Oracle 1Z0-997-22 dumps - 100% Pass Guarantee!

You are working as a security consultant with a global insurance organization which is using Microsoft Azure Active Directory (AD) as identity provided to manager user login/passwords. When a user logs in to Oracle Cloud infrastructure (OCI) console, it should get authenticated by Azure AD.

Which set of steps are required to configure at OCI side in order to get it enabled

A. Setup Azure AD as an Enterprise Application, map Azure AD users and groups and policies to OCI groups and users

B. Setup Azure AD as an Identity Provider, Import users and groups from Azure AD to OCI, set up IAM policies to govern access to Azure AD groups

C. Setup Azure AD as an Enterprise Application, configure OCI for single sign-on, map Azure AD groups to OCI groups, set up the IAM policies to govern access to Azure AD groups

D. Setup Azure AD as an Identity Provider, map Azure AD groups to OCI groups, set up the IAM policies to govern access to Azure AD groups

An online Stock trading application is deployed to multiple Availability Domains in the us phoenix-1 region. Considering the high volume of transactions that the trading application handles, the company has hired you to ensure that the data stored by the application available, and disaster resilient. In the event of failure, the Recovery lime Objective (UK)) must be less than 2 hours to meet regulator requirements.

Which Disaster Recovery strategy should be used to achieve the RTO requirement In the event of system failure?

A. Configure hourly block volumes backups through the Storage Gateway service.

B. Configure hourly block volumes backups using the Oracle Cloud Infrastructure (OCI) Command Line Interface (CLI)

C. Store hourly block volumes backup to NVMe device under a compute instance and generate a custom Image every 5 minutes.

D. Configure your application to use synchronous master slave data replication between Availability Domains.

You developed a microservices based application that runs on Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE). Your security team wants to use SSL termination for this application. What should you do to create a secure SSL termination for this application using fewest steps?

A. Create a self-signed certificate and it's corresponding key. Create a Kubernetes secret using the certificate and the key. Then add these an notations to the Kubernetes service: annotations: service.beta.kubernetes.io/oci-load-balancer-ssl-ports: "443" service.beta.kubernetes.io/oci-load-balancer-security-list-management-mode:"Frontend"

B. Generate a self-signed certificate using Let's Encrypt. Use that certificate on OCI Load Balancer. Create the Kubernetes service usingthis load balancer.

C. Add these annotationsto the Kubernetes service: annotations: service.beta.kubernetes.io/oci-load-balancer-ssl-ports: "443" service.beta.kubernetes.io/oci-load-balancer-ssl-secret-key: ssl-secret-key

D. Create a self-signed certificate and it's corresponding key. Create a Kubernetes secret using then add these annotationsto the Kubernetes service. Service.beta.kubernete.io/oci-load-balancer-ssl-ports: "443" Service.beta.kubernete.io/oci-load-balancer-tls-secret:SSL-CERTIFICATE-SECRET

There are two compartments: Networks and Devlnstances There are two groups: NetworkAdmins with a user named Nick, and Devs with a user named Dave The following IAM policies are being used: *Allow group NetworkAdmins to manage virtual-network-family in compartment Networks *Allow group NetworkAdmins to manage instance-family in compartment Networks *Allow group Devs to use virtual-network-family in compartment Networks *Allow group Devs to manage all-resources in compartment Devlnstances Nick creates a VCN in Networks compartment. Dave creates a VCN in Devlnstances compartment. Which of the following statements is INCORRECT?

A. Dave launches instances in Devlnstances using the VCN in Networks compartment

B. Nick cannot launch new instances in Devlnstances compartment

C. Nick launches instances in Networks using VCN in Devlnstances compartment

D. Dave cannot launch new instances in Networks compartment

You are currently working for a public health care company based in the United Stats. Their existing patient records runs in an on-premises data center and the customer is sending tape backups offsite as part of their recovery planning.

You have developed an alternative archival solution using Oracle Cloud Infrastructure (OCI) that will save the company a significant amount of mom on a yearly basis. The solution involves storing data in an OCI Object Storage bucket After reviewing your solution with the customer global Compliance (GRC) team they have highlighted the following security requirements:

All data less than 1 year old must be accessible within 2 hour. All data must be retained for at least 10 years and be accessible within 48 hours AH data must be encrypted at rest No data may be transmitted across the public Internet

Which two options meet the requirements outlined by the customer GRC team?

A. Provision a FastConnect link to the closest OCI region and configure a private peering virtual circuit.

B. Create an OCI Object Storage Standard tier bucket Configure a lifecycle policy to archive any object that Is older than 365 days

C. Create a VPN connection between your on premises data center and OCI. Create a Virtual Cloud Network (VCN) along with an OCI Service Gateway for OCI Object Storage.

D. Provision a FastConnect link to the closest OCI region and configure a public peering virtual circuit

E. Create an OCI Object Storage Standard tier bucket. Configure a lifecycle policy to delete any object that is older than 7 years