1Z0-1115-23 Online Practice Questions and Answers

Correct Answer: C

For cross-cloud networking between Oracle Cloud and Microsoft Azure, set up a connection be-tween a FastConnect circuit in Oracle Cloud and an ExpressRoute circuit in Microsoft Azure.

Correct Answer: B

The keyword here is multiple providers. Multicloud is a cloud computing strategy that uses the best services from more than one cloud provider to deploy a solution. The use of multiple cloud services from a single provider for redundancy and high availability is INCORRECT as it talks about single provider. The deployment of a single cloud service across multiple regions and data centers for better perfor-mance is also INCORRECT as there is no mention of multiple cloud service providers. Rather it talks about single cloud service across multiple regions. The use of multiple cloud services from a single provider for redundancy and high availability is al-so INCORRECT as it also talks about single provider. Hence the correct answer is The use of cloud services from multiple providers to leverage the best features and services of each.

Correct Answer: C

As you can see in the below screenshot (from the OCI Console), while implementing OCI- Azure Interconnect you need to select Connection type: FastConnect partner and select Microsoft Azure ExpressRoute as the Partner. Hence, "Select FastConnect Direct as the connection type" is NOT VALID and hence the correct answer.

Correct Answer: A

Controlling the Establishment of a Connection

With Oracle Cloud Infrastructure IAM policies, you can control:

Who in your organization has the authority to create a FastConnect virtual circuit. Who can manage route tables, network security groups, and security lists. Oracle and Microsoft have created a cross-cloud connection between Oracle Cloud

Infrastructure and Microsoft Azure in certain regions. So, the option "To control the location of the cross-cloud connection" has nothing to do with IAM policies and hence is INCORRECT.

The option "To control the type of traffic allowed between the Azure VNet and the OCI VCN" is also INCORRECT as you use Security Lists/Network Security Group to filter traffic and not IAM policies.

IAM policies also have no role to play in determining the bandwidth of the connection.

Correct Answer: B

In the question, frontend is in Azure and backend is in OCI. And the keywords are SECURE and LOW LATENCY data transfer.

Use public internet connections to transfer data between Azure and OCI, encrypting the data in transit - INCORRECT as this option won't provide LOW LATENCY data transfer (as it is us-ing public internet).

Leverage a VPN Gateway to create an encrypted tunnel between Azure and OCI for secure data transfer - INCORRECT as Site-to-Site VPN Connection won't provide LOW LATENCY data transfer as the connection traverses through public

internet. Implement a hybrid cloud approach by integrating on-premises infrastructure with both Azure and OCI - INCORRECT as there is no mention of on-premises environment in the question. This option is irrelevant here.

Establish a dedicated, private connection between Azure and OCI using Azure ExpressRoute and Oracle FastConnect - CORRECT as it provides a direct Interconnect between OCI and Microsoft Azure which in turn provides <2ms latency for

superior multicloud network performance.

Correct Answer: A

In general, SAML metadata is used to share configuration information between the Identity Pro-vider (IdP) and the Service Provider (SP).

Correct Answer: A

Correct Answer: B

The keyword mentioned in the question is "However, they want to have full control over the Az-ure permissions that should be granted. "

The fully-automated onboarding option for OracleDB for Azure is faster and more convenient than the guided account linking, but some organizations may have security policies that do not allow them to grant the required permissions to the

Oracle Database Service enterprise applica-tion that runs in their Azure account. Guided onboarding is provided for customers who do not want to grant OracleDB for Azure all the Azure permissions required for fully automated onboarding.

The remaining two options - Auto pilot linking and Fully scripted configuration are INVALID. There doesn't exist anything like these in Oracle Database Service for Azure onboarding. Hence the correct answer is Guided account linking

Correct Answer: A

FastConnect: With an Oracle Partner:

You can establish a FastConnect connection from your on-premise or remote data center to the data center where your Oracle Cloud resources are provisioned by requesting cloud connectivity services from any of Oracle's FastConnect

partners. Oracle has integrated the FastConnect service with a geographically diverse set of IP, VPN, and Ethernet network providers and cloud exchanges to make it easy for you to establish a connection to Oracle Cloud services.

A close-up of a

white box

FastConnect: Colocation with Oracle:

If you have purchased colocation space from a data center provider, you can use Oracle FastCon-nect to establish connectivity from your network equipment in that colocation facility to your Oracle Cloud services provisioned at this location.

Oracle will provide you a letter of authorization (LOA) that the data center provider will need in order to establish a direct cross-connect into Oracle's FastConnect edge devices provider will need in order to establish a direct cross

Correct Answer: D

Site-to-Site VPN provides a site-to-site IPSec connection between your on-premises network and your virtual cloud network (VCN). The IPSec protocol suite encrypts IP traffic before the packets are transferred from the source to the destination and decrypts the traffic when it arrives.

Correct Answer: C

The Oracle Database Service multitenant application can:

Create and manage resources in the subscription (for example, the custom dashboard, Azure App Insights, and Azure Log Analytics workspaces OracleDB for Azure creates for each provisioned database).

Stream OCI Database metrics to Azure App Insights and events to Azure Log Analytics. Configure network settings in Azure so Azure resources can access the database resources in OCI.

Submit events to Azure Event Grid.

More read: Preparation and Prerequisites for OracleDB for Azure

Correct Answer: C

Network security groups (NSGs) act as a virtual firewall for your compute instances . An NSG consists of a set of ingress and egress security rules that apply only to a set of VNICs of your choice in a single VCN (for example: all the compute

instances that act as web servers in the web tier of a multi-tier application in your VCN). Hence, "Use Network Security Groups to apply specific firewall rules for each component." is the CORRECT answer.

In this question , you can straightaway reject "Use Virtual Cloud Networks to create isolated net-works for each component." and "Use Route Tables to define custom routing policies between each component." options.

NSG wins here due to the keywords "restrict communication between these components" in the question. A network security group (NSG) provides a virtual firewall for a set of cloud re-sources that all have the same security posture.

Correct Answer: B

Azure users log into OracleDB for Azure using their Azure credentials, and OracleDB for Azure streams much of the day-to-day operational data from the OracleDB for Azure managed OCI data-bases to Azure Application Insights and Azure Log Analytics. Because of this, Azure developers spend most of their time in Azure. In some instances, an OracleDB for Azure user must log into the OCI Console to perform specific tasks that aren't enabled or available in OracleDB for Azure today. To make this process easier, Az-ure customers setup identity federation between the Azure and OCI tenancies. With this in place, authorized users use a single set of credentials, their Azure credentials, to log into Azure and OCI

Correct Answer: B

Controlling Traffic Flow Over the Connection Even if a connection has been established between your VCN and VNet, you can control the packet flow over the connection with route tables in your VCN. For example, you can restrict traf-fic to only specific subnets in the VNet. Controlling the Specific Types of Traffic Allowed It's important that you ensure that all outbound and inbound traffic with the VNet is intended or expected and well defined. Implement Azure network security group and Oracle security rules that explicitly state the types of traffic one cloud can send to the other and accept from the other.

Correct Answer: D

As per the question, the keywords are "The enterprise wants to set up a private, secure, and isolat-ed network connection between the two clouds" Use public internet to establish connectivity between the Microsoft Azure VNet and the OCI VCN - INCORRECT as this option won't provide private, secure and isolated connection. Use Azure VPN and Oracle FastConnect to establish a private and secure tunnel between the Azure VNet and the OCI VCN is INCORRECT as it won't provide a isolated connection. Use Azure Private Link to create a private connection between the workload and the database is INCORRECT as Azure Private Link enables you to access Azure PaaS Services (for example, Azure Storage and SQL Database) and Azure hosted customer- owned/partner services over a pri-vate endpoint in your virtual network. Use Azure ExpressRoute and Oracle FastConnect to create a private interconnection between the Azure VNet and the OCI VCN. is CORRECT. To create an integrated multi- cloud experience, Microsoft and Oracle offer direct interconnection between Azure and Oracle Cloud Infrastructure (OCI) through ExpressRoute and FastConnect. Through the ExpressRoute and FastConnect inter-connection, customers can experience low latency, high throughput, private direct connectivity be-tween the two clouds.