Which two statements are TRUE about Object Storage data security and encryption in Oracle Cloud Infrastructure (OCI)? (Choose two.)

• A. A VPN connection to OCI is required to ensure securedata transfer to an object storage bucket.
• B. Client-side encryption is managed by the customer.
• C. OCI Vault Management is used by default to provide data security.
• D. All traffic to and from Object Storage service is encrypted using TLS.
• E. Data needs to be decrypted on the client side before retrieving it.

You created an Oracle Linux compute instance through the Oracle Cloud Infrastructure (OCI) management console then immediately realize you forgot to add an SSH key file. You notice that OCI compute service provides instance console connections that supports adding SSH keys for a running instance. Hence, you created the console connection for your Linux server and activated it using the connection string provided.
However, now you get prompted for a username and password to login. What option should you recommend to add the SSH key to your running instance, while minimizing the administrative overhead? (Choose the best answer.)

• A. You need to modify the serial console connection string to include the identity file flag, to specify the SSH key to use.
• B. You need to reboot the instance from the console, boot into the bash shell in maintenance mode, and add SSH keys for the OPC user.
• C. You need to configure the boot loader to use ttyS0 as a console terminal on the VM.
• D. You need to terminate the running instance and recreate it by providing the SSH key file.

An insurance company has contracted you to help automatetheir application business continuity plan. They have the application running in eu-frankfurt-1 as the primary site and uk-london-1 as a disaster recovery site.
Normally they have a DNS A record associated with the IP address of the primary endpoint in eu- frankfurt-1.
In the event of a disaster, they use OCI DNS Zone Management to update the A record and replace it with the IP address of the end-point in uk- londond-1. How can you automate the failover process? (Choose the best answer.)

• A. Provision a Load Balancer in Frankfurt and associate it with the A record in DNS. Create a backend set with backend servers from both eu-frankfurt-1 and uk- london-1 regions.
• B. Create a Traffic Management Steering policy with Load Balancer type and add both eu-frankfurt-1 and uk-london-1 endpoints. Attach the Traffic Management Steering policy to the A record.
• C. Create a Health Check that evaluates both regionalendpoints. Create a Traffic Management Steering policy with Failover type and associate it with the Health Check.
• D. Create a Traffic Management Steering policy and attach it to a backend servers from both eu-frankfurt-1 and uk-london-1 regions.

Your company hosts a web application on OCI usingcompute instances and block volumes. To minimize your recovery point objective (RPO), you enable cross-region block volume replication for the block volumes.
Which option is true regarding cross-region volume replication?

• A. Replication replaces the need for block volume backups.
• B. The cost of the replica matches the cost of the source volume; for example, the replica of a high-performance volume will be billed at the high-performance rate.
• C. The replica cannot be directly mounted on a compute instance. Instead, it must be activated, creating a clone that will be available for mounting.
• D. Replication is synchronous, so it may slightly degrade block volume performance.

You run a large global application with 90% of your customers based in the US and Canada. You want to test a new feature and allow a small percentage of users to access the new version of your application. Which Oracle Cloud Infrastructure (OCI) Traffic Management steering policy should you utilize?

• A. Load Balancer
• B. Geolocation steering
• C. IP Prefix steering
• D. ASN steering