997_6

You are designing the network infrastructure for an application consisting of a web server (server-1) and a Domain Name Server (server-2) running in two different subnets inside the same Virtual Cloud Network (VCN) in Oracle Cloud Infrastructure (OCI). You have a requirement where your end users will access server-1 from the internet and server-2 from your customer's on-premises network. The on-premises network is connected to your VCN over a FastConnect virtual circuit.

How should you design your routing configuration to meet these requirements?

• Configure a single routing table with two set of rules: one that has route to internet via an Internet Gateway and another that propagates specific routes for the on-premises network via a Dynamic Routing Gateway. Don't associate this routing table with any of the subnets in the VCN.

• Configure a single routing table with two set of rules: one that has route to internet via an Internet Gateway and another that propagate specific routes to the on-premises network via a Dynamic Routing Gateway. Associate the routing table with all the VCN subnets.

• Configure two routing tables: first one with a route to internet via an Internet gateway; associate this route table to the subnet containing server-1 .Configure the second route table to propagate specific routes to the on-premises network via a Dynamic Routing Gateway; associate this route table to subnet containing server-2.

• Configure two routing tables that have rules to route all traffic via a Dynamic Routing Gateway. Associate the two routing tables with all the VCN subnets.

Your Oracle database is deployed on-premises and has produced 100 TB database backup locally. You have a disaster recovery plan that requires you to create redundant database backups in Oracle Cloud Infrastructure (OCI). Once the initial backup is completed, the backup must be available for retrieval in less than 30 minutes to support the Recovery Time Objective (RTO) of your solution. Which is the most cost effective option to meet these requirements?

• Setup an IPsec VPNConnect between on-premises data center and OCI. Then to use OCI CLI command to upload database backups to OCI Object Storage Archive tier as the final destination.

• Use OCI Storage Gateway to transfer the backup files to OCI Object Storage Archive tier as the final destination.

• Setup a FastConnect connection between on-premises data center and OCI. Then to use OCI CLI command to upload database backups to OCI Object Storage Standard tier as the final destination.

• Use OCI Storage Gateway to transfer the backup files to OCI Object Storage Standard tier as the final destination.

You have been asked to review some network proposals by a major client. The client's IT director needs to provision two Virtual Cloud Network (VCN) for a major application. Both applications use a large number of virtual machine instances, and so will ideally occupy VCNs with as many address spaces as possible. Additionally, in the future, VCN peering will be required to allow communication between the VCNs.

Which of the following are valid IP ranges to consider for the VCNs?

• 10.0.0.0/24 and 10.0.1.0/24

• 10.0.1.0/24 and 10.0.1.0/27

• 10.0.0.0/16 and 10.0.64.0/24

• 10.0.0.0/8 and 11.0.0.0/8

Which of the below options for private access to services within Oracle Cloud Infrastructure (OCI) is NOT valid?

• You cannot use the private endpoint for hosts in the on-premises network.

• Traffic from an OCI compute instance going through a Service Gateway to Object Storage is routed without being sent over the internet.

• You can enable private access to certain services within OCI from your Virtual Cloud Network by using either a private endpoint or a service gateway.

• The private endpoint gives hosts within your Virtual Cloud Network access to a given service within Oracle Cloud Infrastructure.

You have an application running in Microsoft Azure and want to use Oracle Autonomous Data warehouse (ADW) instance for running business analytics.

How can you build a secure solution for such a use-case?

• Connect the Oracle ADW in your VCN to the Microsoft Azure VNet over the internet.

• Create a software VPN connection between Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN) and Microsoft Azure Virtual Network (VNet) and connect the application with Oracle ADW instance.

• Setup an interconnect between OCI and Microsoft Azure using FastConnect and ExpressRoute. Use a Service Gateway in OCI Virtual Cloud Network to provide connectivity to the Oracle ADW instance for the application in Microsoft Azure VNet.

• Create a software Remote Peering Connection between Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN) and Microsoft Azure Virtual Network (VNet) and connect the application with Oracle ADW instance.

You are working as a security consultant with a global insurance organization which is using Microsoft Azure Active Directory as an identity provider to manage user login/passwords. When a user logs in to Oracle Cloud Infrastructure (OCI) console, it should get authenticated by Azure AD.

Which set of steps are required to be configured in OCI to meet this requirement?

• Setup Azure AD as an Identity Provider, import users and groups from Azure AD to OCI, set up 1AM policies to govern access to Azure AD groups.

• Setup Azure AD as an Enterprise Application, configure OCI for single sign-on, map Azure AD groups to OCI groups, set up the 1AM policies to govern access to Azure AD groups.

• Setup Azure AD as an Enterprise Application, map Azure AD users, groups and policies to OCI groups and users.

• Setup Azure AD as an Identity Provider, map Azure AD groups to OCI groups, set up the 1AM policies to govern access to Azure AD groups.

An E-commerce company which sells computers, tablets, and other electronics items has recently decided to move all of their on-premises infrastructure to Oracle Cloud Infrastructure (OCI). One of their on-premises application is running on an NGINX server and the Oracle Database is running in a 2 node Oracle Real Application Clusters (RAC) configuration.

They cannot afford to have any application down time when they do the migration.

What is an effective mechanism to migrate the customer application to OCI and set up regular automated backups?

• Launch a compute instance and run an NGINX server to host the application. Deploy a 2 node VM DB Systems with Oracle RAC enabled. Import the on-premises database to OCI VM DB Systems using Oracle Data Pump and then enable automatic backups.

• Launch a compute instance for both the NGINX application server and the database server. Attach block volumes on the database server compute instance and enable backup policy to backup the block volumes.

• Launch a compute instance and run an NGINX server to host the application. Deploy Exadata Quarter Rack, enable automatic backups and import the database using Oracle Data Pump.

• Launch a compute instance and run an NGINX server to host the application. Deploy a 2 node VM DB Systems with Oracle RAC enabled. Setup Oracle GoldenGate to synchronize data from their onpremises database to OCIVM Database. Export and Import the on-premises database to OCIVM DB Systems using Oracle Data Pump, apply the GoldenGate trail files to sync up the OCI database with the on-premises database. Enable automatic backups for the OCIVM database and then cutoverthe application from on-premises to OCI.

You are responsible for migrating your on-premises legacy databases on 11.2.0.4 version to Autonomous Transaction Processing - Dedicated (ATP-D) in Oracle Cloud Infrastructure (OCI). As a solution architect, you need to plan your migration approach.

Which three options do you need to implement together to migrate your on-premises databases to OCI?

• Retain all legacy structures and unsupported features (e.g. legacy LOBs) in the on-premises databases for migration.

• Use Oracle Data Guard to keep on-premises database always active during migration. // Retain changes to Oracle shipped privileges, stored procedures or views in the on-premises databases.

• Launch Autonomous Transaction Processing - Dedicated database in OCI.

• Convert on-premises databases to PDB, upgrade to 19c, and encrypt.

• Use Oracle GoldenGate replication to keep on-premises database online during migration.

A company is running High Performance Computing workloads on Oracle Cloud Infrastructure and are using OCI bare metal compute shape. They have decided to create a custom image of the bare metal instance's boot disk and use it to launch other instances.

Which of the following is a NOT a true statement?

• Before you create a custom image of an instance, you must disconnect all iSCSI attachments and remove all iscsid node configurations from the instance.

• Editing custom Windows images is not supported due to hardware differences between shapes.

• Custom images do not include the data from any attached block volumes.

• You can create additional custom images of an instance while the instance is engaged in the image creation process.

You have to migrate your application to Oracle Cloud Infrastructure (OCI). The database is constantly being updated and needs to be online without interruptions. How can you transition the database to OCI without interrupting its use?

• It is impossible to migrate without interruption.

• Use an on-premises database with two-way synchronization to a cloud-based database and allow clients to connect to either databases.

• Use an on-premises database with one-way synchronization to a cloud-based database and allow clients to connect only to the cloud database.

• Use an on-premises database with one-way synchronization to a cloud-based database and allow clients to connect only to the on-premises database until it is synchronized.