Free Oracle 1Z0-997-25 Exam Questions

Question 1

A hospital in Austin has hosted its web based medical records portal entirely In Oraclecloud Infrastructure

(OCI) using Compute Instances for its web-tier and DB system database for its data tier. To validate

compliance with Health Insurance Portability and Accountability (HIPAA), the security professional to check

their systems it was found that there are a lot of unauthorized coming requests coming from a set of IP

addresses originating from a country in Southeast Asia.

Which option can mitigate this type of attack?

A : Block the attacking IP address by implementing a OCI Web Application Firewall policy using Access Control Rules

B : Block the attacking IP address by implementing a OCI Web Application Firewall policy using AccessControl Rules

C : Mitigate the attack by changing the Route fable to redirect the unauthorized traffic to a dummy Compute instance

D : Block the attacking IP address by creating a Security List rule to deny access to the subnet where the web server Is running

Answer: B

Question 2

A civil engineering company is running an online portal In which engineers can upload there constructions

photos, videos, and other digital files.

There is a new requirement for you to implement: the online portal must offload the digital content to an

Object Storage bucket for a period of 72 hours. After the provided time limit has elapsed, the portal will hold

all the digital content locally and wait for the next offload period.

Which option fulfills this requirement?

A : Create a pre-authenticated URL for the entire Object Storage bucket to read and list the content with an expiration of 72 hours

B : Create a pre authenticated URL lot each object that Is uploaded to the Object Storage bucket with an expiration of 72 hours

C : Create a Dynamic Group with matchingrule for the portal compute Instance and grant access to the Object Storage bucket for 72 hours.

D : Create a pre authenticated URL for the entire Object Storage bucket to write content with an expiration of 72 hours.

Answer: D

Question 3

A digital marketing company is planning to host awebsite on Oracle Cloud Infrastructure (OCI) and leverage

OCI Container Engine for Kubernetes (OKE). The web server will make API calls to access OCI Object

Storage to store all images uploaded by users.

For security purposes, your manager instructed youto ensure that the credentials used by the web server to

allow access not stored locally on the compute instance.

What solution results in an Implementation with the least effort for this scenario?

A : Configure the credentials using Instance Principal toallow the web server to make API calls to OCl Object Storage

B : Configure the credentials using OCI Registry (OC1R) which will automatically connect with OKE allowing the web server to make API calls to OCI Object Storage

C : Configure the credentials to use Transparent Data Encryption (TDE) which will automatically allow the web server to make API calls to OCl Object Storage

D : Configure the credentials using OCI Key Management to allow an instance to make API calls and grant access to OCl Object Storage.

Answer: A

Question 4

You are working as a cloudconsultant for a major media company. In the US and your client requested to consolidate all of their log streams, access logs, application logs, and security logs into a single system. The client wants to analyze all of their logs In real-time based on heuristics and the result should be validated as well. This validation process requires going back to data samples extracted from the last 8 hours. What approach should you take for this scenario?

A : Create an auto scaling pool of syslog-enabled servers using compute instances which will store the logs In Object storage, then use map reduce jobs to extract logs from Object storage, and apply heuristics on the logs

B : Create a bare-metal instance big enough to host a syslog enabled server to process the logs and store logs on the locally attached NVMe SSDs for rapid retrieval of logs when needed.

C : Set up an OCI Audit service and ingest all the API arils from Audit service pragmatically to a client side application to apply heuristics and save the result inan OCI Object storage.

D : Stream all the logs and cloud events of Events service to Oracle Streaming Service. Build a client process that will apply heuristics on the logs and store them in an Object Storage

Answer: D

Question 5

You are creating an Oracle Cloud Infrastructure Dynamic Group. To determine the members of thisgroup you are defining a set of matching rules. Which of the following are the supported variables to define conditions in the matching rules? (Choose Two)

A : instance.compartment.id -the OCID of the compartment where the instance resides.

B : instance.tenancy.id -the OCID of the tenancy where the instance resides.

C : tag.< tagnamespace >.< tagkey >.value -the tag namespace and tag key.

D : iam.policy.id - the OCID of the IAM policy to apply to the group.

Answer: A,C