Larry each create compute instances in a compartment, the instances that Chris creates include tags that contain his name as the value, while the instances that Larry creates have his name.
Which option is the simplest way to implement this new tagging requirement?

A. Create tag variables to automatically tag a resource with the user name.

B. Create an OCI Identity and Access Management policy requiring users to tag resources with their user name.

C. Create an OCI Identity and Access Management policy to automatically tag a resource with the user name.

D. Create a default tag for each compartment, which ensure that appropriate tags are applied at the time of resource creation.

正解：A 解答を投票する

1z0-997-21試験無料問題集「Oracle Cloud Infrastructure 2021 Architect Professional 認定」