Most Recent Oracle 1Z0-997-23 Exam Dumps

Prepare for the Oracle Cloud Infrastructure 2023 Architect Professional exam with our extensive collection of questions and answers. These practice Q&A are updated according to the latest syllabus, providing you with the tools needed to review and test your knowledge.

QA4Exam focus on the latest syllabus and exam objectives, our practice Q&A are designed to help you identify key topics and solidify your understanding. By focusing on the core curriculum, These Questions & Answers helps you cover all the essential topics, ensuring you're well-prepared for every section of the exam. Each question comes with a detailed explanation, offering valuable insights and helping you to learn from your mistakes. Whether you're looking to assess your progress or dive deeper into complex topics, our updated Q&A will provide the support you need to confidently approach the Oracle 1Z0-997-23 exam and achieve success.

The questions for 1Z0-997-23 were last updated on Feb 20, 2025.

Viewing page 1 out of 3 pages.
Viewing questions 1-5 out of 13 questions

Get All 13 Questions & Answers

Question No. 1

Deploy a Serverless Function and Access Using an API Gateway

Deployment in OCI

Scenario

You have joined ACME as their new Cloud Solutions Architect. Your organization wants to verify if

they can execute their microservices deployed as serverless functions on another cloud provider

using Oracle Functions in OCI.

Preconfigured

To complete this requirement, you are provided with the following:

* Access to an OCI Tenancy, an assigned compartment, and OCI credentials.

* Access to Cloud Shell to execute the Fn CLI and Docker commands.

* Code for a sample Python function, ExamFunction-main.zip.

* Permissions to perform only the tasks within the challenge.

Note: Throughout your exam, ensure to use assigned Compartment 99248134-

C01and Region us-ashburn-1

Complete the following tasks in the provisioned OCI environment:

Create a new private repository in the Container Registry named {username}/hellopythonwithin your assigned compartment.

For example: If your user name is 99346163-lab.user02, then name the registry as 99346163-

lab.user02/hello-python.

Your username is 99248134-lab.user01

ASee the explanationfor this task

Show Answer

Correct Answer: A

To create a new private repository in the Container Registry named 99248134-lab.user01/hello-python within your assigned compartment, you can follow these steps:

In the OCI Console, go toDeveloper Servicesand clickContainer Registry.

Select your assigned compartment from the list on the left.

ClickCreate Repository.

In theCreate Repositorydialog box, enter99248134-lab.user01/hello-pythonas theRepository Nameand selectPrivateas theAccessoption. You can also add a description for the repository if you want.

ClickSubmit. This will create a new private repository in the Container Registry that you can use to store your serverless function images.

Question No. 2

You designed and deployed your Autonomous Data Warehouse (ADW) so that it is

accessible from your on-premise data center and servers running on both private and public

networks in Oracle Cloud Infrastructure (OCI).

As you are testing the connectivity to your ADW database from the different access paths, you

notice that the server running on the private network is unable to connect to ADW.

Which two steps do you need to take to enable connectivity from the server on the private network to

ADW? (Choose two.)

AAdd an entry in the Security List of the ADW allowing ingress traffic for CIDR block
10.2.2.0/24

BAdd an entry in the route table (associated with the private subnet) with destination of
0.0.0.0/0; target type of NAT Gateway, add a stateful egress rule to the security list (associated
with the private subnet) with destination of 0.0.0.0/0 and for all IP protocols.

CAdd an entry in the access control list of ADW for IP address 129.146.160.11

DAdd an entry in the route table (associated with the private subnet) with destination of
0.0.0.0/0; target type of Internet Gateway, add a stateful egress rule to the security list
(associated with the private subnet) with destination of 0.0.0.0/0 and for all IP protocols.

EAdd an entry in the access control list of ADW for CIDR block 10.2.2.0/24.

Show Answer

Correct Answer: B, E

Option A is incorrect because adding an entry in the Security List of the ADW allowing ingress traffic for CIDR block 10.2.2.0/24 will not enable connectivity from the server on the private network to ADW.This is because ADW does not use security lists to control access to its database service2.

Option B is correct because adding an entry in the route table (associated with the private subnet) with destination of 0.0.0.0/0; target type of NAT Gateway, will allow outbound internet access from the server on the private network without exposing its private IP address3. Additionally, adding a stateful egress rule to the security list (associated with the private subnet) with destination of 0.0.0.0/0 and for all IP protocols will allow outbound traffic from any source port to any destination port.

Option C is incorrect because adding an entry in the access control list of ADW for IP address 129.146.160.11 will not enable connectivity from the server on the private network to ADW. This is because this IP address belongs to the NAT gateway, not to the server on the private network.

Option D is incorrect because adding an entry in the route table (associated with the private subnet) with destination of 0.0.0.0/0; target type of Internet Gateway, will expose the private IP address of the server on the private network to the public internet3. This is not recommended for security reasons and may also cause routing conflicts.

Option E is correct because adding an entry in the access control list of ADW for CIDR block 10.2.2.0/24 will allow access from any IP address within that range, including the server on the private network2.

Question No. 3

A company runs a public-facing application that uses a Java-based web service via a

RESTful API in their on-premises data center. Use of the API is expected to double with a new

product launch. The business wants to migrate their application to Oracle Cloud Infrastructure

(OCI) to meet the scale and reliability requirements. In order to achieve this, they will divert only

40% of the traffic to the new Apache Tomcat web servers running on OCI and serve the

remaining 60% traffic through their on-premises infrastructure. Once the migration is complete

and application works fine, they will divert all traffic to OCI.

How can these requirements be met with the LEAST amount of effort?

AUse OCI Traffic management service with failover steering policy and distribute the traffic
between OCI and on premises infrastructure.

BUse OCI Traffic management service with Load Balancing steering policy and distribute the
traffic between OCI and on premises infrastructure.

CUse an OCI load Balancer and distribute the traffic between OCI and on premises
infrastructure.

DUse VPN connectivity between on premises Infrastructure and OCI and create routing tables
to distribute the traffic between them.

Show Answer

Correct Answer: B

Option A is incorrect because using OCI Traffic management service with failover steering policy will not distribute the traffic between OCI and on premises infrastructure.Failover steering policy will only route traffic to a secondary endpoint if the primary endpoint is unresponsive2. This is not suitable for a gradual migration scenario.

Option B is correct because using OCI Traffic management service with Load Balancing steering policy will distribute the traffic between OCI and on premises infrastructure based on a ratio or round robin algorithm2. This will allow you to control the percentage of traffic that goes to the new infrastructure in OCI and monitor the results.

Option C is incorrect because using an OCI load Balancer will not distribute the traffic between OCI and on premises infrastructure.A load balancer will only distribute the traffic among multiple compute instances within a single region in OCI2. This will not help you migrate from your on premises infrastructure.

Option D is incorrect because using VPN connectivity between on premises Infrastructure and OCI and creating routing tables to distribute the traffic between them will require more effort than using OCI Traffic management service.You will need to set up a VPN connection, configure routing rules, and monitor the network performance2. This will not be as simple and reliable as using a DNS-based solution.

Question No. 4

Challenge 1

Implement Private DNS Names and Private DNS Resolver

Deploy a Serverless Function and Access Using an API Gateway

Deployment in OCI

Scenario

You have joined ACME as their new Cloud Solutions Architect. Your organization wants to verify if

they can execute their microservices deployed as serverless functions on another cloud provider

using Oracle Functions in OCI.

Preconfigured

To complete this requirement, you are provided with the following:

* Access to an OCI Tenancy, an assigned compartment, and OCI credentials.

* Access to Cloud Shell to execute the Fn CLI and Docker commands.

* Code for a sample Python function, ExamFunction-main.zip.

* Permissions to perform only the tasks within the challenge.

Note: Throughout your exam, ensure to use assigned Compartment99248134-

C01 and Region us-ashburn-1

Complete the following tasks in the provisioned OCI environment:

1. Create a new VCN with the name exam-vcn within your assigned compartment by using the

Start VCN Wizard.

2. Create a new Oracle Functions application named exam-app within your assigned

compartment by using the private subnet in your previously created VCN.

Ensure you use all defaults provided with the Create VCN with Internet Connectivity option.

ASee the explanation for this task

Show Answer

Correct Answer: A

Here are the steps to complete the challenge:

To create a new VCN with the name exam-vcn within your assigned compartment by using the Start VCN Wizard, follow these steps:

In the OCI Console, go to Networking and click Virtual Cloud Networks.

Select your assigned compartment from the list on the left.

Click Start VCN Wizard.

Select Create VCN with Internet Connectivity and click Start VCN Wizard.

Enter exam-vcn as the VCN Name and leave the other fields as default. Click Next.

Review the summary and click Create. This will create a VCN with a public subnet, a private subnet, an internet gateway, a NAT gateway, a service gateway, and a route table.

To create a new Oracle Functions application named exam-app within your assigned compartment by using the private subnet in your previously created VCN, follow these steps:

In the OCI Console, go to Developer Services and click Functions.

Select your assigned compartment from the list on the left.

Click Create Application.

Enter exam-app as the Application Name and select your previously created VCN from the VCN dropdown menu.

Select the private subnet from the Subnet dropdown menu and leave the other fields as default. Click Create. This will create an Oracle Functions application that can run serverless functions in a private subnet.

Question No. 5

You are working as a solution architect with a global automotive provider who is looking to

create a multi-cloud solution. They want to run their application tier in * Deploy the Oracle

database system into a public subnet in your VCN and assign a public IP address. Connect your

application tier running in Azure to the public IP address of the database system over the

internet.

Microsoft Azure while utilizing the Oracle DB Systems in the Oracle Cloud Infrastructure (OCI).

What is the most-fault tolerant and secure solution for this customer? (Choose the best answer.)

ACreate a FastConnect virtual circuit with Microsoft Azure as the provider to establish a private
interconnect between the application tier running in the Azure Virtual Network and the OCI VCN
that contains the Oracle Databases.

BCreate an encrypted, Virtual Private Network connection between the Microsoft Azure Virtual
Network that contains the application tier and the OCI Virtual Cloud Network (VCN) that
contains the Oracle Databases.

CUse an OCI Virtual Cloud Network remote peering connection to create a remote network
connection between the application tier running in Microsoft Azure Virtual Network and Oracle
Databases running in the OCI Virtual Cloud Network (VCN).

Show Answer

Correct Answer: A

Option A is correct because creating a FastConnect virtual circuit with Microsoft Azure as the provider to establish a private interconnect between the application tier running in the Azure Virtual Network and the OCI VCN that contains the Oracle Databases is the most-fault tolerant and secure solution for this customer. This option provides low latency, high throughput, and consistent network performance across the clouds.It also avoids exposing the traffic to the public internet, which enhances security and reliability12.

Option B is incorrect because creating an encrypted, Virtual Private Network connection between the Microsoft Azure Virtual Network that contains the application tier and the OCI Virtual Cloud Network (VCN) that contains the Oracle Databases is not as fault-tolerant and secure as option A.This option relies on the public internet for connectivity, which can introduce latency, bandwidth limitations, and security risks12.

Option C is incorrect because using an OCI Virtual Cloud Network remote peering connection to create a remote network connection between the application tier running in Microsoft Azure Virtual Network and Oracle Databases running in the OCI Virtual Cloud Network (VCN) is not possible. Remote peering connections can only be used to connect two VCNs within the same region or across regions within OCI.They cannot be used to connect a VCN with a VNet in another cloud provider3.

Unlock All Questions for Oracle 1Z0-997-23 Exam

Full Exam Access, Actual Exam Questions, Validated Answers, Anytime Anywhere, No Download Limits, No Practice Limits

Get All 13 Questions & Answers