Updated May-2024 Test Engine to Practice 1z0-1115-23 Dumps & Practice Exam [Q22-Q39]

1z0-1115-23 Oracle

admin • May 17, 2024

Updated May-2024 Test Engine to Practice 1z0-1115-23 Dumps & Practice Exam [Q22-Q39]

Rate this post

Updated May-2024 Test Engine to Practice 1z0-1115-23 Dumps & Practice Exam

Dumps Collection 1z0-1115-23 Test Engine Dumps Training With 43 Questions

Oracle 1z0-1115-23 Exam Syllabus Topics:

Topic	Details
Topic 1	Explain common multi-cloud use cases and their implementation in OCI Autonomous Databases, MySQL Database
Topic 2	Administer OCI Database services, such as Base Databases Oracle Database Service for Azure
Topic 3	Explain the prerequisites and onboarding options for Oracle Database Service for Azure Multi-cloud Connection Options
Topic 4	Federate OCI Identity Domains with identity providers Implement OCI-Azure Interconnect

QUESTION 22
A company has deployed a multi-tier application in Oracle Cloud Infrastructure (OCI), with web servers in a public subnet and database servers in a private subnet. The database servers need to ac-cess data from OCI Object Storage, and the company wants to ensure that this communication is secure and not exposed to the public internet. Which OCI feature should be used to achieve this objective?

Use a Local Peering Gateway to peer with the Object Storage subnet.

Use a Service Gateway to establish a secure connection to Object Storage.

Use a NAT Gateway to enable private access to Object Storage.

Use a VPN Gateway to create an encrypted tunnel to Object Storage.

A service gateway lets your virtual cloud network (VCN) privately access specific Oracle services without exposing the data to the public internet. No internet gateway or NAT gateway is required to reach those specific services.
The resources in the VCN can be in a private subnet and use only private IP addresses. The traffic from the VCN to the Oracle service travels over the Oracle network fabric and never traverses the internet.

QUESTION 23
What is the purpose of the SAML metadata file in the OCI Federation setup with Azure Active Di-rectory (AD)?

It is used to exchange metadata information between Azure AD and OCI.

It is used to configure attribute mapping between Azure AD and OCI.

It is used to establish trust between Azure AD and OCI.

It is used to store user credentials for authentication.

In general, SAML metadata is used to share configuration information between the Identity Pro-vider (IdP) and the Service Provider (SP).

QUESTION 24
What does the term “multicloud” mean and how can it help organizations manage their IT infra-structure?

The use of multiple cloud services from a single provider for redundancy and high availability

The use of cloud services from multiple providers to leverage the best features and ser-vices of each

The deployment of a single cloud service across multiple regions and data centers for better performance

The integration of on-premises infrastructure with cloud services for a hybrid cloud approach

The keyword here is multiple providers. Multicloud is a cloud computing strategy that uses the best services from more than one cloud provider to deploy a solution.
The use of multiple cloud services from a single provider for redundancy and high availability is INCORRECT as it talks about single provider.
The deployment of a single cloud service across multiple regions and data centers for better perfor-mance is also INCORRECT as there is no mention of multiple cloud service providers. Rather it talks about single cloud service across multiple regions.
The use of multiple cloud services from a single provider for redundancy and high availability is al-so INCORRECT as it also talks about single provider.
Hence the correct answer is The use of cloud services from multiple providers to leverage the best features and services of each.

QUESTION 25
Which is NOT an Azure resource that is created when you provision a database using Oracle Data-base Service for Azure?

Log Analytics workspace

Application Insights workspace

Oracle Database Service

Custom Dashboard workspace

Log Analytics Workspace, Application Insights and Custom Dashboard are Azure resources and hence we can eliminate these options.
We are left with Oracle Database Service which is the CORRECT answer.

QUESTION 26
An enterprise has a workload running in a VNet in Microsoft Azure and a database running in a VCN in Oracle Cloud Infrastructure. The enterprise wants to set up a private, secure, and isolated network connection between the two clouds to enable traffic flow between the workload and the database. Which option can be used to achieve this requirement?

Use public internet to establish connectivity between the Microsoft Azure VNet and the OCI VCN.

Use Azure VPN and Oracle FastConnect to establish a private and secure tunnel be-tween the Azure VNet and the OCI VCN.

Use Azure Private Link to create a private connection between the workload and the database.

Use Azure ExpressRoute and Oracle FastConnect to create a private interconnection between the Azure VNet and the OCI VCN.

As per the question, the keywords are “The enterprise wants to set up a private, secure, and isolat-ed network connection between the two clouds” Use public internet to establish connectivity between the Microsoft Azure VNet and the OCI VCN – INCORRECT as this option won’t provide private, secure and isolated connection.
Use Azure VPN and Oracle FastConnect to establish a private and secure tunnel between the Azure VNet and the OCI VCN is INCORRECT as it won’t provide a isolated connection.
Use Azure Private Link to create a private connection between the workload and the database is INCORRECT as Azure Private Link enables you to access Azure PaaS Services (for example, Azure Storage and SQL Database) and Azure hosted customer-owned/partner services over a pri-vate endpoint in your virtual network.
Use Azure ExpressRoute and Oracle FastConnect to create a private interconnection between the Azure VNet and the OCI VCN. is CORRECT. To create an integrated multi-cloud experience, Microsoft and Oracle offer direct interconnection between Azure and Oracle Cloud Infrastructure (OCI) through ExpressRoute and FastConnect. Through the ExpressRoute and FastConnect inter-connection, customers can experience low latency, high throughput, private direct connectivity be-tween the two clouds.

QUESTION 27
Which type of traffic is NOT supported by the OCI-Azure Interconnect?

Traffic between an Azure VNet and peered OCI VCNs in different regions

Traffic between an on-premises network and Azure VNet through the OCI VCN

Traffic between an Azure VNet and an OCI VCN

Traffic between an Azure VNet and peered OCI VCNs in the same region

You can connect your VNet and VCN so that traffic that uses private IP addresses goes over the cross-cloud connection.
The connection enables traffic to flow from the VNet through the connected VCN to a peered VCN in the same Oracle Cloud Infrastructure region, or a different region.
The Cross-cloud connection does not enable traffic between your on-premises network through the VCN to the VNet, or from your on-premises network through the VNet to the VCN.

QUESTION 28
An organization wants to deploy Oracle Database Service for Azure in the existing Oracle Cloud Infrastructure and Azure tenancies that are in the supported regions. However, they want to have full control over the Azure permissions that should be granted.
Which option should they choose during the sign-up process?

Fully automated configuration

Guided account linking

Fully scripted configuration

Auto pilot linking

The keyword mentioned in the question is “However, they want to have full control over the Az-ure permissions that should be granted. ” The fully-automated onboarding option for OracleDB for Azure is faster and more convenient than the guided account linking, but some organizations may have security policies that do not allow them to grant the required permissions to the Oracle Database Service enterprise applica-tion that runs in their Azure account.
Guided onboarding is provided for customers who do not want to grant OracleDB for Azure all the Azure permissions required for fully automated onboarding.
The remaining two options – Auto pilot linking and Fully scripted configuration are INVALID. There doesn’t exist anything like these in Oracle Database Service for Azure onboarding.
Hence the correct answer is Guided account linking

QUESTION 29
Which is true regarding fully automated and guided onboarding for the OracleDB for Azure ser-vice?

Fully automated onboarding requires more permissions to be granted than guided onboarding.

An Azure user who completes guided onboarding cannot log in to the OracleDB for Azure portal.

Guided onboarding is simpler and faster than fully automated onboarding.

An Azure user who completes fully automated onboarding can log in to the OracleDB for Azure portal, but cannot deploy and provision databases.

The fully-automated onboarding option for OracleDB for Azure is faster and more convenient than the guided account linking. Hence the option “Guided onboarding is simpler and faster than fully automated onboarding” is NOT TRUE.
When the automated configuration finishes, OracleDB for Azure is fully operational. The Azure user that completed onboarding can login and use the OracleDB for Azure portal to deploy and provision databases for use in their Azure environment. Hence the option “An Azure user who completes fully automated onboarding can log in to the OracleDB for Azure portal, but cannot de-ploy and provision databases” is NOT TRUE.
If you used the guided onboarding process, the user who completed onboarding can login to the OracleDB for Azure portal, but not really do anything there. Before users can do anything produc-tive using OracleDB for Azure, you must first complete configuration steps for each user or user group. Hence the option “An Azure user who completes guided onboarding cannot log in to the Or-acleDB for Azure portal” is NOT TRUE.
Now, let’s look at the only option left which is “Fully automated onboarding requires more permis-sions to be granted than guided onboarding”. This option is TRUE as the automated onboarding process requires that the Azure user onboarding to OracleDB for Azure have at least one of the fol-lowing admin roles: Application Administrator, Cloud Application Administrator, Privileged Role Administrator, or Global Administrator. Guided onboarding is provided for customers who do not want to grant OracleDB for Azure all the Azure permissions required for fully automated onboard-ing. Hence this is the correct answer.

QUESTION 30
What is the primary difference between using Oracle FastConnect with an Oracle partner and using FastConnect with colocation with Oracle?

The method of establishing the physical connection to Oracle Cloud Infrastructure

The number of available redundancy models

The type of virtual circuits supported

The geographical locations available for connections

FastConnect: With an Oracle Partner:
You can establish a FastConnect connection from your on-premise or remote data center to the data center where your Oracle Cloud resources are provisioned by requesting cloud connectivity services from any of Oracle’s FastConnect partners. Oracle has integrated the FastConnect service with a geographically diverse set of IP, VPN, and Ethernet network providers and cloud exchanges to make it easy for you to establish a connection to Oracle Cloud services.

FastConnect: Colocation with Oracle:
If you have purchased colocation space from a data center provider, you can use Oracle FastCon-nect to establish connectivity from your network equipment in that colocation facility to your Oracle Cloud services provisioned at this location. Oracle will provide you a letter of authorization (LOA) that the data center provider will need in order to establish a direct cross-connect into Oracle’s FastConnect edge devices provider will need in order to establish a direct cross

QUESTION 31
Which is a database service that CANNOT be provisioned in the Oracle Public Cloud?

Autonomous Database on Dedicated Infrastructure

Exadata Database Service on Shared Infrastructure

Autonomous Database on Shared Infrastructure

Exadata Database Service on Dedicated Infrastructure

As you can see in the screenshot, Exadata Database Service on Shared Infrastructure is NOT sup-ported.

QUESTION 32
What is the primary Oracle Cloud Infrastructure region associated with an OCI account during Ora-cleDB for Azure setup?

The region with the most available resources for OracleDB for Azure

The home region of the OCI account

The region with the lowest latency for Azure communication

The region specified during OracleDB for Azure onboarding

Identify the primary OCI region you want to use as your default region for OracleDB for Azure resource provisioning.
During OracleDB for Azure setup, this region becomes the primary OCI region associated with your OCI account.

QUESTION 33
Which components are required to establish a Site-to-Site VPN connection in Oracle Cloud Infra-structure?

Internet Gateway, Customer Premises Equipment (CPE), and IPsec tunnel

Internet Gateway (IG), Network Address Translation (NAT) Gateway, and IPsec tun-nel

Dynamic Routing Gateway (DRG), Customer Premises Equipment (CPE), and IPsec tunnel

Dynamic Routing Gateway (DRG), NAT Gateway, and IPsec tunnel

Site-to-Site VPN Components:
CPE OBJECT: At your end of Site-to-Site VPN is the actual device in your on-premises network (whether hardware or software). The term customer-premises equipment (CPE) is commonly used in some industries to refer to this type of on-premises equipment.
DYNAMIC ROUTING GATEWAY (DRG): At Oracle’s end of Site-to-Site VPN is a virtual router called a dynamic routing gateway, which is the gateway into your VCN from your on-premises network.
IPSEC CONNECTION: After creating the CPE object and DRG, you connect them by creating an IPSec connection, which you can think of as a parent object that represents the Site-to-Site VPN.
TUNNEL: An IPSec tunnel is used to encrypt traffic between secure IPSec endpoints. Oracle cre-ates two tunnels in each IPSec connection for redundancy.
So, Internet Gateway, NAT Gateway are NOT valid Site-to-Site VPN Components.
Hence, Dynamic Routing Gateway (DRG), Customer Premises Equipment (CPE), and IPsec tunnel is the CORRECT answer.

QUESTION 34
Which feature is supported in all Oracle Database editions in Oracle Cloud Infrastructure?

Data Guard

Diagnostic Packs

Transparent Data Encryption

In-Memory Database

All editions include Oracle Database Transparent Data Encryption, Machine Learning, and Spa-tial and Graph.
Standard Edition includes Oracle Database Standard Edition.
Enterprise Edition includes Oracle Database Enterprise Edition, Data Masking and Subset-ting Pack, Diagnostics and Tuning Packs, and Real Application Testing.
Enterprise Edition High Performance extends Enterprise Edition with the following options: Multitenant, Partitioning, Advanced Compression, Advanced Security, Label Security, Da-tabase Vault, OLAP, Database Lifecycle Management Pack and Cloud Management Pack for Oracle Database.
Enterprise Edition Extreme Performance extends High Performance with the following options: In-Memory Database, Active Data Guard, Real Application Clusters.
Data Guard is not supported Oracle Database Standard Edition.

QUESTION 35
How do Azure administrators and developers connect their applications to Oracle databases using Oracle Database Service for Azure?

By learning OCI and working in the OCI Console

By connecting to the Oracle databases using connection strings

By manually creating complex cross-cloud deployments using the Interconnect

By connecting to the Oracle databases using database links

The same way you do in Azure today. Each database resource created by Oracle Database Service for Azure gets an Azure connection string you can use to connect to the database from any Azure application.
During onboarding, Oracle Database Service for Azure creates network connections between the cloud environments.
During database provisioning, Oracle Database Service for Azure defines the DNS entries and connection strings needed to access the resource from Azure.
Azure developers (and applications) don’t need to know anything about Oracle Database Service for Azure-all they need is the connection string. Oracle publishes the connection string on the custom dashboard it creates for the database in Azure, so developers don’t have to leave the Azure portal to get what they need to access the database from their applications.
Hence, the CORRECT ANSWER is “By connecting to the Oracle databases using connection strings”

QUESTION 36
A consulting company that employs Oracle Cloud Infrastructure (OCI) architects has successfully completed resource migration from Microsoft Azure to OCI, and no longer requires the Oracle FastConnect circuit to Azure. The project manager has asked you to delete all resources involved in this cross-cloud connectivity. From the Azure side, you delete the Resource Group. After a while, you notice that all Azure resources have been deleted, except for the Azure ExpressRoute circuit.
What could be a potential reason for this issue?

You need to remove all routes that point to the cross-cloud connection on both OCI and Azure before you can delete the circuit.

Your bill from the OCI side needs to be paid in full before you can remove the Azure ExpressRoute circuit.

You need to remove the Azure ExpressRoute Partner Service Key from the Oracle FastConnect circuit, and then you can delete the ExpressRoute virtual circuit.

You need to first delete the Oracle FastConnect circuit for the ExpressRoute circuit to be decommissioned, and then you can delete the ExpressRoute virtual circuit.

To delete the interconnect, perform these steps in the order given. Failure to do so results in a failed state ExpressRoute circuit.
1. Delete the ExpressRoute connection. Delete the connection by selecting the Delete icon on the page for your connection.
2. Delete the Oracle FastConnect circuit from the Oracle Cloud Console.
3. Once the Oracle FastConnect circuit has been deleted, you can delete the Azure Ex-pressRoute circuit.
Hence “You need to first delete the Oracle FastConnect circuit for the ExpressRoute circuit to be decommissioned, and then you can delete the ExpressRoute virtual circuit.” is the CORRECT AN-SWER.

QUESTION 37
What components are required for setting up an Azure VNet to Oracle Cloud Infrastructure VCN connection as part of the OCI-Azure Interconnect?

An Azure VNet with subnets and a virtual network gateway, and an OCI VCN with subnets and an attached internet gateway

An Azure VNet with subnets and a virtual network gateway, and an OCI VCN with subnets and an attached NAT gateway

An Azure VNet with subnets and a virtual network gateway, and an OCI VCN with subnets and an attached dynamic routing gateway

An Azure VNet with subnets and a virtual network gateway, and an OCI VCN with subnets and an attached service gateway

If you closely look at the options, you can start eliminating some of them.
We can easily eliminate “An Azure VNet with subnets and a virtual network gateway, and an OCI VCN with subnets and an attached service gateway” as we don’t require service gateway to setup OCI-Azure Interconnect.
On similar lines, we can also eliminate the options where internet gateway and NAT gateway is pre-sent.
Hence “An Azure VNet with subnets and a virtual network gateway, and an OCI VCN with sub-nets and an attached internet gateway” and “An Azure VNet with subnets and a virtual network gateway, and an OCI VCN with subnets and an attached NAT gateway”.
As you can see in the architecture below, on the OCI side you require a Dynamic Routing Gate-way and on the Azure side you need a Virtual Network Gateway.
Hence the option “An Azure VNet with subnets and a virtual network gateway, and an OCI VCN with subnets and an attached dynamic routing gateway” is CORRECT.

QUESTION 38
What is the purpose of using Oracle Cloud Infrastructure (OCI) Identity and Access Management (IAM) policies in a cross-cloud connection between Microsoft Azure and OCI?

To control who can manage OCI route tables, network security groups, and security lists

To control the location of the cross-cloud connection

To control the type of traffic allowed between the Azure VNet and the OCI VCN

To control the bandwidth of the connection between the Azure VNet and the OCI VCN

Controlling the Establishment of a Connection
With Oracle Cloud Infrastructure IAM policies, you can control:
Who in your organization has the authority to create a FastConnect virtual circuit.
Who can manage route tables, network security groups, and security lists.
Oracle and Microsoft have created a cross-cloud connection between Oracle Cloud Infrastructure and Microsoft Azure in certain regions. So, the option “To control the location of the cross-cloud connection” has nothing to do with IAM policies and hence is INCORRECT.
The option “To control the type of traffic allowed between the Azure VNet and the OCI VCN” is also INCORRECT as you use Security Lists/Network Security Group to filter traffic and not IAM policies.
IAM policies also have no role to play in determining the bandwidth of the connection.

Loading …