Free Oracle 1Z0-997-20 Exam Dumps Questions & Answers

You are working as a security consultant with a global insurance organization which is using Microsoft Azure Active Directory as an identity provider to manage user login/passwords. When a user logs in to Oracle Cloud Infrastructure (OCI) console, it should get authenticated by Azure AD.
Which set of steps are required to be configured in OCI to meet this requirement?

• A.  Setup Azure AD as an Identity Provider, import users and groups from Azure AD to OCI, set up IAM policies to govern access to Azure AD groups.
• B.  Setup Azure AD as an Enterprise Application, map Azure AD users, groups and policies to OCI groups and users.
• C.  Setup Azure AD as an Identity Provider, map Azure AD groups to OCI groups, set up the IAM policies to govern access to Azure AD groups.
• D.  Setup Azure AD as an Enterprise Application, configure OCI for single sign-on, map Azure AD groups to OCI groups, set up the IAM policies to govern access to Azure AD groups.

You are working with a customer who needs to attach an Oracle Cloud Infrastructure (OCI) block volume to a VM instance with read/write access type. The customer wants to know if the number of IOPS and throughput performance differs between the following two choices:
* Option A: attach a single 1 TB block volume to the VM instance
* Option B: attach two separate 500 GB block volumes In a RAID 0 array configuration to the VM instance You can assume that the customer is using iSCSI attachment type to attach the volumes to the instance. In addition, you can assume 1 MB block size for throughput and 4 KB block size for IOPS consideration.
How should you respond to the customer?

• A.  Option A provides better IOPS, but lower throughput performance.
• B.  Option B provides better IOPS and throughput performance.
• C.  Option B provides higher level of throughput, but lower level of IOPS performance.
• D.  Both options provide the same number of IOPS and throughput performance.

You are creating an Oracle Cloud Infrastructure Dynamic Group. To determine the members of this group you are defining a set of matching rules.
Which of the following are the supported variables to define conditions in the matching rules? (Choose Two)

• A.  tag.<tagnamespace>.<tagkey>.value - the tag namespace and tag key.
• B.  instance.compartment.id - the OCID of the compartment where the instance resides.
• C.  instance.tenancy.id - the OCID of the tenancy where the instance resides.
• D.  iam.policy.id - the OCID of the IAM policy to apply to the group.

Your organization is planning on using Oracle Cloud Infrastructure (OCI) File Storage Service (FSS). You will be deploying multiple compute instance in Oracle Cloud Infrastructure (OCI) and mounting the file system to these compute instances. The file system will hold payment data processed by a Database instance and utilized by compute instances to create a overall inventory report. You need to restrict access to this data for specific compute instances and must be allowed/blocked per compute instance's CIDR block.
Which option can you use to secure access?

• A.  Use stateless Security List rule to restrict access from known IP addresses only.
• B.  Create and configure OCI Web Application Firewall service with built in DNS based intelligent routing.
• C.  Create a new VCN security list, choose SOURCE TYPE as Service and SOURCE SERVICE as FSS. Add stateless ingress and egress rules for specific P address and CIDR blocks.
• D.  Use 'Export option' feature of FSS to restrict access to the mounted file systems.

As part of planning the network design on Oracle Cloud Infrastructure, you have been asked to create an Oracle Cloud Infrastructure Virtual Cloud Network (VCN) with 3 subnets, one in each Availability Domain. Each subnet needs to have a minimum of 64 usable IP addresses.
What is the smallest subnet and VCN size you should use to implement this design? The requirements are static, so no growth is expected.

• A.  /22 for the VCN; /25 for the subnets
• B.  /24 for the VCN; /24 for the subnets
• C.  122 for the VCN; 124 for the subnets
• D.  /23 for the VCN; /25 for the subnets