Free Oracle 1Z0-997-25 Exam Questions

Question 1

A retailer bank is currently hosting their mission critical customer application on-premises. The application

has a standard 3 tier architecture -4 application servers process the incoming traffic and store application data

in an Oracle Exadata Database Server. The bank has recently has service disruption to other inter applications

to they are looking to avoid this issue for their mission critical Customer Application.

Which Oracle Cloud Infrastructure services should you recommend as part of the DR solution?

A : OCI DNS Service' Public Load Balancer, Oracle Database Cloud Backup Service, ObjectStorage Service, Oracle Bare Metal Cloud Service, Oracle Bare Metal Cloud Service with GoldenGate, OCI Container Engines for Kubernetes, Oracle IPSec VPN

B : OCI Traffic Management, Private Load Balancer, Compute instances distributed across multiple Availability Domains and/or Fault Domains, Exadata Cloud Service with Data Guard, Oracle FastConnect, Object Storage, Database Cloud backup module

C : OCI Traffic Management, Public toad Balancer, Compute Instances distributed across multiple Availability Domains and/or Vault domains. Exadata Cloud Service with Data Guard, Oracle FastConnect, Object Storage, Database cloud backup module

D : OCI DNS Service, Load Balancer as a service using Public Load Balancer distributing traffic Compute Instance across multiple regions, Oracle RAC Database using Virtual Machines, Remote Peering connecting two VCNs in different regions. Exadata Cloud Service with GoldenGate FastConnect, Object Storage, Database Cloud backup module.

Answer: C

Question 2

An Oracle Cloud Infrastructure (OCI) PublicLoad Balancer's SSL certificate is expiring soon. You noticed the Load Balancer is configured with SSL Termination only. When the certificate expires, data traffic can be interrupted and security compromised. What steps do you need to take to prevent thissituation?

A : Add the new SSL certificate to the Load Balancer, update backend servers to work with a new certificate and edit listeners so they can use the new certificate bundle

B : Add the new SSL certificate to the Load Balancer, update listeners andbackend sets so they can use the new certificate bundle.

C : Add the new SSL certificate to the Load Balancer and implement end to end SSL so it can encrypt the traffic from clients all the way to the backend servers.

D : Add the new SSL certificate to the Load Balancer and update backend servers to use the new certificate bundle.

E : Add the new SSL certificate to the Load Balancer and update listeners to use the new certificate bundle.

Answer: A

Question 3

You are creating an Oracle Cloud Infrastructure Dynamic Group. To determine the members of thisgroup you are defining a set of matching rules. Which of the following are the supported variables to define conditions in the matching rules? (Choose Two)

A : instance.compartment.id -the OCID of the compartment where the instance resides.

B : instance.tenancy.id -the OCID of the tenancy where the instance resides.

C : tag.< tagnamespace >.< tagkey >.value -the tag namespace and tag key.

D : iam.policy.id - the OCID of the IAM policy to apply to the group.

Answer: A,C

Question 4

You are working as a solution architect for an online retail store to create a portal to allow the users to pay for

their groceries using credit cards. Since the application is not fully compliantwith the Payment Card Industry

Data Security Standard (PCI DSS), your company is looking to use a third party payment service to process

credit card payments.

The third party service allows a maximum of Spelunk IP addresses 5 public IP addresses at a timeHowever,

your website is using Oracle Cloud Infrastructure (OCI) Instance Pool Auto Scaling policy to create up to

create up to 15 Instances during peak traffic demand, which are launched In VCN private in VCN private

subnets and attached to an OCI public Load Balancer. Upon user payment, the portal connects to the payment

service over the Interne! to complete the transaction

What solution can you implement to make sure that all compute Instances can connect to the third party

system to process the payments aw peak traffic demand?

A : Route credit card payment request from the compute instances through the NAT Gateway. On the third-party services, whitelist the public IP associated with the NAT Gateway

B : Create an OCI Command Line Interface (CLI) scriptto automatically reserve public IP address for the compute instances. On the third-party services, whitelist the Reserved public IP

C : Whitelist the Internet Gateway Public IP on the third party service and route all payment requests through the InternetGateway

D : Route payment request from the compute instances through the OCI Load Balancer, which will then be routed to the third party service

Answer: A

Question 5

You are working as a cloudconsultant for a major media company. In the US and your client requested to consolidate all of their log streams, access logs, application logs, and security logs into a single system. The client wants to analyze all of their logs In real-time based on heuristics and the result should be validated as well. This validation process requires going back to data samples extracted from the last 8 hours. What approach should you take for this scenario?

A : Create an auto scaling pool of syslog-enabled servers using compute instances which will store the logs In Object storage, then use map reduce jobs to extract logs from Object storage, and apply heuristics on the logs

B : Create a bare-metal instance big enough to host a syslog enabled server to process the logs and store logs on the locally attached NVMe SSDs for rapid retrieval of logs when needed.

C : Set up an OCI Audit service and ingest all the API arils from Audit service pragmatically to a client side application to apply heuristics and save the result inan OCI Object storage.

D : Stream all the logs and cloud events of Events service to Oracle Streaming Service. Build a client process that will apply heuristics on the logs and store them in an Object Storage

Answer: D