Oracle 1Z0-997-20 dumps - 100% Pass Guarantee!

You have two Virtual Cloud Networks (VCN) that need to be peered. The set up is as follows:

The VCNs are in different tenancies.

Peering has to be via Local Peering Gateway (LPG) because one of the VCNs needs to be added to an existing Hub and Spoke configuration that consists of a hub and two spokes.

There is a CIDR overlap. The VCN that serves as the Hub VCN has a 172.19.0.0/16 CIDR prefix. The other VCN to be added as a Spoke VCN has a 172.19.128.0/17 CIDR prefix.

The other two spokes have 10.0.0.0/16 and 192.168.0.0/16 prefixes, respectively.

What is a possible solution to this problem?

A. Use Dynamic Routing Gateway (DRG) instead.

B. Add another CIDR prefix to the VCN that is integrating with the Hub and Spoke and does not overlap. Use that CIDR for the LPG connection.

C. Review the subnets in the hub VCN. If they all have the third octet under 128, change the VCN prefix to /17.

D. Review the subnets in the hub VCN. If they all have the third octet above 128, change the VCN prefix to /17.

E. Review all subnets in the hub VCN. If one of them has the third octet at 128, change the VCN prefix to /17.

You work for a large bank where security and compliance are critical. As part of the security overview meeting, your company decided to minimize the installation of local tools on your laptop. You have been running Ansible and kubectl to spin up Oracle Container Engine for Kubernetes (OKE) clusters and deployed your application.

For authentication, you are using an Oracle Cloud Infrastructure (OCI) CLI config file that contains OCIDs, Fingerprint, and a locally stored PEM file. Your security team doesn't want you to store any local API key and certificate, or any other local tools.

Which two actions should you perform to spin up the OKE cluster and interact with it? (Choose two.)

A. Create a developer workstation on OCI. Install Ansible and kubectl on it. Use resource principal to authenticate against OCI API and create the OKE Cluster.

B. Develop your own code using OCI SDK to deploy the OKE cluster.

C. Work on OCI Cloud Shell to use built-in Ansible and kubectl to deploy the OKE cluster. Use OCI_CLI_AUTH=instance_obo_user environment variable to authenticate using built- in token.

D. Work on OCI Cloud Shell to use built-in Ansible and kubectl to deploy the OKE cluster. Bring in your own config file and certificate to authenticate against OCI API.

E. Create a developer workstation on OCI. Install Ansible and kubectl on it. Use instance principal to authenticate against OCI API and create the OKE Cluster.

You developed a microservices-based application that runs on Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE). It has multiple endpoints that needs to be exposed to the public internet.

What is the most cost-effective way to expose multiple application endpoints without adding complexity to the application?

A. Use NodePort service type in Kubernetes for each of your service endpoint and use node's public IP address to access the applications.

B. Use separate load balancer instance for each service, but use the 100 Mbps load balancer option.

C. Deploy an Ingress Controller and use it to expose each endpoint with its own routing endpoint.

D. Use ClusterIP service type in Kubernetes for each of your service endpoint and use a load balancer to expose the endpoints.

Your company will soon start moving critical systems Into Oracle Cloud Infrastructure (OCI) platform. These systems will reside in the us-phoenix-1and us-ashburn 1 regions. As part of the migration planning, you are reviewing the company's existing security policies and written guidelines for the OCI platform usage within the company. you have to work with the company managed key.

Which two options ensure compliance with this policy?

A. When you create a new compute instance through OCI console, you use the default options for "configure boot volume" to speed up the process to create this compute instance.

B. When you create a new block volume through OCI console, select Encrypt using Key Management checkbox and use encryption keys generated and stored in OCI Key Management Service.

C. When you create a new compute instance through OCI console, you use the default shape to speed up the process to create this compute instance.

D. When you create a new OCI Object Storage bucket through OCI console, you need to choose "ENCRYPT USING CUSTOMER-MANAGED KEYS" option.

E. You do not need to perform any additional actions because the OCI Block Volume service always encrypts all block volumes, boot volumes, and volume backups at rest by using the Advanced Encryption Standard (AES) algorithm with 256-bit encryption.

You are running a mission-critical database application in Oracle Cloud Infrastructure (OCI). You take regular backups of your DB system to OCI Object Storage. Recently, you notice a failed database backup status in the console.

What troubleshooting action can you perform to determine the cause of the backup failure?

A. Ensure that the database is not active and running while the backup is in progress.

B. Ensure that your database host can connect to OCI Object Storage.

C. Ensure that the dcsagent program is not restarted in case of a stop/waiting status.

D. Ensure the database archiving mode is set to NOARCHIVELOG.