NEW QUESTION 1
What purpose does an Oracle Cloud Infrastructure (OCI) Dynamic Routing Gateway Serve?

• A. Enables OCI Compute Instance to privately connect to OCI Object Storage
• B. Enables OCI Compute instance to connect to on-promises environments
• C. Enable OCI Compute instances to connect to the internal
• D. Enables OCI Compute instances to be reached from internet

Answer: B

Explanation:
You can think of a Dynamic Routing Gateway (DRG) as a virtual router that provides a path for private traff (that is, traffic that uses private IPv4 addresses) between your VCN and networks outside the VCN's region.
For example, if you use an IPSec VPN or Oracle Cloud Infrastructure FastConnect (or both) to connect y on-premises network to your VCN, that private IPv4 address traffic goes through a DRG that you create and attach to your VCN. For scenarios for using a DRG to connect a VCN to your on-premises network,
see Networking Scenarios. For important details about routing to your on-premises network, see Routing Details for Connections to Your On-Premises Network.
Also, if you decide to peer your VCN with a VCN in another region, your VCN's DRG routes traffic to the other VCN over a private backbone that connects the regions (without traffic traversing the internet). For information about connecting VCNs in different regions, see Remote VCN Peering (Across Regions).

NEW QUESTION 2
You have an application that requires a shared file system. Which of the following services would you use?

• A. File Storage
• B. Archive Storage
• C. Object Storage
• D. Block Volume

Answer: A

Explanation:
Oracle Cloud Infrastructure File Storage service provides a durable, scalable, secure, enterprise-grade network file system. You can connect to a File Storage service file system from any bare metal, virtual machine, or container instance in your Virtual Cloud Network (VCN). You can also access a file system from outside the VCN using Oracle Cloud Infrastructure FastConnect and Internet Protocol security (IPSec) virtual private network (VPN).
Large Compute clusters of thousands of instances can use the File Storage service for high-performance shar storage. Storage provisioning is fully managed and automatic as your use scales from a single byte to exabytes without upfront provisioning.
The File Storage service supports the Network File System version 3.0 (NFSv3) protocol. The service suppo the Network Lock Manager (NLM) protocol for file locking functionality.
Oracle Cloud Infrastructure File Storage employs 5-way replicated storage, located in different fault domain to provide redundancy for resilient data protection. Data is protected with erasure encoding.
The File Storage service uses the "eventual overwrite" method of data eradication. Files are created in the fil system with a unique encryption key. When you delete a single file, its associated encryption key is eradicated, making the file inaccessible. When you delete an entire file system, the file system is marked as inaccessible. The service systematically traverses deleted files and file systems, frees all the used space, and eradicates all residual files.
Use the File Storage service when your application or workload includes big data and analytics, media processing, or content management, and you require Portable Operating System Interface (POSIX)-compliant file system access semantics and concurrently accessible storage. The File Storage service is designed to meet the needs of applications and users that need an enterprise file system across a wide range of use cases, including the following:

NEW QUESTION 3
Which SLA type is not offered by Oracle Cloud Infrastructure compute service?

• A. Data Plane
• B. Performance Plane
• C. Service Plane
• D. Control Plane

Answer: C

Explanation:
Service Plane is NOT an SLA provided by OCI. See the table below:

NEW QUESTION 4
Which feature is NOT a component of Oracle Cloud Infrastructure (OCI) Identity and Access management service?

• A. User Credentials
• B. Network Security Group
• C. Federation
• D. Policies

Answer: C

NEW QUESTION 5
What is a key benefit of Oracle Cloud Infrastructure (OCI) Virtual Machine DB Systems?

• A. Support for RAC DB systems
• B. No need to create database Indices
• C. Automated backups to OCI Block Volume
• D. Automated disaster recovery

Answer: A

Explanation:
There are two types of DB systems on virtual machines:
· A 1-node virtual machine DB system consists of one virtual machine.
· A 2-node virtual machine DB system consists of two virtual machines. (RAC)
A virtual machine DB system database uses Oracle Cloud Infrastructure block storage instead of local storage. You specify a storage size when you launch the DB system, and you can scale up the storage as needed at any time.
For 1-node virtual machine DB systems, Oracle Cloud Infrastructure provides have a "fast provisioning"
option that allows you to create your DB system using Logical Volume Manager as your storage managemen software.
Oracle Cloud Infrastructure offers single-node DB systems on either bare metal or virtual machines, and 2- node RAC DB systems on virtual machines. If you need to provision a DB system for development or testing purposes, then a special fast provisioning single-node virtual machine system is available.
You can manage these systems by using the Console, the API, the Oracle Cloud Infrastructure CLI, the Database CLI (DBCLI), Enterprise Manager, Enterprise Manager Express, or SQL Developer.

NEW QUESTION 6
Which service is the most effective for moving large amounts of data from your on-premises to OCI?

• A. Data Transfer appliance
• B. Data Safe
• C. Internal Gateway
• D. Dynamic Routing Gateway

Answer: A

NEW QUESTION 7
Oracle cloud Infrastructure is compliant with which three industry standards?

• A. SOC 1 Type 2 and SOC 2 Type 2 attestations
• B. NERC Critical Infrastructure Protection Standards
• C. Health Insurance Portability and Accountability Act (HIPAA)
• D. ISO 27001:2013 certification
• E. Health Care Compliance Association (HCCA)

Answer: ACD

Explanation:
Here is the official list of all industry standards that OCI complies with : https://www.oracle.com/in/cloud/cloud-infrastructure-compliance/

NEW QUESTION 8
A new customer has logged into Oracle Cloud Infrastructure (OCI) as an administrator for the first time. The admin would like to deploy Infrastructure into a region other then their home region.
What is the first Stop they must take in order to accomplish this task?

• A. Use API endpoints to create resources in the desired region.
• B. Navigate to the desired region and begin creating resources.
• C. Subscribe to the desired region.
• D. File a service request for access to each additional region.

Answer: C

Explanation:
When you sign up for Oracle Cloud Infrastructure, Oracle creates a tenancy for you in one region. This is your home region. Your home region is where your IAM resources are defined. When you subscribe to another region, your IAM resources are available in the new region, however, the master definitions reside in your home region and can only be changed there.
When you subscribe your tenancy to a new region, all the policies from your home region are enforced in the new region. If you want to limit access for groups of users to specific regions, you can write policies to grant access to specific regions only.

NEW QUESTION 9
Which three components are part of Oracle Cloud Infrastructure Identity and Access Management service?

• A. Virtual Cloud Networks
• B. Policies
• C. Regional Subnets
• D. Dynamic Groups
• E. Roles
• F. Compute Instances
• G. Users

Answer: BDG

Explanation:
IAM components are RESOURCE
The cloud objects that your company's employees create and use when interacting with Oracle Cloud Infrastructure. For example: compute instances, block storage volumes, virtual cloud networks (VCNs), subnets, route tables, etc.
USER
An individual employee or system that needs to manage or use your company's Oracle Cloud Infrastructure resources. Users might need to launch instances, manage remote disks, work with your virtual cloud network, etc. End users of your application are not typically IAM users. Users have one or more IAM credentials
(see User Credentials).
POLICY
A document that specifies who can access which resources, and how. Access is granted at the group and compartment level, which means you can write a policy that gives a group a specific type of access within a specific compartment, or to the tenancy itself. If you give a group access to the tenancy, the group automatically gets the same type of access to all the compartments inside the tenancy. For more information, see Example Scenario and How Policies Work. The word "policy" is used by people in different ways: to mean an individual statement written in the policy language; to mean a collection of statements in a single, named "policy" document (which has an Oracle Cloud ID (OCID) assigned to it); and to mean the overall body of policies your organization uses to control access to resources.
GROUP
A collection of users who all need the same type of access to a particular set of resources or compartment. DYNAMIC GROUP
A special type of group that contains resources (such as compute instances) that match rules that you define (thus the membership can change dynamically as matching resources are created or deleted). These instances act as "principal" actors and can make API calls to services according to policies that you write for the dynamic group.
NETWORK SOURCE
A group of IP addresses that are allowed to access resources in your tenancy. The IP addresses can be public IP addresses or IP addresses from a VCN within your tenancy. After you create the network source, you use policy to restrict access to only requests that originate from the IPs in the network source.
COMPARTMENT
A collection of related resources. Compartments are a fundamental component of Oracle Cloud Infrastructure for organizing and isolating your cloud resources. You use them to clearly separate resources for the purposes of measuring usage and billing, access (through the use of policies), and isolation (separating the resources for one project or business unit from another). A common approach is to create a compartment for each major part of your organization. For more information, see Setting Up Your Tenancy.
TENANCY
The root compartment that contains all of your organization's Oracle Cloud Infrastructure resources. Oracle automatically creates your company's tenancy for you. Directly within the tenancy are your IAM entities (users, groups, compartments, and some policies; you can also put policies into compartments inside the tenancy). You place the other types of cloud resources (e.g., instances, virtual networks, block storage volumes, etc.) inside the compartments that you create.
HOME REGION
The region where your IAM resources reside. All IAM resources are global and available across all regions, but the master set of definitions reside in a single region, the home region. You must make changes to your IAM resources in your home region. The changes will be automatically propagated to all regions. For more information, see Managing Regions.
FEDERATION
A relationship that an administrator configures between an identity provider and a service provider. When you federate Oracle Cloud Infrastructure with an identity provider, you manage users and groups in the identity provider. You manage authorization in Oracle Cloud Infrastructure's IAM service. Oracle Cloud Infrastructure tenancies are federated with Oracle Identity Cloud Service by default.

NEW QUESTION 10
What service is NOT available as part of Oracle Cloud Free Tier?

• A. Oracle Cloud Infrastructure Monitoring
• B. Oracle Cloud Infrastructure Exadata DB Systems
• C. Oracle Cloud Infrastructure Autonomous Data Warehouse
• D. Oracle Cloud Infrastructure Compute

Answer: B

Explanation:
For more information on Oracle Cloud Infrastructure Free Tier refer below official documentation https://docs.cloud.oracle.com/en-us/iaas/Content/FreeTier/freetier.htm?Highlight=Free%20Tier Exadata DB Systems aren't a part of the free tier:

NEW QUESTION 11
Which is NOT covered by Oracle Cloud Infrastructure (OCI) Service Level Agreement (SLA)?

• A. Manageability
• B. Performance
• C. Reliability
• D. Availability

Answer: C

Explanation:
https://www.oracle.com/assets/paas-iaas-pub-cld-srvs-pillar-4021422.pdf
Enterprises demand more than just availability from their cloud infrastructure. Mission-critical workloads also require consistent performance, and the ability to manage, monitor, and modify resources running in the cloud at any time. Only Oracle offers end-to-end SLAs covering performance, availability, manageability of services.

NEW QUESTION 12
You want to migrate mission-critical Oracle E- Business Suite application to Oracle Cloud Infrastructure (OCI) with full control and access to the underlying infrastructure.
Which option meets this requirement?

• A. Replace E-Business Suite with an Oracle SaaS application
• B. OCI Exadata DB Systems and OCI compute instances
• C. OCI Exadata DB Systems and Oracle Functions
• D. Oracle Exadata Cloud at customer, Storage Gateway and API Gateway

Answer: B

NEW QUESTION 13
You are analyzing your Oracle Cloud Infrastructure (OCI) usage with Cost Analysis tool in the OCI console. Which of the following is NOT a default feature of the tool?

• A. Filter costs by applications
• B. Filter costs by tags
• C. Filter costs by compartments
• D. Filter costs by date

Answer: A

Explanation:
Cost Analysis is an easy-to-use visualization tool to help you track and optimize your Oracle Cloud Infrastructure spending, allows you to generate charts, and download accurate, reliable tabular reports of aggregated cost data on your Oracle Cloud Infrastructure consumption. Use the tool for spot checks of spending trends and for generating reports

NEW QUESTION 14
Oracle Cloud Infrastructure Budgets can be set on which two options?

• A. Free-form tags
• B. Compartments
• C. Tenancy
• D. Virtual Cloud Network
• E. Cost-tracking tags

Answer: BE

Explanation:
A budget can be used to set soft limits on your Oracle Cloud Infrastructure spending. You can set alerts on your budget to let you know when you might exceed your budget, and you can view all of your budgets and spending from one single place in the Oracle Cloud Infrastructure console.
How Budgets Work:
Budgets are set on cost-tracking tags or on compartments (including the root compartment) to track all spending in that cost-tracking tag or for that compartment and its children.
All budgets alerts are evaluated every 15 minutes. To see the last time a budget was evaluated, open the details for a budget. You will see fields that show the current spend, the forecast and the "Spent in period" field which shows you the time period over which the budget was evaluated. When a budget alert fires, the email recipients configured in the budget alert receive an email.

NEW QUESTION 15
Which OCI storage service does not provide encryption for data at rest?

• A. File Storage
• B. Block Volume
• C. Local NVMe
• D. Object Storage

Answer: C

Explanation:
NVMe stands for non-volatile memory express. It is a storage protocol created to fasten the transfer of data between enterprise and client systems and solid-state drives (SSDs) over a computer’s high-speed Peripheral Component Interconnect Express bus. The characteristics are:
1) Local NVMe is NVMe SSD-based temporary storage.
2) It is the locally-attached NVMe devices to the OCI compute instance
3) It is used very high storage performance requirements, lots of throughput, lots of IOPS, local storage and when you don’t want to go out on network
4) Oracle does not protect in any way through RAID, or snapshots, or backup out of the box and data is not encrypted at rest.

NEW QUESTION 16
Which should you use to distribute Incoming traffic between a set of web servers?

• A. Load Balances
• B. Internet Gateway
• C. Autoscallng
• D. Dynamic Routing Gateway

Answer: A

Explanation:
The Oracle Cloud Infrastructure Load Balancing service provides automated traffic distribution from one entry point to multiple servers reachable from your virtual cloud network (VCN). The service offers a load balancer with your choice of a public or private IP address, and provisioned bandwidth.
A load balancer improves resource utilization, facilitates scaling, and helps ensure high availability. You can configure multiple load balancing policies and application-specific health checks
to ensure that the load balancer directs traffic only to healthy instances. The load balancer can reduce your maintenance window by draining traffic from an unhealthy application server before you remove it from service for maintenance.
HOW LOAD BALANCING WORKS:
The Load Balancing service enables you to create a public or private load balancer within your VCN. A public load balancer has a public IP address that is accessible from the internet. A private load balancer has an IP address from the hosting subnet, which is visible only within your VCN. You can configure multiple listeners for an IP address to load balance transport Layer 4 and Layer 7 (TCP and HTTP) traffic. Both public and private load balancers can route data traffic to any backend server that is reachable from the VCN.
1) Public Load Balancer
To accept traffic from the internet, you create a public load balancer. The service assigns it a public IP address that serves as the entry point for incoming traffic. You can associate the public IP address with a friendly DNS name through any DNS vendor.
A public load balancer is regional in scope. If your region includes multiple availability domains, a public load balancer requires either a regional subnet (recommended) or two availability domain-specific (AD-specific) subnets, each in a separate availability domain. With a regional subnet, the Load Balancing service creates a primary load balancer and a standby load balancer, each in a different availability domain, to ensure accessibility even during an availability domain outage. If you create a load balancer in two AD-specific subnets, one subnet hosts the primary load balancer and the other hosts a standby load balancer. If the primary load balancer fails, the public IP address switches to the secondary load balancer. The service treats the two load balancers as equivalent and you cannot specify which one is "primary".
Whether you use regional or AD-specific subnets, each load balancer requires one private IP address from its host subnet. The Load Balancing service supplies a floating public IP address to the primary load balancer. The floating public IP address does not come from your backend subnets.
If your region includes only one availability domain, the service requires just one subnet, either regional or AD-specific, to host both the primary and standby load balancers. The primary and standby load balancers each require a private IP address from the host subnet, in addition to the assigned floating public IP address. If there is an availability domain outage, the load balancer has no failover.
2) Private Load Balancer
To isolate your load balancer from the internet and simplify your security posture, you can create a private load balancer. The Load Balancing service assigns it a private IP address that serves as the entry point for incoming traffic.
When you create a private load balancer, the service requires only one subnet to host both the primary and standby load balancers. The load balancer can be regional or AD-specific, depending on the scope of the host subnet. The load balancer is accessible only from within the VCN that contains the host subnet, or as further restricted by your security rules.
The assigned floating private IP address is local to the host subnet. The primary and standby load balancers each require an extra private IP address from the host subnet.
If there is an availability domain outage, a private load balancer created in a regional subnet within a multi-AD region provides failover capability. A private load balancer created in an AD-specific subnet, or in a regional subnet within a single availability domain region, has no failover capability in response to an availability domain outage.

NEW QUESTION 17
What is Oracle's responsibility according to the Oracle Cloud Infrastructure (OCI) shared-security model?

• A. Configuring OCI services securely
• B. Data classification and compliance
• C. Securing application workloads
• D. Security of data center facilities

Answer: D

Explanation:
Oracle’s mission is to build cloud infrastructure and platform services for your business to have effective and manageable security to run your mission-critical workloads and store your data with confidence.
Oracle Cloud Infrastructure offers best-in-class security technology and operational processes to secure its enterprise cloud services. However, for you to securely run your workloads in Oracle Cloud Infrastructure, you must be aware of your security and compliance responsibilities. By design, Oracle provides security of cloud infrastructure and operations (cloud operator access controls, infrastructure security patching, and so on), and you are responsible for securely configuring your cloud resources. Security in the cloud is a shared responsibility between you and Oracle.
In a shared, multi-tenant compute environment, Oracle is responsible for the security of the underlying cloud infrastructure (such as data-center facilities, and hardware and software systems) and you are responsible for securing your workloads and configuring your services (such as compute, network, storage, and database) securely.
In a fully isolated, single-tenant, bare metal server with no Oracle software on it, your responsibility increases as you bring the entire software stack (operating systems and above) on which you deploy your applications.
In this environment, you are responsible for securing your workloads, and configuring your services (compute, network, storage, database) securely, and ensuring that the software components that you run on the bare metal servers are configured, deployed, and managed securely.
More specifically, your and Oracle's responsibilities can be divided into the following areas:

NEW QUESTION 18
Which three services Integrate with Oracle Cloud Infrastructure (OCI) Key Management?

• A. Functions
• B. Block Volume
• C. Object Storage
• D. Auto Scaling
• E. Identity and Access Management
• F. File Storage

Answer: BCF

Explanation:
DATA ENCRYPTION
Protect customer data at-rest and in-transit in a way that allows customers to meet their security and compliance requirements for cryptographic algorithms and key management
The Oracle Cloud Infrastructure Block Volume service always encrypts all block volumes, boot volumes, an volume backups at rest by using the Advanced Encryption Standard (AES) algorithm with 256-bit encryption.
By default all volumes and their backups are encrypted using the Oracle-provided encryption keys. Each time a volume is cloned or restored from a backup the volume is assigned a new unique encryption key.
The File Storage service encrypts all file system and snapshot data at rest. By default all file systems are encrypted using Oracle-managed encryption keys. You have the option to encrypt all of your file systems using the keys that you own and manage using the Vault service.
Object Storage employs 256-bit Advanced Encryption Standard (AES-256) to encrypt object data on the server. Each object is encrypted with its own data encryption key. Data encryption keys are always encrypted with a master encryption key that is assigned to the bucket. Encryption is enabled by default and cannot be turned off. By default, Oracle manages the master encryption key.

NEW QUESTION 19
Which offers the lowest pricing for storage (per GB)?

• A. Oracle Cloud Infrastructure Object Storage (standard tier)
• B. Oracle Cloud Infrastructure Block Volume
• C. Oracle Cloud Infrastructure Archive Storage
• D. Oracle Cloud Infrastructure File Storage

Answer: C

Explanation:
Oracle Cloud Infrastructure Archive Storage is the lowest pricing for storage (per GB)

NEW QUESTION 20
you are analyzing your Oracle Cloud Infrastructure (OCI) usage with Cost Analysis tool in OCI Console. Which is not a default feature of the tool?

• A. Filter costs by applications
• B. Filter costs by compartments
• C. Filter costs by tags
• D. Filter costs by date

Answer: A

Explanation:
You can filter Costs Analysis Tools by following three ways To filter costs by dates
To filter costs by tags
To filter costs by compartments

NEW QUESTION 21
Which two security capabilities are offered by Oracle Cloud Infrastructure?

• A. Always on data encryption for data-at-rest.
• B. Certificate Management service
• C. Captcha
• D. Key Management service
• E. Managed Active Directory service

Answer: AD

Explanation:
Oracle Cloud Infrastructure’s security approach is based on seven core pillars. Each pillar has multiple solutions designed to maximize the security and compliance of the platform and to help customers to improve their security posture.
High Availability: Offer fault-independent data centers that enable high-availability scale-out architectures and are resilient against network attacks, ensuring constant uptime in the face of disaster and security attack.
Customer Isolation: Allow customers to deploy their application and data assets in an environment that commits full isolation from other tenants and Oracle’s staff.
Data Encryption: Protect customer data at-rest and in-transit in a way that allows customers to meet the security and compliance requirements with respect to cryptographic algorithms and key management.
Security Controls: Offer customers effective and easy-to-use application, platform, and network security solutions that allow them to protect their workloads, have a secure application delivery using a global edge network, constrain access to their services, and segregate operational responsibilities to reduce the risk associated with malicious and accidental user actions.
Visibility: Offer customers comprehensive log data and security analytics that they can use to audit and monitor actions on their resources, allowing them to meet their audit requirements and reduce security and operational risk.
Secure Hybrid Cloud: Enable customers to use their existing security assets, such as user accounts and policies, as well as third-party security solutions, when accessing their cloud resources and securing their data and application assets in the cloud.
Verifiably Secure Infrastructure: Follow rigorous processes and use effective security controls in all phases of cloud service development and operation. Demonstrate adherence to Oracle’s strict security standards through third-party audits, certifications, and attestations. Help customers demonstrate compliance readiness to internal security and compliance teams, their customers, auditors, and regulators.

NEW QUESTION 22
In what two ways does Oracle Cloud Infrastructure (OCI) offer industry leading price-performance?

• A. OCI leverages advanced encryption that results In fast performance
• B. With OCI, pricing Is low and predictable across all regions and services.
• C. OCI hypervisor provides Industry loading performance.
• D. OCI backs performance claims with Service Level Agreements.
• E. OCI does not over subscribe CPU, but only memory.

Answer: BD

Explanation:
OCI leverages advanced encryption that leads to fast performance, OCI does not over subscribe CPU, but on memory, and OCI hypervisor provides industry leading performance are WRONG.
However, OCI does back claims with SLAs and offers predictable pricing for all services.

NEW QUESTION 23
......