Question 1

You are working as a solution architect for an online retail store to create a portal to allow the users to pay fortheir groceries using credit cards. Since the application is not fully compliantwith the Payment Card IndustryData Security Standard (PCI DSS), your company is looking to use a third party payment service to processcredit card payments.The third party service allows a maximum of Spelunk IP addresses 5 public IP addresses at a timeHowever,your website is using Oracle Cloud Infrastructure (OCI) Instance Pool Auto Scaling policy to create up tocreate up to 15 Instances during peak traffic demand, which are launched In VCN private in VCN privatesubnets and attached to an OCI public Load Balancer. Upon user payment, the portal connects to the paymentservice over the Interne! to complete the transactionWhat solution can you implement to make sure that all compute Instances can connect to the third partysystem to process the payments aw peak traffic demand?

Options :

A : Route credit card payment request from the compute instances through the NAT Gateway. On the third-party services, whitelist the public IP associated with the NAT Gateway

B : Create an OCI Command Line Interface (CLI) scriptto automatically reserve public IP address for the compute instances. On the third-party services, whitelist the Reserved public IP

C : Whitelist the Internet Gateway Public IP on the third party service and route all payment requests through the InternetGateway

D : Route payment request from the compute instances through the OCI Load Balancer, which will then be routed to the third party service

Answer: A

Question 2

You have an application running in Microsoft Azure and want to use Oracle Autonomous Data warehouse(ADW) instance for running business analytics.How can you build a secure solution for such a use-case?

Options :

A : Connect the Oracle ADW in your VCN to the Microsoft Azure VNet over the internet.

B : Create a software VPN connection between Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN) and Microsoft Azure Virtual Network (VNet) and connect the application with Oracle ADW instance

C : Setup an interconnect between OCI and Microsoft Azure using FastConnect and ExpressRoute. Use a Service Gateway in OCI Virtual Cloud Network to provide connectivity to the Oracle ADW instance for the application in Microsoft Azure VNet.

D : Create a software Remote Peering Connection between Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN) and Microsoft Azure Virtual Network (VNet) and connect the application with Oracle ADW instance.

Answer: C

Question 3

You are working as a cloudconsultant for a major media company. In the US and your client requested to consolidate all of their log streams, access logs, application logs, and security logs into a single system. The client wants to analyze all of their logs In real-time based on heuristics and the result should be validated as well. This validation process requires going back to data samples extracted from the last 8 hours. What approach should you take for this scenario?

Options :

A : Create an auto scaling pool of syslog-enabled servers using compute instances which will store the logs In Object storage, then use map reduce jobs to extract logs from Object storage, and apply heuristics on the logs

B : Create a bare-metal instance big enough to host a syslog enabled server to process the logs and store logs on the locally attached NVMe SSDs for rapid retrieval of logs when needed.

C : Set up an OCI Audit service and ingest all the API arils from Audit service pragmatically to a client side application to apply heuristics and save the result inan OCI Object storage.

D : Stream all the logs and cloud events of Events service to Oracle Streaming Service. Build a client process that will apply heuristics on the logs and store them in an Object Storage

Answer: D

Question 4

Your company has recently deployed a new web application that uses Oracle functions Your managerInstructed you to Implement major manage your systems more effectively. You know that Oracle functionsautomatically monitors functions on your behalf reports metrics through Service Metrics.Which two metrics are collected and made available by this feature?

Options :

A : length of time a function runs

B : number of times a function is removed

C : number of times a function isinvoked

D : amount of CPU used by a function

E : number of concurrent connections

Answer: A,C

Question 5

A hospital in Austin has hosted its web based medical records portal entirely In Oraclecloud Infrastructure(OCI) using Compute Instances for its web-tier and DB system database for its data tier. To validatecompliance with Health Insurance Portability and Accountability (HIPAA), the security professional to checktheir systems it was found that there are a lot of unauthorized coming requests coming from a set of IPaddresses originating from a country in Southeast Asia.Which option can mitigate this type of attack?

Options :

A : Block the attacking IP address by implementing a OCI Web Application Firewall policy using Access Control Rules

B : Block the attacking IP address by implementing a OCI Web Application Firewall policy using AccessControl Rules

C : Mitigate the attack by changing the Route fable to redirect the unauthorized traffic to a dummy Compute instance

D : Block the attacking IP address by creating a Security List rule to deny access to the subnet where the web server Is running

Answer: B