Oracle Cloud Infrastructure 2022 Architect Professional

Here you have the best Oracle 1z0-997-22 practice exam questions

You have 52 total questions to study from
Each page has 5 questions, making a total of 11 pages
You can navigate through the pages using the buttons at the bottom
This questions were last updated on November 14, 2024

Question 1 of 52

A consulting company that employs Oracle Cloud Infrastructure (OCI) architects has successfully completed resource migration from Microsoft Azure to OCI, and no longer requires the OCI FastConnect circuit to Azure. The project manager has asked you to delete all resources involved in this inter-cloud connectivity. From the Azure side, you delete the Resource Group. After a while, you notice that all Azure resources have been deleted, except for the Azure ExpressRoute circuit.

What could be a potential reason for this issue?

You need to first delete the OCI FastConnect circuit for the ExpressRoute circuit to be decommissioned, and then you can delete the ExpressRoute virtual circuit.

Your bill from the OCI side needs to be paid in full before you can remove the Azure ExpressRoute circuit.

You need to remove all routes that point to the inter-cloud connection on both OCI and Azure before you can delete the circuit.

You need to remove the Azure ExpressRoute Partner Service Key from the OCI FastConnect circuit, and then you can delete the ExpressRoute virtual circuit.

Correct Answer: A

The most likely reason the Azure ExpressRoute circuit has not been deleted is that you need to first delete the OCI FastConnect circuit. This inter-cloud connection involves coordinated removal processes, and typically, the dependency on the external connection (OCI FastConnect) must be resolved before the Azure resource (ExpressRoute circuit) can be fully decommissioned.

Question 2 of 52

You are a Lead Architect at one of the leading consulting firms. Your firm has workloads deployed in both Oracle Cloud Infrastructure (OCI) and Microsoft Azure. You are asked to design a solution where workloads on both clouds can communicate directly and efficiently. You would like to set up a private interconnection between OCI and Microsoft Azure.

What are the steps you need to perform on the OCI side to set up the interconnection?

Create a VCN with subnets and attach a DRG to the VCN. Create a FastConnect connection of the connection type "FastConnect Partner" and select "Microsoft Azure: ExpressRoute” as the Partner. Create a public virtual circuit, provide details of the DRG and add the “partner connection key” provided by Microsoft Azure. Configure OCI VCN Security Lists and Route Tables.

Create a Virtual Cloud Network (VCN) with subnets and attach a Virtual Network Gateway to the VCN. Create a FastConnect connection of the connection type "FastConnect Partner" and select "Microsoft Azure: ExpressRoute" as the Partner. Create a private virtual circuit, provide details of the Dynamic Routing Gateway (DRG) and add the "partner interconnect key" provided by Microsoft Azure. Provide the BGP IP addresses. Configure OCI VCN Security Lists and Route Tables.

Create a VCN with subnets and attach a DRG to the VCN. Create a FastConnect connection of the connection type "FastConnect Direct". Create a Cross-Connect Group, provide details of the DRG and add the "partner secret key" provided by Microsoft Azure. Provide the BGP IP addresses, Configure OCI VCN Security Lists and Route Tables.

Create a VCN with subnets and attach a DRG to the VCN. Create a FastConnect connection of the connection type "FastConnect Partner" and select "Microsoft Azure: ExpressRoute" as the Partner. Create a private virtual circuit, provide details of the DRG and add the "partner service key" provided by Microsoft Azure. Provide the BGP IP addresses, Configure OCI VCN Security Lists and Route Tables.

Correct Answer: D

To set up a private interconnection between Oracle Cloud Infrastructure (OCI) and Microsoft Azure, you need to create a Virtual Cloud Network (VCN) with subnets and attach a Dynamic Routing Gateway (DRG) to the VCN. Next, you create a FastConnect connection of the connection type 'FastConnect Partner' and select 'Microsoft Azure: ExpressRoute' as the Partner. A private virtual circuit is then created, where you provide the details of the DRG and add the 'partner service key' provided by Microsoft Azure. Additionally, you need to provide the BGP IP addresses and configure the OCI VCN Security Lists and Route Tables. Option D outlines these steps accurately.

Question 3 of 52

You have two Virtual Cloud Networks (VCN) that need to be peered. The set up is as follows:

The VCNs are in different tenancies.

Peering has to be via Local Peering Gateway (LPG) because one of the VCNs needs to be added to an existing Hub and Spoke configuration that consists of a hub and two spokes.

There is a CIDR overlap. The VCN that serves as the Hub VCN has a 172.19.0.0/16 CIDR prefix. The other VCN to be added as a Spoke VCN has a 172.19.128.0/17 CIDR prefix.

The other two spokes have 10.0.0.0/16 and 192.168.0.0/16 prefixes, respectively.

What is a possible solution to this problem?

Use Dynamic Routing Gateway (DRG) instead.

Add another CIDR prefix to the VCN that is integrating with the Hub and Spoke and does not overlap. Use that CIDR for the LPG connection.

Review the subnets in the hub VCN. If they all have the third octet under 128, change the VCN prefix to /17.

Review the subnets in the hub VCN. If they all have the third octet above 128, change the VCN prefix to /17.

Review all subnets in the hub VCN. If one of them has the third octet at 128, change the VCN prefix to /17.

Correct Answer: B

To address the CIDR overlap issue, adding another CIDR prefix to the VCN integrating with the Hub and Spoke, that does not overlap with the existing prefixes, is a feasible solution. This new CIDR can be used for the Local Peering Gateway (LPG) connection, ensuring no conflicts with the existing network configurations. This approach avoids the complications and potential disruptions of changing existing CIDR prefixes in established networks.

Question 4 of 52

You are trying to delete a compartment. The delete operation is failing and you need to troubleshoot the problem.

Which step should NOT be considered when troubleshooting this issue?

Verify that you have removed all resources from the compartment.

Ensure you have at least one more compartment in your tenancy other than the root compartment.

Verify that there are no policies in the root compartment that reference the compartment you are trying to delete.

Search for resources in the compartment for each region that your tenancy is subscribed to.

Correct Answer: B

When troubleshooting the inability to delete a compartment, you should consider verifying that all resources have been removed, ensuring no referencing policies exist, and searching for resources in all regions. Having at least one more compartment in your tenancy besides the root compartment is not generally relevant to resolving the issue of deleting a specific compartment. Therefore, step B should not be considered.

Question 5 of 52

A new international hacktivist group, based in London, launched wide scale cyber attacks including SQL Injection and Cross-Site Scripting (XSS) across multiple websites hosted in Oracle Cloud Infrastructure (OCI). As an IT consultant, you must configure a Web Application Firewall (WAF) to protect these websites against such attacks.

How would you configure your WAF to protect the website against those attacks?

Enable an Access Rule to block the IP Address range from London.

Enable an Access Rule that contains XSS Filters Categories and SQL Filters Categories.

Enable a Protection Rule to block the attacks based on HTTP Headers that contain XSS and SQL strings.

Enable a Protection Rule to block requests that came from London.

Enable a Protection Rule that contains XSS Filters Categories and SQL Filters Categories.

Correct Answer: E

To effectively protect against SQL Injection and Cross-Site Scripting (XSS) attacks, you should configure the Web Application Firewall (WAF) to enable a Protection Rule that contains XSS Filters Categories and SQL Filters Categories. This configuration will specifically target the types of threats mentioned, ensuring that the WAF can detect and block such malicious activities.