1Z0-950 試験問題を無料オンラインアクセス

When deploying Oracle Database products in the Oracle Database cloud, what is the division of security between the customer and Oracle?

• A.The customer is responsible for the entire stack from the underlying cloud infrastructure to identity, networking, and operating system rules and configuration.
• B.Oracle is responsible for Data Security while the customer is responsible for the database, Java, and other infrastructure services.
• C.In the public cloud model, Oracle is responsible for maintaining all credentials, ssh keys, and customer employee accounts and all activities that occur under those accounts.
• D.Oracle is completely responsible for all levels from the underlying cloud infrastructure to identity, networking, and operating system rules and configuration.
• E.Oracle Cloud platform services operate under a shared responsibility model where Oracle is responsible for the underlying cloud infrastructure and the customer is responsible for securing their own workloads under the Oracle Database Cloud.

Which two statements are true about configuring IORM?

• A.Each database is allocated a share value between 1 and 64.
• B.IORM will only intervene when I/O resources become limited.
• C.Custom IORM plans can be created using the ALTER IORMPLAN command from SQL *Plus when connected to one of the instances.
• D.If an Exadata Service has three databases, one with a share value of 4, another with a share value of 2, and the third with a share value of 7, and only the first database is doing I/O, it will only receive four I/Os out of every 13.
• E.If an Exadata Service has three databases, one with a share value of 2, another with a share value of 4, and the third with a share value of 1, the first database will get two I/Os out of every seven, the second database four I/Os out of every seven, and the last database one I/O out of every seven.

Acme Corporation has two environments: an on-premise Oracle Database environment and a new Oracle Database Cloud environment. Because of this, Acme users have to manage their user accounts and passwords in two places, on premises and in the cloud. What step should be taken to help eliminate the multiple sign-on, multiple password issue?

• A.Acme could implement identity federation between the on-premises and cloud environments to achieve single sign on.
• B.Acme should assign an identity domain administrator and instruct him/her to duplicate the on-premises accounts to the cloud, and then send emails to the users instructing them to duplicate their passwords.
• C.When the service account is created, the service administrator can automatically connect the on-premises domain with the newly created cloud service domain by selecting the Federated Login Required check box and filling in the domain name.
• D.Enable federated login by establishing the Federated User Login and pointing all on-premises accounts to the federated login account.
• E.Identity federation is not possible between Oracle environments on premises and in the cloud.

Your customer is creating a new Database instance in the cloud. According to Oracle documentation, only one SSH public key can be associated with the instance at the time of creation.
Your customer wants to create four additional SSH keys. Identify two ways to accomplish this.

• A.Add additional keys using the 'Add New Key' menu in the Oracle Database Cloud Service console.
• B.According to Oracle documentation, only a single key is supported per instance. Adding more users with their own public keys is not permissible.
• C.From the Compute Cloud > Network tab, access the security rules and enable the ssh_multiple_access rule. Then you will be able to assign multiple keys to an instance through the Compute Cloud admin utility.
• D.As the opc user add additional public keys to the .ssh/authorized_keys file.
• E.Log in to the database virtual machine as the root user, use ssh-keygen to generate four new keys, and assign them to each user in their home directory.

In your Oracle Database 12c Database Cloud Service deployment, you want to restrict access to Oracle Enterprise Manager Database Express by only permitting connections from specific IP addresses. What should you do to accomplish this goal?

• A.Create a security rule, specifying the hosts from which traffic should be allowed.
• B.Enable the pre-created ora_p2_dbexpress security rule.
• C.Create a security rule, referencing the pre-created ora_p2_httpssl security rule.
• D.Create a security rule, referencing the pre-created ora_p2_dbexpress security rule.
• E.Enable the pre-created ora_p2_httpssl security rule.