Question 1

An insurance company is storing critical financial data in theOracle Cloud Infrastructure block volume. This volume is currently encrypted using oracle managed keys. Due to regulatory compliance, the customer wants to encrypt the data using the keys that they can control and not the keys which are controlled by Oracle. What of the following series of tasks are required to encrypt the block volume using customer managed keys?

Options :

A : Create a master encryption key, create a data encryption key, decrypt the block volume using existing oracle managed keys, encrypt the block volume using the data encryption key.

B : Create a vault import your master encryption key into the vault, generate data encryption key, assign data encryption key to the block volume.

C : Create a master encryption key, create a new version of the encryptionkey, decrypt the block volume using existing oracle managed keys and encrypt using new version of the encryption key

D : Create a vault, create a master encryption key in the vault, assign this master encryption key to the block volume.

Answer: D

Question 2

An Oracle Cloud Infrastructure (OCI) PublicLoad Balancer's SSL certificate is expiring soon. You noticed the Load Balancer is configured with SSL Termination only. When the certificate expires, data traffic can be interrupted and security compromised. What steps do you need to take to prevent thissituation?

Options :

A : Add the new SSL certificate to the Load Balancer, update backend servers to work with a new certificate and edit listeners so they can use the new certificate bundle

B : Add the new SSL certificate to the Load Balancer, update listeners andbackend sets so they can use the new certificate bundle.

C : Add the new SSL certificate to the Load Balancer and implement end to end SSL so it can encrypt the traffic from clients all the way to the backend servers.

D : Add the new SSL certificate to the Load Balancer and update backend servers to use the new certificate bundle.

E : Add the new SSL certificate to the Load Balancer and update listeners to use the new certificate bundle.

Answer: A

Question 3

A global media organization is working on a project which lets users upload their videos to the site. After upload is complete, the video should be automatically processed by an Al algorithm. The algorithm will try to recognize certain actions in the videos so that it can be used to show related advertisements in future. Thedevelopment team wants to focus on writing Al code and not worry about underlying infrastructure for highavailability, scalability, security and monitoring.Which Oracle Cloud Infrastructure (OCI) services would meet these requirements?

Options :

A : OCI Object Storage, OCI Events service and OCI Functions.

B : Oracle Container Engine for Kubernetes, OCI Notifications and OCI Object Storage.

C : OCI Events, Oracle Container Engine for Kubernetes and OCI Digital Assistant.

D : OCI Resource Manager, OCI Functions and OCI Events service.

Answer: A

Question 4

You are working as a cloudconsultant for a major media company. In the US and your client requested to consolidate all of their log streams, access logs, application logs, and security logs into a single system. The client wants to analyze all of their logs In real-time based on heuristics and the result should be validated as well. This validation process requires going back to data samples extracted from the last 8 hours. What approach should you take for this scenario?

Options :

A : Create an auto scaling pool of syslog-enabled servers using compute instances which will store the logs In Object storage, then use map reduce jobs to extract logs from Object storage, and apply heuristics on the logs

B : Create a bare-metal instance big enough to host a syslog enabled server to process the logs and store logs on the locally attached NVMe SSDs for rapid retrieval of logs when needed.

C : Set up an OCI Audit service and ingest all the API arils from Audit service pragmatically to a client side application to apply heuristics and save the result inan OCI Object storage.

D : Stream all the logs and cloud events of Events service to Oracle Streaming Service. Build a client process that will apply heuristics on the logs and store them in an Object Storage

Answer: D

Question 5

You are working as a security consultant with a global insurance organization which is using Microsoft Azure Active Directory as an identity provider to manage user login/passwords. When a user logs in to Oracle Cloud Infrastructure (OCI) console, it should get authenticated by Azure AD. Whichset of steps are required to be configured in OCI to meet this requirement?

Options :

A : Setup Azure AD as an Identity Provider, import users and groups from Azure AD to OCI, set up IAM policies to govern access to Azure AD groups.

B : Setup Azure AD as an Enterprise Application, configure OCI for single sign-on, map Azure AD groups to OCI groups, set up the IAM policies to govern access to Azure AD groups

C : Setup Azure AD as an Enterprise Application, map Azure AD users, groups and policies to OCI groups and users

D : Setup Azure AD as an Identity Provider, map Azure AD groups to OCI groups, set up the IAM policies to govern access to Azure AD groups

Answer: D

Confidently Practice Online with Free 1Z0-997-26 Exam Cram

Buying Options: