Question 1

You have been contracted by a local e-commerce company to assist with enhancing their online shopping application. The application is currently deployed in a single Oracle Cloud Infrastructure (OCI) region. The application utilizes a public load balancer, application servers in a private subnet, and a database in a separate, private subnet. The company would like to deploy another set of similar infrastructure in a different OCI region that will act as standby site. In the event of a failure at the primary site, all customers should be routed to the failover site automatically. After deploying the additional infrastructure within the second region, how should you configure automated failover requirements? (Choose the best answer.)

Options :

A : Create a new A record in DNS that points to the public load balancer at the secondary site. Create a CNAME for the sub-domain failover that will resolve to the new A rec-ord. Inform customers to prepend the website URL with failover if the primary site is unavailable.c

B : Create a load balancer policy in the Traffic Management service. Configure one answer for each site. Set the answer for the primary site with a weight of 10 and the answer for the secondary site with a weight of 100.

C : Deploy a new load balancer in the primary region. Create one backend set for the primary application servers and a second backend set for the standby application servers. Create a listener for the primary backend set with a timeout of 3 minutes. Create a listener for the secondary backend set with a timeout of 10 minutes.

D : Create a failover policy in the Traffic Management service. Set the IP address of the public load balancer for the primary site in answer pool 1. Set the IP address of the public load balancer for the secondary site in answer pool 2. Define a health check to monitor both sites.

Answer: D

Question 2

You have a web application running on Oracle Cloud Infrastructure (OCI) that lets users log in with a username and password. You notice that an attacker has tried to use SQL comment to alter the database query, remove the password check and log in as a user. You decide to prevent any future attacks. Which of the following OCI services or features would you choose to safeguard your application? (Choose the best answer.)

Options :

A : Data Safe

B : Web Application Framework (WAF)

C : Vault

D : Network Security Group

Answer: B

Question 3

You set up a bastion host in your Virtual Cloud Network (VCN) to allow only your IP ad-dress (140.19.2.140) to establish SSH connections with your compute instances that are deployed in a private subnet. The compute instances have an attached Network Security Group (NSG) with a Source Type: Network Security Group (NSG), Source NSG: NSG-050504. To secure the bastion host, you add the following ingress rules to its NSG: Type: All TCP Proto-col: TCP Port Range: 22 Source: 140.19.2.140/32 Type: All TCP Protocol: TCP Port Range: 22 Source: NSG-050504 However, when you check the bastion host logs, you discover that there are IP addresses other than your own that can access your bastion host. What is the root cause of this issue?

Options :

A : The port 22 provides unrestricted access to 140.19.2.140 and to other IP addresses.

B : All compute instances associated with NSG-050504 are also able to connect to the bastion host.

C : The security list allows access to all IP addresses that override the NSG ingress rules.

D : A netmask of /32 allows all IP addresses in the140.19.2.0 network, other than your IP 140.19.2.140.

Answer: B

Question 4

You have been asked to update the lifecycle policy for object storage using the Oracle Cloud Infrastructure (OCI) Command Line Interface (CLI). Which command can successful-ly update the policy? (Choose the best answer.)

Options :

A :

B :

C :

D :

Answer: D

Question 5

(CHK) Your company recently adopted a hybrid cloud architecture which requires them to migrate some oftheir on-premises web applications to Oracle Cloud Infrastructure (OCI). You created a Terraform templatewhich automatically provisions OCI resources such as compute instances, load balancer, and a databaseinstance. After running the stack using the terraform apply command, it successfully launched the computeinstances and the load balancer, but it failed to create a new database instance with the following error:Service error: NotAuthorizedOrNotFound. shape VM.Standard2.4 not found. http status code: 404 You discovered that the resource quotas assigned to your compartment prevent you from using VM.Standard2.4instance shapes available in your tenancy. You edit the Terraform script and replace the shape with VM.Standard2.2 Which option would you recommend to re-run the terraform command to have required OCIresources provisioned with the least effort? (Choose the best answer.)

Options :

A : terraform refresh target=oci_database_db_system.db_system

B : terraform apply auto-approve

C : terraform apply target=oci_database_db_system.db_system

D : terraform plan target=oci_database_db_system.db_system

Answer: C