Oracle 1Z0-997-20 問題集

質問 1：
Which of the following is NOT a good use case for the Oracle Cloud Infrastructure (OCI) Streaming service?
A. Ingesting metric and log data to help make critical operational data more quickly available for indexing, analysis, and visualization.
B. Messaging with a pull-based communication model and the ability to feed multiple consumers with the same data independently.
C. Meeting compliance requirements for data to remain unchanged over a long time, so that it can be retrieved for audit purposes.
D. Providing a unified entry point for cloud components to report their life cycle events for audit, accounting, and related activities.
正解：C

質問 2：
You are developing a Serverless function for your company's IoT project. This function should access Oracle Cloud Infrastructure (OCI) Object Storage to store some files. You choose Oracle Functions to deploy this function on OCI. However, your security team doesn't allow you to carry any API Token or RSA Key to authenticate the function against the OCI API to access the Object Storage.
What should you do to get this function to access OCI Object Storage without carrying any static authentication files? (Choose the best answer.)

A. Option A
B. Option C
C. Option D
D. Option B
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 3：
There are two compartments: Networks and Devlnstances
There are two groups: NetworkAdmins with a user named Nick, and Devs with a user named Dave The following IAM policies are being used:
*Allow group NetworkAdmins to manage virtual-network-family in compartment Networks
*Allow group NetworkAdmins to manage instance-family in compartment Networks
*Allow group Devs to use virtual-network-family in compartment Networks
*Allow group Devs to manage all-resources in compartment Devlnstances
Nick creates a VCN in Networks compartment. Dave creates a VCN in Devlnstances compartment.
Which of the following statements is INCORRECT?
A. Dave launches instances in Devlnstances using the VCN in Networks compartment
B. Nick launches instances in Networks using VCN in Devlnstances compartment
C. Nick cannot launch new instances in Devlnstances compartment
D. Dave cannot launch new instances in Networks compartment
正解：B

質問 4：
An Oracle Cloud Infrastructure (OCI) Public Load Balancer's SSL certificate is expiring soon. You noticed the Load Balancer is configured with SSL Termination only. When the certificate expires, data traffic can be interrupted and security compromised.
What steps do you need to take to prevent this situation?
A. Add the new SSL certificate to the Load Balancer, update listeners and backend sets so they can use the new certificate bundle.
B. Add the new SSL certificate to the Load Balancer and update backend servers to use the new certificate bundle.
C. Add the new SSL certificate to the Load Balancer and update listeners to use the new certificate bundle.
D. Add the new SSL certificate to the Load Balancer, update backend servers to work with a new certificate and edit listeners so they can use the new certificate bundle.
E. Add the new SSL certificate to the Load Balancer and implement end to end SSL so it can encrypt the traffic from clients all the way to the backend servers.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 5：
You work for a large bank where your main application is a payment processing gateway API. You deployed the application on Oracle Container Engine for Kubernetes (OKE) and used API Gateway with several policies to control the access of the API endpoint.
However, your customers are complaining about the unavailability of the API endpoint. Upon checking, you noticed that the Gateway URL is throwing Service Unavailable error. You need to check the backend latency and backend responses when this error started last night.
What should you do to get this data? (Choose the best answer.)
A. Go to Developer Services and click on API Gateway. Go to the detail page of the gateway and select Metrics. Change the Start and End time to filter the metrics.
B. Check with the application owner and search the log file for the container to get the metrics from the log file.
C. Go to Governance Menu and click on Audit to see the Audit log for the API Gateway. Filter it using Start and End date with a 503 response status.
D. Go to Monitoring and click on Service Metrics. Choose the Metric Namespace as oci_apigateway. Change the Start and End time accordingly. Add a Dimension and select httpStatusCode: 503. Check the backend latency and backend responses metric.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 6：
An OCI Architect is working on a solution consisting of analysis of data from clinical trials of a pharmaceutical company. The data is being stored in OCI Autonomous Data Warehouse (ADW) having 8 CPU Cores and 70 TB of storage. The architect is planning to setup autoscaling to respond to dynamic changes in the workload.
Which of the following needs to be considered while configuring auto scaling? Choose two
A. The maximum CPU cores that will be automatically allocated for this database is 16 CPUs
B. Auto scaling also scales IO throughput linearly along with CPU
C. The database memory SGA and PGA will not get affected by the changes in the number of CPUs during auto scaling
D. Enabling auto scaling does not change the concurrency and parallelism settings
正解：B,D
解説: (Topexam メンバーにのみ表示されます)

質問 7：
An insurance company is storing critical financial data in the Oracle Cloud Infrastructure block volume. This volume is currently encrypted using oracle managed keys. Due to regulatory compliance, the customer wants to encrypt the data using the keys that they can control and not the keys which are controlled by Oracle.
What of the following series of tasks are required to encrypt the block volume using customer managed keys?
A. Create a master encryption key, create a new version of the encryption key, decrypt the block volume using existing oracle managed keys and encrypt using new version of the encryption key.
B. Create a vault import your master encryption key into the vault, generate data encryption key, assign data encryption key to the block volume.
C. Create a vault, create a master encryption key in the vault, assign this master encryption key to the block volume.
D. Create a master encryption key, create a data encryption key, decrypt the block volume using existing oracle managed keys, encrypt the block volume using the data encryption key.
正解：C