1z1-997試験無料問題集（77題）「Oracle Cloud Infrastructure 2019 Architect Professional 認定」

出題：1

Your company will soon start moving critical systems Into Oracle Cloud Infrastructure (OCI) platform. These systems will reside in the us-phoenix-1and us-ashburn 1 regions. As part of the migration planning, you are reviewing the company's existing security policies and written guidelines for the OCI platform usage within the company. you have to work with the company managed key.
Which two options ensure compliance with this policy?

A. You do not need to perform any additional actions because the OCI Block Volume service always encrypts all block volumes, boot volumes, and volume backups at rest by using the Advanced Encryption Standard (AES) algorithm with 256-bit encryption.

B. When you create a new compute instance through OCI console, you use the default options for "configure boot volume" to speed up the process to create this compute instance.

C. When you create a new OCI Object Storage bucket through OCI console, you need to choose "ENCRYPT USING CUSTOMER-MANAGED KEYS" option.

D. When you create a new compute instance through OCI console, you use the default shape to speed up the process to create this compute instance.

E. When you create a new block volume through OCI console, select Encrypt using Key Management checkbox and use encryption keys generated and stored in OCI Key Management Service.

正解：C,E 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

You have multiple IAM users who launch different types of compute Instances and block volumes every day. As a result, your Oracle cloud Infrastructure (OCF) tenancy quickly hit the service limit and you can no longer create any new instances. As you are cleaning up environment, you notice that the majority of the Instances and block volumes are untagged. Therefore, It is difficult to pinpoint the owner of these resources verify if they are safe to terminate.
Because of this, your company has issued a new mandate, which requires adding compute instances.
Which option is the simplest way to implement this new requirement?

A. Create tag variables to automatically tag a resource with the user name.

B. Create tag variables for each compartment to automatically tag a resource with the user name.

C. Create a policy using 1AM requiring users to tag specific resources. This will allow a user to launch compute instances on\y if certain tags were defined.

D. Create a policy to automatically tag a resource with the user name.

E. Create a default tag for each compartment, which ensure that appropriate tags are applied at resource creation

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

You are working as a solutions architect for an online retail store In Frankfurt which uses multiple compute instance VMs spread among three availability domains In the eu-frankfurt-1 region.
You noticed the website Is having very high traffic, so you enabled autoscaling to sun tee me no f your application but, you observed that one of the availability domains is not receiving any traffic.
What could be wrong In this situation?

A. You have to manually acid all three availability domains to your load balancer configuration.

B. You forgot to attach a load balancer to your instance pool configuration.

C. Autoscaling is using an Instance Pool configured to create instances in two availability Domains.

D. Autoscaling only works with single availability domains.

E. Autoscaling can be enabled for multiple availability domains only in uk-london t region.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

A digital marketing company is planning to host a website on Oracle Cloud Infrastructure (OCI) and leverage OCI Container Engine for Kubernetes (OKE). The web server will make API calls to access OCI Object Storage to store all images uploaded by users.
For security purposes, your manager instructed you to ensure that the credentials used by the web server to allow access not stored locally on the compute instance.
What solution results in an Implementation with the least effort for this scenario?

A. Configure the credentials to use Transparent Data Encryption (TDE) which will automatically allow the web server to make API calls to OCl Object Storage.

B. Configure the credentials using OCI Registry (OC1R) which will automatically connect with OKE allowing the web server to make API calls to OCI Object Storage.

C. Configure the credentials using OCI Key Management to allow an instance to make API calls and grant access to OCl Object Storage.

D. Configure the credentials using Instance Principal to allow the web server to make API calls to OCl Object Storage

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

A retail company has recently adopted a hybrid architecture. They have the following requirements for their end-to-end Connectivity model between their on-premises data center and Oracle Cloud Infrastructure (OC1) region
* Highly available connection with service level redundancy
* Dedicated network bandwidth with low latency
Which connectivity setup is the most cost effective solution for this scenario?

A. Setup IPSec VPN as your primary connection, and a second IPSec VPN as a backup connection. Use separate edge devices in your on p data center for each connection. From your edge devices, advertise more specific routes via primary IPSec VPN. and less specific rod the backup IPSec VPN.

B. Setup FastConnect virtual circuit as your primary connection, and a second FastConnect virtual circuit as a backup connection. Use separate edge devices in your FastConnect physical connectivity is redundant Use a single edge device in your on premises data center for each connection From yc device, advertise more specific routes via primary FastConnect virtual circuit, and less specific routes through t backup FastConnect circuit.

C. Setup IPsec VPN as your primary connection, and a FastConnect virtual circuit as a backup connection. Use separate edge devices in your on-premises data canter for each connection from your edge devices, advertise more specific routes IPSec VPN, and specific routes through the backup FastConnect virtual circuit.

D. Setup FastConnect virtual circuit as your primary connection, and an IPSec VPN as a backup connection. Use separate edge devices in your on-premises data center for each connection. From your edge devices, advertise more specific routes through FastConnect virtual circuit, and more specific routes through the backup IPSec VPN path.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

An upcoming e-commerce company has deployed their online shopping application on OCI. The application was deployed on compute instances with autoscaling configuration for application servers fronted by a load balancer and OCI Autonomous Transaction Processing (ATP) in the backend.
In order to promote their e-commerce platform 50% discount was announced on all the products for a limited period. During the day 1 of promotional period it was observed that the application is running slow and company's hotline is flooded with complaints.
What could be two possible reasons for this situation?

A. The health check on some of the backend servers has failed and the load balancer was rebooting these servers.

B. The autoscaling has already scaled to the maximum number of instances specified in the configuration and there is no room of scaling

C. The health check on some of the backend servers has failed and the load balancer has taken those servers temporarily out of rotation

D. As part of autoscaling, the load balancer shape has dynamically changed to a larger shape to handle more incoming traffic and the system was slow for a short time during this change

正解：B,C 解答を投票する

出題：7

You have deployed a web application targeting a global audience across multiple Oracle Cloud Infrastructure (OCI) regions.
You decide to use Traffic Management Geo-Location based Steering Policy to serve web requests to users from the region closets to the user. Within each region you have deployed a public load balancer with 4 servers in a backend set. During a DR test disable all web servers in one of the regions however, traffic Management does not automatically direct all users to the other region.
Which two are possible causes?

A. You did not setup an HTTP Health Check associated with Load Balancer public IP in the disabled region.

B. You did not setup a Route Table associated with load Balancer's subnet

C. You did not correctly setup the Load Balancer HTTP health check policy associated with backend set

D. Rather than using Geo-Location based Steering Policy, you should use Failover Policy Type to serve traffic.

E. One of the two working web servers In the other region did not pass Its HTTP health check

正解：A,C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

An organization has its IT infrastructure in a hybrid setup with an on-premises environment and an Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN) in the us-phonix-1 region. The on-premise applications communications with compute instances inside the VPN over a hardware VPN connection. They are looking to implement an Intrusion detected and Prevention (IDS/IPS) system for their OCI environment. This platform should have the ability to scale to thousands of compute of instances running inside the VCN.
How should they architect their solution on OCI to achieve this goal?

A. Set up an OCI Private Load Balance! and configure IDS/IPS related health checks at TCP and/or HTTP level to inspect traffic

B. Configure each host with an agent that collects all network traffic and sends that traffic to the IDS/IPS platform to inspection

C. There Is no need to implement an IPS/IDS system as traffic coming over IPSec VPN tunnels Is already encrypt

D. Configure autoscaling on a compute Instance pool and set vNIC to promiscuous mode to called traffic across the vcn and send it IDS/IPS platform for inspection.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

1z1-997試験無料問題集「Oracle Cloud Infrastructure 2019 Architect Professional 認定」