Asso25_v2

Which THREE protocols are supported by the Oracle Cloud Infrastructure (OCI) private Network Load Balancers?. HTTP. UDP. ICMP. TCP. iSCSI. BGP.

A client has reported they cannot access a file system even though their IP address is allowed in the export options. Upon investigation, you realize a security list rule is blocking access to the mount target. Which layer needs adjustment?. Network Security. ...

What is the primary function of the Network Path Analyzer (NPA) tool provided by Oracle Cloud Infrastructure (OCI)?. Collecting and analyzing network configuration to identify virtual network configuration issues impacting connectivity. Optimizing network performance by dynamically adjusting routing paths based on traffic patterns. Sending actual traffic between source and destination to diagnose connectivity issues. Providing real-time monitoring of network traffic to detect security threats and unauthorized access attempts.

Which of the following statements is true about cloning a volume in the Oracle Cloud Infrastructure (OCI) Block Volume service?. Creating a clone takes longer than creating a backup of a volume. You can clone a volume to another region. You need to detach a volume before cloning it. You can change the block volume size when cloning a volume.

You want to create a policy to allow the NetworkAdmins group to manage Virtual Cloud Network (VCN) in compartment C. You want to attach the policy to the tenancy. The compartment hierarchy is shown below. Allow group 'Default'/ 'NetworkAdmins' to manage virtual-network-family in tenancy. ...

You can attach resources to a Dynamic Routing Gateway (DRG). Select THREE of these resources. Remote Peering Connections. Local Peering Connection. VNIC. Virtual Circuits. IPSec Tunnel. Subnet.

How can an organization securely grant a third-party application access to specific OCI (Oracle Cloud Infrastructure) resources without compromising security?. By creating an IAM policy granting full access to the tenancy and assigning it to a dedicated user for the application. By sharing user credentials for an OCI administrator with the application. By configuring the application to utilize Instance Principal for accessing OCI resources. By implementing OAuth 2.0 with the application, allowing it to obtain temporary tokens with limited permissions.

Your company sells services to photographers where patrons can preview the photos that they want prints for. To avoid unauthorized copies, the sample photos have lower resolution and are watermarked. The photos are processed after they are uploaded. The process is fast but not immediate, creates samples and sends them to storage outside of the instances. Which type of instance is ideal for a process like this: short-lived and one that keeps the cost low?. On-demand instances. Burstable instances. Spot instances. Preemptible instances.

Which THREE capabilities are available with the Oracle Cloud Infrastructure (OCI) DNS service?. Creating and managing Web Application Firewall (WAF) rules. Creating and managing Identity Access Management (IAM) polices. Viewing all zones. Creating and managing records. Creating and managing security lists. Creating and managing zones.

A company accidentally moved a critical database instance to a different compartment within their OCI tenancy. The existing IAM policies were previously mapped to the database's original compartment and granted access to authorized users. How will this impact user access to the database?. Compartments prevent resource movement; once a resource is placed in a compartment, it cannot be moved. Access to the database will be immediately revoked for all authorized users due to the compartment change. Existing IAM policies will continue to function normally, regardless of the compartment move. Compartments are not covered by IAM policies; they only apply to resources.

A large organization is using Oracle Cloud Infrastructure (OCI) and has implemented a complex compartment structure. They have a root compartment, with multiple nested compartments for various projects, teams, and environments. A new virtual machine is created for a specific project in a development sub-compartment. Which statement is INCORRECT regarding the virtual machine in this scenario?. Access to the virtual machine is only controlled by policies attached to the root compartment. ...

Which statement is true about File System Replication in Oracle Cloud Infrastructure (OCI)?. You cannot specify a replication interval when you create the replication resource. Only a file system that has been exported can be used as a target file system. You can replicate the data in one file system to another file system in the same region or a different region. You can replicate the data in one file system to another file system only in the same region.

A company has deployed a multitier application in Oracle Cloud Infrastructure (OCI), with web servers in a public subnet and database servers in a private subnet. The database servers need to access data from OCI Object Storage, and the company wants to ensure that this communication is secure and not exposed to the public Internet. Which OCI feature should be used?. Use a Local Peering Gateway to peer with the Object Storage subnet. Use a Service Gateway to establish a secure connection to Object Storage. Use a NAT Gateway to enable private access to Object Storage. Use a VPN Gateway to create an encrypted tunnel to Object Storage.

You have a block volume created in the US West (Phoenix) region. You enabled Cross Region Replication for the volume and selected US West (San Jose) as the destination region. Now, you would like to create a new volume from the volume replica in the US West (San Jose) region What should you do?. Activate the replica. Trigger the replica. No action required. By default, the replica is available as a block volume. Initiate the replica.

Which TWO statements about the Oracle Cloud Infrastructure (OCI) File Storage service are accurate?. File systems use Oracle-managed keys by default. Customer can encrypt data in their file system using their own Vault encryption key. Mount targets use Oracle-managed keys by default. Communication with file systems in a mount target is encrypted via HTTPS. Customer can encrypt the communication to a mount target via export options.

As a solution architect, you are showcasing the Oracle Cloud Infrastructure (OCI) Object Storage feature about Object Versioning to a customer. Which statement is true regarding OCI Object Storage Versioning?. Objects are physically deleted from a bucket when versioning is enabled. Object Versioning is disabled on a bucket by default. A bucket that is versioning-enabled can and will always have the latest version of the object in the bucket. Object Versioning does not provide data protection against accidental or malicious object update, overwrite, or deletion.

Which of the following is a valid RFC 1918 CIDR prefix that can be used for creating an Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN)?. 10.0.0.0/8. 0.0.0.0/0. 192.168.0.0/16. 189.215.154.89/32. 192.268.0.0/24. 172.16.0.0/12.

Which components are required at a high level for establishing remote peering between two Virtual Cloud Networks (VCNs) in Oracle Cloud Infrastructure (OCI)?. A single VCN with nonoverlapping CIDRS in each region, a dynamic routing gateway (DRG) attached to each VCN, and a direct connection between the DRGS. Two VCNs with overlapping CIDRS in different regions, a virtual private network (VPN) gateway attached to each VCN, and a direct connection between the VPN gateways. Two VCNs with nonoverlapping CIDRS in the same region, a dynamic routing gateway (DRG) attached to each VCN, and a direct connection between the DRGs. Two VCNS with nonoverlapping CIDRS in different regions, a dynamic routing gateway (DRG) attached to each VCN, a remote peering connection (RPC) on each DRG, and a connection established between the RPCs.

Which is NOT a valid action within the Oracle Cloud Infrastructure (OCI) Block Volume service?. Cloning an existing volume to a new, larger volume. Expanding an existing volume in place with offline resizing. Restoring from a volume backup to a larger volume. Attaching a block volume to an instance in a different availability domain.

Which Oracle Cloud Infrastructure (OCI) Identity and Access Management (IAM) policy is invalid?. Allow any-user to inspect users in tenancy. Allow dynamic-group FrontEnd to manage instance-family in compartment Project-A. Allow all-groups to inspect users in tenancy. Allow group A-Admins to manage all-resources in compartment Project-A.

When compared to IAM policies, what is a KEY advantage of utilizing administrator roles for access control within OCI IAM identity domains?. Simplify access management by eliminating the need for complex policy creation. Can be used to grant access to resources outside of the associated identity domain. Offer a wider range of permission combinations than IAM policies. Provide granular control over user access to specific compartments within the domain.

By default, OCI IAM policies follow the principle of least privilege. What does this principle mean in the context of policy creation?. Policies should provide only the minimum set of permissions required for users to perform their tasks effectively. Policies should be written in a complex and technical manner to enhance security. Policies should grant all possible permissions to simplify access control. Policies should be identical for all users within a tenancy.

You create a file system and then add a 2 GB file. You then take a snapshot of the file system. What would be the total meteredBytes shown by the File Storage service after the hourly update cycle is complete?. 3 GB. 2.5 GB. 4 GB. 2 GB.

Which TWO are key benefits of setting up Site-to-Site VPN on Oracle Cloud Infrastructure (OCI)?. When setting up Site-to-Site VPN, it creates a private connection that provides consistent network experience. When setting up Site-to-Site VPN, customers can expect bandwidth above 2 Gbps. When setting up Site-to-Site VPN, OCI provisions redundant VPN tunnels. When setting up Site-to-Site VPN, customers can configure it to use static or dynamic routing (BGP).

Company X Y Z is spending $300,000.00 USD per month in egress fees for 7 Petabytes (1 Petabyte = 1000 Terabytes) that they consume for Outbound Data Transfer in North America with their current cloud provider. The company is looking to significantly reduce this expense without reducing consumption. You propose migrating to OCI because Outbound Data Transfer per Gigabyte in North America costs only $0.0085 USD per month. With OCI, how much will they spend per month for 7 Petabytes of Outbound Data Transfer? (1 Terabyte = 1000 Gigabytes). $ 59,415.00. $ 150,000.00. $ 0.00 (free with OCI). $ 59,500.00.

As a network architect, you have deployed a public subnet on your Virtual Cloud Network (VCN) with the security list rule as shown in the table here. Type Direction CIDR Protocol Source Port Destination Port Stateful Ingress 0.0.0.0/0 TCP Ali 80 Stateful Egress 10.0.2.0/24 TCP Ali 1621 Stateful Ingress 10.0.2.0/24 TCP Ali 21 Stateful Ingress 10.0.2.0/24 TCP All 80 You have also created a network security group (NSG) as shown in the table here, and assigned it to your bastion host. Type Direction CIDR Protocol Source Port Destination Port Stateful Ingress 0.0.0.0/0 TCP All 21 Stateful Ingress 0.0.0.0/0 TCP All 443 Stateful Ingress 10.0.2.0/24 TCP All 22 You have confirmed that routing is correct but when you SSH to the VM from your home over the internet, you are unable to connect. What could be the problem?. SSH traffic is not allowed in the security list nor on the NSG from the Internet. ...

You plan to Iaunch a VM instance with the VM.Standard.E4.Flex shape and Oracle Linux 8 platform image. You want to protect your VM instance from rootkits and bootkits that can infect it between boots and are difficult to detect. What should you do?. Create a shielded instance. ...

Which Traffic Management Steering Policy facilitates the distribution of DNS traffic to specific endpoints based on the geographical location of end users?. ASN Steering. Proximity Steering. IP Prefix Steering. Geolocation Steering.

Oracle Cloud Agent is a lightweight process that manages plugins running on compute instances. Which is NOT a valid Oracle Cloud Agent plugin name?. Live Migration Agent. OS Management Service Agent. Compute Instance Run Command. Bastion.

You are in the process of migrating several legacy applications from on-premises to Oracle Cloud Infrastructure (OCI). The current servers are virtualized. However, you notice that the version of CentOS currently running does not align with any of the Oracle-provided compute images. How would you migrate your existing virtual server images to OCI?. Export your current image in the VMDK format and copy to an Object Storage bucket. Import it as a custom image. Select native mode to ensure the best possible performance. ...

You have an instance running in Oracle Cloud Infrastructure (OCI) that cannot be live-migrated during an infrastructure maintenance event. OCI schedules the maintenance due date within 14 to 16 days and sends you a notification. What would happen if you choose not to proactively reboot the instance before the scheduled maintenance due date?. The instance is reboot migrated for you. ...

Which TWO statements are TRUE about Public IP addresses in Oracle Cloud Infrastructure (OCI)?. By default, an instance in a public subnet has one primary public IP address. You must use OCI provided public IP addresses. You cannot bring your own IP addresses to OCI. You can assign a given instance multiple public IPs across one or more VNICs. Public IP addresses can be ephemeral or reserved.

You plan to upload a large file (3 TiB) to Oracle Cloud Infrastructure (OCI) Object Storage. You would like to minimize the impact of network failures while uploading, and therefore you decide to use the multipart upload capability. Which TWO statements are true about performing a multipart upload using the Multipart upload API?. While a multipart upload is still active, you can keep adding parts as long as the total number is less than 10,000. When you split the object into individual parts, each part can be as large as 50 GiB. You do not have to commit the upload after you have uploaded all the object parts. You do not need to split the object into parts. Object Storage splits the object into parts and uploads all of the parts automatically.

You are backing up your on-premises data to the Oracle Cloud Infrastructure (OCI) Object Storage Service. Your requirements are: Backups need to be retained for at least full 31 days. Data should be accessible immediately if and when needed after the backup. Which OCI Object Storage tier is suitable for storing the backup to minimize cost?. Infrequent Access tier. ...

As a network engineer responsible for managing the virtual network infrastructure on Oracle Cloud Infrastructure (OCI) for your organization, you decide to utilize the Network Visualizer tool provided by OCI. Why is the Network Visualizer tool valuable for managing virtual network infrastructure on OCI?. It visualizes the topology of all VCNS in a selected region and tenancy, allowing for a concise understanding of their relationships and connections. It provides detailed information about the physical network components. It generates automated reports on network performance metrics, facilitating decision-making for optimizing network resources and bandwidth allocation. It offers real-time monitoring of network traffic, enabling proactive identification of security threats and unauthorized access attempts.

You are managing Oracle Cloud Infrastructure (OCI) with several instances and attached block volumes. To optimize performance and cost-efficiency, you consider enabling the detached volume performance autotuning feature in the Block Volume service. What happens to the performance level of a volume when it is detached from an instance?. The performance level is adjusted to Higher Performance. The performance level is adjusted to Lower Cost (0 VPUs/GB). The performance level is adjusted to Balanced. The performance level remains unchanged.

You are managing a complex environment consisting of compute instances running Oracle Linux on Oracle Cloud Infrastructure (OCI). 1 You want to apply all the latest kernel security updates at once. Which OCI service would you use?. OS Management Hub service. ...

As a network architect, you have been tasked with creating a fully redundant connection from your on-premises data center to your Virtual Cloud Network (VCN) in the us-ashburn-l region. Which TWO options will accomplish this requirement?. Configure two FastConnect virtual circuits to the us-ashburn-1 region and terminate them in diverse hardware on-premises. Configure one FastConnect virtual circuit to the us-ashburn-1 region and the second FastConnect virtual circuit to the us-phoenix-1 region. Configure a Site-to-Site VPN from a single on-premises CPE. Configure one FastConnect virtual circuit to the us-ashburn-1 region and a Site-to-Site VPN to the us-ashburn-1 region.

As a cloud infrastructure manager at a multinational company, you're tasked with optimizing data transfer and backup strategies across different regions on Oracle Cloud Infrastructure (OCI). You decide to utilize the Inter-Region Latency dashboard provided by OCI to gain insights into latency between regions. Why is the OCI Inter-Region Latency dashboard useful for your task?. It's designed for troubleshooting latency issues within your specific applications, providing targeted insights for optimizing performance. It focuses solely on latency within your own tenancy ensuring accurate monitoring of data transfer. It provides real-time data specific to your tenancy's workloads. It offers a current and historical view of latency snapshots, enabling you to analyze up to a 30- day history.

You want to run compute virtual machine (VM) instances in Oracle Cloud Infrastructure (OCI). Your business has the following requirements that need to be considered before you launch the VMs: Requirement 1: Shared infrastructure should not be used to deploy VMs. Requirement 2: Meet node-based licensing requirements that require you to license an entire server. Which compute capacity type would you select to meet these requirements?. Dedicated host. ...

You want a full-featured Identity-as-a-Service (IDaaS) solution that helps you manage workforce authentication and access to all of your Oracle and non-Oracle applications, whether they are SaaS apps, on-premises enterprise apps, or apps that are hosted in the cloud. Which IAM Identity Domain type should you create?. Premium. External User. Free. Oracle Apps Premium.

A financial firm is designing an application architecture for its online trading platform that should have high availability and fault tolerance. Their solutions architect configured the application to use an Oracle Cloud Infrastructure (OCI) Object Storage bucket located in the US West (Phoenix) region to store large amounts of financial data. The stored financial data in the bucket should not be impacted even if there is an outage in one of the Availability Domains or a complete region. What should the architect do to avoid any costly service disruptions and ensure data durability?. Create a lifecycle policy to regularly send data from the Standard to Archive storage. Create a replication policy to send data to a different bucket in another OCI region. Copy the Object Storage bucket to a block volume. Create a new Object Storage bucket in another region and configure lifecycle policy to move data every 5 days.

What is the primary purpose of the Web Application Acceleration service offered by Oracle Cloud Infrastructure (OCI)?. Monitoring and analyzing HTTP traffic patterns. Improving the reliability of layer 7 HTTP load balancers. Encrypting HTTP traffic. Speeding up traffic on layer 7 HTTP load balancers.

You have objects stored in an OCI Object Storage bucket that you want to share with a partner company. You decide to use pre-authenticated request access to the objects. Which statement is true about pre-authenticated requests?. You cannot edit a pre-authenticated request. ...

In the context of OCI IAM, which statement accurately describes ephemeral principals?. Ephemeral principals are another term for dynamic groups with frequently changing membership. Ephemeral principals are user accounts with limited lifespans for short-term access. Ephemeral principals are temporary credentials granted to resources for specific tasks. Ephemeral principals represent long-lived service accounts used by OCI services.

In the context of Oracle Cloud Infrastructure (OCI) Compute service, which statement about instance configurations and instance pools is true?. You can only delete an instance configuration if it is not associated with any instance pool. ...

A network administrator is setting up a Virtual Test Access Point (VTAP) to monitor traffic from a virtual machine. The administrator needs to ensure the mirrored traffic reaches the designated target for analysis. Which is an accurate description of the VTAP target requirements?. The VTAP target must be a network load balancer with a UDP listener on port 4789, located in the same VCN as the VTAP source. ...