1Z0-997-26 Practice Test 10 — 10 Questions

Question 1

When configuring an OCI Application Load Balancer (Layer 7) for high availability, which THREE settings or components must be properly configured? (Choose three.)

Accepted Answer

SSL/TLS certificates attached to HTTPS listeners if terminating secure traffic. Option C is correct because an OCI Layer 7 load balancer that terminates HTTPS traffic requires an SSL/TLS certificate attached to the HTTPS listener, which enables the load balancer to decrypt incoming requests and re-encrypt or forward them to backends as configured. Option D is correct because backend sets must be defined and associated with health checks so the load balancer can monitor backend instance responsiveness and route traffic only to healthy instances, which is essential for high availability. Option E is correct because listeners must be configured with the appropriate port and protocol (for example, HTTP on port 80 or HTTPS on port 443) so the load balancer can accept and process client traffic correctly. Option A is not required because OCI load balancers operate within the OCI VCN and do not need a direct physical connection to on-premises switches for high availability. Option B is not required because backend compute nodes do not need manual IP routing table modifications; OCI handles load balancer-to-backend routing through the VCN and backend set configuration.

Answer

A direct physical connection between the load balancer and on-premises switches

Answer

Manual IP routing table hacks on every backend compute node

Question 2

Your security team wants to continuously monitor OCI resources for misconfigurations and automatically remediate security violations without manual intervention. Which OCI native service should you configure?

Accepted Answer

OCI Cloud Guard. OCI Cloud Guard is the native service designed to continuously monitor OCI resources for security misconfigurations and automatically remediate violations. It uses detectors to identify risky configurations, and responders to take corrective actions such as deleting public buckets or stopping instances. This aligns with the requirement for continuous monitoring and automatic remediation without manual intervention.

Answer

OCI Bastion Service

Answer

OCI Vault

Answer

OCI Vulnerability Scanning Service

Question 3

When configuring OCI Service Connector Hub to move logs from OCI Logging to OCI Object Storage, which THREE components must be defined?

Accepted Answer

Target (e.g., OCI Object Storage bucket). Option A (Target, e.g., OCI Object Storage bucket) is correct because Service Connector Hub requires a target resource to which the connector delivers the data, and for this scenario that target is an Object Storage bucket. Option D (Source, e.g., OCI Logging service) is correct because a service connector must specify the source service whose data it reads, here OCI Logging log groups. Option E (IAM policies granting the service connector permission to read from source and write to target) is correct because the Service Connector Hub service principal needs explicit IAM policy statements authorizing it to read from the Logging source and write to the Object Storage target. Option B is incorrect because Service Connector Hub is a fully managed OCI service that does not require any manual SSH tunnel between regions. Option C is incorrect because no OKE Kubernetes cluster or connector daemon is needed; the service runs as a managed OCI resource.

Answer

A manual SSH tunnel between the source and target regions

Answer

An active Kubernetes cluster in OKE to host the connector daemon

Question 4

Your organization has set strict budgets in OCI to monitor cloud expenditure. A finance team member needs to receive an alert when forecasted spending reaches 100% of the monthly budget. How should you configure this alert?

Accepted Answer

Configure an OCI Budget alert rule with threshold type set to 'FORECASTED' and threshold value set to 100.. OCI Budgets allow you to set alert rules based on actual or forecasted spend. Setting the threshold type to 'FORECASTED' and the threshold value to 100 triggers an alert when the forecasted spend for the budget period reaches 100% of the budget amount. This directly meets the finance team's requirement to be alerted when forecasted spending hits the monthly budget.

Answer

Create an OCI Monitoring alarm on the Billing namespace with a metric expression for forecasted cost.

Answer

Use OCI Cost Analysis scheduled reports with an integrated SMTP relay.

Answer

Set up an OCI Events rule listening for billing threshold exceedance events.

Question 5

Your organization is migrating a 3-tier web application running on VMware vSphere to OCI Compute. The application requires exact operating system configurations, strict security policies, and custom kernel modules. You want to automate the migration process while maintaining network consistency. Which migration approach is most suitable?

Accepted Answer

Migrate the workloads to Oracle Cloud VMware Solution (OCVS) using VMware HCX for seamless live migration without altering the hypervisor layer or guest OS configurations.. Oracle Cloud VMware Solution (OCVS) provides a native VMware SDDC environment in OCI, including vSphere, vSAN, and NSX-T, so existing VMs can be migrated without modifying the guest OS, kernel modules, or security policies. VMware HCX enables live migration (vMotion, cold, and bulk) with network extension, preserving IP addresses and network consistency. This is the only option that maintains the exact OS configurations and hypervisor layer while automating the migration.

Answer

Deploy new bare metal instances in OCI and use rsync to copy the root file systems over a secure IPsec VPN tunnel.

Answer

Rebuild the application from scratch using Terraform and OCI Resource Manager, then redeploy application binaries.

Answer

Export each virtual machine as a VMDK file, upload it to OCI Object Storage, and import it as a generic OCI custom image using the CLI.

Question 6

An enterprise application uses an Oracle Autonomous Transaction Processing database and encounters intermittent application-level timeouts during peak concurrency spikes. Upon investigating, you notice that queued statements are waiting due to resource limits. Which Autonomous Database feature should you adjust to manage concurrency and statement queuing behavior?

Accepted Answer

Consumer groups and resource management rules via DBMS_RESOURCE_MANAGER or resource profile settings. Autonomous Database uses Database Resource Manager (DBRM) consumer groups and resource plans to control how sessions share CPU, parallelism, and queued statements. When concurrency spikes cause statements to queue, the fix is to define or adjust consumer groups and resource management rules (via DBMS_RESOURCE_MANAGER or the built-in resource profiles) so that critical workloads get priority and queuing thresholds are tuned. This is the only option that directly addresses database-level concurrency and statement queuing.

Answer

The physical memory size of the OCI Compute host instance running the application

Answer

Linux kernel swappiness parameters on the database host

Answer

OCI Virtual Cloud Network security list packet drop thresholds

Question 7

Which THREE actions can be performed using OCI Cloud Guard to improve your cloud security posture? (Choose three.)

Accepted Answer

Trigger responder recipes to remediate detected security risks automatically or manually.. Option A is correct because Cloud Guard responder recipes define actions (such as stopping an instance, deleting a public bucket, or invoking a function) that can be triggered automatically or manually when a detector rule fires on a problem. Option C is correct because Cloud Guard continuously monitors tenancy resources against detector recipes that identify security misconfigurations, risky configurations, and policy violations across OCI services. Option E is correct because Cloud Guard aggregates detected problems into a security score for the tenancy, giving an at-a-glance measure of the overall cloud security posture. Option B is incorrect because Cloud Guard is an OCI-native service and does not patch kernel-level vulnerabilities on third-party on-premises servers. Option D is incorrect because point-to-point IPsec VPN tunneling between VCNs is provided by OCI VPN Connect/FastConnect or DRG-based connectivity, not by Cloud Guard.

Answer

Automatically patch kernel-level vulnerabilities on third-party on-premises servers.

Answer

Provide point-to-point IPsec VPN tunneling between VCNs.

Question 8

Which THREE strategies are recommended when planning a large-scale database migration (exceeding 100 TB) from on-premises to Exadata Database Service on Dedicated Infrastructure with minimal downtime? (Choose three.)

Accepted Answer

Leveraging Transportable Tablespaces (TTS) combined with RMAN cross-platform conversion. Option A is correct because Transportable Tablespaces (TTS) with RMAN cross-platform conversion moves datafiles at the physical level, avoiding the slow row-by-row logical extraction that would be impractical for 100 TB, and RMAN's CONVERT DATAFILE handles endianness/platform differences efficiently. Option B is correct because Oracle Zero Downtime Migration (ZDM) physical migration workflows are purpose-built for large on-premises-to-Exadata/ODA moves, orchestrating Data Guard-based synchronization and automated cutover to keep downtime minimal. Option E is correct because configuring Oracle Data Guard or Oracle GoldenGate for ongoing delta synchronization lets the bulk copy happen while changes continue to be applied, so only a brief final switchover is needed at cutover. Option C is not recommended because unencrypted FTP over the public internet is insecure and unreliable for 100 TB of database files. Option D is not recommended because exporting 100 TB into a single plaintext SQL script via SQL Developer is a logical, serialized, and insecure approach that would take far too long and cannot meet minimal-downtime requirements.

Answer

Copying database files across the public internet using standard FTP without encryption

Answer

Exporting the entire 100 TB database into a single plaintext SQL script using SQL*Developer

Question 9

An enterprise is designing a comprehensive cost observability and governance strategy in OCI. Which THREE practices or features should be implemented?

Accepted Answer

Enforce defined tags for resource creation using IAM policy conditions or tag defaults.. Option B is correct because enforcing defined tags via IAM policy conditions (e.g., request.tag.definedTag) or tag defaults ensures consistent cost allocation and governance across compartments and resources. Option C is correct because OCI Cost Analysis provides dashboards and filtering to analyze spending trends and detect cost anomalies by service, compartment, or tag. Option D is correct because OCI Budgets support alert rules on both actual spend and forecasted spend, enabling proactive governance before thresholds are breached. Option A is incorrect because VCN flow logs capture network traffic metadata, not billing data, and Logging Analytics does not calculate OCI infrastructure charges. Option E is incorrect because APM Java agents monitor application performance, not block volume storage encryption costs, and encryption at rest is included in OCI storage pricing.

Answer

Route all VCN flow logs through OCI Logging Analytics to calculate cloud infrastructure billing.

Answer

Install APM Java agents on all block storage volumes to track storage encryption costs.

Question 10

When designing a disaster recovery plan using OCI Full Stack Disaster Recovery (FSDR), which THREE resource types can be managed and orchestrated within a DR Protection Group? (Choose three.)

Accepted Answer

OCI Load Balancers and Network Load Balancers. OCI Full Stack Disaster Recovery (FSDR) DR Protection Groups support several OCI resource types that can be added as members and orchestrated during switchover/failover. Option A is correct because OCI Load Balancers and Network Load Balancers are supported member types that FSDR can manage as part of the DR plan. Option B is correct because Oracle Base Database and Exadata Database Service systems are supported members, allowing FSDR to orchestrate database-level DR operations. Option C is correct because OCI Compute instances, along with their attached boot and block volumes, are supported members that FSDR can move and start in the standby region. Option D is not correct because KMS Vault encryption keys are not a manageable member type in a DR Protection Group; key replication is handled separately via KMS key replication, not FSDR orchestration. Option E is not correct because IAM global policies are account-wide and not a regional resource that can be added to or orchestrated by a DR Protection Group.

Answer

OCI Key Management service Vault encryption keys

Answer

OCI Identity and Access Management (IAM) global policies