If a customer does not configure a customer-managed key, where does Oracle AI Database@Azure store the default TDE master encryption key for an Exadata database?

• A. OCI Vault
• B. Azure Key Vault
• C. Oracle Wallet
• D. Oracle Key Vault

A multinational organization's security team has implemented strict Azure Policy definitions that deny the creation of any untagged resource groups and prohibit deploying resources in any region other than West Europe. An administrator is now attempting to purchase an Oracle AI Database@Azure Private Offer and complete the subscription setup, but the subscription registration fails immediately with a "Deny" policy action during the purchase. The failure is traced to a managed resource group that must be created in the background to contain the OracleSubscription billing object. To resolve this deployment blocker and successfully purchase the offer, what specific adjustment must the Azure policy and administrator align on?
Choose ONE.

• A. Exclude the background managed resource group from the deny policies, allowing it to initially be created in the EastUS region without tags.
• B. Re-configure the OCI tenancy to use the pay-as-you-go model, removing the Azure-side managed resource group requirement.
• C. Manually pre-create the tagged managed resource group in West Europe prior to purchasing the Marketplace offer.
• D. Update the Azure subscription billing address to match an OCI region, bypassing the regional managed resource group requirement.

An enterprise is implementing a security architecture for Oracle AI Database@Azure where database administrators must manage resources natively through the Azure Portal while authenticating seamlessly via Single Sign-On (SSO) with Microsoft Entra ID. To facilitate this, the organization plans to configure optional Identity Federation and Role-Based Access Control (RBAC) mapping between Azure and Oracle Cloud Infrastructure (OCI). The deployment team needs to coordinate the exact user personas and permissions required on both cloud platforms to configure this identity federation. To complete this task, which combination of administrative personas and cloud-specific permissions must be assigned? Choose ONE.

• A. Azure Billing Account Owner with OCI root compartment tenancy administrator privileges
• B. Azure User Access Administrator with OCI Security Zone Administrator privileges
• C. Azure Entra ID Administrator with OCI Identity Domain Administrator privileges
• D. Azure Subscription Owner with OCI Support Owner privileges

Which two database services are officially supported and available for deployment on optimized hardware in Oracle AI Database@Azure? (Choose two.)

• A. Oracle NoSQL Database Cloud Service
• B. Oracle Database Standard Edition on IaaS VMs
• C. Oracle Exadata Database Service on Dedicated Infrastructure
• D. Oracle Autonomous AI Database

A financial services company is deploying Oracle Exadata Database Service on Dedicated Infrastructure on Oracle AI Database@Azure. Their security team mandates that database traffic never traverse the public internet, and that the Azure VNet hosting the delegated subnet also connect to three separate application-tier spoke VNets in the same region. Additionally, all inter-VNet traffic must pass through a centralized network virtual appliance for inspection before reaching the delegated subnet. As the architect, you must choose the network topology that satisfies both the multi-VNet connectivity and the centralized inspection requirement.
Choose ONE.

• A. Multi-region standby topology with Data Guard replication
• B. Azure Virtual WAN topology using direct spoke-to-spoke connectivity only
• C. Hub-and-spoke topology with the delegated subnet in the hub VNet and traffic routed through an NVA
• D. Local VNet peering topology, with the delegated subnet peered directly to each spoke