Question 1

A hospital in Austin has hosted its web based medical records portal entirely In Oraclecloud Infrastructure(OCI) using Compute Instances for its web-tier and DB system database for its data tier. To validatecompliance with Health Insurance Portability and Accountability (HIPAA), the security professional to checktheir systems it was found that there are a lot of unauthorized coming requests coming from a set of IPaddresses originating from a country in Southeast Asia.Which option can mitigate this type of attack?

Options :

A : Block the attacking IP address by implementing a OCI Web Application Firewall policy using Access Control Rules

B : Block the attacking IP address by implementing a OCI Web Application Firewall policy using AccessControl Rules

C : Mitigate the attack by changing the Route fable to redirect the unauthorized traffic to a dummy Compute instance

D : Block the attacking IP address by creating a Security List rule to deny access to the subnet where the web server Is running

Answer: B

Question 2

You are tasked with building a highly available, fault tolerant web application for your current employer. Thesecurity team is concernedabout an increase in malicious web-based attacks across the internet and asked whatyou can do to add a higher level of security to the website.How should you architect the solution on Oracle Cloud Infrastructure (OCI) to meet all requirements definedbyyour organization? (Choose the best answer.)

Options :

A : Deploy at least 3 web application servers, each in a different fault domain, using a regional private subnet. Place a public load balancer in a regional public subnet and create a backend set for all of theweb application servers. Deploy a Web Application Firewall (WAF) and configure the load balancer public IP address as the origin.

B : Deploy at least 3 web application servers, each in a different fault domain, using a regional private subnet. Place a public load balancer in a regional public subnet and create a backend set for all of the web application servers. Create a Geolocation steering policy in Traffic Management and add an answer pool that directs to the public IP address of the load balancer. Configure a global catch-all rule to use this answer pool.

C : Deploy at least 3 web application servers, each in a different fault domain, using a regional public subnet. Ensure that each web application server is assigned a public IP address. Deploy a Web Application Firewall (WAF) and configure one Origin for each public IP address.

D : Deploy at least 3 web application servers, each in a different fault domain, using a regional public subnet. Use the OCI Traffic Management service to create a load balancing policy that will resolve DNS evenly between all web servers.

Answer: A

Question 3

Your company has recently deployed a new web application that uses Oracle functions Your managerInstructed you to Implement major manage your systems more effectively. You know that Oracle functionsautomatically monitors functions on your behalf reports metrics through Service Metrics.Which two metrics are collected and made available by this feature?

Options :

A : length of time a function runs

B : number of times a function is removed

C : number of times a function isinvoked

D : amount of CPU used by a function

E : number of concurrent connections

Answer: A,C

Question 4

A civil engineering company is running an online portal In which engineers can upload there constructionsphotos, videos, and other digital files.There is a new requirement for you to implement: the online portal must offload the digital content to anObject Storage bucket for a period of 72 hours. After the provided time limit has elapsed, the portal will holdall the digital content locally and wait for the next offload period.Which option fulfills this requirement?

Options :

A : Create a pre-authenticated URL for the entire Object Storage bucket to read and list the content with an expiration of 72 hours

B : Create a pre authenticated URL lot each object that Is uploaded to the Object Storage bucket with an expiration of 72 hours

C : Create a Dynamic Group with matchingrule for the portal compute Instance and grant access to the Object Storage bucket for 72 hours.

D : Create a pre authenticated URL for the entire Object Storage bucket to write content with an expiration of 72 hours.

Answer: D

Question 5

A developer is using Oracle Functions to deploy her code as part of an event-driven solution in Oracle Cloud Infrastructure (OCI). When sheinvokes her function, Oracle Functions returns a FunctionlnvokelmageNotAvailable message and a 502 error 1z0-997-21-page106-image22 Which of the following options is NOT a plausible reason for this error?

Options :

A : Missing or invalid IAM policy to give Oracle Functions read access to images stored for functions in repositories in OCI Registry.

B : The function does not exist in the specified location in OCI Registry.

C : The VCN being used does not have an internet gateway or a service gateway configured for Oracle Functions to be able toaccess OCI Registry.

D : OCI Events service rule is not configured with the correct location of the function in OCI Registry.

Answer: D