1z1-997試験無料問題集（77題）「Oracle Cloud Infrastructure 2019 Architect Professional 認定」

出題：1

You are designing the network infrastructure for two application servers: appserver-1 and appserver-2 running in two different subnets inside the same Virtual Cloud Network (VCN) Oracle Cloud Infrastructure (OCI). You have a requirement where your end users will access appserver-1 from the internet and appserver-2 from the on-premises network. The on-premises network is connected to your VCN over a FastConnect virtual circuit.
How should you design your routing configuration to meet these requirements?

A. Configure a single routing table (Route Table-1) that has two set of rules. One that has route to internet via the internet Gateway and another that propagate specific routes for the on-premise network via the Dynamic Routing Gateway. Associate the routing table with all the VCN subnets.

B. Configure two routing table (Route table-1 Route Table-2) that have rule to route all traffic via the Dynamic Routing Gateway (DRG) Associate the two routing tables with all the VCN subnets.

C. Configure two routing tables: Route Table-1 that has a route to internet via the Internet gateway. Associate this route table to the subnet containing appserver-1. Route Table-2 that propagate specific routes for the on-premises network via the Dynamic Routing Gateway (DRG) Associate this route table to subnet containing appserver-2.

D. Configure a single routing table (Routing Table-1) that has two set of rules: one that has route to internet via the Internet Gateway and another that propagates specific routes for the on-premises network via Dynamic Routing Gateway (DRG). Associate the routing table with the VCN.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

You are working as a cloud consultant for a major media company. In the US and your client requested to consolidate all of their log streams, access logs, application logs, and security logs into a single system.
The client wants to analyze all of their logs In real-time based on heuristics and the result should be validated as well. This validation process requires going back to data samples extracted from the last 8 hours.
What approach should you take for this scenario?

A. Stream all the logs and cloud events of Events service to Oracle Streaming Service. Build a client process that will apply heuristics on the logs and store them in an Object Storage.

B. Set up an OCI Audit service and ingest all the API arils from Audit service pragmatically to a client side application to apply heuristics and save the result in an OCI Object storage.

C. Create a bare-metal instance big enough to host a syslog enabled server to process the logs and store logs on the locally attached NVMe SSDs for rapid retrieval of logs when needed.

D. Create an auto scaling pool of syslog-enabled servers using compute instances which will store the logs In Object storage, then use map reduce jobs to extract logs from Object storage, and apply heuristics on the logs.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

An online Stock trading application is deployed to multiple Availability Domains in the us phoenix-1 region. Considering the high volume of transactions that the trading application handles, the company has hired you to ensure that the data stored by the application available, and disaster resilient. In the event of failure, the Recovery lime Objective (UK)) must be less than 2 hours to meet regulator requirements.
Which Disaster Recovery strategy should be used to achieve the RTO requirement In the event of system failure?

A. Configure your application to use synchronous master slave data replication between Availability Domains.

B. Store hourly block volumes backup to NVMe device under a compute instance and generate a custom Image every 5 minutes.

C. Configure hourly block volumes backups using the Oracle Cloud Infrastructure (OCI) Command Line Interface (CLI)

D. Configure hourly block volumes backups through the Storage Gateway service.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

A retail company has recently adopted a hybrid architecture. They have the following requirements for their end-to-end Connectivity model between their on-premises data center and Oracle Cloud Infrastructure (OC1) region
* Highly available connection with service level redundancy
* Dedicated network bandwidth with low latency
Which connectivity setup is the most cost effective solution for this scenario?

A. Setup IPSec VPN as your primary connection, and a second IPSec VPN as a backup connection. Use separate edge devices in your on p data center for each connection. From your edge devices, advertise more specific routes via primary IPSec VPN. and less specific rod the backup IPSec VPN.

B. Setup FastConnect virtual circuit as your primary connection, and a second FastConnect virtual circuit as a backup connection. Use separate edge devices in your FastConnect physical connectivity is redundant Use a single edge device in your on premises data center for each connection From yc device, advertise more specific routes via primary FastConnect virtual circuit, and less specific routes through t backup FastConnect circuit.

C. Setup IPsec VPN as your primary connection, and a FastConnect virtual circuit as a backup connection. Use separate edge devices in your on-premises data canter for each connection from your edge devices, advertise more specific routes IPSec VPN, and specific routes through the backup FastConnect virtual circuit.

D. Setup FastConnect virtual circuit as your primary connection, and an IPSec VPN as a backup connection. Use separate edge devices in your on-premises data center for each connection. From your edge devices, advertise more specific routes through FastConnect virtual circuit, and more specific routes through the backup IPSec VPN path.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

After performing maintenance on an Oracle Linux compute instance the system is returned to a running state You attempt to connect using SSH but are unable to do so. You decide to create an instance console connection to troubleshoot the issue.
Which three tasks would enable you to connect to the console connection and begin troubleshooting?

A. Upload an API signing key for console connection authentication.

B. Reboot the compute instance using the Oracle Cloud Infrastructure (OCI) Management Console

C. Use SSH to connect to the service endpoint of the console connection service

D. Use SSH to connect to the public: IP address of the compute Instance and provide the console connection OCID as the username.

E. edit the Linux boot menu to enable access to console.

F. Stop the compute Instance using the Oracle cloud Infrastructure (OCI) Command Line interface (CLI).

正解：B,C,E 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

A hospital in Austin has hosted its web based medical records portal entirely In Oracle cloud Infrastructure (OCI) using Compute Instances for its web-tier and DB system database for its data tier. To validate compliance with Health Insurance Portability and Accountability (HIPAA), the security professional to check their systems it was found that there are a lot of unauthorized coming requests coming from a set of IP addresses originating from a country in Southeast Asia.
Which option can mitigate this type of attack?

A. Block the attacking IP address by creating a Security List rule to deny access to the subnet where the web server Is running

B. Block the attacking IP address by creating by Network Security Group rule to deny access to the compute Instance where the web server Is running

C. Block the attacking IP address by implementing a OCI Web Application Firewall policy using Access Control Rules

D. Mitigate the attack by changing the Route fable to redirect the unauthorized traffic to a dummy Compute instance

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

You have multiple IAM users who launch different types of compute Instances and block volumes every day. As a result, your Oracle cloud Infrastructure (OCF) tenancy quickly hit the service limit and you can no longer create any new instances. As you are cleaning up environment, you notice that the majority of the Instances and block volumes are untagged. Therefore, It is difficult to pinpoint the owner of these resources verify if they are safe to terminate.
Because of this, your company has issued a new mandate, which requires adding compute instances.
Which option is the simplest way to implement this new requirement?

A. Create tag variables to automatically tag a resource with the user name.

B. Create tag variables for each compartment to automatically tag a resource with the user name.

C. Create a policy using 1AM requiring users to tag specific resources. This will allow a user to launch compute instances on\y if certain tags were defined.

D. Create a policy to automatically tag a resource with the user name.

E. Create a default tag for each compartment, which ensure that appropriate tags are applied at resource creation

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

An organization has its mission critical application consisting of multiple application servers and databases running inside Virtual Cloud Network (VCN) in uk-london-1 region. Their solution architect wants to further strengthen their architecture by planning for Disaster Recovery (DR) in eu-frankfurt-1 region.
Which two solutions should their architect keep in mind while designing for DR?

A. rsync utility can be used to asynchronously copy file systems or snapshot data to another region.

B. It is not possible to use Active Data Guard to synchronize a database in uk-london-1 region to equivalent database in eu-frankfurt-1 region.

C. Load balancer will automatically distribute traffic between both the regions.

D. The RTO is the acceptable timeframe of lost data that application can tolerate.

E. A remote VCN peering connection is required to establish secure and reliable connectivity between different VCNs created in uk-london-1 and eu-frankfurt-1 region.

正解：C,E 解答を投票する

1z1-997試験無料問題集「Oracle Cloud Infrastructure 2019 Architect Professional 認定」