Oracle Cloud Infrastructure 2020 Architect Professional 3

You have multiple IAM users who launch different types of compute instances and block volumes every day. As a result, your Oracle Cloud Infrastructure (OCI) tenancy quickly hit the service limit and you can no longer create any new instances. As you are cleaning up the environment, you notice that the majority of the instances and block volumes are untagged. Therefore, it is difficult to pinpoint the owner of these resources and verify if they are safe to terminate. Because of this, your company has issued a new mandate, which requires adding a predefined set of tags to identify owners before launching compute instances. Which option is the simplest way to implement this new requirement? (Choose the best answer.). Create tag variables to automatically tag a resource with the user name. Create a policy to automatically tag a resource with the user name. Create a policy using IAM requiring users to tag specific resources. This will allow a user to launch compute instances only if certain tags were defined. Create tag variables for each compartment to automatically tag a resource with the user name. Create a default tag for each compartment, which ensures that appropriate tags are applied at resource creation.

You have an Oracle database system in a virtual cloud network (VCN) that needs to be accessible on port 1521 from your on-premises network CIDR 172.17.0.0/24. You have the following configuration currently: ✑ Virtual cloud network (VCN) is associated with a Dynamic Routing Gateway (DRG), and DRG has an active IPSec connection with your on-premises data center. ✑ Oracle database system is hosted in a private subnet. ✑ The private subnet route table has following configuration. ✑ The private subnet security list has following INGRESS security rule. ✑ The Oracle database system is part of a network security group with following security rules. However, you are still unable to connect to the Oracle Database system. Which action will resolve this issue? (Choose the best answer.). Add an EGRESS rule in private subnet security list as following. (destination port rage: all). Add an EGRESS rule in network security group as following. Add a route rule in the private subnet route table as following. Add an EGRESS rule in private subnet security list as following. (destination port rage: 1521).

A retail company runs their online shopping platform entirely on Oracle Cloud Infrastructure (OCI). This is a 3-tier web application that includes a 100 Mbps Load Balancer, Virtual Machine Instances for web and application tiers, and an Oracle DB Systems Virtual Machine. Due to unprecedented growth, they noticed an increase in the incoming traffic to their website and all users start getting 503 (Service Unavailable) errors. What is the potential problem in this scenario? (Choose the best answer.). You did not configure a Service Gateway to allow connection between web servers and Load Balancer. The Traffic Management Policy is not set to Load Balancer the traffic to the web servers. The Load Balancer health check status indicates critical situation for half of the backend web servers. The Database is down hence users cannot access the web site. All the web servers are too busy and not able to answer any request from users.

An automobile company wants to deploy their CRM application for Oracle Database on Oracle Cloud Infrastructure (OCI) DB Systems for one of its major clients. In compliance with the business continuity program of the client, they need to provide a Recovery Point Objective (RPO) of 24 hours and a Recovery Time Objective (RTO) of 1 hour. The CRM application should be available even in the event that an entire OCI Region is down. Which approach meets these requirements in the most cost effective manner? (Choose the best answer.). Deploy a 1 node VM Oracle database in one region. Manually Configure a Recovery Manager (RMAN) database backup schedule to take hourly database backups. Asynchronously copy the database backups to object storage in another OCI region. If the primary OCI region is unavailable, launch a new 1 node VM Database in the other OCI region and restore the production database from the backup. Deploy a 1 node VM Oracle database in one region and replicate the database to a 1 node VM Oracle database in another region using a manual setup and configuration of Oracle Data Guard. Deploy an Autonomous Transaction Processing database in one region and replicate it to an Autonomous Transaction Processing database in another region using Oracle GoldenGate. Deploy a 2 node Virtual Machine (VM) Oracle RAC database in one region and replicate the database to a 2 node VM Oracle RAC database in another region using a manual setup and configuration of Oracle Data Guard.

Your team is conducting a root cause analysis (RCA) following a recent, unplanned outage. One of the block volumes attached to your production WebLogic server was deleted and you have been tasked with identifying the source of the action. You search the Audit logs and find several Delete actions that occurred in the previous 24 hours. Given the sample excerpt of this event: Which item from the event log helps you identify the individual or service that initiated the DeleteVolume API call? (Choose the best answer.). eventId. requestAgent. eventource. requestOrigin. principalId.

You are responsible for migrating your on-premises legacy databases on 11.2.0.4 version to Autonomous Transaction Processing "" Dedicated (ATP""D) in Oracle Cloud Infrastructure (OCI). As a solution architect, you need to plan your migration approach. Which two options do you need to implement together to migrate your on-premises databases to OCI? (Choose two.). Use Oracle Golden Gate replication to keep on-premises database online during migration. Convert on-premises databases to PDB, upgrade to 19c, and encrypt. Use Oracle Data Guard to keep on-premises database always active during migration. Retain changes to Oracle shipped privileges, stored procedures or views in the on-premises databases. Retain all legacy structures and unsupported features (e.g. legacy LOBs) in the on-premises databases for migration.

An online stock trading application is deployed to multiple Availability Domains in the us-phoenix-1 region. Considering the high volume of financial transactions that the trading application handles, the company has hired you to ensure that the data stored by the application is scalable, highly-available, and disaster resilient. In the event of failure, the Recovery Time Objective (RTO) must be less than 2 hours to meet regulatory compliance requirements. Which Disaster Recovery strategy should be used to achieve the RTO requirement in the event of system failure? (Choose the best answer.). Configure your application to use synchronous master-slave data replication between Availability Domains. Configure hourly block volumes backups through the Storage Gateway service. Store hourly block volumes backup to NVME device under a compute instance and generate a custom image every 5 minutes. Configure hourly block volumes backups using the Oracle Cloud Infrastructure (OCI) Command Line Interface (CLI).

An organization has its IT infrastructure in a hybrid setup with an on-premises environment and an Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN) in the us-phoenix-1 region. The on-premises applications communicate with compute instances inside the VCN over a hardware VPN connection. They are looking to implement an Intrusion Detection and Prevention (IDS/IPS) system for their OCI environment. This platform should have the ability to scale to thousands of compute instances running inside the VCN. How should they architect their solution on OCI to achieve this goal? (Choose the best answer.). Set up an OCI Private Load Balancer and configure IDS/IPS related health checks at TCP and/or HTTP level to inspect traffic. Configure autoscaling on a compute instance pool and set vNIC to promiscuous mode to collect traffic across the VCN and send it to the IDS/IPS platform for inspection. Configure each host with an agent that collects all network traffic and sends that traffic to the IDS/IPS platform for inspection. There is no need to implement an IPS/IDS system as traffic coming over IPSec VPN tunnels is already encrypted.

You work for a bank as the lead Oracle Cloud Infrastructure architect. You designed a highly scalable solution for your company's banking application. The architecture includes a load balancer, application servers with autoscaling configuration based on CPU utilization, and an Autonomous Database with Transaction Processing workload type running in a Virtual Cloud Network (VCN). During the peak utilization period, the application users complain that the application runs slow. What are two possible reasons for the application running slow at times? (Choose two.). The VCN does not have a Network Security Group configured to allow traffic from the load balancer to all the application servers in the backend set. Instance pool in autoscaling configuration for the application servers did not scale out due to compartment quota breach of the VM shapes used by the application servers. The load balancer is not configured correctly to send traffic to all the listeners of the application servers in the backend set. Instance pool in autoscaling configuration for the Autonomous Database did not scale out due to misconfigured scaling policy. Instance pool in autoscaling configuration for the application servers did not scale out due to service limit breach of the VM shapes used by the application servers.

You are working as a solution architect with a global automotive provider who is looking to create a multi-cloud solution. They want to run their application tier in Microsoft Azure while utilizing the Oracle DB Systems in the Oracle Cloud Infrastructure (OCI). What is the most-fault tolerant and secure solution for this customer? (Choose the best answer.). Deploy the Oracle database system into a public subnet in your VCN and assign a public IP address. Connect your application tier running in Azure to the public IP address of the database system over the internet. Create a FastConnect virtual circuit with Microsoft Azure as the provider to establish a private interconnect between the application tier running in the Azure Virtual Network and the OCI VCN that contains the Oracle Databases. Create an encrypted, Virtual Private Network connection between the Microsoft Azure Virtual Network that contains the application tier and the OCI Virtual Cloud Network (VCN) that contains the Oracle Databases. Use an OCI Virtual Cloud Network remote peering connection to create a remote network connection between the application tier running in Microsoft Azure Virtual Network and Oracle Databases running in the OCI Virtual Cloud Network (VCN).