1Z0-997-26 Practice Test 1 — 10 Questions

Question 1

You are configuring redundant OCI Site-to-Site VPN tunnels to your on-premises datacenter. OCI automatically provisions how many tunnels per VPN connection by default for high availability?

Accepted Answer

2 tunnels. OCI Site-to-Site VPN automatically provisions two tunnels per VPN connection by default, each terminating on a separate VPN headend in a different availability domain. This redundancy is built in so that if one tunnel or headend fails, traffic can fail over to the other. The two-tunnel design is a core HA characteristic of the OCI IPSec VPN service.

Answer

8 tunnels

Answer

4 tunnels

Answer

1 tunnel

Question 2

Which OCI security feature provides a centralized view of security recommendations and allows you to remediate misconfigurations with a single click?

Accepted Answer

OCI Cloud Guard Managed Recipes and Responder Rules.. OCI Cloud Guard uses Managed Recipes (detector and responder recipes) to continuously monitor a tenancy for security misconfigurations and risky activity, and Responder Rules can automatically or manually remediate findings — including one-click remediation from the Cloud Guard console. This centralized posture view with actionable remediation is exactly what Cloud Guard provides.

Answer

OCI Bastion Service session manager.

Answer

OCI Database Migration Service.

Answer

OCI IAM Policy Generator.

Question 3

During a lift-and-shift migration planning phase, your team needs to estimate the monthly running costs of various OCI Compute shapes, block storage volumes, and egress data transfer fees before provisioning resources. Which OCI tool should you use to generate this detailed cost breakdown?

Accepted Answer

OCI Cost Estimator. OCI Cost Estimator is a free, web-based planning tool that lets you model a full OCI environment — Compute shapes, Block Volume capacity/performance tiers, Object Storage, and outbound data transfer — and produces a detailed monthly cost breakdown before any resources are provisioned. It is purpose-built for pre-provisioning TCO/ROI analysis and lift-and-shift sizing exercises, and it can export the estimate to a spreadsheet for stakeholder review.

Answer

OCI Budgets and Alerts

Answer

OCI Resource Manager

Answer

OCI Migration Asset Inventory dashboard

Question 4

Your development team needs to scale up CPU cores for an Autonomous JSON Database instance dynamically without restarting the application or causing downtime. Which feature should you use?

Accepted Answer

Autonomous Database Elastic Resource Scaling.. Autonomous Database Elastic Resource Scaling allows you to scale CPU cores up or down dynamically without downtime, application restarts, or manual intervention. It is the native ADB feature for on-demand compute scaling and applies to Autonomous JSON Database as well. Because it is built into the service, the change takes effect while the database remains online.

Answer

Auto-scaling with Oracle Data Guard switchover.

Answer

OCI Compute Instance resizing via instance pool configuration.

Answer

Manual cold restart of the container database.

Question 5

You are building a high-throughput event-processing pipeline where multiple consumer instances need to read messages from an OCI Stream concurrently. Each consumer instance must maintain its own independent cursor position and process every message in the stream without interfering with other consumer instances. How should you configure your consumers?

Accepted Answer

Configure each consumer instance to belong to a separate, unique consumer group.. In OCI Streaming, a consumer group allows multiple consumers to coordinate and share the message processing load, with each message delivered to only one consumer in the group. To have each consumer instance maintain its own independent cursor and process every message, each instance must belong to a separate, unique consumer group. This way, each group gets its own copy of all messages, and each instance can track its own offset independently.

Answer

Use the OCI Streaming default single-consumer mode with multithreaded polling.

Answer

Assign all consumer instances to the exact same consumer group and increase the number of partitions.

Answer

Publish events via OCI Notifications instead, as Streaming does not support consumer groups.

Question 6

Your security architecture requires segregating production workloads from development workloads using distinct VCNs. However, certain microservices in the development VCN must communicate securely with a database in the production VCN without exposing traffic to the internet. What is the recommended networking construct?

Accepted Answer

Local VCN Peering.. Local VCN Peering connects two VCNs in the same region over Oracle's private backbone, allowing resources in the development VCN to reach the production database privately without internet exposure. It is the recommended construct for intra-region, cross-VCN private communication.

Answer

Dynamic Routing Gateway (DRG) with internet breakout enabled.

Answer

Internet Gateway with strict Security List rules.

Answer

OCI Bastion service.

Question 7

You need to export OCI Audit logs to a third-party SIEM tool (such as Splunk or Elastic) in real-time. Which OCI architecture is best suited for this requirement?

Accepted Answer

Use OCI Service Connector Hub to route logs from OCI Audit to OCI Streaming or Object Storage for SIEM consumption.. OCI Service Connector Hub is the native service for routing logs from OCI Audit to destinations like OCI Streaming or Object Storage. For real-time SIEM integration, Service Connector Hub can stream Audit logs to OCI Streaming, which can then be consumed by Splunk or Elastic via a connector, providing near real-time export.

Answer

Schedule an OCI Resource Manager job to FTP log files every night.

Answer

Install the OCI Logging Agent directly on the OCI Audit service control plane.

Answer

Configure OCI Health Checks to poll the Audit API.

Question 8

Which THREE features are supported within OCI Cost Analysis to help administrators analyze and report on cloud spending?

Accepted Answer

Grouping and filtering costs using OCI Defined Tags. Option B is correct because OCI Cost Analysis lets administrators group and filter cost data by dimensions including OCI Defined Tags, enabling chargeback and showback reporting by tag keys/values. Option C is correct because Cost Analysis provides interactive charts that visualize cumulative and non-cumulative cost trends across customizable time ranges such as daily or monthly granularity. Option E is correct because Cost Analysis allows exporting the displayed cost charts and tabular cost data to CSV for offline analysis and reporting. Option A is incorrect because billing details such as credit card information are managed through Oracle Support or the account management/billing console, not by directly editing them in Cost Analysis. Option D is incorrect because Cost Analysis is a cost reporting and visualization tool; it does not execute SQL queries against Autonomous Database instances, which would be done via tools like SQL Developer, Database Actions, or OCI Data Science/APEX.

Answer

Directly modifying customer credit card billing details without contacting Oracle Support

Answer

Automatically executing database SQL queries against Autonomous Database instances

Question 9

Your organization requires the migration of 300 TB of backup archives from an on-premises data center to OCI Object Storage. The local internet connection is limited to 100 Mbps, and corporate compliance mandates that data cannot traverse the public internet unencrypted. Which solution should you select to meet these constraints?

Accepted Answer

Order an OCI Data Transfer Appliance, load the encrypted backup data locally, and ship the appliance to the designated Oracle data center.. The OCI Data Transfer Appliance is designed for exactly this scenario: migrating large volumes of data (typically >10 TB) when network bandwidth is insufficient. With only 100 Mbps, transferring 300 TB would take over 300 days, making it impractical. The appliance allows you to load encrypted data locally and ship it to Oracle, where data is uploaded to Object Storage, meeting both the bandwidth and compliance (encryption) requirements.

Answer

Deploy an OCI Storage Gateway on-premises and cache all 300 TB locally while syncing in real-time.

Answer

Use Oracle GoldenGate to replicate backup files block-by-block to Object Storage.

Answer

Stream the backups continuously over a secure IPsec VPN tunnel using rclone.

Question 10

An architect is designing a multi-region disaster recovery architecture for an application running on OCI Compute. The database layer uses Oracle Data Guard. For the application tier, what is the recommended approach to handle stateless application servers in the DR region?

Accepted Answer

Pre-provision compute instances in a stopped state or use instance pools with standby configuration, activating them during a disaster event.. For stateless application servers in a DR region, the recommended OCI approach is to pre-provision capacity that can be activated quickly without paying for full-time compute. Instance pools with a standby configuration (or stopped instances) let you maintain a warm standby that can be scaled up or started during a failover event, meeting RTO while controlling cost. Because the app tier is stateless, no data synchronization is needed—only the ability to bring compute online and point it at the newly promoted database.

Answer

Run all application servers at full capacity in both regions simultaneously with active write locks.

Answer

Store application binaries solely in Object Storage and compile them on the fly using user-data scripts during failover.

Answer

Rely entirely on manual creation of compute instances via the OCI console after an outage occurs.