NEW QUESTION 1
Which Oracle Cloud Infrastructure (OCI) service is best suited for running serverless apps?

• A. Oracle Functions
• B. Virtual Cloud Network
• C. Streaming
• D. Audit

Answer: A

Explanation:
Oracle Functions is a fully managed, multi-tenant, highly scalable, on-demand, Functions-as-a-Service platform. It is built on enterprise-grade Oracle Cloud Infrastructure and powered by the Fn Project open source engine. Use Oracle Functions (sometimes abbreviated to just Functions) when you want to focus on writing code to meet business needs.
The serverless and elastic architecture of Oracle Functions means there's no infrastructure administration or software administration for you to perform. You don't provision or maintain compute instances, and operating system software patches and upgrades are applied automatically. Oracle Functions simply ensures your app is highly-available, scalable, secure, and monitored. With Oracle Functions, you can write code in Java, Python, Node, Go, and Ruby (and for advanced use cases, bring your own Dockerfile, and Graal VM). You can then deploy your code, call it directly or trigger it in response to events, and get billed only for the resources consumed during the execution.
Oracle Functions is based on Fn Project. Fn Project is an open source, container native, serverless platform that can be run anywhere - any cloud or on-premises. Fn Project is easy to use, extensible, and performant. You can download and install the open source distribution of Fn Project, develop and test a function locally, and then use the same tooling to deploy that function to Oracle Functions.
You can access Oracle Functions using the Console, a CLI, and a REST API. You can invoke the functions you deploy to Oracle Functions using the CLI or by making signed HTTP requests.

NEW QUESTION 2
Which Oracle Cloud Infrastructure compute shapes does not incur instance billing in a STOPPED state?

• A. Dense I/O
• B. Standard
• C. GPU
• D. HPC

Answer: B

Explanation:
A shape is a template that determines the number of CPUs, amount of memory, and other resources that are allocated to an instance.
Standard shapes don't incur costs in a STOPPED state.

NEW QUESTION 3
Which Oracle Cloud Infrastructure (OCI) database solution will be most economical for a customer looking to have the elasticity of the cloud with minimal administration and maintenance effort for their DBA team?

• A. OCI Bare Metal DB Systems
• B. OCI Virtual Machine DB Systems
• C. OCI Exadata DB Systems.
• D. OCI Autonomous Database

Answer: C

Explanation:
Exadata DB systems allow you to leverage the power of Exadata within the Oracle Cloud Infrastructure. An Exadata DB system consists of a base system, quarter rack, half rack, or full rack of compute nodes and storage servers, tied together by a high-speed, low-latency InfiniBand network and intelligent Exadata software. You can configure automatic backups, optimize for different workloads, and scale up the system to meet increased demands.
Oracle now offers the Zero Downtime Migration service, a quick and easy way to move on-premises Oracle Databases and Oracle Cloud Infrastructure Classic databases to Oracle Cloud Infrastructure. You can migrate databases to the following types of Oracle Cloud Infrastructure systems: Exadata, Exadata Cloud@Customer, bare metal, and virtual machine.
Zero Downtime Migration leverages Oracle Active Data Guard to create a standby instance of your database in an Oracle Cloud Infrastructure system. You switch over only when you are ready, and your source database remains available as a standby. Use the Zero Downtime Migration service to migrate databases individually or
at the fleet level. See Move to Oracle Cloud Using Zero Downtime Migration for more information.

NEW QUESTION 4
Which capability can be used to protect against unexpected hardware or power supply failures within an availability domain?

• A. Fault Domains
• B. Compartments
• C. Top of Rack Switches
• D. Power Distribution Units

Answer: A

Explanation:
A fault domain is a grouping of hardware and infrastructure within an availability domain. Each availability domain contains three fault domains. Fault domains provide anti-affinity: they let you distribute your instanc so that the instances are not on the same physical hardware within a single availability domain. A hardware failure or Compute hardware maintenance event that affects one fault domain does not affect instances in other fault domains. In addition, the physical hardware in a fault domain has independent and redundant power supplies, which prevents a failure in the power supply hardware within one fault domain from affecting other fault domains.
Usually fault domains to do the following things:
1) Protect against unexpected hardware failures or power supply failures.
2) Protect against planned outages because of Compute hardware maintenance.

NEW QUESTION 5
Which resource do you manage in an Infrastructure-as-a-services (IAAS) offering?

• A. Operating system
• B. Network
• C. Storage
• D. Servers

Answer: A

Explanation:
Infrastructure as a service (IaaS) is a type of cloud service model in which computing resources are hosted in the cloud. Businesses can use the IaaS model to shift some or all of their use of on-premises or colocated data center infrastructure to the cloud, where it is owned and managed by a cloud provider. These infrastructure elements can include compute, network, and storage hardware as well as other components and software.
How Does IaaS Work?
In a typical IaaS model, a business—which can be of any size—consumes services like compute, storage, and databases from a cloud provider. The cloud provider offers those services by hosting hardware and software in the cloud. The business will no longer need to purchase and manage its own equipment, or space to host the equipment, and the cost will shift to a pay-as-you-go model. When the business needs less, it pays for less. And when it grows, it can provision additional computing resources and other technologies in minutes.

NEW QUESTION 6
Which statement is correct regarding the oracle cloud infrastructure Compute services?

• A. When you stop a compute instance, all data on the boot volume is lost
• B. You can attach a maximum of one public to each compute instance
• C. You can launch either virtual machines or bare metal instances
• D. You cannot attach a block volume to a compute instance

Answer: C

Explanation:
Oracle Cloud Infrastructure Compute lets you provision and manage compute hosts, known as instances You can launch instances as needed to meet your compute and application requirements. After you launch an instance, you can access it securely from your computer, restart it, attach and detach volumes, and terminate it when you're done with it. Any changes made to the instance's local drives are lost when you terminate it. Any saved changes to volumes attached to the instance are retained.
Oracle Cloud Infrastructure offers both bare metal and virtual machine instances:
1) Bare Metal: A bare metal compute instance gives you dedicated physical server access for highest performance and strong isolation.
2) Virtual Machine: A virtual machine (VM) is an independent computing environment that runs on top of physical bare metal hardware. The virtualization makes it possible to run multiple VMs that are isolated from each other. VMs are ideal for running applications that do not require the performance and resources (CPU, memory, network bandwidth, storage) of an entire physical machine.
An Oracle Cloud Infrastructure VM compute instance runs on the same hardware as a bare metal instance, leveraging the same cloud-optimized hardware, firmware, software stack, and networking infrastructure.

NEW QUESTION 7
A new customer has logged into Oracle Cloud Infrastructure (OCI) as an administrator for the first time. The admin would like to deploy Infrastructure into a region other then their home region.
What is the first Stop they must take in order to accomplish this task?

• A. Use API endpoints to create resources in the desired region.
• B. Navigate to the desired region and begin creating resources.
• C. Subscribe to the desired region.
• D. File a service request for access to each additional region.

Answer: C

Explanation:
When you sign up for Oracle Cloud Infrastructure, Oracle creates a tenancy for you in one region. This is your home region. Your home region is where your IAM resources are defined. When you subscribe to another region, your IAM resources are available in the new region, however, the master definitions reside in your home region and can only be changed there.
When you subscribe your tenancy to a new region, all the policies from your home region are enforced in the new region. If you want to limit access for groups of users to specific regions, you can write policies to grant access to specific regions only.

NEW QUESTION 8
Which feature allows you to logically group and isolate your Oracle Cloud Infrastructure resources?

• A. Tenancy
• B. Identity and Access Management Groups
• C. Compartments
• D. Availability Domain

Answer: C

Explanation:
COMPARTMENT A collection of related resources. Compartments are a fundamental component of Oracle Cloud Infrastructure for organizing and isolating your cloud resources. You use them to clearly separate resources for the purposes of measuring usage and billing, access (through the use of policies), and isolation (separating the resources for one project or business unit from another). A common approach is to create a compartment for each major part of your organization.
· User Group can use some resources in the compartment like network resources also they can't create it depend on the policy that assigned
· Remember, a compartment is a logical grouping, not a physical one

NEW QUESTION 9
Which OCI Identity and access management capability helps you to organize multiple users into teams?

• A. Policies
• B. Groups
• C. Dynamic Groups
• D. Users

Answer: B

Explanation:
IAM Group is A collection of users who all need the same type of access to a particular set of resources or compartment.
IAM DYNAMIC GROUP is A special type of group that contains resources (such as compute instances) tha match rules that you define (thus the membership can change dynamically as matching resources are created or deleted). These instances act as "principal" actors and can make API calls to services according to policies that you write for the dynamic group.

NEW QUESTION 10
In what two ways does Oracle Cloud Infrastructure (OCI) offer industry leading price-performance?

• A. OCI leverages advanced encryption that results In fast performance
• B. With OCI, pricing Is low and predictable across all regions and services.
• C. OCI hypervisor provides Industry loading performance.
• D. OCI backs performance claims with Service Level Agreements.
• E. OCI does not over subscribe CPU, but only memory.

Answer: BD

Explanation:
OCI leverages advanced encryption that leads to fast performance, OCI does not over subscribe CPU, but on memory, and OCI hypervisor provides industry leading performance are WRONG.
However, OCI does back claims with SLAs and offers predictable pricing for all services.

NEW QUESTION 11
You are analyzing your Oracle Cloud Infrastructure (OCI) usage with Cost Analysis tool in the OCI console. Which of the following is NOT a default feature of the tool?

• A. Filter costs by applications
• B. Filter costs by tags
• C. Filter costs by compartments
• D. Filter costs by date

Answer: A

Explanation:
Cost Analysis is an easy-to-use visualization tool to help you track and optimize your Oracle Cloud Infrastructure spending, allows you to generate charts, and download accurate, reliable tabular reports of aggregated cost data on your Oracle Cloud Infrastructure consumption. Use the tool for spot checks of spending trends and for generating reports

NEW QUESTION 12
Which three services Integrate with Oracle Cloud Infrastructure (OCI) Key Management?

• A. Functions
• B. Block Volume
• C. Object Storage
• D. Auto Scaling
• E. Identity and Access Management
• F. File Storage

Answer: BCF

Explanation:
DATA ENCRYPTION
Protect customer data at-rest and in-transit in a way that allows customers to meet their security and compliance requirements for cryptographic algorithms and key management
The Oracle Cloud Infrastructure Block Volume service always encrypts all block volumes, boot volumes, an volume backups at rest by using the Advanced Encryption Standard (AES) algorithm with 256-bit encryption.
By default all volumes and their backups are encrypted using the Oracle-provided encryption keys. Each time a volume is cloned or restored from a backup the volume is assigned a new unique encryption key.
The File Storage service encrypts all file system and snapshot data at rest. By default all file systems are encrypted using Oracle-managed encryption keys. You have the option to encrypt all of your file systems using the keys that you own and manage using the Vault service.
Object Storage employs 256-bit Advanced Encryption Standard (AES-256) to encrypt object data on the server. Each object is encrypted with its own data encryption key. Data encryption keys are always encrypted with a master encryption key that is assigned to the bucket. Encryption is enabled by default and cannot be turned off. By default, Oracle manages the master encryption key.

NEW QUESTION 13
A banking platform has been re-designed to a microservices based architecture using Docker containers for deployment.
Which service can you use to deploy containers on Oracle Cloud Infrastructure (OCI)?

• A. Container Engine for Kubernetes (OKE)
• B. Streaming Service
• C. API Gateway
• D. File Storage Service

Answer: A

Explanation:
Oracle Cloud Infrastructure Container Engine for Kubernetes is a fully-managed, scalable, and highly available service that you can use to deploy your containerized applications to the cloud. Use Container Engine for Kubernetes (sometimes abbreviated to just OKE) when your development team wants to reliably build, deploy, and manage cloud-native applications. You specify the compute resources that your applications require, and Container Engine for Kubernetes provisions them on Oracle Cloud Infrastructure in an existing OCI tenancy.
Container Engine for Kubernetes uses Kubernetes - the open-source system for automating deployment, scaling, and management of containerized applications across clusters of hosts. Kubernetes groups the containers that make up an application into logical units (called pods) for easy management and discovery.
You can access Container Engine for Kubernetes to define and create Kubernetes clusters using the Console and the REST API. You can access the clusters you create using the Kubernetes command line (kubectl), the Kubernetes Dashboard, and the Kubernetes API.
Container Engine for Kubernetes is integrated with Oracle Cloud Infrastructure Identity and Access Management (IAM), which provides easy authentication with native Oracle Cloud Infrastructure identity
functionality.

NEW QUESTION 14
What purpose does an Oracle Cloud Infrastructure (OCI) Dynamic Routing Gateway Serve?

• A. Enables OCI Compute Instance to privately connect to OCI Object Storage
• B. Enables OCI Compute instance to connect to on-promises environments
• C. Enable OCI Compute instances to connect to the internal
• D. Enables OCI Compute instances to be reached from internet

Answer: B

Explanation:
You can think of a Dynamic Routing Gateway (DRG) as a virtual router that provides a path for private traff (that is, traffic that uses private IPv4 addresses) between your VCN and networks outside the VCN's region.
For example, if you use an IPSec VPN or Oracle Cloud Infrastructure FastConnect (or both) to connect y on-premises network to your VCN, that private IPv4 address traffic goes through a DRG that you create and attach to your VCN. For scenarios for using a DRG to connect a VCN to your on-premises network,
see Networking Scenarios. For important details about routing to your on-premises network, see Routing Details for Connections to Your On-Premises Network.
Also, if you decide to peer your VCN with a VCN in another region, your VCN's DRG routes traffic to the other VCN over a private backbone that connects the regions (without traffic traversing the internet). For information about connecting VCNs in different regions, see Remote VCN Peering (Across Regions).

NEW QUESTION 15
Which should you use to distribute Incoming traffic between a set of web servers?

• A. Load Balances
• B. Internet Gateway
• C. Autoscallng
• D. Dynamic Routing Gateway

Answer: A

Explanation:
The Oracle Cloud Infrastructure Load Balancing service provides automated traffic distribution from one entry point to multiple servers reachable from your virtual cloud network (VCN). The service offers a load balancer with your choice of a public or private IP address, and provisioned bandwidth.
A load balancer improves resource utilization, facilitates scaling, and helps ensure high availability. You can configure multiple load balancing policies and application-specific health checks
to ensure that the load balancer directs traffic only to healthy instances. The load balancer can reduce your maintenance window by draining traffic from an unhealthy application server before you remove it from service for maintenance.
HOW LOAD BALANCING WORKS:
The Load Balancing service enables you to create a public or private load balancer within your VCN. A public load balancer has a public IP address that is accessible from the internet. A private load balancer has an IP address from the hosting subnet, which is visible only within your VCN. You can configure multiple listeners for an IP address to load balance transport Layer 4 and Layer 7 (TCP and HTTP) traffic. Both public and private load balancers can route data traffic to any backend server that is reachable from the VCN.
1) Public Load Balancer
To accept traffic from the internet, you create a public load balancer. The service assigns it a public IP address that serves as the entry point for incoming traffic. You can associate the public IP address with a friendly DNS name through any DNS vendor.
A public load balancer is regional in scope. If your region includes multiple availability domains, a public load balancer requires either a regional subnet (recommended) or two availability domain-specific (AD-specific) subnets, each in a separate availability domain. With a regional subnet, the Load Balancing service creates a primary load balancer and a standby load balancer, each in a different availability domain, to ensure accessibility even during an availability domain outage. If you create a load balancer in two AD-specific subnets, one subnet hosts the primary load balancer and the other hosts a standby load balancer. If the primary load balancer fails, the public IP address switches to the secondary load balancer. The service treats the two load balancers as equivalent and you cannot specify which one is "primary".
Whether you use regional or AD-specific subnets, each load balancer requires one private IP address from its host subnet. The Load Balancing service supplies a floating public IP address to the primary load balancer. The floating public IP address does not come from your backend subnets.
If your region includes only one availability domain, the service requires just one subnet, either regional or AD-specific, to host both the primary and standby load balancers. The primary and standby load balancers each require a private IP address from the host subnet, in addition to the assigned floating public IP address. If there is an availability domain outage, the load balancer has no failover.
2) Private Load Balancer
To isolate your load balancer from the internet and simplify your security posture, you can create a private load balancer. The Load Balancing service assigns it a private IP address that serves as the entry point for incoming traffic.
When you create a private load balancer, the service requires only one subnet to host both the primary and standby load balancers. The load balancer can be regional or AD-specific, depending on the scope of the host subnet. The load balancer is accessible only from within the VCN that contains the host subnet, or as further restricted by your security rules.
The assigned floating private IP address is local to the host subnet. The primary and standby load balancers each require an extra private IP address from the host subnet.
If there is an availability domain outage, a private load balancer created in a regional subnet within a multi-AD region provides failover capability. A private load balancer created in an AD-specific subnet, or in a regional subnet within a single availability domain region, has no failover capability in response to an availability domain outage.

NEW QUESTION 16
Which Oracle Cloud Infrastructure service can you use to assess user security of your Oracle databases?

• A. Oracle Data Safe
• B. Oracle Data Guard
• C. Audit Vault and Database Firewall option for Oracle Database Enterprise Edition
• D. Audit Service

Answer: A

Explanation:
Oracle Data Safe is a unified control center for your Oracle databases which helps you understand the sensitivity of your data, evaluate risks to data, mask sensitive data, implement and monitor security controls, assess user security, monitor user activity, and address data security compliance requirements.
Whether you’re using an Autonomous Database or an Oracle DB system, Oracle Data Safe delivers essential
data security capabilities as a service on Oracle Cloud Infrastructure.

NEW QUESTION 17
Which OCI storage service does not provide encryption for data at rest?

• A. File Storage
• B. Block Volume
• C. Local NVMe
• D. Object Storage

Answer: C

Explanation:
NVMe stands for non-volatile memory express. It is a storage protocol created to fasten the transfer of data between enterprise and client systems and solid-state drives (SSDs) over a computer’s high-speed Peripheral Component Interconnect Express bus. The characteristics are:
1) Local NVMe is NVMe SSD-based temporary storage.
2) It is the locally-attached NVMe devices to the OCI compute instance
3) It is used very high storage performance requirements, lots of throughput, lots of IOPS, local storage and when you don’t want to go out on network
4) Oracle does not protect in any way through RAID, or snapshots, or backup out of the box and data is not encrypted at rest.

NEW QUESTION 18
What is the frequency of OCI usage report generation?

• A. Weekly
• B. Monthly
• C. Annually
• D. Daily

Answer: D

Explanation:
A usage report is a comma-separated value (CSV) file that can be used to get a detailed breakdown of resources in Oracle Cloud Infrastructure for audit or invoice reconciliation.
The usage report is automatically generated daily, and is stored in an Oracle-owned Object Storage bucket. It contains one row per each Oracle Cloud Infrastructure resource (such as instance, Object Storage bucket, VNIC) per hour along with consumption information, metadata, and tags. Usage reports generally contain 24 hours of usage data, although occasionally a usage report may contain late-arriving data that is older than 24 hours.
Usage reports are retained for one year.

NEW QUESTION 19
Oracle Cloud Infrastructure is complement with which three industry standard?

• A. USA E-WALLED
• B. PRACE UK
• C. HIPPA
• D. PCI-DSS
• E. IG Toolkit-UK

Answer: CDE

Explanation:
https://www.oracle.com/cloud/cloud-infrastructure-compliance/

NEW QUESTION 20
Which of the following is an example of an edge service in OCI?

• A. DNS Zone Management
• B. Virtual Machines
• C. OCI compute instances
• D. Oracle Data Guard

Answer: A

Explanation:
The Oracle Cloud Infrastructure Domain Name System (DNS) service lets you create and manage your DNS zones. You can create zones, add records to zones, and allow Oracle Cloud Infrastructure's edge network to handle your domain's DNS queries.

NEW QUESTION 21
Which three components are part of Oracle Cloud Infrastructure Identity and Access Management service?

• A. Virtual Cloud Networks
• B. Policies
• C. Regional Subnets
• D. Dynamic Groups
• E. Roles
• F. Compute Instances
• G. Users

Answer: BDG

Explanation:
IAM components are RESOURCE
The cloud objects that your company's employees create and use when interacting with Oracle Cloud Infrastructure. For example: compute instances, block storage volumes, virtual cloud networks (VCNs), subnets, route tables, etc.
USER
An individual employee or system that needs to manage or use your company's Oracle Cloud Infrastructure resources. Users might need to launch instances, manage remote disks, work with your virtual cloud network, etc. End users of your application are not typically IAM users. Users have one or more IAM credentials
(see User Credentials).
POLICY
A document that specifies who can access which resources, and how. Access is granted at the group and compartment level, which means you can write a policy that gives a group a specific type of access within a specific compartment, or to the tenancy itself. If you give a group access to the tenancy, the group automatically gets the same type of access to all the compartments inside the tenancy. For more information, see Example Scenario and How Policies Work. The word "policy" is used by people in different ways: to mean an individual statement written in the policy language; to mean a collection of statements in a single, named "policy" document (which has an Oracle Cloud ID (OCID) assigned to it); and to mean the overall body of policies your organization uses to control access to resources.
GROUP
A collection of users who all need the same type of access to a particular set of resources or compartment. DYNAMIC GROUP
A special type of group that contains resources (such as compute instances) that match rules that you define (thus the membership can change dynamically as matching resources are created or deleted). These instances act as "principal" actors and can make API calls to services according to policies that you write for the dynamic group.
NETWORK SOURCE
A group of IP addresses that are allowed to access resources in your tenancy. The IP addresses can be public IP addresses or IP addresses from a VCN within your tenancy. After you create the network source, you use policy to restrict access to only requests that originate from the IPs in the network source.
COMPARTMENT
A collection of related resources. Compartments are a fundamental component of Oracle Cloud Infrastructure for organizing and isolating your cloud resources. You use them to clearly separate resources for the purposes of measuring usage and billing, access (through the use of policies), and isolation (separating the resources for one project or business unit from another). A common approach is to create a compartment for each major part of your organization. For more information, see Setting Up Your Tenancy.
TENANCY
The root compartment that contains all of your organization's Oracle Cloud Infrastructure resources. Oracle automatically creates your company's tenancy for you. Directly within the tenancy are your IAM entities (users, groups, compartments, and some policies; you can also put policies into compartments inside the tenancy). You place the other types of cloud resources (e.g., instances, virtual networks, block storage volumes, etc.) inside the compartments that you create.
HOME REGION
The region where your IAM resources reside. All IAM resources are global and available across all regions, but the master set of definitions reside in a single region, the home region. You must make changes to your IAM resources in your home region. The changes will be automatically propagated to all regions. For more information, see Managing Regions.
FEDERATION
A relationship that an administrator configures between an identity provider and a service provider. When you federate Oracle Cloud Infrastructure with an identity provider, you manage users and groups in the identity provider. You manage authorization in Oracle Cloud Infrastructure's IAM service. Oracle Cloud Infrastructure tenancies are federated with Oracle Identity Cloud Service by default.

NEW QUESTION 22
Which option provides the best performance for running OLTP workloads in Oracle Cloud Infrastructure?

• A. OCI Exadata DB Systems
• B. OCI Autonomous Data Warehouse
• C. OCI Virtual Machine Instance
• D. OCI Dedicated Virtual Host

Answer: A

Explanation:
On an Exadata DB system, all databases share dedicated storage servers which include flash storage. By default, the databases are given equal priority with respect to these resources. The Exadata storage management software uses a first come, first served approach for query processing. If a database executes a major query that overloads I/O resources, overall system performance can be slowed down.
The I/O Resource Management (IORM) allows you to assign priorities to your databases to ensure critical queries are processed first when workloads exceed their resource allocations. You assign priorities by creating directives that specify the number of shares for each database. The number of shares corresponds to a percentage of resources given to that database when I/O resources are stressed.
Directives work together with an overall optimization objective you set for managing the resources. The following objectives are available:
1) Auto - Recommended. IORM determines the optimization objective and continuously and dynamically determines the optimal settings, based on the workloads observed, and resource plans enabled.
2) Balanced - For critical OLTP and DSS workloads. This setting balances low disk latency and high throughput. This setting limits disk utilization of large I/Os to a lesser extent than low latency to achieve a balance between good latency and good throughput.
3) High throughput - For critical DSS workloads that require high throughput.
4) Low latency - For critical OLTP workloads. This setting provides the lowest possible latency by significantly limiting disk utilization.

NEW QUESTION 23
......