Question 1

You are building a highly available and fault tolerant web application deployment for your company. Similarapplicationdelayed by competitors experienced web site attack including DDoS which resulted in web serverfailing.You have decided to use Oracle Web Application Firewall (WAF) to implement an architecture which willprovide protection against such attacks and ensure additional configuration will you need to implement tomake sure WAF is protecting my web application 24×7.Which additional configuration will you need to Implement to make sure WAF Is protecting my webapplication 24×7?

Options :

A : Configure auto scaling policy and it to WAF instance.

B : Configure Control Rules to send traffic to multiple web servers

C : Configure multiple origin servers

D : Configure new rules based on now vulnerabilities and mitigations

Answer: C

Question 2

An Oracle Cloud Infrastructure (OCI) PublicLoad Balancer's SSL certificate is expiring soon. You noticed the Load Balancer is configured with SSL Termination only. When the certificate expires, data traffic can be interrupted and security compromised. What steps do you need to take to prevent thissituation?

Options :

A : Add the new SSL certificate to the Load Balancer, update backend servers to work with a new certificate and edit listeners so they can use the new certificate bundle

B : Add the new SSL certificate to the Load Balancer, update listeners andbackend sets so they can use the new certificate bundle.

C : Add the new SSL certificate to the Load Balancer and implement end to end SSL so it can encrypt the traffic from clients all the way to the backend servers.

D : Add the new SSL certificate to the Load Balancer and update backend servers to use the new certificate bundle.

E : Add the new SSL certificate to the Load Balancer and update listeners to use the new certificate bundle.

Answer: A

Question 3

A large financialcompany has a web application hosted in their on-premises data center. They are migratingtheir application to Oracle Cloud Infrastructure (OCI) and require no downtime while the migration ison-going. In order to achieve this, they have decided to divertonly 30% of the application works fine, theydivert all traffic to OCI.As a solution architect working with this customer, which suggestion should you provide them?

Options :

A : Use OCI Traffic management with failover steering policy and distribute the trafficbetween OC1 and on premises infrastructure.

B : Use OCI Traffic management with Load Balancing steering policy and distribute the traffic between OCI and on premises infrastructure.

C : Use an OCI load Balancer and distribute the traffic between OCI and on premises infrastructure.

D : Use VPN connectivity between on premises Infrastructure and OCI, and create routing tables to distribute the traffic between them

Answer: B

Question 4

You are working as a cloudconsultant for a major media company. In the US and your client requested to consolidate all of their log streams, access logs, application logs, and security logs into a single system. The client wants to analyze all of their logs In real-time based on heuristics and the result should be validated as well. This validation process requires going back to data samples extracted from the last 8 hours. What approach should you take for this scenario?

Options :

A : Create an auto scaling pool of syslog-enabled servers using compute instances which will store the logs In Object storage, then use map reduce jobs to extract logs from Object storage, and apply heuristics on the logs

B : Create a bare-metal instance big enough to host a syslog enabled server to process the logs and store logs on the locally attached NVMe SSDs for rapid retrieval of logs when needed.

C : Set up an OCI Audit service and ingest all the API arils from Audit service pragmatically to a client side application to apply heuristics and save the result inan OCI Object storage.

D : Stream all the logs and cloud events of Events service to Oracle Streaming Service. Build a client process that will apply heuristics on the logs and store them in an Object Storage

Answer: D

Question 5

A company is running High Performance Computing workloads on Oracle Cloud Infrastructure and are using OCI bare metal compute shape. They have decided to create a custom image of the bare metal instance's boot disk and use it to launch other instances. Which of the following is a NOT a true statement?

Options :

A : Before you create a custom image of an instance, you must disconnect all iSCSI attachments and remove all iscsid node configurations from the instance.

B : Editing custom Windows images is not supporteddue to hardware differences between shapes.

C : Custom images do not include the data from any attached block volumes.

D : You can create additional custom images of an instance while the instance is engaged in the image creation process.

Answer: D

Confidently Practice Online with Free 1Z0-997-25 Exam Cram

Buying Options: