OCI Notes

Question 1

Oracle Cloud is classified into two main categories

Answer 1

• Oracle Cloud Infrastructure (OCI)
• Oracle Cloud Applications

Question 2

Oracle Cloud Infrastructure (OCI)

Answer 2

• Infrastructure and platform services that are designed to run any type of application.
• It could be a modern cloud-native application or service or any other mission-critical workloads.

Question 3

Core services of OCI

Answer 3

• Compute
• storage
• networking

Question 4

Oracle Cloud applications

Answer 4

SaaS

Question 5

Three main constructs of this physical architecture of OCI

Answer 5

• Regions
• Availability domains (ADs)
• Fault domains (FDs)

Question 6

Region

Answer 6

• Region represents a localized geographic area that is comprised of one or more availability domains
• These availability domains are connected to each other by a low latency, high bandwidth network.

Question 7

Availability Domain (AD)

Answer 7

• Data Center
• Isolated from each other, fault tolerant, unlikely to fail simultaneously.
• Physical infrastructure not share

Question 8

Fault Domain (FD)

Answer 8

• fault domain, which is a grouping of hardware and infrastructure within each availability domain.
• The key purpose of using separate fault domains is to protect against any unexpected hardware failure or even against planned outages that can occasionally occur during compute hardware maintenance.
• Each availability domain (AD) contains three fault domains that provide for anti-affinity, which means it allows you to distribute resources instead of running on the same physical hardware.

Question 9

Some of the criteria for choosing a particular region.

Answer 9

• Choose a region that is closest to the majority of users for reasons such as lower latency and highest performance.
• Regulatory compliance for storing your enterprise data.
• OCI service availability.

Question 10

OCI Compute Service

Answer 10

OCI Compute allows you to create and manage compute resources/compute instances/servers

Question 11

Three types of compute instances

Answer 11

• Virtual machine (VM)
  is a logical server that runs on top of a physical bare metal server
• Bare Metal Machine
  is a dedicated physical server for the highest performance.
• Dedicated VM host,
  allowing you to run your VMs on a dedicated server as opposed to them running on a shared physical server.

Question 12

Compute Shape

Answer 12

• Template that determines the number of CPUs, the amount of memory, and all other computing resources that are allocated to the instance.
• Currently, OCI allows to choose either AMD, Intel, or Arm-based processor.

Question 13

Two types of shapes.

Answer 13

• Fixed shapes are a specific number of CPUS in memory and cannot be customized. And this applies to all bare metal physical instances, of course, there are fixed size, but VMs can also select a fixed shape as well.
• Flexible shapes, on the other hand, allow you to customize the number of CPUs and the amount of memory you need, but, of course, this is only an option for virtual machines.

Question 14

Vertical scaling

Answer 14

• Allows you the ability to scale up or scale down. This simply means that you can change the shape or size of the VM to something smaller or something larger.
• Just be aware that there will be a brief downtime for your virtual machine since it will have to be stopped for resizing it. Then it can be restarted with the new number of CPUs and memory size.

Question 15

Horizontal scaling or Autoscaling

Answer 15

• Automatically add more compute instances of the same shape
• This can be achieved in one of two ways.
  
  • The first is metric-based autoscaling. Here you choose a performance metric to be monitored along with setting a threshold for that metric. And then when the threshold is met, it triggers an autoscaling event to increase or decrease the number of VMs.
  • The second option is scheduled-based autoscaling. Here you define specific times of the day or perhaps certain days of the week to automatically increase or decrease the number of compute instances.

Question 16

Three main types of storage services–

Answer 16

• Block volumes
• File storage
• Object storage

Question 17

Block Volume

Answer 17

• Through the Block Volume service, you can create a virtual logical disk that you can attach to the VM. So like a hard drive, it is only used by that compute instance.
• Here the data in each volume is stored as blocks.
• The block volume disk that you attach to your virtual machine compute instance is always persistent, which means that even after deleting that compute instance, you can still keep that volume disk intact and use it later for another VM.

Question 18

File storage service

Answer 18

• This is another type of virtual storage, but this can be accessed from one or more virtual machines or any other OCI Compute instance type, such as bare metal machines. Think about file storage like a network drive that you can map to your computer, but this same drive could also be mapped by other users. So it allows for file sharing.
• As we saw earlier, file storage is usually used as a shared storage for multiple compute instances.
• It’s ideal for applications that are running on containers or big data and analytics workloads. In contrast to block volumes where data is stored as blocks, in file storage, the data is managed as files. And there are several advanced capabilities that you can leverage when using the file storage service that makes it ideal for running microservices-based applications.

Question 19

Object Storage

Answer 19

• which can be accessed from anywhere to include a remote internet client like a web browser.
• Another difference is that files are stored as objects, which can be anything to include images, videos, or any other type of file, typically used to support web and mobile-based applications.
• the object storage service provides internet-scale, high-performance storage, which is reliable, and it provides more cost-efficient data durability options.
• Object storage is most often used for storing unstructured data, such as image files or videos or log files.
• as in its name the data is managed as objects where these objects are stored in a construct called buckets.
• A bucket can be considered similar to a folder that’s used to contain these objects, and it provides several advanced capabilities which makes this a reliable and durable storage platform.

Question 20

The core resource you can provision for network computing is aptly called a Virtual Cloud Network, or VCN for short.

Answer 20

• you can configure constructs, such as public subnets and private subnets. Think of these as a subdivision of the larger network, sometimes referred to as a subnetwork.
  
  • hosting web app instance in public subnet so customers able to connect to this web app through the internet.
  • hosting database instance in private subnets so it is not reachable from the internet.
  • But at the same time, the web server and the database instances should be able to communicate with each other.

Question 21

you can configure constructs, such as public subnets and private subnets. Think of these as a subdivision of the larger network, sometimes referred to as a subnetwork.

Overall, the VCN itself is defined as a virtual private network that you can set up for secure communications between resources. It is a regional service, which means a VCN resides in a single OCI region. Fortunately, you can use a VCN across multiple availability domains that belong to that OCI region.

This service is designed as highly available, and it is massively scalable. Most importantly, this is a highly secure network since it is designed to be private as its default. Essentially, no one can use or access it unless you explicitly define that specific allow rule.

Question 22

Overall, the VCN itself is defined as a virtual private network that you can set up for secure communications between resources. It is a regional service, which means a VCN resides in a single OCI region. Fortunately, you can use a VCN across multiple availability domains that belong to that OCI region.

This service is designed as highly available, and it is massively scalable. Most importantly, this is a highly secure network since it is designed to be private as its default. Essentially, no one can use or access it unless you explicitly define that specific allow rule.

Answer 22

• Overall, the VCN itself is defined as a virtual private network that you can set up for secure communications between resources.
• It is a regional service, which means a VCN resides in a single OCI region.
• Fortunately, you can use a VCN across multiple availability domains that belong to that OCI region.
• This service is designed as highly available,
• and it is massively scalable.
• Most importantly, this is a highly secure network since it is designed to be private as its default.
• Essentially, no one can use or access it unless you explicitly define that specific allow rule.

Question 23

Gateway

Answer 23

• The communication to and from the VCN is facilitated through different gateways depending on the use case.
• A gateway is simply a device that decides where to route the traffic, depending on various factors, such as the
  
  • protocol,
  • the IP address,
  • and the final destination.

Question 24

Three most commonly used gateways that can be attached to a VCN.

1. Internet Gateway
2. Network Address Translation Gateway (NAT Gateway)
3. Service Gateway

Dynamic Routing Gateway

Answer 24

1. Internet Gateway is a virtual router that provides internet connectivity for resources inside your VCN as long as they’re assigned to a public subnet. For example, our web server instance
   
   • can communicate with other external services on the internet
   • or external internet clients can access the web application through this gateway.
2. Network Address Translation Gateway (NAT gateway) is another type of virtual router that’s often used by instances running in private subnets. It provides for
   
   • connections only to the internet.
   • That means it will not receive any inbound connections initiated from external internet clients.
   • You often use the NAT Gateway for use cases, such as the need to install updates or patches on your compute instances.
3. Service Gateway allows resources in your VCN, either in a public or private subnet to securely access various other Oracle Cloud Services, such as object storage as shown here through an internal network, and thus bypassing the internet altogether.

Question 25

**dynamic routing gateway** to the VCN. However, you'll need another OCI service in addition to the dynamic routing gateway in order to achieve this **connectivity to a private on-premises network**. Now one option is **site-to-site VPN**, which **provides a private and secure communications tunnel** as an analogy-- think about those occasions where you need to access your corporate office network from your home network. You first connect to the corporate VPN, and then you would be able to access internal corporate websites. Well, **OCI site-to-site VPN is a similar VPN service.** The second option is called **FastConnect**, which is another way of creating a **dedicated private connection between your on-premises data center and OCI**, and this provides **higher bandwidth** options and a **more reliable** and **consistent network experience** as compared to internet-based VPN connection.

Answer 25

Need to add a **dynamic routing gateway** to the VCN for connectivity between resources in your **VCN** and your **on-premises data center**. Need addition OCI service to achieve this: 1. **site-to-site VPN**, which **provides a private and secure communications tunnel** as an analogy-- think about those occasions where you need to access your corporate office network from your home network. You first connect to the corporate VPN, and then you would be able to access internal corporate websites. Well, **OCI site-to-site VPN is a similar VPN service.** 2. **FastConnect**, which is another way of creating a **dedicated private connection between your on-premises data center and OCI**, and this provides **higher bandwidth** options and a **more reliable** and **consistent network experience** as compared to internet-based VPN connection.

Question 26

**Shared Security Model**, which simply means that the overall security of your resources in OCI is a shared responsibility between you as the customer and Oracle. **Shared Security Model** Security of customer resources in OCI is a shared responsibility between customer and Oracle:

Answer 26

**Oracle Manages** 1. Physical Data Center 2. Physical Network 3. Physical Hosts 4. Virtualization **Customer Manage** 1. Operating System 2. Network Controls 3. Applications 4. Accounts and Identities 5. Devices 6. Data

Question 27

OCI provides many security services that you can easily leverage to protect your cloud applications and resources.

Answer 27

Starting with the infrastructure protection layer, there are services, such as the web application firewall for securing any internet-facing application server, which will filter malicious inbound web traffic. Also, you can configure security lists or network security groups which essentially function as virtual firewalls in your VCN. Additionally, the network firewall service is a cloud native firewall that can control all types of traffic into your applications. The second layer of security services involves identity and access Management. By default, access to all cloud resources is completely restricted. No one can access them. But you can explicitly grant access to one or more resources using IAM policies. You can create user accounts and groups and set policies to allow them the most restrictive access to just the specific cloud resources they need. Multifactor authentication provides an additional level of security where a user would need to log in using their password, then also provide an additional passcode that is dynamically generated by an authentication app. The next layer of protection involves operating systems and workloads. For example, the Bastion service provides a secure way to access target resources in private networks. OS management services allow you to manage and monitor updates and patches for operating system environments. Data protection is another critical layer for security. Vault key and secrets management services are used to centrally manage and maintain control of encryption keys used to protect enterprise data as well as secret credentials that are used to securely access resources. Data Safe provides a complete and integrated set of features for protecting sensitive and regulated data in Oracle Cloud databases. And, finally, there are security services that can be leveraged for detection and remediation. For example, Cloud Guard is a cloud data service that helps customers to maintain a strong security posture in Oracle Cloud. And the Vulnerability Scanning service can be used to routinely check hosts and container images for potential security vulnerabilities.

Question 28

**Security Services** 1. ***`Infrastructure`* Protection** 2. ***`Identity and Access`* Management** 3. ***`OS and Workload`* Protection** 4. ***`Data`* Protection** 5. ***`Detection and Remediation`***

Answer 28

**1. *`Infrastructure`* Protection** * **DDos Protection** * **Web Application Firewall** - Filter malicious web traffic * **Security Lists/NSG** - Virtual firewalls * **Network Firewall** - contrals traffic into application **2. *`Identity and Access`* Management** * **IAM** - Manage user access and policies * **MFA** - Manage multi-factor authentication * **Federation** - Single sign-on to identity providers * **Audit** - Record API calls automatically **3. *`OS and Workload`* Protection** * **Shield Instances** - Secure Boot, Measured Boot, TPM * **Dedicated Host** - Workload isolation * **Bastion** - provides a secure way to access target resources in private networks. * **OS Management** - OS patch and package management **4. *`Data`* Protection** * **Vault Key** Management - Encryption for data at rest and in transit * **Vault Secrets** Management - Centralized key storage & management * **Data Safe** - Rotate, manage, and retrieve secrets * **Certificates** - Discover, classify, and protect data **5. *`Detection and Remediation`*** * **Cloud Guard** - Security posture management * **Security Zones** - Secure Enclave * **Security Advisor** - Security Advisor * **Vulnerability Scanning** - Vulnerability & exposure scanning

Question 29

**Oracle offers a range of database services in Oracle Cloud**. In general, we can break them down by where the system is residing, whether it's Oracle public cloud or is it the customer data center. And who is managing the infrastructure and the database?

Answer 29

* **Base Database Service** (built on **standard compute and storage** options. It's typically for **workloads with smaller processing and storage requirements**.) * Oracle Database Standard Edition * Oracle Database Enterprise Edition * **Exadata Database Service** (built on **Exadata platform** and, as a result, offer the **highest performance scale and availability**.) * Exadata Databse Service on Dedicated Infrastructure (public cloud) * Exadata Databse Service on Cloud@Customer (customer data centers) * **Autonomous Database** (fully autonomous and managed by Oracle) * Autonomous Database on Shared & Dedicated Exadata Infrastructure (public cloud) * Autonomous Database on Exadata Cloud@Customer (customer data centers)

Question 30

Autonomous Database can be deploy in Shared or Dedicated Exadata Infrastructure

Answer 30

* Shared Exadata Infrastructure * Provision and manage only the Autonomous DB * Oracle handles Exadata infrastructure deployment and management * Dedicated Exadata Infrastructure * Exclusive use of the Exadata hardware

Question 31

Autonomous Database workload type

Answer 31

* Autonomous Transaction Processing (built for transactional workloads) * Autonomous Data Warehouse (built for decision support and data warehouse workloads) * JSON and APEX (supported only on shared infrastructure)

Question 32

Exadata Databse Service on Dedicated Infrastructure Exadata Databse Service on Cloud@Customer

Answer 32

Then we have Exadata Database Service on dedicated infrastructure in the public cloud and Exadata Cloud@Customer. They are both built on the Exadata platform and, as a result, offer the highest performance scale and availability. Now Exadata Cloud@Customer offers the same cloud economics and cloud automation as Exadata Database Services on dedicated infrastructure in Oracle public cloud. But it's deployed in customer data centers.

Question 33

Autonomous Database on Shared & Dedicated Exadata Infrastructure Autonomous Database on Exadata Cloud@Customer

Answer 33

Then we have the Autonomous Database, which is fully autonomous and managed by Oracle and is available both in Oracle public cloud on OCI and in the customer's data center on Exadata Cloud@Customer. Now when you create an Autonomous Database, you can deploy it to one of two kinds of Exadata infrastructure, shared and dedicated. And we'll talk about that in a minute.

Question 34

Autonomous Database Deployment options: * Shared - Provision and manage only the Autonomous DB, Oracle handles Exadata infrastructure deployment and management * Dedicated - Exclusive use of the Exadata hardware Fully managed database with two workload types: * Autonomous Transaction Processing * Autonomous Data Warehouse what are the advantages of an Autonomous Database? * Back up * Patching * Upgrading * Tuning

Answer 34

Now when you create an Autonomous Database, you can deploy it to one of two kinds of Exadata infrastructure, shared and dedicated. And we'll talk about that in a minute. And then there are different workload types-- Autonomous Transaction Processing, which is built for transactional workloads, and Autonomous Data Warehouse that is built for decision support and data warehouse workloads. Now let's also talk about the deployment options. The first one is dedicated, where you have exclusive use of the Exadata hardware. And then we have shared where you can provision and manage only the Autonomous Database, while Oracle is going to handle Exadata infrastructure deployment and management. Please note that we also have two more workload types, which is JSON and APEX, which are supported only on shared infrastructure. So what are the advantages of an Autonomous Database? Well, Autonomous databases automatically backup your database for you. It also provides automated patching, upgrades, and tuning, including performing all routine database maintenance tasks while the system is running. And all this without any human intervention.

Question 35

**What are the advantages of an Autonomous Database?**

Answer 35

**Autonomous databases automatically :** * **Back up** * **Patching** * **Upgrading** * **Tuning**

Question 36

**MySQL Database Service with HeatWave**

Answer 36

* **MySQL HeatWave**. * It's a fully managed database service that **enables customers to run OLTP, OLAP**, * and **machine learning workloads** directly from their MySQL database. * It's powered by the integrated **HeatWave in-memory query accelerator**, * and it's the **only Cloud native database service** that **combines transactions, analytics, and machine learning services** into MySQL database and, * in turn, delivering real-time secure analytics without the complexity latency and cost of ETL duplication. And it also accelerates MySQL queries by 400 times.

Question 37

**MySQL Database Service with HeatWave**

Answer 37

* Easily run **high performance analytics** against your MySQL Database, **no ETL required** * Single MySQL database for **Online transaction processing (OLTP) & Online analytical processing (OLAP) applications** * Extreme performance: 400x faster than MySQL, scales to thousands of cores

Question 38

**Developer Services** Now within the Navigation menu on the OCI Console, you will find a tab titled Developer Services.

Answer 38

1. **Containers & Artifacts** * Containers & Artifacts * Kubernetes Clusters (OKE) * Container Instances * Container Registry * Artifact Registry * Service Mesh 2. **Functions** * Functions * Applications 3. **API Management** * API Management * Gateways * APIs 4. **DevOps** * DevOps * Overview * Projects 5. **Resource Manager** * Resource Manager * Overview * Stacks * Jobs * Private templates * Configuration Source Providers * Private Endpoints 6. **Developer Resources** * Developer Resources * SDK * CLI * PowerShell * Terraform * Ansible * Docs First, we have Containers and Artifacts. So these are basically used for managing containerized applications. They are associated resources and they are deployments. Functions hosts applications while abstracting from the actual servers. OCI also provides a comprehensive set of services to manage the lifecycle of APIs. Then we have the OCI DevOps service, which is a complete continuous integration and continuous delivery platform for developers to simplify and automate their software development lifecycle. And then we have the Resource Manager that lets you deploy infrastructure as code with managed Terraform. And finally, the Developer Resources, which are tools for writing applications that leverage OCI directly.

Question 39

**The building block of Cloud Native Application** The term **Cloud Native** refers to **an application that was designed to reside in the Cloud from the very start**.

Answer 39

these features that we discussed enable **loosely coupled systems** that are **resilient and manageable**. 1. **Containers** * software packages which ideally perform well-defined task 2. **Microservices** * approach to software development * where software is composed of independent services that communicate over well-defined APIs 3. **Declarative Application Programming Interfaces (APIs)** * Desired State System 4. **Immutable Infrastructure** * Managing Services * Software Deployments * Components are replaced rather than changed. So whenever any change occurs, the application or service is effectively redeployed. 5. **Service Mesh** * way to control how different parts of an application share data with one another The first is Containers. So Containers are software packages which ideally perform well-defined task. Then, we have Microservices. Think of it like an approach to software development, where software is composed of independent services that communicate over well-defined APIs. Then, we have Declarative Application Programming Interfaces, which is also known as APIs. A Declarative API is basically a desired state system. You provide a certain state you want the system to create and you don't care about all the steps that is needed to achieve that state. Then, we have a concept of Immutable Infrastructure. This is an approach to managing services and software deployments on IT resources, wherein components are replaced rather than changed. So whenever any change occurs, the application or service is effectively redeployed. Lastly, we have Service Mesh. It's basically a way to control how different parts of an application share data with one another. So these features that we discussed enable loosely coupled systems that are resilient and manageable.

Question 40

**OCI Observability and Management, focusing on the three foundational services**-- monitoring, logging, and events.

Answer 40

**monitoring, logging, and events.**

Question 41

Monitoring

Answer 41

To better understand these services, let's look at an example that involves the active monitoring of compute instance virtual machines. So let's imagine that these three VMs are running one or more applications. And these servers would, of course, be consuming compute resources such as CPUs and memory. This resource utilization data is referred to as metrics. Next, we define some conditions, such as aggregating this data or measuring the latest CPU utilization for each VM. We can then create an alarm. And in this case, we define the criteria for the alarm to be triggered if the CPU utilization goes above 80% on any of these compute VMs. Finally, in this scenario, we configure a notification that sends an email to someone on the operations team when this condition occurs. This is a simple example workflow that illustrates the importance of monitoring.

Question 42

Observability Pillars

Answer 42

1. **Metrics** * **Resource Utilization** * **CPU/Memory** * **Storage Usage** 2. **Logs** * VM * Networking * Application 3. **Traces** * 4. **Events** Observability, by definition, is the ability to understand the internal state of a system by performing a deeper analysis of the collected data. Well, what sort of data can be collected? Essentially, there are four conceptual observability pillars of data. The first one is metrics. As we saw in our example, metrics is simply raw data about some system or component, such as resource utilization, CPU use, or memory consumption. Or it could be data about the amount of storage that has been used. The second pillar includes logs. These are usually created automatically and are used continuously by any system, such as a virtual machine or a network or even an application. It can be anything. These logs typically provide a timestamp and detailed information as to what is happening at that moment in time. For example, if an application is trying to connect to another application, this will be captured in the log. The third one is traces. These are similar to logs, except they are not scoped to a single system or application. Instead, traces provide data about how separate components are operating and performing with one another. For example, if a user tries to connect to an application running in a VM, trace information would have details about the connection, such as how they connected and from which device the connection was made. The last one is events. Events are similar to both metrics and logs in that they produce data associated with a specific resource but indicate what specific action has occurred. For example, when a new compute VM is created, a VM Create Event is produced with all of the associated metadata about that event. Other examples include deleting a VM, creating or deleting an object storage bucket, or adding a dynamic routing gateway to a VCN. So then, there are several observability and management services that use these data pillars that can be used to analyze deeper as to what is really happening in the entire environment. The monitoring, logging, and event services are essentially the foundation of the Observability and Management platform. But OCI also provides other more advanced services. These include Logging Analytics, Application Performance Monitoring, Database Management Services, and Operations Insights.

Question 43

Oracle Cloud Infrastructure Observability and Management Services

Answer 43

1. Monitoring * Actively and Passively monitor cloud resources * Uses Metrics and Alarms * Single Pane of glass view with Dashboards 2. Logging * Centralized and secure log management * Built on open standards * Types of logs - Service, Custom, Audit * Service Connectors to transfer log data 3. Event Services * Enable you to automate based on state changes of resources * Uses Rules and Actions 4. Logging Analytics 5. Application Performance Monitoring 6. Database Management 7. Operations Insights

Question 44

Welcome back. In this lesson, we'll talk about OCI Observability and Management, focusing on the three foundational services-- monitoring, logging, and events. Let's get started. To better understand these services, let's look at an example that involves the active monitoring of compute instance virtual machines. So let's imagine that these three VMs are running one or more applications. And these servers would, of course, be consuming compute resources such as CPUs and memory. This resource utilization data is referred to as metrics. Next, we define some conditions, such as aggregating this data or measuring the latest CPU utilization for each VM. We can then create an alarm. And in this case, we define the criteria for the alarm to be triggered if the CPU utilization goes above 80% on any of these compute VMs. Finally, in this scenario, we configure a notification that sends an email to someone on the operations team when this condition occurs. This is a simple example workflow that illustrates the importance of monitoring. Observability, by definition, is the ability to understand the internal state of a system by performing a deeper analysis of the collected data. Well, what sort of data can be collected? Essentially, there are four conceptual observability pillars of data. The first one is metrics. As we saw in our example, metrics is simply raw data about some system or component, such as resource utilization, CPU use, or memory consumption. Or it could be data about the amount of storage that has been used. The second pillar includes logs. These are usually created automatically and are used continuously by any system, such as a virtual machine or a network or even an application. It can be anything. These logs typically provide a timestamp and detailed information as to what is happening at that moment in time. For example, if an application is trying to connect to another application, this will be captured in the log. The third one is traces. These are similar to logs, except they are not scoped to a single system or application. Instead, traces provide data about how separate components are operating and performing with one another. For example, if a user tries to connect to an application running in a VM, trace information would have details about the connection, such as how they connected and from which device the connection was made. The last one is events. Events are similar to both metrics and logs in that they produce data associated with a specific resource but indicate what specific action has occurred. For example, when a new compute VM is created, a VM Create Event is produced with all of the associated metadata about that event. Other examples include deleting a VM, creating or deleting an object storage bucket, or adding a dynamic routing gateway to a VCN. So then, there are several observability and management services that use these data pillars that can be used to analyze deeper as to what is really happening in the entire environment. The monitoring, logging, and event services are essentially the foundation of the Observability and Management platform. But OCI also provides other more advanced services. These include Logging Analytics, Application Performance Monitoring, Database Management Services, and Operations Insights. Let's take a quick peek into those three foundational services. The OCI Monitoring service enables you to both actively and passively monitor cloud resources. Active monitoring involves the collection of raw metrics about a resource. And then you can create alarms to trigger a notification, for example, if something is reported as a failure. Passive monitoring involves the creation of dashboards to collect and display those metrics that provide a graphical view of the collected data. Next, the OCI Logging service gives you a centralized location to collect the logs from any resource service or application that is in your OCI environment. Since this is built on open standards, it makes it easier to quickly search for any issues. There are three types of logs that can be configured, the service and audit logs that are associated with your OCI services and resources, as well as custom logs that could be created for applications or other deployed components. Logging also has a feature called Service Connector which can be configured to automatically move log data into another service. For example, you may wish to take periodic backups of a particular log and persist it into an object storage bucket. The event service enables you to take actions associated with any particular event involving OCI resources. It allows you to define rules and corresponding actions based on the event type. For example, let's say that whenever someone creates a new compute VM, you wish to capture that event to automate the sending of an email to the corresponding team. Or you could define an action that automatically makes a backup of that VM configuration. And that wraps up a very high-level overview of OCI Observability and Management where we looked at the three foundational services-- monitoring, logging and events. Thanks for watching.

Question 45

Multicloud

Answer 45

Hello, and welcome. In this lesson, we will discuss multicloud. With a multicloud approach, you are not restricted to just a single cloud provider. So let's get started. Let's look at some of the data points. A survey was commissioned by HashiCorp and conducted by Forrester Consulting. And key insights revealed that 90% of the organizations feel multicloud approach is helping them achieve their business goals. The 2022 State of the Cloud Report also indicates that 89% of organizations reported taking a multicloud approach. What does it mean? It means they utilized multiple cloud services from two or more providers. And one of the reasons behind these numbers is the fact that organizations want to avoid overreliance on a single cloud provider. Since 2019, Oracle has partnered with Microsoft to provide low latency, private connectivity between Oracle Cloud and Microsoft Azure. So you can use the best of services from both these providers and continue to leverage any existing investments in Oracle and Microsoft technologies. So as you can see here, there are 12 Oracle Interconnect for Microsoft Azure locations around the world. There is private connectivity, which results in less than 2-millisecond latency for traffic between OCI and Microsoft Azure. And pricing is based solely on port capabilities for FastConnect and ExpressRoute. And the best part is there are no charges for inbound or outbound bandwidth that is consumed. One of the use cases of Oracle Interconnect for Azure is you can have the Autonomous Databases running on OCI. And these can connect to Azure Analytics tools and AI workloads. So over to Oracle Database Service for Azure, which is also known as ODSA. ODSA is an Oracle-managed service that enables customers to easily provision access and operate enterprise-grade Oracle data services in OCI with a familiar Azure-like experience. With ODSA, Azure teams can treat databases running on OCI just like an Azure resource. In just a few clicks, users can connect their Azure subscriptions to their OCI tenancy. And the best part is the service automatically configures everything that is required to link the two cloud environments. As you can see in this architecture, ODSA also sends metrics, logs, and events for the OCI databases you create to Azure tooling for unified telemetry and monitoring in Azure environments. So ODSA builds a private tunnel between Azure and OCI tenants using the interconnect, which results in less than 2-millisecond latency. And ODSA is offered at no additional cost. So there are no charges for the interconnect ports or data ingress or egress over the interconnect. But remember, you will be billed for consumption of Oracle database services, such as Autonomous Database. To summarize, ODSA uses a service-based approach and is an alternative to manually creating complex crosscloud deployments using the interconnect. To wrap up, the cloud has been buzzing with new innovations in recent years. And rather than using one platform and missing out on the benefits the others can bring, it's possible to combine the best of both the worlds and go multicloud. Thanks for watching.

Question 46

HashiCorp 2022 State of Cloud Strategy Survey Has a strategy to use multiple clouds helped advance or achieve your company's business goals? 99% YES Flexera 2022 State of the Cloud Report Multicloud remains the de facto standard for all organizations. 89% Multicloud 9% Single public 2% Single private

Question 47

OCI-Azure Interconnect Highly optimized, secure, and unified cross-cloud experience 12 Azure Interconnect regions < 2 millisecond latency private interconnection No inboud or outbound charges for data

Question 48

OCI - Azure Interconnect - use case Autonomous Databases running on OCI Connected to Azure Analytics tools and AI workloads

Question 49

Oracle Database Service for Azure ODSA

Answer 49

* Oracle Managed Service * Eases provisioning, access and operation * Familiar Azure-native user experience * Automated identity, networking, and monitoring integration * < 2 MS latency private interconnect * No additional cost

Question 50

Hybrid Cloud

Answer 50

Hello. In this lesson, we will discuss Hybrid Cloud. So let's get started. Recall the Cloud deployment models we reviewed in the Cloud computing basics lesson. The focus of this lesson will be the Hybrid Cloud. OCI offers the most complete support for Hybrid Cloud strategies. So we have Oracle Dedicated Region Cloud@Customer, which delivers all OCI services inside the customer's own data centers. Now all these services and applications help you to not only augment your journey to the Cloud, but also do so from the comfort of your own data centers. Then we have Oracle Cloud VMware Solution that allows you to create and manage VMware enabled software defined data centers in Oracle Cloud Infrastructure. We also have Oracle Autonomous databases on Exadata Cloud@Customer, which combines all the benefits of having Oracle Exadata in your data center with the simplicity of an Autonomous Cloud Service. Then we have Oracle's Roving Edge Infrastructure that accelerates deployment of Cloud workloads outside the data center. With Dedicated Region Cloud@Customer, you can meet your governance, regulatory compliance, and data privacy requirements while experiencing the benefits of public Cloud in your own data centers. Now as you can see here, there is customer's floor space, there's customer's racks, there's the data center power and cooling, and then Oracle is going to manage infrastructure operations and availability so that you can focus on the business innovation. To wrap up, with a Hybrid Cloud, organizations can get the best of both worlds in a flexible environment capable of adapting to their specific needs. Thanks for watching.

Question 51

Cloud Deployment Models

Answer 51

1. Private Cloud Wholly dedicated to one organization 2. Public Cloud Shared by Multiple Organizations 3. Hybrid Cloud Combination of both public and private cloud 4. Multicloud Cloud Use of multiple public clouds in a single architecture

Question 52

Hybrid Cloud Services

Answer 52

1. Dedicated Region Cloud@Customer All OCI services, running in customer data centers 2. Oracle Cloud VMware Solution Native VMWare on OCI in public cloud or dedicated regions 3. Exadata Cloud@Customer Cloud autonomous databases, running in your data center 4. Roving Edge Infrastructure OCI compute and storage for remote, disconnected scenarios