Correct Answer: A

Controlling the Establishment of a Connection

With Oracle Cloud Infrastructure IAM policies, you can control:

Who in your organization has the authority to create a FastConnect virtual circuit. Who can manage route tables, network security groups, and security lists. Oracle and Microsoft have created a cross-cloud connection between Oracle Cloud

Infrastructure and Microsoft Azure in certain regions. So, the option "To control the location of the cross-cloud connection" has nothing to do with IAM policies and hence is INCORRECT.

The option "To control the type of traffic allowed between the Azure VNet and the OCI VCN" is also INCORRECT as you use Security Lists/Network Security Group to filter traffic and not IAM policies.

IAM policies also have no role to play in determining the bandwidth of the connection.

Correct Answer: B

In the question, frontend is in Azure and backend is in OCI. And the keywords are SECURE and LOW LATENCY data transfer.

Use public internet connections to transfer data between Azure and OCI, encrypting the data in transit - INCORRECT as this option won't provide LOW LATENCY data transfer (as it is us-ing public internet).

Leverage a VPN Gateway to create an encrypted tunnel between Azure and OCI for secure data transfer - INCORRECT as Site-to-Site VPN Connection won't provide LOW LATENCY data transfer as the connection traverses through public

internet. Implement a hybrid cloud approach by integrating on-premises infrastructure with both Azure and OCI - INCORRECT as there is no mention of on-premises environment in the question. This option is irrelevant here.

Establish a dedicated, private connection between Azure and OCI using Azure ExpressRoute and Oracle FastConnect - CORRECT as it provides a direct Interconnect between OCI and Microsoft Azure which in turn provides <2ms latency for

superior multicloud network performance.

Correct Answer: C

Site-to-Site VPN Components:

CPE OBJECT: At your end of Site-to-Site VPN is the actual device in your on-premises network (whether hardware or software). The term customer-premises equipment (CPE) is commonly used in some industries to refer to this type of on-

premises equipment. DYNAMIC ROUTING GATEWAY (DRG): At Oracle's end of Site-to-Site VPN is a virtual router called a dynamic routing gateway, which is the gateway into your VCN from your on- premises network.

IPSEC CONNECTION: After creating the CPE object and DRG, you connect them by creating an IPSec connection, which you can think of as a parent object that represents the Site-to-Site VPN.

TUNNEL: An IPSec tunnel is used to encrypt traffic between secure IPSec endpoints. Oracle cre-ates two tunnels in each IPSec connection for redundancy. So, Internet Gateway, NAT Gateway are NOT valid Site-to-Site VPN Components.

Hence, Dynamic Routing Gateway (DRG), Customer Premises Equipment (CPE), and IPsec tunnel is the CORRECT answer.

Correct Answer: A

Correct Answer: C

If you closely look at the options, you can start eliminating some of them. We can easily eliminate "An Azure VNet with subnets and a virtual network gateway, and an OCI VCN with subnets and an attached service gateway" as we don't

require service gateway to setup OCI-Azure Interconnect.

On similar lines, we can also eliminate the options where internet gateway and NAT gateway is pre-sent.

Hence "An Azure VNet with subnets and a virtual network gateway, and an OCI VCN with sub-nets and an attached internet gateway" and "An Azure VNet with subnets and a virtual network gateway, and an OCI VCN with subnets and an

attached NAT gateway". As you can see in the architecture below, on the OCI side you require a Dynamic Routing Gate-way and on the Azure side you need a Virtual Network Gateway. Hence the option "An Azure VNet with subnets and a

virtual network gateway, and an OCI VCN with subnets and an attached dynamic routing gateway" is CORRECT.

Correct Answer: D

Oracle Database Service for Azure offers the following products:

Oracle Exadata Database: You can provision flexible Exadata systems that allow you to add database compute servers and storage servers to your system at any time after provision-ing.

Autonomous Database on shared Exadata infrastructure: Autonomous Database pro-vides an easy-to-use, fully autonomous database that scales elastically, delivers fast query performance, and requires no database administration. Base

Database: Using OracleDB for Azure, you can deploy Oracle Enterprise Edition or Oracle Standard Edition 2 databases on virtual machine DB systems. You can deploy single-node systems or 2-node RAC systems.

MySQL Database with HeatWave: MySQL Database Service is a fully managed Oracle Cloud native service available through OracleDB for Azure. It is developed, managed, and supported by the MySQL team in Oracle. Optionally, you can

add a HeatWave cluster to a MySQL DB system. HeatWave is a distributed, scalable, shared-nothing, in-memory, hybrid columnar, query processing engine designed for extreme performance. Hence, "Autonomous Database on dedicated

Exadata infrastructure" is NOT available and hence the CORRECT ANSWER.

Correct Answer: B

Azure users log into OracleDB for Azure using their Azure credentials, and OracleDB for Azure streams much of the day-to-day operational data from the OracleDB for Azure managed OCI data-bases to Azure Application Insights and Azure Log Analytics. Because of this, Azure developers spend most of their time in Azure. In some instances, an OracleDB for Azure user must log into the OCI Console to perform specific tasks that aren't enabled or available in OracleDB for Azure today. To make this process easier, Az-ure customers setup identity federation between the Azure and OCI tenancies. With this in place, authorized users use a single set of credentials, their Azure credentials, to log into Azure and OCI

Correct Answer: B

Correct Answer: B

The automated onboarding process requires that the Azure user onboarding to OracleDB for Az-ure have at least one of the following admin roles:

Application Administrator, Cloud Application Administrator, Privileged Role Administrator, or Global Administrator.

Reference: Fully-Automated Onboarding (oracle.com)

Correct Answer: D

Oracle Database Service for Azure (OracleDB for Azure) is an Oracle managed service delivering Oracle Database services in Oracle Cloud Infrastructure (OCI) directly to Microsoft Azure custom-ers through the OCI Azure Interconnect (a capability available between the two cloud environments in regions located around the world). OracleDB for Azure uses a service-based approach, and is an alternative to manually creating complex cross-cloud deployments using the Interconnect.