• Start OCI
  • Cloud Concepts
  • OCI Architecture
• Core OCI Services
  • OCI Computer Services
  • OCI Storage Services
  • OCI Network Services
    • VCN to VCN Comms
    • Load Balancer
  • OCI IAM
    • Principals
    • Compartment
    • Authentication
    • Authorization
  • OCI Database Services
    • OCI DB Options
  • OCI Security
    • Shared Security Model
    • Federation
    • Data Protection
    • Key Management
    • OS Management Service
    • Network Protection
    • OCI Web Application Firewall
    • Compliance Certifications
  • OCI Pricing and Billing
    • Pricing Models

Exam : Oracle Cloud Infrastructure Foundations 2020 Associate (1Z0-1085-20) 105 Minuts/60 Questions/ 68% to pass

Start OCI

Cloud Concepts

• 21 Regions
• AD - Availability Domains, isolated each other
• within region 3 AD (some 2 or 1)
• FD - Fault Domain (Logical Domain)

OCI Architecture

• Compartment - logical collection of resources

Core OCI Services

OCI Computer Services

• baremetal
• Dedicated VM
• VM
• COntainer Enginer
• Functions

OCI Storage Services

• block volume
  • Highly Durable - 3 replicas
  • Tiers - can be upto 32 GB (and maximum 32 volumes/disks)
    • Basic
    • Balanced
    • High Performance
• local NVMe - temp storage, non-persistent
  • high performance
• File Storage - files
  • NFS and SMB
  • Highly durable
  • can take snapshot
• Object Storage
  • all in root folder, no folder
  • unstrctured
  • hot
    • standard storage tier
  • cold
    • archive, backup
    • 10x cheaper than standard
    • 90 days retention minimum
    • 4 hr recovery/retrieve

OCI Network Services

• VCN - Virtual Cloud Network
• Internet Gateway - 2 way
• NAT Gateway - only inwards
• Public Subnet /DMZ
• DRG - Virtual Router to connect On-Prem or Other destination
  • IPSec
  • Fast Connect
• Service Gateway - to connect internal objects like Storage; connection via VCN
• Firewall rules to restrict traffic (port/subnet)
  • Ingress
  • Egress
• Network Security Group - NSG apply to VCN

VCN to VCN Comms

• VCN Peering
  • Local VCN Peering - same regions
  • Remoet VCN Peering - different regions
  • Peering is not transit; need dedicated peering

Load Balancer

• Service Discovery
• Health Check
• Algorithm

OCI IAM

Principals

IAM entity that allowed to interact with OCI resources.

• IAM Users and Groups
• Instance Principal - for instances, API, etc

Compartment

• Collection of resources

Authentication

• Who
• OCI IAM service authenticate a Principal by
  • username, password
  • API Signing Key
  • Auth Tokens

Authorization

• Specifies various actions an authenticated principal can do
• OCI Authorization = policies
• Written in Human-readable format
  • Allow group GROUP_NAME to VERB RESOURCE_TYPE in tenancy
    • verb - read, inspect, use, manage
    • resource type - all,database, instance,virtual network etc
• Policy attachment - attach to compartment or tenancy

OCI Database Services

OCI DB Options

• VM DB systems - DB running on VM
• Bare Metal - on physical server
• Oracle RAC - Cluster, HA
• Exadata DB
• Autonomous - share
• Autonomous - dedicated
  • Self driving, Self securing, Self repairing

Operations

• Start, stop, reboot
• Scale - CPU, Storage
• Patch - 2 steps process, DB first, then system.
  • Exadata and RAC - rolling patching

Backup/Restore

• Manual or Auto
• Retention period

DR Systems

• Oracle Data Guard
• Active Data Guard - extends data guard by providing advanced features for data protection and availability
• Switchover - Planned migratons, no data losss
• Failover - unplanned, minimal data loss

DB Systems HA and DR

• primary and standby can be single instance or RAC

Autonomous DB

• Autonomous Transation Process (ATP)
• Autonomous Data Warehouse (ADW)

OCI Security

Shared Security Model

• OCI manage infra
• Customer manage VMs and Apps

Federation

Data Protection

• Data encrypted at-rest
• Data encrypted in-transit
• Bring your own keys

on

• block volume
• file storage
• object storage - pre-auth requests
• database - transparent data encryption, data safe, data vault

Key Management

• BYOK - Bring your own keys

• HSM (hardware security modules)

• data safe

OS Management Service

• execute and automate common and complex management tasks
• package management, config management
• security and compliance

Network Protection

• Tiered subnet strategy

  • DMZ
  • Public
  • Private

• Gateways

  • NAT
  • Service
  • Dynamic Routing

• Security List, NSG

OCI Web Application Firewall

Compliance Certifications

OCI Pricing and Billing

Pricing Models

• Pay as you go (PAYG)
• Monthly Flex
• Bring your own lincense