Oracle 1z0-1085-23 Oracle Cloud Infrastructure 2023 Foundations Associate Exam Practice Test

Oracle Functions is a fully managed, multi-tenant, highly scalable, on-demand, Functions-as-a-Service platform. It is built on enterprise-grade Oracle Cloud Infrastructure and powered by the Fn Project open source engine. Use Oracle Functions (sometimes abbreviated to just Functions) when you want to focus on writing code to meet business needs.

The serverless and elastic architecture of Oracle Functions means there's no infrastructure administration or software administration for you to perform. You don't provision or maintain compute instances, and operating system software patches and upgrades are applied automatically. Oracle Functions simply ensures your app is highly-available, scalable, secure, and monitored. With Oracle Functions, you can write code in Java, Python, Node, Go, and Ruby (and for advanced use cases, bring your own Dockerfile, and Graal VM). You can then deploy your code, call it directly or trigger it in response to events, and get billed only for the resources consumed during the execution.

Oracle Functions is based on Fn Project. Fn Project is an open source, container native, serverless platform that can be run anywhere - any cloud or on-premises. Fn Project is easy to use, extensible, and performant. You can download and install the open source distribution of Fn Project, develop and test a function locally, and then use the same tooling to deploy that function to Oracle Functions.

You can access Oracle Functions using the Console, a CLI, and a REST API. You can invoke the functions you deploy to Oracle Functions using the CLI or by making signed HTTP requests.

The Universal Credits pricing model allows customers to use prepaid credits for any eligible cloud service. This gives customers the flexibility to switch between services or regions as needed without having to renegotiate contracts2

https://www.oracle.com/in/cloud/pricing.html

- OCI offers consistent performance with a predictable pricing model - is the best suited answer.

- Only bare metal workloads are supported in OCI - False, since you can work with VMs etc too

- With OCI, you can run cloud native workloads - False, since you can work with on-premise by connecting it to OCI too.

- With OCI, you can only run Java based workloads on bare metal - False since Java is not the only  programming language supported by OCI.

Object Lifecycle Management is the OCI Object Storage feature that can be used for the purpose of deleting any previous object versions 120 days after the object version transitions from the latest version to a previous version. Object Lifecycle Management allows you to create rules to automatically manage the deletion or archival of objects in a bucket based on predefined criteria, such as time, size, or name. You can use Object Lifecycle Management to reduce your storage costs and optimize your data management3

To achieve the desired outcome, you can create an Object Lifecycle Management rule that applies to all previous object versions in a bucket and specifies an age-based time rule that deletes objects 120 days after they become noncurrent versions. This rule will automatically delete any previous object versions that are older than 120 days from the date they were replaced by newer versions4

The other features are not suitable for this purpose. Pre-Authenticated Requests are a way to grant temporary access to your Object Storage resources without requiring users to have an Oracle Cloud Infrastructure identity. Pre-Authenticated Requests allow you to create URLs that can be used to access buckets or objects for a limited time period5 Retention Rules are a way to prevent objects from being deleted or overwritten for a specified period of time. Retention Rules allow you to create policies that enforce minimum retention durations for objects in a bucket or with specific prefixes. Retention Rules help you comply with regulatory or business requirements for data preservation6 Multipart Uploads are a way to upload large objects in parts rather than as a single operation. Multipart Uploads allow you to resume uploads, improve performance, and increase reliability for uploading large objects. Multipart Uploads help you overcome network or service disruptions during uploads7

• A compartment is a logical container that can hold OCI resources such as compute instances, block volumes, virtual cloud networks, etc. Compartments help you organize and control access to your resources based on business needs or security requirements3
• By default, your tenancy comes with a root compartment that is the parent of all other compartments in your tenancy. You cannot delete the root compartment, but you can create subcompartments within it to further organize your resources3
• Compartments can be used to logically separate OCI resources, not physically separate them. Resources within one compartment can interact with resources in other compartments, as long as the appropriate policies and network configurations are in place. For example, you can attach a compute instance in one compartment to a virtual cloud network in another compartment, or grant access to a user group in one compartment to manage resources in another compartment34

Nano instance is not a type of instance offered by the Oracle Cloud Infrastructure Compute service. The types of instances offered by the Compute service are bare metal, virtual machine, dedicated virtual machine host, and flexible virtual machine host. A nano instance is a type of instance offered by AWS EC2 service that provides a small amount of consistent CPU resources and allows users to increase CPU capacity in short bursts when additional cycles are available.

Oracle Container Engine for Kubernetes (OKE) is an OCI service that supports the development and deployment of docker-based applications on OCI. OKE is a fully-managed, scalable, and highly available service that runs Kubernetes clusters on OCI. OKE allows you to create, manage, and scale Kubernetes clusters using the OCI Console, CLI, or API. You can use OKE to orchestrate the deployment, scaling, and management of your containerized applications across multiple nodes and availability domains. OKE integrates with other OCI services such as Compute, Networking, Load Balancing, Block Volume, Object Storage, Registry, and Monitoring1

Streaming, Oracle Cloud VMware Solution, and API Gateway are not OCI services that support the development and deployment of docker-based applications on OCI.

Streaming is an OCI service that provides a fully managed, scalable, and durable platform for ingesting, storing, and consuming continuous, high-volume streams of data. Streaming is based on Apache Kafka and can be used for real-time data processing, analytics, and event-driven applications2

Oracle Cloud VMware Solution is an OCI service that provides a customer-managed, native VMware-based cloud environment that is installed within a customer’s tenancy. Oracle Cloud VMware Solution allows customers to use the same VMware tools and skills to manage and run their infrastructure in the cloud without compromise. Customers can migrate or extend their on-premises VMware workloads to OCI with minimal changes3

API Gateway is an OCI service that enables developers to create, manage, and secure APIs for their back-end services. API Gateway acts as a single point of entry for clients to access defined back-end services hosted on OCI or other locations. API Gateway supports RESTful and HTTP-based APIs, as well as API lifecycle management features such as authentication, authorization, throttling, caching, logging, and monitoring4

You can do Costs Analysis in OCI and you can group and filter the cost by Tags or compartments

To filter costs by dates

To filter costs by tags

To filter costs by compartments

To remove a compartment or tag filter

There are 2 types of DB systems on virtual machines:

A 1-node VM DB system consists of one VM.

A 2-node VM DB system consists of two VMs clustered with RAC enabled.

The cost of running a virtual machine instance in Oracle Cloud Infrastructure depends on several factors, such as the size, shape, region, and operating system of the instance. The number of virtual machines running does not impact the cost of each individual instance1

https://www.oracle.com/assets/paas-iaas-pub-cld-srvs-pillar-4021422.pdf

Enterprises demand more than just availability from their cloud infrastructure. Mission-critical workloads also require consistent performance, and the ability to manage, monitor, and modify resources running in the cloud at any time. Only Oracle offers end-to-end SLAs covering performance, availability, manageability of services.

Data backup frequency is not a component of an identity and access management (IAM) policy statement in Oracle Cloud Infrastructure. An IAM policy statement is a rule that grants or denies access to a specific type of resource in a specific compartment. An IAM policy statement consists of four components: an action verb, a resource-type, a location, and an optional condition.

Visual Logs is not a valid log type supported by the Oracle Cloud Infrastructure (OCI) Logging service. The Logging service supports three kinds of logs: Audit logs, Service logs, and Custom logs5

• Audit logs are logs related to events emitted by the OCI Audit service, such as API calls or console actions performed by users or services in your tenancy. Audit logs are automatically enabled and available for viewing or searching in the Logging service5
• Service logs are logs emitted by OCI native services, such as API Gateway, Events, Functions, Load Balancer, Object Storage, and VCN Flow Logs. Each of these supported services has predefined logging categories that you can enable or disable on your respective resources. For example, you can enable read and write access events for Object Storage buckets, or ingress and egress traffic for VCN subnets5
• Custom logs are logs that contain diagnostic information from custom applications, other cloud providers, or an on-premises environment. Custom logs can be ingested through the API, or by configuring the Unified Monitoring Agent. For example, you can send logs from Apache web servers, Oracle databases, or Kubernetes clusters to the Logging service for analysis and monitoring5

Creating a manual cluster of compute instances, and Writing custom scripts that will monitor your solution are not valid ways to ensure fault tolerance at all. Also, Performing Data Integrity check when using OCI File Storage Service is not valid since OCI takes care of it.

Therefore, we are left with:

1) Using multiple OCI Availibility Domains (AD), where available, to deploy your solution - Which is excellent because we have multiple AD's so that if one fails, we have a backup AD!

2) Ensuring your solution components are distributed across OCI Fault Domains - So that we can protect our deployment against unexpected power failures, AD failure etc.

The following are capabilities of the OCI Data Catalog service:

• It provides a repository of searchable metadata. Data Catalog harvests metadata from data sources across the OCI ecosystem and on-premises to create an inventory of data assets. This helps data consumers easily find the data they need for analytics4.
• It enables enrichment of the metadata. Data Catalog allows users to add business metadata such as business terms, tags, custom properties, and annotations to data assets. This helps provide more insight and context into the data5.
• It can automate harvesting of data. Data Catalog supports on-demand or schedule-based automatic harvesting to ensure the data catalog always has up-to-date information4.

APPLIANCE-BASED DATA TRANSFER

You send your data as files on secure, high-capacity, Oracle-supplied storage appliances to an Oracle transfer site. Operators at the Oracle transfer site upload the data into your designated Object Storage bucket in your tenancy.

This solution supports data transfer when you are migrating a large volume of data and when using disks is not a practical alternative. You do not need to write any code or purchase any hardware. Oracle supplies the transfer appliance and software required to manage the transfer.

https://docs.cloud.oracle.com/en-us/iaas/Content/DataTransfer/Concepts/overview.htm

Oracle Cloud Infrastructure Data Transfer Appliance securely moves terabytes or petabytes data between on-premise data centers and the cloud. The service reduces data migration times from weeks or months to just hours and is available for data import to the cloud and data export from the cloud.

OCI Logging service is a highly scalable and fully managed service that allows you to access logs from OCI resources. OCI Logging allows three kinds of logs: Audit, service, and custom logs. You can find more details for each of these logs in the documentation3

OCI Logging service is a centralized single pane of glass for all logs in a tenancy. You can view and search logs on the Logging Search page. When searching logs, you can correlate across many logs simultaneously. For example, you can view results from multiple logs, multiple log groups, or even an entire compartment with one query3

OCI Logging service can index, enrich, and aggregate log data from application. Custom logs are logs that contain diagnostic information from custom applications, other cloud providers, or an on-premises environment. Custom logs can be ingested through the API, or by configuring the Unified Monitoring Agent. You can configure an OCI compute instance/resource to directly upload Custom Logs through the Unified Monitoring Agent. Custom logs are supported in both a virtual machine and bare metal scenario3

OCI Logging service can analyze critical diagnostic information that describes how resources are performing and being accessed. These logs include audit logs related to events emitted by the OCI Audit service, such as API calls or console actions performed by users or services in your tenancy; service logs emitted by OCI native services, such as API Gateway, Events, Functions, Load Balancer, Object Storage, and VCN Flow Logs; and custom logs from your own applications or sources3

The Payment Card Industry Data Security Standard (PCI DSS) is a global set of security standard designed to encourage and enhance cardholder data security and promote the adoption of consistent data security measures around the technical and operational components related to cardholder data.

Oracle has successfully completed a Payment Card Industry Data Security Standard (PCI DSS) audit and received an Attestation of Compliance (AoC) covering several Oracle Cloud Infrastructure services and the Oracle RightNow Service Cloud Service. As a PCI Level 1 Service Provider, customers can now use these services for workloads that store, process or transmit cardholder data.

Oracle Cloud Infrastructure File Storage service provides a durable, scalable, secure, enterprise-grade network file system. You can connect to a File Storage service file system from any bare metal, virtual machine, or container instance in your Virtual Cloud Network (VCN). You can also access a file system from outside the VCN using Oracle Cloud Infrastructure FastConnect and Internet Protocol security (IPSec) virtual private network (VPN).

Large Compute clusters of thousands of instances can use the File Storage service for high-performance shared storage. Storage provisioning is fully managed and automatic as your use scales from a single byte to exabytes without upfront provisioning.

Cloud Horizontal Scaling refers to provisioning additional servers to meet your needs, often splitting workloads between servers to limit the number of requests any individual server is getting. In a cloud-based environment, this would mean adding additional instances instead of moving to a larger instance size.

Cloud Vertical Scaling refers to adding more CPU or memory to an existing server, or replacing one server with a more powerful server.

A fault domain is a grouping of hardware and infrastructure within an availability domain. Each availability domain contains three fault domains. Fault domains provide anti-affinity: they let you distribute your instances so that the instances are not on the same physical hardware within a single availability domain. A hardware failure or Compute hardware maintenance event that affects one fault domain does not affect instances in other fault domains. In addition, the physical hardware in a fault domain has independent and redundant power supplies, which prevents a failure in the power supply hardware within one fault domain from affecting other fault domains.

To control the placement of your compute instances, bare metal DB system instances, or virtual machine DB system instances, you can optionally specify the fault domain for a new instance or instance pool at launch time. If you don't specify the fault domain, the system selects one for you. Oracle Cloud Infrastructure makes a best-effort anti-affinity placement across different fault domains, while optimizing for available capacity in the availability domain. To change the fault domain for an instance, terminate it and launch a new instance in the preferred fault domain.

Use fault domains to do the following things:

Protect against unexpected hardware failures or power supply failures.

Protect against planned outages because of Compute hardware maintenance.

Oracle Dedicated Region Cloud @Customer is a fully managed cloud region that brings all Oracle Cloud Infrastructure services and Oracle Fusion Cloud Applications, including Oracle Autonomous Database and SaaS applications, to customer datacenters, starting from only $500K a month1

https://education.oracle.com/en/learning-paths/trackp_OCIF2023CA

SLAs are Oracle’s commitments to specific aspects of OCI services, measured over a calendar month and expressed as monthly uptime percentages or monthly performance rates. Oracle is committed to providing the best-in-class service levels and believes that SLAs are key performance indicators for customers of cloud providers. Each OCI service has its own definition of service level. OCI offers competitive SLAs for more than 50 PaaS and IaaS public cloud services4

SLAs are defined as a number of nines for a month and a percentage credit. For example, Oracle NoSQL Database Cloud Service offers an availability SLA of 99.995%. If the monthly uptime percentage falls below 99.995%, but is equal to or greater than 99%, then the customer is eligible for a 10% credit for their spend for that service; if the monthly uptime percentage falls below 99%, but is equal to or greater than 95%, then the customer is eligible for a 25% credit; if the monthly uptime percentage falls below 95%, then the customer is eligible for a 100% credit4

SLAs are financially backed commitments to provide a minimum level of service to customers. If Oracle does not meet an SLA commitment in any given month during your subscription term (for example if your monthly uptime percentage falls below the specified threshold), then you may be eligible for a credit toward your future consumption of that service (for example 10%, 25%, or 100% depending on the severity of the breach). To receive this credit you must submit a claim within 30 days after the end of that month with supporting evidence as specified in the SLA policy document (for example screenshots or log files)4

A service gateway is the component of the Oracle Cloud Infrastructure Networking service that allows resources in a VCN to access Oracle Cloud Services without traversing the public internet. A service gateway provides a secure and private connection between a VCN and supported Oracle services, such as Object Storage, Autonomous Database, or Functions.

Oracle Cloud Infrastructure FastConnect provides an easy way to create a dedicated, private connection between your data center and Oracle Cloud Infrastructure. FastConnect provides higher-bandwidth options, and a more reliable and consistent networking experience compared to internet-based connections.

https://www.oracle.com/cloud/cloud-infrastructure-compliance/

Compartments quotas are applied on a per-compartment basis in Oracle Cloud Infrastructure. A compartment quota is a set of limits and policies that define how resources can be allocated within a compartment. A compartment quota can specify the maximum number of resources, the allowed shapes and sizes, and the minimum performance levels for resources within a compartment.

Oracle Cloud Infrastructure is hosted in regions and availability domains. A region is a localized geographic area, and an availability domain is one or more data centers located within a region. A region is composed of one or more availability domains. Most Oracle Cloud Infrastructure resources are either region-specific, such as a virtual cloud network, or availability domain-specific, such as a compute instance. Traffic between availability domains and between regions is encrypted.

Availability domains are isolated from each other, fault tolerant, and very unlikely to fail simultaneously. Because availability domains do not share infrastructure such as power or cooling, or the internal availability domain network, a failure at one availability domain within a region is unlikely to impact the availability of the others within the same region.

The availability domains within the same region are connected to each other by a low latency, high bandwidth network, which makes it possible for you to provide high-availability connectivity to the internet and on-premises, and to build replicated systems in multiple availability domains for both high-availability and disaster recovery.

A fault domain is a grouping of hardware and infrastructure within an availability domain. Each availability domain contains three fault domains. Fault domains provide anti-affinity: they let you distribute your instances so that the instances are not on the same physical hardware within a single availability domain. A hardware failure or Compute hardware maintenance event that affects one fault domain does not affect instances in other fault domains. In addition, the physical hardware in a fault domain has independent and redundant power supplies, which prevents a failure in the power supply hardware within one fault domain from affecting other fault domains.

For highest level of resilience you can deploy the application between regions and distribute on availability domain and fault domains.

Web Application Firewall (WAF) is the Oracle Cloud Infrastructure service that is designed to protect web applications from various types of malicious attacks, such as SQL injection and cross-site scripting. WAF is a cloud-based service that inspects incoming web traffic and blocks any requests that are malicious or do not comply with predefined rules. WAF helps users secure their web applications from common web exploits and application-layer attacks.

The Oracle Cloud Infrastructure Notifications service broadcasts messages to distributed components through a publish-subscribe pattern, delivering secure, highly reliable, low latency and durable messages for applications hosted on Oracle Cloud Infrastructure and externally. Use Notifications to get notified when event rules are triggered or alarms are breached, or to directly publish a message.

Messages sent out as email by the Oracle Cloud Infrastructure Notifications service are processed and delivered through Oracle resources

There are two types of DB systems on virtual machines:

· A 1-node virtual machine DB system consists of one virtual machine.

· A 2-node virtual machine DB system consists of two virtual machines. (RAC)

A virtual machine DB system database uses Oracle Cloud Infrastructure block storage instead of local storage. You specify a storage size when you launch the DB system, and you can scale up the storage as needed at any time.

For 1-node virtual machine DB systems, Oracle Cloud Infrastructure provides have a "fast provisioning" option that allows you to create your DB system using Logical Volume Manager as your storage management software.

Oracle Cloud Infrastructure offers single-node DB systems on either bare metal or virtual machines, and 2-node RAC DB systems on virtual machines. If you need to provision a DB system for development or testing purposes, then a special fast provisioning single-node virtual machine system is available.

You can manage these systems by using the Console, the API, the Oracle Cloud Infrastructure CLI, the Database CLI (DBCLI), Enterprise Manager, Enterprise Manager Express, or SQL Developer.

You must create a dedicated virtual machine host before you can place any instances on it. When creating the dedicated virtual machine host, you select an availability domain and fault domain to launch it in. All the VM instances that you place on the host will subsequently be created in this availability domain and fault domain. You also select a compartment when you create the dedicated virtual machine host, but you can move the host to a new compartment later without impacting any of the instances placed on it. You can also create the instances in a different compartment than the dedicated virtual machine host, or move them to difference compartments after they have been launched.

You are billed for the dedicated virtual machine host as soon as you create it, but you are not billed for any of the individual VM instances you place on it. You will still be billed for image licensing costs if they apply to the image you are using for the VM instances.

Read more: https://docs.cloud.oracle.com/en-us/iaas/Content/Compute/Concepts/dedicatedvmhosts.htm

A NAT gateway gives cloud resources without public IP addresses access to the internet without exposing those resources to incoming internet connections.

When you work with Oracle Cloud Infrastructure, one of the first steps is to set up a virtual cloud network (VCN) for your cloud resources.

VIRTUAL CLOUD NETWORK (VCN) :

A virtual, private network that you set up in Oracle data centers. It closely resembles a traditional network, with firewall rules and specific types of communication gateways that you can choose to use. A VCN resides in a single Oracle Cloud Infrastructure region and covers a single, contiguous IPv4 CIDR block of your choice. See Allowed VCN Size and Address Ranges. The terms virtual cloud network, VCN, and cloud network are used interchangeably in this documentation. For more information, see VCNs and Subnets.

SUBNETS :

Subdivisions you define in a VCN (for example, 10.0.0.0/24 and 10.0.1.0/24). Subnets contain virtual network interface cards (VNICs), which attach to instances. Each subnet consists of a contiguous range of IP addresses that do not overlap with other subnets in the VCN. You can designate a subnet to exist either in a single availability domainavailability domain

or across an entire region (regional subnets are recommended). Subnets act as a unit of configuration within the VCN: All VNICs in a given subnet use the same route table, security lists, and DHCP options (see the definitions that follow). You can designate a subnet as either public or private when you create it. Private means VNICs in the subnet can't have public IP addresses. Public means VNICs in the subnet can have public IP addresses at your discretion. See Access to the Internet.

Oracle Cloud Infrastructure Autonomous Database is based on Oracle Database, the world’s leading relational database management system. It leverages the features and capabilities of Oracle Database to provide a fully managed, self-driving, self-securing, and self-repairing database service6

Components of IAM

IAM uses the components described in this section. To better understand how the components fit together, see Example Scenario.

RESOURCE

The cloud objects that your company's employees create and use when interacting with Oracle Cloud Infrastructure. For example: compute instances, block storage volumes, virtual cloud networks (VCNs), subnets, route tables, etc.

USER

An individual employee or system that needs to manage or use your company's Oracle Cloud Infrastructure resources. Users might need to launch instances, manage remote disks, work with your virtual cloud network, etc. End users of your application are not typically IAM users. Users have one or more IAM credentials (see User Credentials).

GROUP

A collection of users who all need the same type of access to a particular set of resources or compartment.

DYNAMIC GROUP

A special type of group that contains resources (such as compute instances) that match rules that you define (thus the membership can change dynamically as matching resources are created or deleted). These instances act as "principal" actors and can make API calls to services according to policies that you write for the dynamic group.

NETWORK SOURCE

A group of IP addresses that are allowed to access resources in your tenancy. The IP addresses can be public IP addresses or IP addresses from a VCN within your tenancy. After you create the network source, you use policy to restrict access to only requests that originate from the IPs in the network source.

COMPARTMENT

A collection of related resources. Compartments are a fundamental component of Oracle Cloud Infrastructure for organizing and isolating your cloud resources. You use them to clearly separate resources for the purposes of measuring usage and billing, access (through the use of policies), and isolation (separating the resources for one project or business unit from another). A common approach is to create a compartment for each major part of your organization. For more information, see Setting Up Your Tenancy.

TENANCY

The root compartment that contains all of your organization's Oracle Cloud Infrastructure resources. Oracle automatically creates your company's tenancy for you. Directly within the tenancy are your IAM entities (users, groups, compartments, and some policies; you can also put policies into compartments inside the tenancy). You place the other types of cloud resources (e.g., instances, virtual networks, block storage volumes, etc.) inside the compartments that you create.

POLICY

A document that specifies who can access which resources, and how. Access is granted at the group and compartment level, which means you can write a policy that gives a group a specific type of access within a specific compartment, or to the tenancy itself. If you give a group access to the tenancy, the group automatically gets the same type of access to all the compartments inside the tenancy. For more information, see Example Scenario and How Policies Work. The word "policy" is used by people in different ways: to mean an individual statement written in the policy language; to mean a collection of statements in a single, named "policy" document (which has an Oracle Cloud ID (OCID) assigned to it); and to mean the overall body of policies your organization uses to control access to resources.

HOME REGION

The region where your IAM resources reside. All IAM resources are global and available across all regions, but the master set of definitions reside in a single region, the home region. You must make changes to your IAM resources in your home region. The changes will be automatically propagated to all regions. For more information, see Managing Regions.

FEDERATION

A relationship that an administrator configures between an identity provider and a service provider. When you federate Oracle Cloud Infrastructure with an identity provider, you manage users and groups in the identity provider. You manage authorization in Oracle Cloud Infrastructure's IAM service. Oracle Cloud Infrastructure tenancies are federated with Oracle Identity Cloud Service by default.

https://docs.cloud.oracle.com/en-us/iaas/Content/Identity/Concepts/overview.htm

Oracle Cloud Infrastructure offers two distinct storage class tiers to address the need for both performant, frequently accessed "hot" storage, and less frequently accessed "cold" storage. Storage tiers help you maximize performance where appropriate and minimize costs where possible.

Use Object Storage for data to which you need fast, immediate, and frequent access. Data accessibility and performance justifies a higher price to store data in the Object Storage tier.

Use Archive Storage for data to which you seldom or rarely access, but that must be retained and preserved for long periods of time. The cost efficiency of the Archive Storage tier offsets the long lead time required to access the data.

Unlike Object Storage, Archive Storage data retrieval is not instantaneous.

VCN peering is the process of connecting multiple virtual cloud networks (VCNs) so that their resources can communicate using private IP addresses. There are four types of VCN peering: 1

• Local VCN peering: This is the process of connecting two VCNs in the same region and tenancy. This type of peering uses local peering gateways (LPGs) in each VCN to establish a logical connection.
• Remote VCN peering: This is the process of connecting two VCNs in different regions, either in the same tenancy or different tenancies. This type of peering uses remote peering gateways (RPGs) in each VCN to establish a logical connection.
• Peering VCNs in the same region through a dynamic routing gateway (DRG): This is the process of connecting multiple VCNs in the same region and tenancy by attaching them to a common DRG. A DRG is a virtual router that provides a path for private network traffic between your VCN and other networks.
• Peering VCNs in different regions through a DRG: This is the process of connecting multiple VCNs in different regions and tenancies by attaching them to a common DRG and using IPSec VPN or FastConnect to connect the DRGs across regions.

Peered VCNs cannot have overlapping CIDRs, as this would cause routing conflicts and ambiguity. Peered VCNs need to have unique CIDRs that do not overlap with each other or with any other network that they need to communicate with1

A VCN peering connection is not a VPN-based connection. A VPN-based connection is a secure and encrypted connection between your on-premises network and your OCI VCN over the public internet by using IPSec VPN or FastConnect. A VPN-based connection requires an internet gateway or a DRG in your VCN and a customer-premises equipment (CPE) device in your on-premises network2

Peered VCNs do not need to be part of the same OCI tenancy, as long as they are in different regions. Remote VCN peering supports cross-tenancy connections, meaning that you can peer a VCN in one tenancy with a VCN in another tenancy, as long as they are subscribed to the same regions and have proper IAM policies to allow peering. Local VCN peering and peering through a DRG only support intra-tenancy connections, meaning that you can only peer VCNs within the same tenancy1

Oracle Cloud Infrastructure Web Application Firewall (WAF) is a cloud-based, Payment Card Industry (PCI) compliant, global security service that protects applications from malicious and unwanted internet traffic. WAF can protect any internet facing endpoint, providing consistent rule enforcement across a customer's applications.

WAF provides you with the ability to create and manage rules for internet threats including Cross-Site Scripting (XSS), SQL Injection and other OWASP-defined vulnerabilities. Unwanted bots can be mitigated while tactically allowed desirable bots to enter. Access rules can limit based on geography or the signature of the request.

Dimensions are defined as qualifiers used for filtering group metric data presented in the OCI Monitoring service. Dimensions are key-value pairs that provide additional information about a metric, such as resource ID, region, availability domain, fault domain, shape, image, etc. Dimensions allow you to narrow down the scope of your metric queries and alarms by specifying which resources or attributes you want to monitor. For example, you can use dimensions to filter the CPU utilization metric by instance ID or shape.

A fault domain is a grouping of hardware and infrastructure within an availability domain. Each availability domain contains three fault domains. Fault domains provide anti-affinity: they let you distribute your instances so that the instances are not on the same physical hardware within a single availability domain. A hardware failure or Compute hardware maintenance event that affects one fault domain does not affect instances in other fault domains. In addition, the physical hardware in a fault domain has independent and redundant power supplies, which prevents a failure in the power supply hardware within one fault domain from affecting other fault domains.

Usually fault domains to do the following things:

1) Protect against unexpected hardware failures or power supply failures.

2) Protect against planned outages because of Compute hardware maintenance.

Oracle’s mission is to build cloud infrastructure and platform services for your business to have effective and manageable security to run your mission-critical workloads and store your data with confidence.

Oracle Cloud Infrastructure offers best-in-class security technology and operational processes to secure its enterprise cloud services. However, for you to securely run your workloads in Oracle Cloud Infrastructure, you must be aware of your security and compliance responsibilities. By design, Oracle provides security of cloud infrastructure and operations (cloud operator access controls, infrastructure security patching, and so on), and you are responsible for securely configuring your cloud resources. Security in the cloud is a shared responsibility between you and Oracle.

In a shared, multi-tenant compute environment, Oracle is responsible for the security of the underlying cloud infrastructure (such as data-center facilities, and hardware and software systems) and you are responsible for securing your workloads and configuring your services (such as compute, network, storage, and database) securely.

In a fully isolated, single-tenant, bare metal server with no Oracle software on it, your responsibility increases as you bring the entire software stack (operating systems and above) on which you deploy your applications. In this environment, you are responsible for securing your workloads, and configuring your services (compute, network, storage, database) securely, and ensuring that the software components that you run on the bare metal servers are configured, deployed, and managed securely.

More specifically, your and Oracle's responsibilities can be divided into the following areas:

Oracle Database Service for Azure is not designed for a multicloud solution. It is a service that allows customers to run Oracle Database on Azure infrastructure, using the same license they have for Oracle Database on Oracle Cloud Infrastructure3

Storing and managing encryption keys and secrets is not a feature provided by Oracle Cloud Infrastructure Security Zones. Security Zones are compartments that enforce strict security policies on resources created within them. Security Zones help you prevent misconfigurations that could weaken your security posture or violate compliance requirements. Security Zones automatically apply predefined recipes of security policies based on best practices6. To store and manage encryption keys and secrets, you need to use Vault5.

Oracle offers several different service level agreements as defined in this section (Service Level Agreements).Service level agreements range from least restrictive (data plane) to more restrictive (control plane) to most restrictive (performance).

When you sign up for Oracle Cloud Infrastructure, Oracle creates a tenancy for you in one region. This is your home region. Your home region is where your IAM resources are defined. When you subscribe to another region, your IAM resources are available in the new region, however, the master definitions reside in your home region and can only be changed there.

When you subscribe your tenancy to a new region, all the policies from your home region are enforced in the new region. If you want to limit access for groups of users to specific regions, you can write policies to grant access to specific regions only.

The primary use case for using Web Application Firewall (WAF) in OCI is to filter malicious web traffic and protect internet-facing and internal applications from attacks. WAF is a cloud-based, PCI-compliant, global web application firewall service that monitors and controls access to web applications based on predefined rules and threat intelligence. WAF can block common web application attacks such as cross-site scripting (XSS), SQL injection, remote file inclusion, etc., as well as bot traffic, geographic restrictions, rate limiting, etc. WAF can protect any internet-facing endpoint or internal application by attaching WAF policies to enforcement points such as load balancers or web application domain names10

• Oracle Cloud VMware Solution is a customer-managed, native VMware-based cloud environment that is installed within a customer’s tenancy. Customers have complete access to and control over their VMware environment in the cloud2
• Customers can use the same VMware tools and skills to manage and run their infrastructure in the cloud without compromise2
• Customers have full administrative control over the VMware environment, including vCenter access with administrative credentials3