Free Oracle 1Z0-997-25 Exam Questions

Question 1

A digital marketing company is planning to host awebsite on Oracle Cloud Infrastructure (OCI) and leverage

OCI Container Engine for Kubernetes (OKE). The web server will make API calls to access OCI Object

Storage to store all images uploaded by users.

For security purposes, your manager instructed youto ensure that the credentials used by the web server to

allow access not stored locally on the compute instance.

What solution results in an Implementation with the least effort for this scenario?

A : Configure the credentials using Instance Principal toallow the web server to make API calls to OCl Object Storage

B : Configure the credentials using OCI Registry (OC1R) which will automatically connect with OKE allowing the web server to make API calls to OCI Object Storage

C : Configure the credentials to use Transparent Data Encryption (TDE) which will automatically allow the web server to make API calls to OCl Object Storage

D : Configure the credentials using OCI Key Management to allow an instance to make API calls and grant access to OCl Object Storage.

Answer: A

Question 2

A hospital in Austin has hosted its web based medical records portal entirely In Oraclecloud Infrastructure

(OCI) using Compute Instances for its web-tier and DB system database for its data tier. To validate

compliance with Health Insurance Portability and Accountability (HIPAA), the security professional to check

their systems it was found that there are a lot of unauthorized coming requests coming from a set of IP

addresses originating from a country in Southeast Asia.

Which option can mitigate this type of attack?

A : Block the attacking IP address by implementing a OCI Web Application Firewall policy using Access Control Rules

B : Block the attacking IP address by implementing a OCI Web Application Firewall policy using AccessControl Rules

C : Mitigate the attack by changing the Route fable to redirect the unauthorized traffic to a dummy Compute instance

D : Block the attacking IP address by creating a Security List rule to deny access to the subnet where the web server Is running

Answer: B

Question 3

You are working as a security consultant with a global insurance organization which is using Microsoft Azure

Active Directory (AD) as identity provided to manager user login/passwords. When a user logs in to Oracle

Cloud infrastructure (OCI) console, it should get authenticated by Azure AD.

Which set of steps are required to configure at OCI side in order to get it enabled

A : Setup Azure AD as an Enterprise Application, map Azure AD users and groups and policies to OCIgroups and users

B : Setup Azure AD as an Identity Provider, Import users and groups from Azure AD to OCI, set up IAM policies to govern access to Azure AD groups

C : Setup Azure AD as an Enterprise Application, configure OCI for single sign-on, map Azure ADgroups to OCI groups, set up the IAM policies to govern access to Azure AD groups

D : Setup Azure AD as an Identity Provider, map Azure AD groups to OCI groups, set up the IAM policies to govern access to Azure AD groups

Answer: D

Question 4

You have to migrate your application to Oracle Cloud Infrastructure (OCI). The database is constantly being updated and needs to be online without interruptions. How can you transition the database to OCI without interrupting its use?

A : It isimpossible to migrate without interruption.

B : Use an on-premises database with two-way synchronization to a cloud-based database and allow clients to connect to either databases.

C : Use an on-premises database with one-way synchronization to a cloud-baseddatabase and allow clients to connect only to the cloud database.

D : Use an on-premises database with one-way synchronization to a cloud-based database and allow clients to connect only to the on-premises database until it is synchronized.

Answer: D

Question 5

You are responsible formigrating your on premises legacy databases on 11.2.0.4 version to Autonomous Transaction Processing Dedicated (ATP-D) In Oracle Cloud Infrastructure (OCI). As a solution architect, you need to plan your migration approach. Which two options do you needto implement together to migrate your on premises databases to OCI?

A : Use Oracle Data Guard to keep on premises database always active during migration

B : Retain changes to Oracle shipped privileges, stored procedures or views In the on-premises databases.

C : Use Oracle GoldenGate replication to keep on premises database online during migration.

D : Convert on-premises databases to PDB, upgrade to 19c, and encrypt Migration.

E : Retain all legacy structures and unsupported features (e.g. taw U>Bs) In the onuses databases for migration.

Answer: C,D