1Z0-997-26 Practice Test 5 — 25 Questions

Question 1

You need to migrate an on-premises Oracle Database to OCI Exadata Database Service using Oracle GoldenGate for zero-downtime migration with bi-directional replication. Which critical design consideration must be addressed regarding table design on both databases?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Tables must have primary keys or unique identifiers, and Conflict Detection and Resolution (CDR) must be configured. In bi-directional GoldenGate replication, tables must have a primary key or unique identifier, and conflict detection and resolution (CDR) strategies must be implemented to handle concurrent updates.

Answer

Primary keys must be omitted to allow duplicate row insertion across databases

Answer

Tables must not contain any indexes, triggers, or constraints

Answer

All tables must be converted to temporary unlogged tables

Question 2

You are configuring disaster recovery for an Oracle Base Database system using Oracle Data Guard with Data Guard Broker. You need to perform a role transition where the primary database becomes the standby and the standby becomes the primary with zero data loss. Which Data Guard Broker command should you execute?

Accepted Answer

SWITCHOVER TO <standby_database_name>;. To perform a planned switchover with zero data loss using Data Guard Broker, the SWITCHOVER command is executed.

Answer

ALTER DATABASE RECOVER MANAGED STANDBY DATABASE CANCEL;

Answer

CONVERT DATABASE TO PHYSICAL STANDBY;

Answer

FAILOVER TO <standby_database_name>;

Question 3

Which TWO network security features can be applied to an Oracle Base Database system on OCI to protect database traffic and restrict access? (Choose two.)

Accepted Answer

Oracle Database Firewall and Audit Vault (AVDF) integration. Base Database systems can be protected using Virtual Cloud Network (VCN) Security Lists / Network Security Groups (NSGs) and database-level firewalls.

Answer

Disabling all VCN route tables to block internal routing

Answer

OCI Web Application Firewall (WAF) applied directly to SQL port 1521

Answer

Exposing database ports directly to the public Internet with default security lists

Question 4

You are provisioning an Autonomous Data Warehouse (ADW) instance and want to configure network access so that only specific corporate IP addresses can connect to the database. Which feature should you enable?

Accepted Answer

Autonomous Database Access Control Lists (ACLs).. Access Control Lists (ACLs) allow you to restrict access to your Autonomous Database by specifying allowed IP addresses or CIDR blocks.

Answer

Virtual Cloud Network (VCN) Security Lists only.

Answer

OCI Web Application Firewall (WAF) rule sets.

Answer

OCI Identity and Access Management (IAM) dynamic groups.

Question 5

You are designing a high availability disaster recovery architecture for an Oracle Base Database Service system deployed on a 2-node Virtual Machine DB System. You need to configure automated backups. Which storage destination is automatically used by OCI to store these automated backups?

Accepted Answer

OCI Object Storage bucket managed by the database service.. OCI Database service automatically uses OCI Object Storage as the backend destination for all automated database backups.

Answer

A separate standby Oracle ASM disk group on Block Volume storage.

Answer

Local NVMe scratch disk attached to the primary database node.

Answer

An independent File Storage Service (FSS) mount target shared across availability domains.

Question 6

When designing a high-availability and disaster recovery architecture for an enterprise Oracle Database on OCI, which THREE components or patterns are crucial for achieving optimal recovery and uptime? (Choose three.)

Accepted Answer

Automated and policy-driven backups to OCI Object Storage with cross-region replication. Enterprise HA/DR patterns for Oracle databases on OCI involve Data Guard, Real Application Clusters (RAC), and automated backup strategies.

Answer

Relying solely on local ephemeral NVMe drive snapshots for disaster recovery

Answer

Stretching a single-node database VM across distinct cloud regions using unencrypted NFS mounts

Question 7

Which OCI construct serves as the central hub for routing traffic between VCNs and hybrid network connections such as FastConnect and IPSec VPN?

Accepted Answer

Dynamic Routing Gateway (DRG). The Dynamic Routing Gateway (DRG) acts as the single router hub for all hybrid and inter-VCN connectivity in OCI.

Answer

Local Peering Gateway

Answer

NAT Gateway

Answer

Internet Gateway

Question 8

An enterprise architect is deploying the OCI-Azure Interconnect in the Ashburn region. Which specific Azure networking resource is directly associated with the Azure side of the ExpressRoute circuit created during the onboarding process?

Accepted Answer

Azure ExpressRoute Gateway. The Azure ExpressRoute circuit connects to an Azure ExpressRoute Gateway (Virtual Network Gateway) deployed in the target Virtual Network to facilitate cross-cloud communication.

Answer

Azure Application Gateway

Answer

Azure Virtual Network NAT

Answer

Azure Traffic Manager

Question 9

You are configuring Oracle Data Guard between an Exadata Database Service on Dedicated Infrastructure primary database and a remote standby database in another OCI region. To ensure maximum performance with zero data loss risk under normal operations, which Data Guard protection mode and transport setting should you configure?

Accepted Answer

Maximum Protection mode with SYNC and AFFIRM transport.. Maximum Protection mode guarantees zero data loss (Zero Data Loss architecture) by ensuring transactions do not commit until the redo data is written to the standby redo log files on at least one synchronized standby database.

Answer

Maximum Availability mode with SYNC transport and NOAFFIRM.

Answer

Maximum Availability mode with ASYNC transport and ARCHivelog compression.

Answer

Maximum Performance mode with ASYNC transport.

Question 10

An architect is designing a multi-cloud application where microservices in OCI need to communicate securely with microservices in Azure. They decide to deploy a service mesh (such as Istio) spanning both OCI and Azure. What network prerequisite is essential across the OCI VCN and Azure VNet for the control plane to communicate?

Accepted Answer

Establish private IP connectivity between the OCI VCN and Azure VNet via the OCI-Azure Interconnect with matching non-overlapping subnets and open firewall ports for control plane communication.. A cross-cloud service mesh requires IP reachability between the control plane and data planes across the VCN and VNet, typically facilitated by the OCI-Azure Interconnect and properly configured routing and security rules.

Answer

Configure an OCI Service Gateway to route traffic to Azure public endpoints.

Answer

Deploy an OCI NAT Gateway to translate all Azure IP addresses to OCI public IPs.

Answer

Enable Oracle Autonomous Database cross-region data guard.

Question 11

Which TWO methods can be used to achieve high availability for an OCI Site-to-Site VPN connection to an on-premises datacenter? (Choose TWO)

Accepted Answer

Setting up multiple Customer-Premises Equipment (CPE) objects and redundant VPN connections.. OCI automatically provides two tunnels per VPN connection. Additionally, customers can deploy multiple CPE devices or multiple VPN connections to ensure redundancy against CPE failure or Oracle gateway maintenance.

Answer

Running Ophalmic routing daemons on OCI compute instances.

Answer

Enabling OCI Bastion service across all VPN subnets.

Answer

Attaching an Internet Gateway directly to the VPN tunnel endpoints.

Question 12

When setting up an OCI Site-to-Site VPN, which on-premises device representation must you create in the OCI Console before configuring the IPSec connection?

Accepted Answer

Customer-Premises Equipment (CPE). You must create a Customer-Premises Equipment (CPE) object in OCI representing the public IP address and routing parameters of your on-premises router.

Answer

NAT Gateway

Answer

Service Gateway

Answer

Virtual Cloud Network (VCN)

Question 13

When designing a high-performance hybrid architecture integrating an on-premises data center with OCI, which THREE key factors should be evaluated to optimize network throughput and reliability?

Accepted Answer

BGP timer tuning for faster convergence and failover detection. When planning FastConnect or VPN connections, factors such as MTU size (Jumbo frames), redundant physical links or diverse paths, and BGP multipath or dead-peer detection timers heavily impact performance and reliability.

Answer

Enabling public IP addresses on all internal database nodes

Answer

Configuring Local Peering Gateways for on-premises connectivity

Question 14

An architect is designing a multi-cloud disaster recovery strategy between OCI and AWS. Production data resides in an Oracle Autonomous Database on OCI, and application servers run in AWS EC2. To secure the network traffic between AWS and OCI without routing over the public internet, which approach should be implemented?

Accepted Answer

Configure an IPSec VPN tunnel between an AWS Virtual Private Gateway and an OCI Dynamic Routing Gateway.. Establishing a Site-to-Site VPN connection between an AWS Virtual Private Gateway (VGW) and an OCI Dynamic Routing Gateway (DRG) provides secure private connectivity over the internet or via AWS Direct Connect/OCI FastConnect partner exchanges.

Answer

Peer an AWS VPC directly to an OCI VCN using Local Peering Gateways.

Answer

Attach an AWS Elastic IP directly to the OCI Autonomous Database.

Answer

Use OCI Object Storage pre-authenticated requests over HTTPS.

Question 15

An administrator is troubleshooting intermittent packet loss and latency spikes over an OCI FastConnect circuit connected to an on-premises datacenter. Which THREE diagnostic steps or tools are applicable within OCI? (Choose THREE)

Accepted Answer

Checking OCI Monitoring metrics for the FastConnect virtual circuit to review bandwidth utilization and error drops.. Troubleshooting hybrid network performance involves using OCI Network Path Analyzer to check reachability/routing, monitoring FastConnect virtual circuit metrics (such as bandwidth and error drops) in OCI Monitoring, and verifying BGP session stability.

Answer

Modifying the OCI tenancy tenancy home region to reroute physical fiber cables.

Answer

Rebooting the OCI IAM service to reset global routing tables.

Question 16

Which protocol is used by OCI FastConnect and Site-to-Site VPN to dynamically exchange routing information with on-premises routers?

Accepted Answer

BGP (Border Gateway Protocol). Border Gateway Protocol (BGP) is the routing protocol used to dynamically exchange routes over FastConnect and dynamic routing VPN tunnels.

Answer

RIP (Routing Information Protocol)

Answer

EIGRP (Enhanced Interior Gateway Routing Protocol)

Answer

OSPF (Open Shortest Path First)

Question 17

You are troubleshooting an issue where an on-premises server cannot reach an OCI compute instance over an IPSec VPN tunnel. The VPN status in the OCI console shows 'Tunnel Up', but ping tests fail. What is the most likely cause?

Accepted Answer

Security Lists in the OCI VCN or Network Security Groups (NSGs) are blocking ICMP or traffic, or OS firewalls on the compute instance are dropping packets.. If the tunnel is up, Layer 3/IPsec is established. Failure to ping usually stems from VCN Security Lists, Route Tables, or OS-level host firewalls (iptables/firewalld) blocking ICMP or return traffic.

Answer

The FastConnect virtual circuit is disabled.

Answer

The OCI VCN does not have an Internet Gateway attached.

Answer

The BGP ASN number is misconfigured on the OCI Dynamic Routing Gateway.

Question 18

You are configuring an OCI Site-to-Site VPN. Your on-premises firewall requires static routing instead of BGP. Which OCI VPN mode must you select when creating the IPSec connection?

Accepted Answer

Static Routing mode. OCI Site-to-Site VPN supports both dynamic routing (BGP) and static routing. You must select static routing and define the static CIDR routes for your on-premises network.

Answer

Local Peering mode

Answer

Dynamic Routing (BGP) mode

Answer

FastConnect Partner mode

Question 19

You are designing an active-active hybrid architecture between an on-premises datacenter and OCI using two separate FastConnect circuits connected to two different DRG attachments. How does OCI determine path selection when receiving identical BGP route advertisements from both circuits?

Accepted Answer

The DRG uses standard BGP best path selection criteria, including AS Path length and Local Preference.. OCI DRGs evaluate standard BGP attributes (such as AS Path length and Local Preference) to determine best path selection for incoming hybrid routes.

Answer

OCI automatically enforces round-robin load balancing regardless of BGP advertisements.

Answer

Active-active routing is not supported; OCI randomly drops packets on duplicate routes.

Answer

OCI always selects the circuit with the lower OCID alphabetically.

Question 20

What is the maximum supported MTU (Maximum Transmission Unit) size for traffic passing through an OCI FastConnect virtual circuit by default?

Accepted Answer

9000 bytes. OCI supports standard 1500 bytes and Jumbo Frames up to 9000 bytes for FastConnect virtual circuits, depending on the DRG and VCN configuration.

Answer

1500 bytes

Answer

576 bytes

Answer

65535 bytes