100% Free Oracle 1Z0-997-24 Practice Test Questions

Question 1

You have designed and deployed your Autonomous Data Warehouse (ADW) such that it is accessible from

your on-premises data center and servers running on both private and public networks in Oracle Cloud

Infrastructure (OCI).

As you are testing the connectivity to your ADW database from the different access paths, you notice that the

server running on the private network isunable to connect to ADW.

Which two steps do you need to take to enable connectivity from the server on the private network to ADW?

(Choose two.)

A : Add an entry in the Security List of the ADW allowing ingress traffic for C10R block 10.2.2.0/24

B : Addan entry in the route table (associated with the private subnet) with destination of 0.0.0.0/: target type of NAT Gateway, add a stateful egress rule to the security list (associated with the private subnet) with destination of 0.0.0.0./0 and for all IP protocols.

C : Add an entry in the access table list of ASW for CIDR block 10.2.2.0/24.

D : Add an entry in the route table (associated with the private subnet) with destination of 0.0.0.0./0; target type of internet Gateway, add a stateful egress in the security list (associated with the private subnet) with destination of 0.0.0.0/0 and for all IP protocols.

E : Add an entry in the access control list of ADW for IP address 129.146.160.11

Answer: A,B

Question 2

An Oracle Cloud Infrastructure (OCI) PublicLoad Balancer's SSL certificate is expiring soon. You noticed the Load Balancer is configured with SSL Termination only. When the certificate expires, data traffic can be interrupted and security compromised. What steps do you need to take to prevent thissituation?

A : Add the new SSL certificate to the Load Balancer, update backend servers to work with a new certificate and edit listeners so they can use the new certificate bundle

B : Add the new SSL certificate to the Load Balancer, update listeners andbackend sets so they can use the new certificate bundle.

C : Add the new SSL certificate to the Load Balancer and implement end to end SSL so it can encrypt the traffic from clients all the way to the backend servers.

D : Add the new SSL certificate to the Load Balancer and update backend servers to use the new certificate bundle.

E : Add the new SSL certificate to the Load Balancer and update listeners to use the new certificate bundle.

Answer: A

Question 3

You are running a mission-critical database application in Oracle Cloud Infrastructure (OCI).

You regular backups of your DB system to OCI Object Storage. Recently, you notice a failed

database back status in the console. • Ensure that the database is not active and running while

the backup is in progress.

What troubleshooting action can you perform to determine the cause of the backup failure?

A : Ensure that the dcsagent program is not restarted in case of a stop/waiting status.

B : Ensure the database archiving mode is set to NOARCHIVELOG.

C : Ensure that your database host can connect to OCI Object Storage.

Answer: C

Question 4

A digital marketing company is planning to host awebsite on Oracle Cloud Infrastructure (OCI) and leverage

OCI Container Engine for Kubernetes (OKE). The web server will make API calls to access OCI Object

Storage to store all images uploaded by users.

For security purposes, your manager instructed youto ensure that the credentials used by the web server to

allow access not stored locally on the compute instance.

What solution results in an Implementation with the least effort for this scenario?

A : Configure the credentials using Instance Principal toallow the web server to make API calls to OCl Object Storage

B : Configure the credentials using OCI Registry (OC1R) which will automatically connect with OKE allowing the web server to make API calls to OCI Object Storage

C : Configure the credentials to use Transparent Data Encryption (TDE) which will automatically allow the web server to make API calls to OCl Object Storage

D : Configure the credentials using OCI Key Management to allow an instance to make API calls and grant access to OCl Object Storage.

Answer: A

Question 5

You have been asked to implement a bespoke financial application in Oracle Cloud Infrastructure using virtual

machine instances controlled by Autoscaling across multiple Availability Domains. The application stores

transaction logs, intermediate transaction data, and audit data and needs to store this on a persistent, durable

data store accessible from all of the application servers. The application requires the file system to be mounted

in the /audit folder on the

Linux file system. The system needs to tolerate the failure of two or more Fault Domains and still maintain

data integrity. The solution should be as low maintenance as possible.

What storage architecture should you suggest?

A : Use locally attached NVMe instances andconfigure RAID 0 replication between servers.

B : Implement a single instance and install an NFS server, configure and create an NFS share, and mount this as /audit on the application instances.

C : Store the data on Oracle Object Storage mounted at the/audit mount point on all the Linux instances using the default mount options.

D : Use File Storage Service(FSS). Configure FSS to operate from all Availability Domains the application servers operate in and mount the file system in the /audit folder.

Answer: D

Free Practice Oracle 1Z0-997-24 Exam Questions 2025