Oracle Cloud Infrastructure Architect Associate

24h 9mIntermediate2023-08-18

Authors

Oracle University

Building Cloud Proficiency on Oracle Cloud Infrastructure

Course details

This course helps you prepare for the Oracle Cloud Infrastructure Architect Associate (1Z0-1072-23) certification by teaching you basic Oracle Cloud Infrastructure concepts. Explore various aspects of identity and access management (IAM), as well as setting up and securing a virtual cloud network. Find out how to establish a dynamic routing gateway, perform a DRG upgrade, set up a VPN, and use load balancers. Go over DNS management and other services, then deep dive into the many uses of the compute service. Step through the tools and techniques you need for object storage, block storage, and file storage. Cover the myriad uses of security, monitoring, and logging. Plus, get the details you need to prepare for the Oracle Cloud Infrastructure Architect Associate Certification.

Skills covered

Oracle Cloud InfrastructureOracle DatabaseCloud AdministrationOracleCert PrepCloud Computing

Concepts

Introduction

Course introduction
OCI overview
OCI architecture

Identity and Access Management

IAM introduction
Identity domains
Demo - Identity domains
AuthN
Demo - AuthN
AuthZ
Demo - AuthZ
Common policies
Compartments
Demo - Compartments
Demo - Compartment quota and budget
Policy inheritance and attachment for compartments
Organization management
Conditional policies
Network sources
Demo - Network sources
Tag-based access control
Demo - Tag-based access control
Dynamic groups
Demo - Dynamic groups

Networking - Connectivity

Connectivity options
Dynamic routing gateway, part 1
Remote peering connection
Demo - Remote peering connection
Site-to-site VPN
Demo - VPN connect
FastConnect
FastConnect deep dive
Demo - FastConnect

Expert Tip 1

Tips and tricks to get the maximum out of this course

Networking - Load Balancer

Load Balancer introduction
Demo - Public load balancer
Public and private load balancer
Demo - Public load balancer reserved IP address
Demo - Private load balancer
Load balancer policies and health checks
Network load balancer
Demo - Network load balancer

Networking - DNS Management

DNS service
OCI DNS management
Demo - Public DNS zones
Private DNS zones
Demo - Private DNS zones
Traffic management
Demo - Traffic management

Networking Command Center Services - Other Networking Services

Inter-Region Latency Dashboard
Demo - Inter-Region Latency Dashboard
Network Visualizer
Demo - Network Visualizer
BYOIP
Demo - VCN flow logs
Network Path Analyzer
Demo - Network Path Analyzer

Compute - Basics

Overview of compute service
Platform and custom images
Import, export, and BYOI
Compute shapes
GPU shapes
Bare metal vs. virtual machine vs. dedicated hosts
Demo - Generate SSH key pair
Demo - Launch and connect to an Oracle Linux instance
Demo - Launch and connect to a Windows instance
Demo - Create a custom image
Capacity types preemptible instances
Demo - Preemptible instances
Capacity types capacity reservations
Demo - Create a capacity reservation and launch instances
Capacity types dedicated VM host
Demo - Dedicated VM host

Expert Tip 2

As an architect is it a must to have hands-on experience

Compute - Advanced

Burstable instances
Demo - Create a burstable instances
Compute vertical scaling
Demo - Scale cores and memory for an instance
Compute Autoscaling
Demo - Autoscaling
Oracle Cloud Agent
OS Management service
Demo - OS Management
Run command
Demo - Run Command
Instance console connection
Demo - Console connection
Infrastructure maintenance
Shielded instances
Demo - Create a shielded instance
Confidential computing

Object Storage - Basics

Overview of Object Storage
Object Storage resources
Object Storage characteristics
Demo - Create a bucket Console, Cloud Shell, OCI CLI
Demo - Upload and access the object and bucket visibility
Multipart uploads
Demo - Multipart uploads
Managing buckets and objects
Object Storage tiers
Auto-tiering
Demo - Update storage tier manually, auto-tiering
Object Lifecycle Management
Demo - Update storage tier Lifecycle Management

Object Storage - Advanced

Object Storage replication
Demo - Replication policy
Object versioning
Demo - Object versioning
Demo - Replication policy with versioning
Retention rules
Demo - Retention rules time-bound and indefinite
Object copy
Demo - Object copy
Object Storage logging
Demo - Object Storage logging
Securing Object Storage
Pre-authenticated requests
Demo - Create a pre-authenticated request
Demo - Create a bucket with customer-managed keys
Demo - Re-encrypt an object
Demo - Create automation based on object state changes

Block Storage - Basics

Overview of block volume
Volume attachment types
Volume access Types
Boot volumes
Demo - Block volume creation
Demo - Attach block volume to instance iSCSI attachment
Demo - Attach block volume to an instance paravirtualized attachment
Demo - Configure multiple instance volume attachments, part 1
Demo - Configure multiple instance volume attachments, part 2
Block volume performance
Dynamic performance scaling

Expert Tip 3

Roles and responsibilities of Cloud Architect

Block Storage - Advanced

Resizing a volume
Demo - Volume resize and extend partition
Block volume backups
Demo - Create a block volume backup
Demo - Create a backup policy and define schedule
Demo - Restore a block volume backup
Demo - Copy block volume backup to another region
Block volume clones
Demo - Create a block volume clone
Block volume backup vs. clone operation
Cross-region replication
Demo - Cross-region replication
Volume groups
Demo - Volume groups
Demo - Volume groups cross-region replication
Cross-availability domain replication
Demo - Cross-availability domain replication
Demo - Block volume encryption

File Storage - Basics

Overview of File Storage
File Storage concepts
Demo - Create and mount a file system
NFS export options
Demo - NFS export options
File System paths

File Storage - Advanced

File System snapshots
Demo - Create a snapshot and perform restoration
File System cloning
Demo - Clone a File System
Demo - Encrypt using customer-managed keys
In-transit encryption
Demo - Set up in-transit encryption
File System replication
Demo - File System replication
File Storage security
File System usage and metering

Security - Operations

Shared security responsibility model
Security services introduction
What is CSPM
Cloud Guard introduction
Cloud Guard concepts
Demo - Enable Cloud Guard
Cloud Guard problems
Cloud Guard detector recipes
Cloud Guard responder recipes
Demo - Cloud Guard
Cloud Guard notifications
Demo - Cloud Guard notifications
Security Zones and Security Advisor
Demo - Security Zones and Advisor

Expert Tip 4

Day-to-day challenges faced by cloud architects

Security - Platform

OS Management introduction
Demo - OS Management
Vulnerability Scanning
Demo - Cloud Guard integration with Vulnerability Scanning
OCI WAF
WAF concepts
Demo - Load Balancer and WAF policies
Certificates introduction
Demo - Certificates

Security - Data

Encryption basics
Vault introduction, part 1
Demo - Vault basics, part 1
Vault introduction, part 2
Demo - Vault basics, part 2
Demo - Encryption and decryption of data with Vault
Import and export keys
OCI services integration with Vault
Demo - OCI services integration with Vault
Backup and replicate vaults and keys
Vault secrets
Demo - Secrets

Observability and Management - Introduction

Introduction to observability

Observability and Management - Monitoring

Monitoring service - Getting started
Key concepts
Demo - Monitoring concepts
Monitoring - Introduction to Notification service
Monitoring - Notification service
Access and limits
Service metrics
Demo - Monitoring service metrics and alarms
Metric queries
Demo - Monitoring building queries
Manage alarms

Observability and Management - Logging

Logging service - Overview
Fundamental concepts
Enabling service logs
Working with custom logs
Demo - Custom logs
Access, search, and explore logs
Searching logs with queries
Demo - Service logs with queries
Service Connectors
Demo - Service Connectors

Expert Tip 5

How do you get a job as a cloud architect