Updated Oct-2021 Test Engine or PDF for the Oracle 1Z0-1085-20 test to help you quickly prepare for the Oracle exam!
Full 1Z0-1085-20 Practice Test and 100 unique questions with explanations waiting just for you, get it now!
NEW QUESTION 60
Which feature is not component of Oracle cloud Infrastructure identity and Access management service?
- A. Network Security Group
- B. User Credential
- C. federation
- D. Policies
Answer: A
Explanation:
Explanation
Components of IAM
RESOURCE
The cloud objects that your company's employees create and use when interacting with Oracle Cloud Infrastructure. For example: compute instances, block storage volumes, virtual cloud networks (VCNs), subnets, route tables, etc.
USER
An individual employee or system that needs to manage or use your company's Oracle Cloud Infrastructure resources. Users might need to launch instances, manage remote disks, work with your virtual cloud network, etc. End users of your application are not typically IAM users. Users have one or more IAM credentials (see User Credentials).
GROUP
A collection of users who all need the same type of access to a particular set of resources or compartment.
DYNAMIC GROUP
A special type of group that contains resources (such as compute instances) that match rules that you define (thus the membership can change dynamically as matching resources are created or deleted). These instances act as "principal" actors and can make API calls to services according to policies that you write for the dynamic group.
NETWORK SOURCE
A group of IP addresses that are allowed to access resources in your tenancy. The IP addresses can be public IP addresses or IP addresses from a VCN within your tenancy. After you create the network source, you use policy to restrict access to only requests that originate from the IPs in the network source.
COMPARTMENT
A collection of related resources. Compartments are a fundamental component of Oracle Cloud Infrastructure for organizing and isolating your cloud resources. You use them to clearly separate resources for the purposes of measuring usage and billing, access (through the use of policies), and isolation (separating the resources for one project or business unit from another). A common approach is to create a compartment for each major part of your organization. For more information, see Setting Up Your Tenancy.
TENANCY
The root compartment that contains all of your organization's Oracle Cloud Infrastructure resources. Oracle automatically creates your company's tenancy for you. Directly within the tenancy are your IAM entities (users, groups, compartments, and some policies; you can also put policies into compartments inside the tenancy). You place the other types of cloud resources (e.g., instances, virtual networks, block storage volumes, etc.) inside the compartments that you create.
POLICY
A document that specifies who can access which resources, and how. Access is granted at the group and compartment level, which means you can write a policy that gives a group a specific type of access within a specific compartment, or to the tenancy itself. If you give a group access to the tenancy, the group automatically gets the same type of access to all the compartments inside the tenancy. For more information, see Example Scenario and How Policies Work. The word "policy" is used by people in different ways: to mean an individual statement written in the policy language; to mean a collection of statements in a single, named "policy" document (which has an Oracle Cloud ID (OCID) assigned to it); and to mean the overall body of policies your organization uses to control access to resources.
HOME REGION
The region where your IAM resources reside. All IAM resources are global and available across all regions, but the master set of definitions reside in a single region, the home region. You must make changes to your IAM resources in your home region. The changes will be automatically propagated to all regions. For more information, see Managing Regions.
FEDERATION
A relationship that an administrator configures between an identity provider and a service provider. When you federate Oracle Cloud Infrastructure with an identity provider, you manage users and groups in the identity provider. You manage authorization in Oracle Cloud Infrastructure's IAM service. Oracle Cloud Infrastructure tenancies are federated with Oracle Identity Cloud Service by default.
NEW QUESTION 61
A customer wants a dedicated connection with minimal network latency from their on-premises data center to Oracle Cloud Infrastructure (OCI).
Which service should they choose?
- A. Public internet
- B. Virtual Cloud Network Remote Peering
- C. IPSec Virtual Private Network (VPN)
- D. OCI FastConnact
Answer: D
Explanation:
Explanation
Oracle Cloud Infrastructure FastConnect provides an easy way to create a dedicated, private connection between your data center and Oracle Cloud Infrastructure. FastConnect provides higher-bandwidth options, and a more reliable and consistent networking experience compared to internet-based connections.
NEW QUESTION 62
What is frequency of Oracle Cloud Infrastructure Usage Report generation?
- A. Monthly
- B. Daily
- C. Weekly
- D. Annually
Answer: B
Explanation:
Explanation
Explanation/Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Billing/Concepts/usagereportsoverview.htm
NEW QUESTION 63
Which OCI storage service can be used to meet the requirement?
- A. Block Volume
- B. Archive Storage
- C. File Storage
- D. Object Storage (standard)
Answer: A
NEW QUESTION 64
Which two security capabilities are offered by Oracle Cloud Infrastructure?
- A. Managed Active Directory service
- B. Captcha
- C. Certificate Management service
- D. Always on data encryption for data-at-rest.
- E. Key Management service
Answer: D,E
NEW QUESTION 65
What is a key benefit of Oracle Cloud Infrastructure Virtual Machine DB Systems?
- A. No need to create database indices.
- B. Automated disaster recovery.
- C. Support for RAC DB systems.
- D. Automated backups to OCI Block Volume.
Answer: C
Explanation:
Explanation/Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Database/Concepts/overview.htm
NEW QUESTION 66
Which is NOT considered a security resource within Oracle Cloud Infrastructure?
- A. Network Security Group
- B. Web Application Firewall
- C. File Storage Service
- D. Security Lists
Answer: B
NEW QUESTION 67
Which should you use to distribute Incoming traffic between a set of web servers?
- A. Autoscallng
- B. Load Balances
- C. Internet Gateway
- D. Dynamic Routing Gateway
Answer: B
Explanation:
Explanation
The Oracle Cloud Infrastructure Load Balancing service provides automated traffic distribution from one entry point to multiple servers reachable from your virtual cloud network (VCN). The service offers a load balancer with your choice of a public or private IP address, and provisioned bandwidth.
A load balancer improves resource utilization, facilitates scaling, and helps ensure high availability. You can configure multiple load balancing policies and application-specific health checks to ensure that the load balancer directs traffic only to healthy instances. The load balancer can reduce your maintenance window by draining traffic from an unhealthy application server before you remove it from service for maintenance.
HOW LOAD BALANCING WORKS:
The Load Balancing service enables you to create a public or private load balancer within your VCN. A public load balancer has a public IP address that is accessible from the internet. A private load balancer has an IP address from the hosting subnet, which is visible only within your VCN. You can configure multiple listeners for an IP address to load balance transport Layer 4 and Layer 7 (TCP and HTTP) traffic. Both public and private load balancers can route data traffic to any backend server that is reachable from the VCN.
1) Public Load Balancer
To accept traffic from the internet, you create a public load balancer. The service assigns it a public IP address that serves as the entry point for incoming traffic. You can associate the public IP address with a friendly DNS name through any DNS vendor.
A public load balancer is regional in scope. If your region includes multiple availability domains, a public load balancer requires either a regional subnet (recommended) or two availability domain-specific (AD-specific) subnets, each in a separate availability domain. With a regional subnet, the Load Balancing service creates a primary load balancer and a standby load balancer, each in a different availability domain, to ensure accessibility even during an availability domain outage. If you create a load balancer in two AD-specific subnets, one subnet hosts the primary load balancer and the other hosts a standby load balancer. If the primary load balancer fails, the public IP address switches to the secondary load balancer. The service treats the two load balancers as equivalent and you cannot specify which one is "primary".
Whether you use regional or AD-specific subnets, each load balancer requires one private IP address from its host subnet. The Load Balancing service supplies a floating public IP address to the primary load balancer.
The floating public IP address does not come from your backend subnets.
If your region includes only one availability domain, the service requires just one subnet, either regional or AD-specific, to host both the primary and standby load balancers. The primary and standby load balancers each require a private IP address from the host subnet, in addition to the assigned floating public IP address. If there is an availability domain outage, the load balancer has no failover.
2) Private Load Balancer
To isolate your load balancer from the internet and simplify your security posture, you can create a private load balancer. The Load Balancing service assigns it a private IP address that serves as the entry point for incoming traffic.
When you create a private load balancer, the service requires only one subnet to host both the primary and standby load balancers. The load balancer can be regional or AD-specific, depending on the scope of the host subnet. The load balancer is accessible only from within the VCN that contains the host subnet, or as further restricted by your security rules.
The assigned floating private IP address is local to the host subnet. The primary and standby load balancers each require an extra private IP address from the host subnet.
If there is an availability domain outage, a private load balancer created in a regional subnet within a multi-AD region provides failover capability. A private load balancer created in an AD-specific subnet, or in a regional subnet within a single availability domain region, has no failover capability in response to an availability domain outage.
NEW QUESTION 68
Which Oracle Cloud Infrastructure (OCI) database solution will be most economical for a customer looking to have the elasticity of the cloud with minimal administration and maintenance effort for their DBA team?
- A. OCI Exadata DB Systems.
- B. OCI Autonomous Database
- C. OCI Virtual Machine DB Systems
- D. OCI Bare Metal DB Systems
Answer: A
Explanation:
Explanation
Exadata DB systems allow you to leverage the power of Exadata within the Oracle Cloud Infrastructure. An Exadata DB system consists of a base system, quarter rack, half rack, or full rack of compute nodes and storage servers, tied together by a high-speed, low-latency InfiniBand network and intelligent Exadata software. You can configure automatic backups, optimize for different workloads, and scale up the system to meet increased demands.
Oracle now offers the Zero Downtime Migration service, a quick and easy way to move on-premises Oracle Databases and Oracle Cloud Infrastructure Classic databases to Oracle Cloud Infrastructure. You can migrate databases to the following types of Oracle Cloud Infrastructure systems: Exadata, Exadata Cloud@Customer, bare metal, and virtual machine.
Zero Downtime Migration leverages Oracle Active Data Guard to create a standby instance of your database in an Oracle Cloud Infrastructure system. You switch over only when you are ready, and your source database remains available as a standby. Use the Zero Downtime Migration service to migrate databases individually or at the fleet level. See Move to Oracle Cloud Using Zero Downtime Migration for more information.
NEW QUESTION 69
A customer is looking to migrate their old database backups from their on-premises data center to Oracle Cloud Infrastructure (OCI). Which OCI service is the most cost-effective?
- A. Object Storage (standard)
- B. Block Volume
- C. Archive Storage
- D. File Storage
Answer: A
Explanation:
https://docs.cloud.oracle.com/en-us/iaas/Content/Database/Tasks/mig-onprembackup.htm
NEW QUESTION 70
You are setting up a proof of concept (POC) and need to quickly establish a secure between an on-premises data center and Oracle Cloud Infrastructure (OCI).
Which OCI service should you implement?
- A. VCN Peering
- B. Internet Gateway
- C. IPSec VPN
- D. FastConnect
Answer: C
Explanation:
Explanation
You can set up a single IPSec VPN with a simple layout that you might use for a proof of concept (POC).
NEW QUESTION 71
Which kind of scaling is supported by virtual machines in Oracle Cloud Infrastructure Compute service?
- A. Only scaling out
- B. Only scaling in
- C. Scaling up or down, and scaling in or out
- D. Only scaling up or down
Answer: C
NEW QUESTION 72
Which Oracle Cloud Infrastructure (OCI) service can be used to protect sensitive and regulated data in OCI database services?
- A. OCI Audit
- B. OCI OS management
- C. Oracle Data Safe
- D. Oracle Data Guard
Answer: C
Explanation:
Explanation/Reference: https://docs.cloud.oracle.com/en-us/iaas/data-safe/index.html
NEW QUESTION 73
___________________ is a fully-managed, scalable, and highly available service that you can use to deploy your containerized applications to the cloud.
- A. Oracle Cloud Infrastructure Container Engine for Deployment
- B. Oracle Cloud Infrastructure Container Engine for Docker
- C. Oracle Cloud Infrastructure Container Engine for Kubernetes
- D. Oracle Cloud Infrastructure Container Engine for Containerization
Answer: C
Explanation:
Explanation
Oracle Cloud Infrastructure Container Engine for Kubernetes is a fully-managed, scalable, and highly available service that you can use to deploy your containerized applications to the cloud. Use Container Engine for Kubernetes (sometimes abbreviated to just OKE) when your development team wants to reliably build, deploy, and manage cloud-native applications. You specify the compute resources that your applications require, and Container Engine for Kubernetes provisions them on Oracle Cloud Infrastructure in an existing OCI tenancy.
You can access Container Engine for Kubernetes to define and create Kubernetes clusters using the Console and the REST API. You can access the clusters you create using the Kubernetes command line (kubectl), the Kubernetes Dashboard, and the Kubernetes API.
Container Engine for Kubernetes is integrated with Oracle Cloud Infrastructure Identity and Access Management (IAM), which provides easy authentication with native Oracle Cloud Infrastructure identity functionality.
NEW QUESTION 74
Which is NOT covered by Oracle Cloud Infrastructure Service Level Agreement (SLA)?
- A. Performance
- B. Availability
- C. Reliability
- D. Manageability
Answer: C
Explanation:
Explanation/Reference: https://www.oracle.com/cloud/iaas/sla.html
NEW QUESTION 75
Which OCI storage service does not provide encryption for data at rest?
- A. Object Storage
- B. Local NVMe
- C. Block Volume
- D. File Storage
Answer: B
Explanation:
Explanation
NVMe stands for non-volatile memory express. It is a storage protocol created to fasten the transfer of data between enterprise and client systems and solid-state drives (SSDs) over a computer's high-speed Peripheral Component Interconnect Express bus. The characteristics are:
1) Local NVMe is NVMe SSD-based temporary storage.
2) It is the locally-attached NVMe devices to the OCI compute instance
3) It is used very high storage performance requirements, lots of throughput, lots of IOPS, local storage and when you don't want to go out on network
4) Oracle does not protect in any way through RAID, or snapshots, or backup out of the box and data is not encrypted at rest.
NEW QUESTION 76
Which Oracle Cloud Infrastructure (OCI) service can send you an alert when you might exceed your spending threshold?
- A. Streaming
- B. Monitoring
- C. Events
- D. Budgets
Answer: D
NEW QUESTION 77
Which offers the lowest pricing for storage (per GB)?
- A. Oracle Cloud Infrastructure Archive Storage
- B. Oracle Cloud Infrastructure Object Storage (standard tier)
- C. Oracle Cloud Infrastructure File Storage
- D. Oracle Cloud Infrastructure Block Volume
Answer: A
Explanation:
Explanation
Oracle Cloud Infrastructure Archive Storage is the lowest pricing for storage (per GB)
NEW QUESTION 78
A customer wants to deploy a customized e commerce Web application using multiple virtual machines, block storage, databases, load balancer and web application firewall.
What cloud model can be used to host this application?
- A. Platform as a Service (PaaS)
- B. Software as a Service (SaaS)
- C. Anything as a Service (XaaS)
- D. Infrastructure as a Service (IaaS)
Answer: D
Explanation:
Explanation
https://www.oracle.com/cloud/what-is-iaas/
NEW QUESTION 79
Which is NOT covered by Oracle Cloud Infrastructure Service Level Agreement (SLA)?
- A. Performance
- B. Availability
- C. Reliability
- D. Manageability
Answer: C
NEW QUESTION 80
A customer wants to use Oracle Cloud Infrastructure (OCI) for storing application backups which can be stored based on business needs.
Which OCI storage service can be used to meet the requirement?
- A. Block Volume
- B. Archive Storage
- C. File Storage
- D. Object Storage (standard)
Answer: A
NEW QUESTION 81
Which statement about the Oracle Cloud Infrastructure (OCI) shared-security model is true?
- A. You are responsible for securing the hypervisor within OCI compute service
- B. You are not responsible for any aspect of security in OCI
- C. You are responsible for managing security controls within the physical OCI network
- D. You are responsible for securing all data that you place in OCI
Answer: D
Explanation:
ExplanationOracle Cloud Infrastructure offers best-in-class security technology and operational processes to secure its enterprise cloud services. However, for you to securely run your workloads in Oracle Cloud Infrastructure, you must be aware of your security and compliance responsibilities. By design, Oracle provides security of cloud infrastructure and operations (cloud operator access controls, infrastructure security patching, and so on), and you are responsible for securely configuring your cloud resources. Security in the cloud is a shared responsibility between you and Oracle.
In a shared, multi-tenant compute environment, Oracle is responsible for the security of the underlying cloud infrastructure (such as data-center facilities, and hardware and software systems) and you are responsible for securing your workloads and configuring your services (such as compute, network, storage, and database) securely.
In a fully isolated, single-tenant, bare metal server with no Oracle software on it, your responsibility increases as you bring the entire software stack (operating systems and above) on which you deploy your applications.
In this environment, you are responsible for securing your workloads, and configuring your services (compute, network, storage, database) securely, and ensuring that the software components that you run on the bare metal servers are configured, deployed, and managed securely.
The responsibilities can be divided as:
NEW QUESTION 82
Which Oracle Cloud Infrastructure service allows you to run code without provisioning any underlying infrastructure resources?
- A. Storage Gateway
- B. Oracle Functions
- C. Compute service
- D. Oracle Container Engine for Kubernetes
Answer: B
NEW QUESTION 83
......
Full 1Z0-1085-20 Practice Test and 100 unique questions with explanations waiting just for you, get it now: https://www.exams-boost.com/1Z0-1085-20-valid-materials.html