Question 1

You are creating an Oracle Cloud Infrastructure Dynamic Group. To determine the members of thisgroup you are defining a set of matching rules. Which of the following are the supported variables to define conditions in the matching rules? (Choose Two)

Options :

A : instance.compartment.id -the OCID of the compartment where the instance resides.

B : instance.tenancy.id -the OCID of the tenancy where the instance resides.

C : tag.< tagnamespace >.< tagkey >.value -the tag namespace and tag key.

D : iam.policy.id - the OCID of the IAM policy to apply to the group.

Answer: A,C

Question 2

A hospital in Austin has hosted its web based medical records portal entirely In Oraclecloud Infrastructure

(OCI) using Compute Instances for its web-tier and DB system database for its data tier. To validate

compliance with Health Insurance Portability and Accountability (HIPAA), the security professional to check

their systems it was found that there are a lot of unauthorized coming requests coming from a set of IP

addresses originating from a country in Southeast Asia.

Which option can mitigate this type of attack?

Options :

A : Block the attacking IP address by implementing a OCI Web Application Firewall policy using Access Control Rules

B :

Block the attacking IP address by implementing a OCI Web Application Firewall policy using Access

Control Rules

C : Mitigate the attack by changing the Route fable to redirect the unauthorized traffic to a dummy Compute instance

D : Block the attacking IP address by creating a Security List rule to deny access to the subnet where the web server Is running

Answer: B

Question 3

A civil engineering company is running an online portal In which engineers can upload there constructions

photos, videos, and other digital files.

There is a new requirement for you to implement: the online portal must offload the digital content to an

Object Storage bucket for a period of 72 hours. After the provided time limit has elapsed, the portal will hold

all the digital content locally and wait for the next offload period.

Which option fulfills this requirement?

Options :

A : Create a pre-authenticated URL for the entire Object Storage bucket to read and list the content with an expiration of 72 hours

B : Create a pre authenticated URL lot each object that Is uploaded to the Object Storage bucket with an expiration of 72 hours

C : Create a Dynamic Group with matchingrule for the portal compute Instance and grant access to the Object Storage bucket for 72 hours.

D : Create a pre authenticated URL for the entire Object Storage bucket to write content with an expiration of 72 hours.

Answer: D

Question 4

A retail company has recently adopted a hybrid architecture. They have the following requirements for their

end-to-end Connectivity model between their on-premises data center and Oracle Cloud Infrastructure (OC1)

region

*Highly available connection with service level redundancy

* Dedicated network bandwidth with low latency

Which connectivity setup is the most cost effective solution for this scenario?

Options :

A :

Setup IPsec VPN as your primary connection, and a FastConnect virtual circuit as a backup connection. Use separate edge devices in your on-premises data canter for each connection from your edge devices, advertise more specific routes IPSec VPN, and specific routes through the backup FastConnect virtual circuit

B :

SetupFastConnect virtual circuit as your primary connection, and a second FastConnect virtual circuit as a backup connection. Use separate edge devices in your FastConnect physical connectivity is redundant Use a single edge device in your on premises datacenter for each connection From yc device, advertise more specific routes via primary FastConnect virtual circuit, and less specific routes through t backup FastConnect circuit

C :

Setup FastConnect virtual circuit as your primary connection, and an IPSecVPN as a backup connection. Use separate edge devices in your on-premises data center for each connection. From your edge devices, advertise more specific routes through FastConnect virtual circuit, and more specific routes through the backup IPSec VPN path.

D :

Setup IPSec VPN as your primary connection, and a second IPSec VPN as a backup connection. Use separate edge devices in your on p data center for each connection. From your edge devices, advertise more specific routes via primary IPSec VPN. and lessspecific rod the backup IPSec VPN.

Answer: D

Question 5

You are working as a security consultant with a global insurance organization which is using Microsoft Azure

Active Directory (AD) as identity provided to manager user login/passwords. When a user logs in to Oracle

Cloud infrastructure (OCI) console, it should get authenticated by Azure AD.

Which set of steps are required to configure at OCI side in order to get it enabled

Options :

A : Setup Azure AD as an Enterprise Application, map Azure AD users and groups and policies to OCIgroups and users

B : Setup Azure AD as an Identity Provider, Import users and groups from Azure AD to OCI, set up IAM policies to govern access to Azure AD groups

C : Setup Azure AD as an Enterprise Application, configure OCI for single sign-on, map Azure ADgroups to OCI groups, set up the IAM policies to govern access to Azure AD groups

D : Setup Azure AD as an Identity Provider, map Azure AD groups to OCI groups, set up the IAM policies to govern access to Azure AD groups

Answer: D

Higher Test Marks with Free Online 1Z0-997-25 Exam Practice

Buying Options: