Oracle Cloud Infrastructure 2021 Architect Professional : 1z0-997-21 valid dump

A cloud consultant is working on a implementation project on Oracle Cloud Infrastructure (OCI). As part of the compliance requirements, the objects placed in OCI Object Storage should be automatically archived first and then deleted. He is testing a lifecycle policy on Object Storage and created a policy as below:

What will happen after this policy is applied?

• A. All objects with names starting with "doc" will be deleted after 5 days of object creation.
• B. All the objects having file extension "doc" will be archived 5 days after object creation.
• C. All the objects having file extension "doc" will be archived for 5 days and will be deleted 10 days after object creation.
• D. All the objects with names starting with "doc" will be archived 5 days after object creation and will be deleted 5 days after archival.

You have deployed a web application targeting a global audience across multiple Oracle Cloud Infrastructure (OCI) regions.
You decide to use Traffic Management Geo-Location based Steering Policy to serve web requests to users from the region closets to the user. Within each region you have deployed a public load balancer with 4 servers in a backend set. During a DR test disable all web servers in one of the regions however, traffic Management does not automatically direct all users to the other region.
Which two are possible causes?

• A. You did not setup a Route Table associated with load Balancer's subnet
• B. One of the two working web servers In the other region did not pass Its HTTP health check
• C. Rather than using Geo-Location based Steering Policy, you should use Failover Policy Type to serve traffic.
• D. You did not correctly setup the Load Balancer HTTP health check policy associated with backend set
• E. You did not setup an HTTP Health Check associated with Load Balancer public IP in the disabled region.

A digital marketing company is planning to host a website on Oracle Cloud Infrastructure (OCI) and leverage OCI Container Engine for Kubernetes (OKE). The web server will make API calls to access OCI Object Storage to store all images uploaded by users.
For security purposes, your manager instructed you to ensure that the credentials used by the web server to allow access not stored locally on the compute instance.
What solution results in an Implementation with the least effort for this scenario?

• A. Configure the credentials to use Transparent Data Encryption (TDE) which will automatically allow the web server to make API calls to OCl Object Storage.
• B. Configure the credentials using OCI Key Management to allow an instance to make API calls and grant access to OCl Object Storage.
• C. Configure the credentials using OCI Registry (OC1R) which will automatically connect with OKE allowing the web server to make API calls to OCI Object Storage.
• D. Configure the credentials using Instance Principal to allow the web server to make API calls to OCl Object Storage

You are building a highly available and fault tolerant web application deployment for your company. Similar application delayed by competitors experienced web site attack including DDoS which resulted in web server failing.
You have decided to use Oracle Web Application Firewall (WAF) to implement an architecture which will provide protection against such attacks and ensure additional configuration will you need to implement to make sure WAF is protecting my web application 24*7.
Which additional configuration will you need to Implement to make sure WAF Is protecting my web application 24*7?

• A. Configure auto scaling policy and it to WAF instance.
• B. Configure new rules based on now vulnerabilities and mitigations
• C. Configure Control Rules to send traffic to multiple web servers
• D. Configure multiple origin servers

An Oracle Cloud Infrastructure (OCI) Public Load Balancer's SSL certificate is expiring soon. You noticed the Load Balancer is configured with SSL Termination only. When the certificate expires, data traffic can be interrupted and security compromised.
What steps do you need to take to prevent this situation?

• A. Add the new SSL certificate to the Load Balancer, update listeners and backend sets so they can use the new certificate bundle.
• B. Add the new SSL certificate to the Load Balancer and update listeners to use the new certificate bundle.
• C. Add the new SSL certificate to the Load Balancer, update backend servers to work with a new certificate and edit listeners so they can use the new certificate bundle.
• D. Add the new SSL certificate to the Load Balancer and implement end to end SSL so it can encrypt the traffic from clients all the way to the backend servers.
• E. Add the new SSL certificate to the Load Balancer and update backend servers to use the new certificate bundle.