Online Access Free 1z0-997-22 Exam Questions

You are part of a project team working in the development environment created in OCI. You have realized that the CIDR block specified for one of the subnet in a VCN is not correct and want to delete the subnet. While deleting you are getting an error indicating that there are still resources that you must delete first. The error includes the OCID of the VNIC that is in the subnet.
Which of the following action you will take to troubleshoot this issue?

• A.Use OCI CLI to call "GetVnic" operation to find out the parent resource of the VNIC
• B.Copy and Paste OCID of the VNIC in the search box of the OCI Console to find out the parent resource of the VNIC
• C.Use OCI CLI to delete the VNIC first and then delete the subnet
• D.Use OCI CLI to delete the subnet using --force option

You are the Solution Architect that designed this Oracle Cloud Infrastructure (OCI) compartment layout for your organization:

The development team has deployed quite a few instances under 'Compute' Compartment and the operations team needs to list the Instances under the same compartment for their testing. Both teams, development and operations are part of a group called 'Eng-group' You have been looking for an option to allow the operations team to list the instances without access any confidential information or metadata of resources.
Which IAM policy should you write based on these requirements?

• A.Allow group Eng-group to inspect instance-family in compartment Dev-Team: Compute and attach the policy to 'SysTest Team' Compartment
• B.Allow group Eng-group to inspect instance-family in compartment Dev-Team:Compute and attach the policy to 'Engineering' Compartment
• C.Allow group Eng-group to read instance-family in compartment Dev-Team-.Compute and attach the policy to'Dev-Team'
• D.Allow group Eng-group to read instance-family in compartment Compute and attach the policy to 'Engineering' Compartment.

There are two compartments: Networks and Devlnstances
There are two groups: NetworkAdmins with a user named Nick, and Devs with a user named Dave The following IAM policies are being used:
*Allow group NetworkAdmins to manage virtual-network-family in compartment Networks
*Allow group NetworkAdmins to manage instance-family in compartment Networks
*Allow group Devs to use virtual-network-family in compartment Networks
*Allow group Devs to manage all-resources in compartment Devlnstances
Nick creates a VCN in Networks compartment. Dave creates a VCN in Devlnstances compartment.
Which of the following statements is INCORRECT?

• A.Dave cannot launch new instances in Networks compartment
• B.Nick cannot launch new instances in Devlnstances compartment
• C.Nick launches instances in Networks using VCN in Devlnstances compartment
• D.Dave launches instances in Devlnstances using the VCN in Networks compartment

A hospital in Austin has hosted its web based medical records portal entirely In Oracle cloud Infrastructure (OCI) using Compute Instances for its web-tier and DB system database for its data tier. To validate compliance with Health Insurance Portability and Accountability (HIPAA), the security professional to check their systems it was found that there are a lot of unauthorized coming requests coming from a set of IP addresses originating from a country in Southeast Asia.
Which option can mitigate this type of attack?

• A.Block the attacking IP address by implementing a OCI Web Application Firewall policy using Access Control Rules
• B.Mitigate the attack by changing the Route fable to redirect the unauthorized traffic to a dummy Compute instance
• C.Block the attacking IP address by creating a Security List rule to deny access to the subnet where the web server Is running
• D.Block the attacking IP address by creating by Network Security Group rule to deny access to the compute Instance where the web server Is running

An insurance company is storing critical financial data in the OCI block volume. This volume is currently encrypted using oracle managed keys. Due to regulatory compliance, the customer wants to encrypt the data using the keys that they can control and not the keys which are controlled by Oracle.
What of the following series of tasks are required to encrypt the block volume using customer managed keys?

• A.Create a vault, import your master encryption key into the vault, generate data encryption key, assign data encryption key to the block volume
• B.Create a vault, create a master encryption key in the vault, assign this master encryption key to the block volume D. Create a master encryption key, create a new version of the encryption key, decrypt the block volume using existing oracle managed keys and encrypt using new version of the encryption key
• C.Create a master encryption key, create a data encryption key, decrypt the block volume using existing oracle managed keys, encrypt the block volume using the data encryption key