1z0-1085-23 Exam Dumps - Oracle Cloud Infrastructure Certification Questions and Answers

Vault is the Oracle Cloud Infrastructure service that is responsible for securely storing and managing encryption keys and secrets. Vault is a key management service that lets you create, import, use, rotate, disable, and delete cryptographic keys and secrets. You can use Vault to encrypt your data at rest or in transit, as well as sign and verify digital messages5.

Oracle Cloud Infrastructure Container Engine for Kubernetes is a fully-managed, scalable, and highly available service that you can use to deploy your containerized applications to the cloud. Use Container Engine for Kubernetes (sometimes abbreviated to just OKE) when your development team wants to reliably build, deploy, and manage cloud-native applications. You specify the compute resources that your applications require, and Container Engine for Kubernetes provisions them on Oracle Cloud Infrastructure in an existing OCI tenancy.

You can access Container Engine for Kubernetes to define and create Kubernetes clusters using the Console and the REST API. You can access the clusters you create using the Kubernetes command line (kubectl), the Kubernetes Dashboard, and the Kubernetes API.

Container Engine for Kubernetes is integrated with Oracle Cloud Infrastructure Identity and Access Management (IAM), which provides easy authentication with native Oracle Cloud Infrastructure identity functionality.

Round robin is a type of load balancing policy supported by Oracle Cloud Infrastructure Load Balancer. Round robin distributes incoming traffic evenly across all healthy backend servers in a backend set. Round robin ensures that each server receives an equal number of requests over time.

These statements are true regarding OCI regions. A region is a localized geographic area that hosts one or more availability domains. An availability domain is one or more data centers that host OCI resources such as compute instances, block volumes, and subnets. Availability domains are isolated from each other, fault tolerant, and very unlikely to fail simultaneously1

Some regions provide multiple availability domains, while some regions provide a single availability domain. The number of availability domains per region varies depending on the region type and the customer demand. You can check the list of regions and their availability domains here: 2

• Commercial regions: These are the standard regions that are available to all customers and offer a wide range of OCI services and features. Commercial regions can have one, two, or three availability domains per region.
• Government regions: These are the regions that are dedicated to US government customers and meet specific compliance and security requirements. Government regions can have one or two availability domains per region.
• Dedicated regions: These are the regions that are deployed within a customer’s data center and provide a fully managed OCI environment that is consistent with the public cloud regions. Dedicated regions can have one or two availability domains per region.

The other statements are false regarding OCI regions. There is no concept of subregions in OCI. A region is composed of one or more availability domains, not subregions1

Regions do not only provide test/dev environments. Regions can host any type of workload or application, whether it is for production, development, testing, or disaster recovery purposes. Regions offer different performance levels, service levels, and pricing options to suit different customer needs and use cases1

Regions do not provide a single fault domain. A fault domain is a grouping of hardware and infrastructure within an availability domain that is designed to be isolated from failures in other fault domains. Fault domains let you distribute your instances so that they are not on the same physical hardware within a single availability domain. Each availability domain has three fault domains, regardless of the number of availability domains in a region3

For more information on Oracle Cloud Infrastructure Free Tier refer below official documentation

https://docs.cloud.oracle.com/en-us/iaas/Content/FreeTier/freetier.htm?Highlight=Free%20Tier

Exadata DB Systems aren't a part of the free tier:

The Accelerated Data Science (ADS) SDK is an Oracle-developed Python library that makes common data science tasks faster, easier, and less error prone. The ADS SDK provides tools for data ingestion, exploration, transformation, visualization, modeling, evaluation, interpretation, and deployment. The ADS SDK also integrates with other popular Python libraries such as pandas, scikit-learn, TensorFlow, PyTorch, etc.

The ADS SDK is included as part of the Data Science service at no additional cost. The Data Science service is a fully managed platform that enables data scientists to build, train, deploy, and manage machine learning models on OCI. The Data Science service provides access to notebook sessions that come pre-installed with the ADS SDK and other essential Python packages for data science workflows.

Explanation

Oracle Cloud Infrastructure File Storage service provides a durable, scalable, secure, enterprise-grade network file system. You can connect to a File Storage service file system from any bare metal, virtual machine, or container instance in your Virtual Cloud Network (VCN). You can also access a file system from outside the VCN using Oracle Cloud Infrastructure FastConnect and Internet Protocol security (IPSec) virtual private network (VPN).

Large Compute clusters of thousands of instances can use the File Storage service for high-performance shared storage. Storage provisioning is fully managed and automatic as your use scales from a single byte to exabytes without upfront provisioning.

The File Storage service supports the Network File System version 3.0 (NFSv3) protocol. The service supports the Network Lock Manager (NLM) protocol for file locking functionality.

Oracle Cloud Infrastructure File Storage employs 5-way replicated storage, located in different fault domains, to provide redundancy for resilient data protection. Data is protected with erasure encoding.

The File Storage service uses the "eventual overwrite" method of data eradication. Files are created in the file system with a unique encryption key. When you delete a single file, its associated encryption key is eradicated, making the file inaccessible. When you delete an entire file system, the file system is marked as inaccessible. The service systematically traverses deleted files and file systems, frees all the used space, and eradicates all residual files.

Use the File Storage service when your application or workload includes big data and analytics, media processing, or content management, and you require Portable Operating System Interface (POSIX)-compliant file system access semantics and concurrently accessible storage. The File Storage service is designed to meet the needs of applications and users that need an enterprise file system across a wide range of use cases, including the following:

The primary use case for using Web Application Firewall (WAF) in OCI is to filter malicious web traffic and protect internet-facing and internal applications from attacks. WAF is a cloud-based, PCI-compliant, global web application firewall service that monitors and controls access to web applications based on predefined rules and threat intelligence. WAF can block common web application attacks such as cross-site scripting (XSS), SQL injection, remote file inclusion, etc., as well as bot traffic, geographic restrictions, rate limiting, etc. WAF can protect any internet-facing endpoint or internal application by attaching WAF policies to enforcement points such as load balancers or web application domain names10

For highest level of resilience you can deploy the application between regions and distribute on availability domain and fault domains.