Top Tips Of Most Recent 1z0-1085-20 Preparation

NEW QUESTION 1
According to Shared security model, which two are a customer's responsibilities in Oracle Cloud Infrastructure (OCI)?

• A. Physical security of OCI data center facilities
• B. Virtual Machine hypervisor
• C. Local NVMe data persistence
• D. Customer data
• E. Object Storage data durability

Answer: DE

Explanation:
Customer and Oracle's responsibilities can be divided into the following areas:
Physical Security: Oracle is responsible for protecting the global infrastructure that runs all of the services offered in Oracle Cloud Infrastructure. This infrastructure consists of the hardware, software, networking, and facilities that run Oracle Cloud Infrastructure services.
Identity and Access Management (IAM): As with all Oracle cloud services, you should protect your cloud access credentials and set up individual user accounts. You are responsible for managing and reviewing access for your own employee accounts and for all activities that occur under your tenancy. Oracle is responsible for providing effective IAM services such as identity management, authentication, authorization, and auditing.
Workload Security: You are responsible for protecting and securing the operating system and application layers of your compute instances from attacks and compromises. This protection includes patching applications and operating systems, operating system configuration, and protection against malware and network attacks. Oracle is responsible for providing secure images that are hardened and have the latest patches. Also, Oracle makes it simple for you to bring the same third-party security solutions that you use today.
Data Classification and Compliance: You are responsible for correctly classifying and labeling your data and meeting any compliance obligations. Also, you are responsible for auditing your solutions to ensure that they meet your compliance obligations.
Host Infrastructure Security: You are responsible for securely configuring and managing your compute (virtua
hosts, containers), storage (object, local storage, block volumes), and platform (database configuration) services. Oracle has a shared responsibility with you to ensure that the service is optimally configured and secured. This responsibility includes hypervisor security and the configuration of the permissions and network access controls required to ensure that hosts can communicate correctly and that devices are able to attach or mount the correct storage devices.
Network Security: You are responsible for securely configuring network elements such as virtual networking, load balancing, DNS, and gateways. Oracle is responsible for providing a secure network infrastructure.
Client and Endpoint Protection: Your enterprise uses various hardware and software systems, such as mobile devices and browsers, to access your cloud resources. You are responsible for securing all clients and endpoints that you allow to access Oracle Cloud Infrastructure services.

NEW QUESTION 2
Which is NOT available to you whenever Oracle Cloud Infrastructure creates or resolves an incident?

• A. Twitter notifications
• B. Text Message notifications
• C. Email notifications
• D. Webhook notifications

Answer: A

Explanation:
The Oracle Cloud Infrastructure Notifications service broadcasts messages to distributed components through a publish-subscribe pattern, delivering secure, highly reliable, low latency and durable messages for applications hosted on Oracle Cloud Infrastructure and externally. Use Notifications to get notified when event rules are triggered or alarms are breached, or to directly publish a message.
Messages sent out as email by the Oracle Cloud Infrastructure Notifications service are processed and delivered through Oracle resources

NEW QUESTION 3
Which gateway can be used to provide internet access to an Oracle Cloud Infrastructure compute instance in a private subnet?

• A. NAT Gateway
• B. Service Gateway
• C. Dynamic Routing Gateway
• D. Internet Gateway

Answer: A

Explanation:
A NAT gateway gives cloud resources without public IP addresses access to the internet without exposing those resources to incoming internet connections.

NEW QUESTION 4
Which two security capabilities are offered by Oracle Cloud Infrastructure?

• A. Always on data encryption for data-at-rest.
• B. Certificate Management service
• C. Captcha
• D. Key Management service
• E. Managed Active Directory service

Answer: AD

Explanation:
Oracle Cloud Infrastructure’s security approach is based on seven core pillars. Each pillar has multiple solutions designed to maximize the security and compliance of the platform and to help customers to improve their security posture.
High Availability: Offer fault-independent data centers that enable high-availability scale-out architectures and are resilient against network attacks, ensuring constant uptime in the face of disaster and security attack.
Customer Isolation: Allow customers to deploy their application and data assets in an environment that commits full isolation from other tenants and Oracle’s staff.
Data Encryption: Protect customer data at-rest and in-transit in a way that allows customers to meet the security and compliance requirements with respect to cryptographic algorithms and key management.
Security Controls: Offer customers effective and easy-to-use application, platform, and network security solutions that allow them to protect their workloads, have a secure application delivery using a global edge network, constrain access to their services, and segregate operational responsibilities to reduce the risk associated with malicious and accidental user actions.
Visibility: Offer customers comprehensive log data and security analytics that they can use to audit and monitor actions on their resources, allowing them to meet their audit requirements and reduce security and operational risk.
Secure Hybrid Cloud: Enable customers to use their existing security assets, such as user accounts and policies, as well as third-party security solutions, when accessing their cloud resources and securing their data and application assets in the cloud.
Verifiably Secure Infrastructure: Follow rigorous processes and use effective security controls in all phases of cloud service development and operation. Demonstrate adherence to Oracle’s strict security standards through third-party audits, certifications, and attestations. Help customers demonstrate compliance readiness to internal security and compliance teams, their customers, auditors, and regulators.

NEW QUESTION 5
Which service is the most effective for moving large amounts of data from your on-premises to OCI?

• A. Data Transfer appliance
• B. Data Safe
• C. Internal Gateway
• D. Dynamic Routing Gateway

Answer: A

NEW QUESTION 6
Which Oracle Cloud Infrastructure (OCI) service can be used to protect sensitive and regulated data in OCI database services?

• A. Oracle Data Guard
• B. OCI Audit
• C. Oracle Data Safe
• D. OCI OS management

Answer: C

Explanation:
Oracle Data Safe is a unified control center for your Oracle databases which helps you understand the sensitivity of your data, evaluate risks to data, mask sensitive data, implement and monitor security controls, assess user security, monitor user activity, and address data security compliance requirements.
Whether you’re using an Autonomous Database or an Oracle DB system, Oracle Data Safe delivers essential data security capabilities as a service on Oracle Cloud Infrastructure.
Features of Oracle Data Safe:
Oracle Data Safe provides the following set of features for protecting sensitive and regulated data in Oracle Cloud databases, all in a single, easy-to-use management console:
1) Security Assessment helps you assess the security of your cloud database configurations. It analyzes database configurations, user accounts, and security controls, and then reports the findings with recommendations for remediation activities that follow best practices to reduce or mitigate risk.
2) User Assessment helps you assess the security of your database users and identify high risk users. It reviews information about your users in the data dictionary on your target databases, and calculates a risk score for
each user. For example, it evaluates the user types, how users are authenticated, the password policies assigned to each user, and how long it has been since each user has changed their password. It also provides a direct link to audit records related to each user. With this information, you can then deploy appropriate security controls and policies.
3) Data Discovery helps you find sensitive data in your cloud databases. You tell Data Discovery what kind of sensitive data to search for, and it inspects the actual data in your database and its data dictionary, and then returns to you a list of sensitive columns. By default, Data Discovery can search for a wide variety of sensitive data pertaining to identification, biographic, IT, financial, healthcare, employment, and academic information.
4) Data Masking provides a way for you to mask sensitive data so that the data is safe for non-production purposes. For example, organizations often need to create copies of their production data to support development and test activities. Simply copying the production data exposes sensitive data to new users. To avoid a security risk, you can use Data Masking to replace the sensitive data with realistic, but fictitious data.
5) Activity Auditing lets you audit user activity on your databases so you can monitor database usage and be alerted of unusual database activities.

NEW QUESTION 7
Which capability enables you to search, purchase, and start using software in your Oracle Cloud Infrastructure (OCI) tenancy?

• A. OCI Marketplace
• B. OCI OS Management
• C. OCI Resource Manager
• D. OCI Registry

Answer: A

Explanation:
Oracle Cloud Infrastructure Marketplace is an online store that offers solutions specifically for customers of Oracle Cloud Infrastructure. In the Oracle Cloud Infrastructure Marketplace catalog, you can find listings for two types of solutions from Oracle and trusted partners: images and stacks. These listing types include different categories of applications. Also, some listings are free and others require payment.
Images are templates of virtual hard drives that determine the operating system and software to run on an instance. You can deploy image listings on an Oracle Cloud Infrastructure Compute instance. Marketplace also offers stack listings. Stacks represent definitions of groups of Oracle Cloud Infrastructure resources that you can act on as a group. Each stack has a configuration consisting of one or more declarative configuration files. With an image or a stack, you have a customized, more streamlined way of getting started with a publisher's software.

NEW QUESTION 8
Oracle cloud Infrastructure is compliant with which three industry standards?

• A. SOC 1 Type 2 and SOC 2 Type 2 attestations
• B. NERC Critical Infrastructure Protection Standards
• C. Health Insurance Portability and Accountability Act (HIPAA)
• D. ISO 27001:2013 certification
• E. Health Care Compliance Association (HCCA)

Answer: ACD

Explanation:
Here is the official list of all industry standards that OCI complies with : https://www.oracle.com/in/cloud/cloud-infrastructure-compliance/

NEW QUESTION 9
Which statement below is not true for Oracle Cloud infrastructure Compartments?

• A. Resources can be moved from one compartment to another
• B. Compartments cannot be nested
• C. Each OCI resource belongs to a single compartment
• D. Resources and compartments can be added and deleted anytime

Answer: B

Explanation:
When creating a compartment, you must provide a name for it (maximum 100 characters, including letters, numbers, periods, hyphens, and underscores) that is unique within its parent compartment. You must also provide a description, which is a non-unique, changeable description for the compartment, from 1 through 400 characters. Oracle will also assign the compartment a unique ID called an Oracle Cloud ID.
You can create subcompartments in compartments to create hierarchies that are six levels deep.

NEW QUESTION 10
Which Oracle Cloud Infrastructure storage service can provide a shared file system across multiple compute instances?

• A. file Storage
• B. Local NVMe
• C. Object Storage
• D. Archive storage

Answer: A

Explanation:
Oracle Cloud Infrastructure File Storage service provides a durable, scalable, secure, enterprise-grade netwo file system. You can connect to a File Storage service file system from any bare metal, virtual machine, or container instance in your Virtual Cloud Network (VCN). You can also access a file system from outside the VCN using Oracle Cloud Infrastructure FastConnect and Internet Protocol security (IPSec) virtual private network (VPN).
Large Compute clusters of thousands of instances can use the File Storage service for high-performance shar storage. Storage provisioning is fully managed and automatic as your use scales from a single byte to exabytes without upfront provisioning.

NEW QUESTION 11
Which three methods can you use to create or modify Oracle Cloud Infrastructure (OCI) resources?

• A. REST APIs
• B. OCI desktop client
• C. Secure Shell (SSH)
• D. OCI Console
• E. Command-line Interface
• F. Remote Desktop Protocol (RDP)
• G. Serial console connection

Answer: ADE

Explanation:
You can create and manage resources in the following ways:
Oracle Cloud Infrastructure ConsoleThe Console is an intuitive, graphical interface that lets you create and manage your instances, cloud networks, and storage volumes, as well as your users and permissions.
See Using the Console.
Oracle Cloud Infrastructure APIsThe Oracle Cloud Infrastructure APIs are typical REST APIs that use HTTPS requests and responses. See API Requests.
SDKsSeveral Software Development Kits are available for easy integration with the Oracle Cloud Infrastructure APIs, including SDKs for Java, Ruby, and Python. For more information, see Developer Resources.
Command Line Interface (CLI)You can use a command line interface with some services. For more information, see Developer Resources.
TerraformOracle supports Terraform. Terraform is "infrastructure-as-code" software that allows you to define your infrastructure resources in files that you can persist, version, and share. For more information, see Getting Started with the Terraform Provider.
AnsibleOracle supports the use of Ansible for cloud infrastructure provisioning, orchestration, and configuration management. Ansible allows you to automate configuring and provisioning your cloud infrastructure, deploying and updating software assets, and orchestrating your complex operational processes. For more information, see Getting Started with Ansible for Oracle Cloud Infrastructure.
Resource ManagerResource Manager is an Oracle Cloud Infrastructure service that allows you to automate the process of provisioning your Oracle Cloud Infrastructure resources. It helps you install, configure, and manage resources using the "infrastructure-as-code" model. For more information, see Overview of Resource Manager.

NEW QUESTION 12
Which OCI service is the most cost-effective?

• A. File Storage
• B. Object Storage (standard)
• C. Block Volume
• D. Archive Storage

Answer: B

NEW QUESTION 13
Which Oracle cloud infrastructure capability can be used to protect against power failures within an availability Domain?

• A. Data Plane
• B. Fault Domains
• C. Services Cells
• D. Top of Rack Switch

Answer: B

Explanation:
A fault domain is a grouping of hardware and infrastructure within an availability domain. Each availability domain contains three fault domains. Fault domains provide anti-affinity: they let you distribute your instances so that the instances are not on the same physical hardware within a single availability domain. A hardware failure or Compute hardware maintenance event that affects one fault domain does not affect instances in other fault domains. In addition, the physical hardware in a fault domain has independent and redundant power supplies, which prevents a failure in the power supply hardware within one fault domain from affecting other fault domains.
To control the placement of your compute instances, bare metal DB system instances, or virtual machine DB system instances, you can optionally specify the fault domain for a new instance or instance pool at launch time. If you don't specify the fault domain, the system selects one for you. Oracle Cloud Infrastructure makes a best-effort anti-affinity placement across different fault domains, while optimizing for available capacity in the availability domain. To change the fault domain for an instance, terminate it and launch a new instance in the preferred fault domain.
Use fault domains to do the following things:
Protect against unexpected hardware failures or power supply failures. Protect against planned outages because of Compute hardware maintenance.

NEW QUESTION 14
A company has developed an eCommerce web application In Oracle Cloud Infrastructure. What should they do to ensure that the application has the highest level of resilience?

• A. Deploy the application across multiple Regions and Availability Domains.
• B. Deploy the application across multiple Availability Domains and subnet.
• C. Deploy the application across multiple Virtual Cloud Networks.
• D. Deploy the application across multiple Availability Domains and Fault Domains.

Answer: A

Explanation:
For highest level of resilience you can deploy the application between regions and distribute on availability domain and fault domains.

NEW QUESTION 15
Which service level agreement type is NOT offered by Oracle Cloud Infrastructure Compute service?

• A. Data Plane
• B. Performance
• C. Application Plane
• D. Control Plane

Answer: C

Explanation:
Oracle offers several different service level agreements as defined in this section (Service Level Agreements).Service level agreements range from least restrictive (data plane) to more restrictive (control plane) to most restrictive (performance).

NEW QUESTION 16
You are analyzing your Oracle Cloud Infrastructure (OCI) usage with Cost Analysis tool in the OCI console. Which of the following is NOT a default feature of the tool?

• A. Filter costs by applications
• B. Filter costs by tags
• C. Filter costs by compartments
• D. Filter costs by date

Answer: A

Explanation:
Cost Analysis is an easy-to-use visualization tool to help you track and optimize your Oracle Cloud Infrastructure spending, allows you to generate charts, and download accurate, reliable tabular reports of aggregated cost data on your Oracle Cloud Infrastructure consumption. Use the tool for spot checks of spending trends and for generating reports

NEW QUESTION 17
Which three components are part of Oracle Cloud Infrastructure (OCI) identity and access management service?

• A. Regional Subnets
• B. Policies
• C. Users
• D. Compute Instances
• E. Dynamic Groups
• F. Roles
• G. Virtual Cloud Networks

Answer: BCE

Explanation:
Components of IAMIAM uses the components described in this section. To better understand how the components fit together, see Example Scenario.
RESOURCE
The cloud objects that your company's employees create and use when interacting with Oracle Cloud Infrastructure. For example: compute instances, block storage volumes, virtual cloud networks (VCNs), subnets, route tables, etc.
USER
An individual employee or system that needs to manage or use your company's Oracle Cloud
Infrastructure resources. Users might need to launch instances, manage remote disks, work with your virtual cloud network, etc. End users of your application are not typically IAM users. Users have one or
more IAM credentials (see User Credentials).
GROUP
A collection of users who all need the same type of access to a particular set of resources or compartment.
DYNAMIC GROUP
A special type of group that contains resources (such as compute instances) that match rules that you define (thus the membership can change dynamically as matching resources are created or deleted). These instances act as "principal" actors and can make API calls to services according to policies that you write for the dynamic group.
NETWORK SOURCE
A group of IP addresses that are allowed to access resources in your tenancy. The IP addresses can be public IP addresses or IP addresses from a VCN within your tenancy. After you create the network source, you use policy to restrict access to only requests that originate from the IPs in the network source.
COMPARTMENT
A collection of related resources. Compartments are a fundamental component of Oracle Cloud
Infrastructure for organizing and isolating your cloud resources. You use them to clearly separate resources for the purposes of measuring usage and billing, access (through the use of policies), and isolation (separating the resources for one project or business unit from another). A common approach is to create a compartment for each major part of your organization. For more information, see Setting Up Your Tenancy.
TENANCY
The root compartment that contains all of your organization's Oracle Cloud Infrastructure resources. Ora automatically creates your company's tenancy for you. Directly within the tenancy are your IAM entities (users, groups, compartments, and some policies; you can also put policies into compartments inside the tenancy). You place the other types of cloud resources (e.g., instances, virtual networks, block storage
volumes, etc.) inside the compartments that you create.
POLICY
A document that specifies who can access which resources, and how. Access is granted at the group and compartment level, which means you can write a policy that gives a group a specific type of access within a specific compartment, or to the tenancy itself. If you give a group access to the tenancy, the group automatically gets the same type of access to all the compartments inside the tenancy. For more information, see Example Scenario and How Policies Work. The word "policy" is used by people in different ways: to mean an individual statement written in the policy language; to mean a collection of statements in a single, named "policy" document (which has an Oracle Cloud ID (OCID) assigned to it); and to mean the overall body of policies your organization uses to control access to resources.
HOME REGION
The region where your IAM resources reside. All IAM resources are global and available across all regio but the master set of definitions reside in a single region, the home region. You must make changes to
your IAM resources in your home region. The changes will be automatically propagated to all regions. For more information, see Managing Regions.
FEDERATION
A relationship that an administrator configures between an identity provider and a service provider. When you federate Oracle Cloud Infrastructure with an identity provider, you manage users and groups in the identity provider. You manage authorization in Oracle Cloud Infrastructure's IAM service. Oracle Cloud Infrastructure tenancies are federated with Oracle Identity Cloud Service by default.
https://docs.cloud.oracle.com/en-us/iaas/Content/Identity/Concepts/overview.htm

NEW QUESTION 18
Which SLA type is not offered by Oracle Cloud Infrastructure compute service?

• A. Data Plane
• B. Performance Plane
• C. Service Plane
• D. Control Plane

Answer: C

Explanation:
Service Plane is NOT an SLA provided by OCI. See the table below:

NEW QUESTION 19
Which is a key benefit of using oracle cloud infrastructure autonomous data warehouse?

• A. No username and password required
• B. Scale both CPU and Storage without downtime
• C. Apply database patches as they become available
• D. Maintain root level acress to the underlying operating system

Answer: B

Explanation:
Oracle Autonomous Data Warehouse is a cloud data warehouse service that eliminates virtually all the complexities of operating a data warehouse and securing data. It automates provisioning, configuring, securing, tuning, scaling, patching, backing up, and repairing of the data warehouse. Unlike other “fully managed” cloud data warehouse solutions that only patch and update the service, it also features elastic, automated scaling, performance tuning, security, and a broad set of built-in capabilities that enable machine learning analysis, simple data loading, and data visualizations.
Data Warehouse uses continuous query optimization, table indexing, data summaries, and auto-tuning to ensure consistent high performance even as data volume and number of users grows. Autonomous scaling can temporarily increase compute and I/O by a factor of three to maintain performance. Unlike other cloud services which require downtime to scale, Autonomous Data Warehouse scales while the service continues to run.

NEW QUESTION 20
What does compute instance horizonal scaling mean?

• A. stopping/starting the instance
• B. backing up data to object storage
• C. adding additional compute instances
• D. changing compute instance size

Answer: C

Explanation:
Cloud Horizontal Scaling refers to provisioning additional servers to meet your needs, often splitting workloads between servers to limit the number of requests any individual server is getting. In a cloud-based environment, this would mean adding additional instances instead of moving to a larger instance size.
Cloud Vertical Scaling refers to adding more CPU or memory to an existing server, or replacing one server with a more powerful server.

NEW QUESTION 21
You are required to host several files in a location that can be publicly accessible from anywhere in the world. Which Oracle Cloud Infrastructure (OCI) service should you use?

• A. OCI Object Storage
• B. Oracle Functions
• C. OCI Block Volume
• D. OCI File Storage
• E. OCI Storage Gateway

Answer: A

NEW QUESTION 22
......