最新的Oracle 1Z0-997-20免費考試真題

問題1

After performing maintenance on an Oracle Linux compute instance the system is returned to a running state You attempt to connect using SSH but are unable to do so. You decide to create an instance console connection to troubleshoot the issue.
Which three tasks would enable you to connect to the console connection and begin troubleshooting?

A. edit the Linux boot menu to enable access to console.

B. Reboot the compute instance using the Oracle Cloud Infrastructure (OCI) Management Console

C. Use SSH to connect to the public: IP address of the compute Instance and provide the console connection OCID as the username.

D. Stop the compute Instance using the Oracle cloud Infrastructure (OCI) Command Line interface (CLI).

E. Upload an API signing key for console connection authentication.

F. Use SSH to connect to the service endpoint of the console connection service

正確答案: A,B,F

說明：（僅 Fast2test 成員可見）

問題2

A hospital in Austin has hosted its web based medical records portal entirely In Oracle cloud Infrastructure (OCI) using Compute Instances for its web-tier and DB system database for its data tier. To validate compliance with Health Insurance Portability and Accountability (HIPAA), the security professional to check their systems it was found that there are a lot of unauthorized coming requests coming from a set of IP addresses originating from a country in Southeast Asia.
Which option can mitigate this type of attack?

A. Block the attacking IP address by creating a Security List rule to deny access to the subnet where the web server Is running

B. Block the attacking IP address by implementing a OCI Web Application Firewall policy using Access Control Rules

C. Mitigate the attack by changing the Route fable to redirect the unauthorized traffic to a dummy Compute instance

D. Block the attacking IP address by creating by Network Security Group rule to deny access to the compute Instance where the web server Is running

正確答案: B

說明：（僅 Fast2test 成員可見）

問題3

You have been asked to implement a bespoke financial application in Oracle Cloud Infrastructure using virtual machine instances controlled by Autoscaling across multiple Availability Domains. The application stores transaction logs, intermediate transaction data, and audit data and needs to store this on a persistent, durable data store accessible from all of the application servers. The application requires the file system to be mounted in the /audit folder on the Linux file system. The system needs to tolerate the failure of two or more Fault Domains and still maintain data integrity. The solution should be as low maintenance as possible.
What storage architecture should you suggest?

A. Use File Storage Service(FSS). Configure FSS to operate from all Availability Domains the application servers operate in and mount the file system in the /audit folder.

B. Implement a single instance and install an NFS server, configure and create an NFS share, and mount this as /audit on the application instances.

C. Use locally attached NVMe instances and configure RAID 0 replication between servers.

D. Store the data on Oracle Object Storage mounted at the /audit mount point on all the Linux instances using the default mount options.

正確答案: A

問題4

You are designing the network infrastructure for two application servers: appserver-1 and appserver-2 running in two different subnets inside the same Virtual Cloud Network (VCN) Oracle Cloud Infrastructure (OCI). You have a requirement where your end users will access appserver-1 from the internet and appserver-2 from the on-premises network. The on-premises network is connected to your VCN over a FastConnect virtual circuit.
How should you design your routing configuration to meet these requirements?

A. Configure a single routing table (Route Table-1) that has two set of rules. One that has route to internet via the internet Gateway and another that propagate specific routes for the on-premise network via the Dynamic Routing Gateway. Associate the routing table with all the VCN subnets.

B. Configure two routing table (Route table-1 Route Table-2) that have rule to route all traffic via the Dynamic Routing Gateway (DRG) Associate the two routing tables with all the VCN subnets.

C. Configure a single routing table (Routing Table-1) that has two set of rules: one that has route to internet via the Internet Gateway and another that propagates specific routes for the on-premises network via Dynamic Routing Gateway (DRG). Associate the routing table with the VCN.

D. Configure two routing tables: Route Table-1 that has a route to internet via the Internet gateway. Associate this route table to the subnet containing appserver-1. Route Table-2 that propagate specific routes for the on-premises network via the Dynamic Routing Gateway (DRG) Associate this route table to subnet containing appserver-2.

正確答案: D

說明：（僅 Fast2test 成員可見）

問題5

Your customer has gone through a recent departmental re structure. As part of this change, they are organizing their Oracle Cloud Infrastructure (OCI) compartment structure to align with the company's new organizational structure.
They have made the following change:
Compartment x Is moved, and its parent compartment is now compartment c.

Policy defined in compartment A: Allow group networkadmins to manage subnets in compartment X Policy defined in root compartment: Allow group admins to read subnets in compartment Finance:A:X After you move the compartment, which two IAM policies would be required to ensure both groups retain the same permissions to compartment X that they had before? (Choose two.)

A. Define a policy in compartment HR as follows: Allow group networkadmins to manage subnets in compartment C:X.

B. Define a policy in compartment C as follows: Allow group networkadmins to read subnets in compartment X

C. Define a policy in the root compartment as follows: Allow group admins to read subnets in compartment HR:C:X

D. Define a policy in the root compartment as follows: Allow group admins to manage subnets in compartment Finance:A:X

正確答案: A,C

問題6

You have deployed art application server irt a private Subnet irt your virtual cloud network (VCN). For the database, you have provisioned an Autonomous Transaction Processing (ATP) serverless instance. However, you are unable to connect to the database instance from your application server.
Which two steps would you need to enable this connectivity?

A. Add a remote peering connection from your VCN to the ATP VCN

B. Add an internet gateway to your VCN and add a route rule to your private subnet route table.
CIDR: 0.0.0.0/0
Target: Internet Gateway

C. Create a NAT Gateway and add the following route rule to the route table of private subnet.
CIDR: 0.0.0.0/0
Target: NAT Gateway

D. Add a stateful egress rule to the security list associated with your private subnet.
Destination CIDR: 0.0.0.0/0
Protocols: All Protocols

正確答案: C,D

最新的Oracle Cloud Infrastructure 2020 Architect Professional - 1Z0-997-20免費考試真題

聯系我們

站內鏈接

最新更新