[May 13, 2022] Lesson Brilliant PDF for the 1Z0-1085-21 Tests Free Updated Today [Q57-Q76]

Correct. WAF supports both HTTP and HTTPS.

Explanation
You can create and manage resources in the following ways:
Oracle Cloud Infrastructure ConsoleThe Console is an intuitive, graphical interfacethat lets you create and manage your instances, cloud networks, and storage volumes, as well as your users and permissions.
See Using the Console.
Oracle CloudInfrastructure APIsThe Oracle Cloud Infrastructure APIs are typical REST APIs that use HTTPS requests and responses. See API Requests.
SDKsSeveral Software Development Kits are available for easy integration with the Oracle Cloud Infrastructure APIs, including SDKs for Java, Ruby, and Python. For more information, see Developer Resources.
Command Line Interface (CLI)You can use a command line interface with some services. For more information, see Developer Resources.
TerraformOracle supportsTerraform. Terraform is “infrastructure-as-code” software that allows you to define your infrastructure resources in files that you can persist, version, and share. For more information, see Getting Started with the Terraform Provider.
AnsibleOracle supports the use of Ansible for cloud infrastructure provisioning, orchestration, and configuration management. Ansible allows you to automate configuring andprovisioning your cloud infrastructure, deploying and updating software assets, and orchestrating your complex operational processes.
For more information, see Getting Started with Ansible for Oracle Cloud Infrastructure.
Resource ManagerResource Manager is an Oracle Cloud Infrastructure service that allows you to automate the process of provisioning your Oracle Cloud Infrastructure resources. It helps you install, configure, and manage resources using the “infrastructure-as-code” model. For more information, see Overview of Resource Manager.

What are Always Free cloud services? Databases: Your choice of Autonomous Transaction Processing or Autonomous Data Warehouse. 2 databases total, each with 1 OCPU and 20 GB storage. Compute: 2 virtual machines with 1/8 OCPU and 1 GB memory each. Storage: 2 Block Volumes, 100 GB total. 10 GB Object Storage. 10 GB Archive Storage. Additional Services: Load Balancer: 1 instance, 10 Mbps bandwidth. Monitoring: 500 million ingestion datapoints, 1 billion retrieval datapoints. Notifications: 1 million sent through https per month, 1,000 sent through email per month. Outbound Data Transfer: 10 TB per month. Reference: https://www.oracle.com/cloud/free/#always-free

Reference: https://www.youtube.com/watch?v=-
osyAtDDOZo&list=PLKCk3OyNwIzuHYigVbdtDOZOfChcotfj2&index=2

Data Security In Oracle Database Classic Cloud Service databases, data security is provided for data in transit and data at rest. Security of data in transit is achieved through network encryption. Security of data at rest is achieved through encryption of data stored in database data files and backups. >>> Data in Oracle Database files, including backups, is secured by the use of encryption implemented through a key management framework. Security of data across the network is provided by native Oracle Net Services encryption and integrity capabilities.

Reference: https://www.oracle.com/cloud/pricing.html
https://www.brightworkresearch.com/oracle/2019/02/21/does-oracles-bare-metal-outperform-awss- bare-metal/

Correct. User access and permissions are managed by the customers.

Explanation
Customer and Oracle’s responsibilities can be divided into the following areas:
Physical Security: Oracle is responsible for protecting the global infrastructure that runs all of the services offeredin Oracle Cloud Infrastructure. This infrastructure consists of the hardware, software, networking, and facilities that run Oracle Cloud Infrastructure services.
Identity and Access Management (IAM): As with all Oracle cloud services, you should protect your cloud access credentials and set up individual user accounts. You are responsible for managing and reviewing access for your own employee accounts and for all activities that occur under your tenancy. Oracle is responsible for providing effective IAM services such as identity management, authentication, authorization, and auditing.
Workload Security: You are responsible for protecting and securing the operating system and application layers of your compute instances from attacks and compromises. This protection includes patching applications and operating systems, operating system configuration, and protection against malware and network attacks. Oracle is responsible for providing secure images that are hardened and have the latest patches. Also, Oraclemakes it simple for you to bring the same third-party security solutions that you use today.
Data Classification and Compliance: You are responsible for correctly classifying and labeling your data and meeting any compliance obligations. Also, you are responsible for auditing your solutions to ensure that they meet your compliance obligations.
Host Infrastructure Security: You are responsible for securely configuring and managing your compute (virtual hosts, containers), storage (object, local storage, block volumes), and platform (database configuration) services. Oracle has a shared responsibility with you to ensure that the service is optimally configured and secured. This responsibility includes hypervisor security and the configuration of the permissions and network access controls required to ensure that hosts can communicate correctly and that devices are able to attach or mount the correct storage devices.
Network Security: You are responsible for securely configuring network elements such as virtualnetworking, load balancing, DNS, and gateways. Oracle is responsible for providing a secure network infrastructure.
Client and Endpoint Protection: Your enterprise uses various hardware and software systems, such as mobile devices and browsers, to access your cloud resources. You are responsible for securing all clients and endpoints that you allow to access Oracle Cloud Infrastructure services.

Correct. Vertical scaling refers to adding more or faster CPUs, memory, or I/O resources to an existing server, or replacing one server with a more powerful server.

Reference: https://blogs.oracle.com/cloud-infrastructure/oracle-announces-pci-dss-attestation-of- compliance-aoc-for-oracle-cloud-infrastructure

Budgets Overview: A budget can be used to set soft limits on your Oracle Cloud Infrastructure spending.
You can set alerts on your budget to let you know when you might exceed your budget, and you can view all of your budgets and spending from one single place in the Oracle Cloud Infrastructure console.
How Budgets Work: Budgets are set on cost-tracking tags or on compartments (including the root compartment) to track all spending in that cost-tracking tag or for that compartment and its children. All budgets alerts are evaluated every hour in most regions, and every four hours in IAD. To see the last time a budget was evaluated, open the details for a budget. You will see fields that show the current spend, the forecast and the “Spent in period” field which shows you the time period over which the budget was evaluated. When a budget alert fires, the email recipients configured in the budget alert receive an email. Budget Concepts: The following concepts are essential to working with budgets:
BUDGETA monthly threshold you define for your Oracle Cloud Infrastructure spending. Budgets are set on cost-tracking tags or compartments and track all spending in the cost-tracking tag or compartment and any child compartments. Note The budget tracks spending in the specified target compartment, but you need to have permissions to manage budgets in the root compartment of the tenancy to create and use budgets.ALERTYou can define email alerts that get sent out for your budget. You can send a customized email message body with these alerts. Alerts are evaluated every hour in most regions (every four hours in IAD), and can be triggered when your actual or your forecasted spending hits either a percentage of your budget or a specified set amount. Required IAM Policy Reference:
https://docs.cloud.oracle.com/en-us/iaas/Content/Billing/Concepts/budgetsoverview.htm

Reference: https://docs.oracle.com/en-us/iaas/Content/General/Concepts/regions.htm#ariaid-title3

Oracle Cloud Infrastructure File Storage service provides a durable, scalable, secure, enterprise-grade network file system. You can connect to a File Storage service file system from any bare metal, virtual machine, or container instance in your Virtual Cloud Network (VCN). You can control the access of the file system from FSS by applying some security rules and others but the services it self not related to security but it related to shared storage.

Explanation
Oracle Cloud Infrastructure Container Engine for Kubernetes is a fully-managed, scalable, and highly available service that youcan use to deploy your containerized applications to the cloud. Use Container Engine for Kubernetes (sometimes abbreviated to just OKE) when your development team wants to reliably build, deploy, and manage cloud-native applications. You specify the compute resources that your applications require, and Container Engine for Kubernetes provisions them on Oracle Cloud Infrastructure in an existing OCI tenancy.
Container Engine for Kubernetes uses Kubernetes – the open-source system for automating deployment, scaling, and management of containerized applications across clusters of hosts. Kubernetes groups the containers that make up an application into logical units (called pods) for easy management and discovery.
You can access Container Engine for Kubernetes to define and create Kubernetes clusters using the Console and the REST API. You can access the clusters you create using the Kubernetes command line (kubectl), the Kubernetes Dashboard, and the Kubernetes API.
Container Engine for Kubernetes is integratedwith Oracle Cloud Infrastructure Identity and Access Management (IAM), which provides easy authentication with native Oracle Cloud Infrastructure identity functionality.

Explanation
Horizontal scalingmeans that you scale by adding more machines into your pool of resources whereas Vertical scaling means that you scale by adding more power (CPU, RAM) to an existing machine.
An easy way to remember this is to think of a machine on a server rack, we add more machines across the horizontal direction and add more resources to a machine in the vertical direction.

With horizontal-scaling it is often easier to scale dynamically by adding more machines into the existing pool
– Vertical-scaling is often limited to the capacity of a single machine, scaling beyond that capacity often involves downtime and comes with an upper limit.

Reference: https://medium.com/oracledevs/scaling-your-oci-web-server-203895180102

Reference: https://docs.oracle.com/en-us/iaas/data-safe/index.html