1Z0-997-26 Practice Test 13 — 15 Questions

Question 1

An enterprise is planning to migrate a large on-premises Oracle Database of 15 TB to Oracle Cloud Infrastructure (OCI) Exadata Database Service. The maintenance window for the final cutover is extremely short (less than 2 hours). Which migration method should you recommend to minimize application downtime?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Set up an Oracle Data Guard standby database in OCI from an on-premises primary database using RMAN duplication over FastConnect, then perform a switchover during the maintenance window.. Oracle Data Guard with an OCI standby built via RMAN duplication over FastConnect keeps the standby continuously synchronized with the on-premises primary. During the short maintenance window, a switchover promotes the OCI standby to primary in minutes, achieving minimal downtime. This is the standard Oracle-recommended approach for large databases with tight cutover windows.

Answer

Use Oracle Database Actions to export all schemas to a local staging server and import them into the new database.

Answer

Migrate the database using OCI Database Migration service with a standard full database backup without incremental backups.

Answer

Perform a cold backup on-premises, upload it to OCI Object Storage, and restore it using RMAN during the maintenance window.

Question 2

Which TWO actions can you take in OCI to ensure high availability of application data stored in Block Volumes? (Choose two.)

Accepted Answer

Enable asynchronous cross-region block volume replication.. Option B is correct because OCI Block Volume cross-region replication asynchronously copies volume data to a volume replica in another region, so if the primary region or availability domain fails, the replica can be activated to keep application data available. Option C is correct because OCI Volume Backup Policies automate scheduled backups (crash-consistent or application-consistent snapshots) of block volumes, enabling point-in-time recovery and protecting data against corruption or accidental deletion. Option A is wrong because storing backups on the compute instance's root partition keeps the backup on the same failure domain as the instance, providing no real high-availability benefit. Option D is wrong because disconnecting volumes nightly via the API causes downtime and does not improve availability. Option E is wrong because disabling encryption weakens security and does not meaningfully improve replication or availability.

Answer

Store block volume backups locally on the compute instance root partition.

Answer

Manually disconnect block volumes every night via the API.

Answer

Disable encryption on block volumes to speed up replication.

Question 3

You are configuring a site-to-site IPSec VPN between your on-premises datacenter and an OCI VCN. To ensure data confidentiality and integrity across the public internet, which encryption algorithms should you mandate in the IPSec configuration?

Accepted Answer

AES-256 with SHA-256 hashing.. AES-256 provides strong symmetric encryption for confidentiality, and SHA-256 provides a cryptographic hash for integrity verification within the IPSec ESP (Encapsulating Security Payload) framework. Together they satisfy the confidentiality and integrity requirements of a site-to-site IPSec VPN over an untrusted network like the public internet. OCI's IPSec VPN supports AES-128/AES-192/AES-256 and SHA-1/SHA-256 for Phase 2 (IPSec) parameters.

Answer

Plaintext transmission without IPsec encapsulation.

Answer

RC4 stream cipher with no hashing.

Answer

DES with MD5 authentication.

Question 4

You need to trigger an OCI Function asynchronously whenever an object is uploaded to an OCI Object Storage bucket. Which OCI service acts as the event router between Object Storage and the Function?

Accepted Answer

OCI Events Service. OCI Events Service is the native event-routing service in OCI that listens to Object Storage bucket events (such as ObjectCreate) and delivers them to targets like OCI Functions, Notifications, or Streaming. When an object is uploaded, Object Storage emits an event to the Events Service, which matches it against a rule and invokes the Function asynchronously. This decouples the storage layer from the compute layer and is the standard serverless event-driven pattern in OCI.

Answer

OCI DNS

Answer

OCI File Storage Service

Answer

OCI Data Transfer Service

Question 5

An OCI Function in your serverless architecture needs to process large files (up to 5GB) uploaded to an OCI Object Storage bucket. Due to ephemeral storage limits inside the function container (/tmp), the function crashes when attempting to download the entire file locally. How should you redesign this function processing flow?

Accepted Answer

Stream the file contents in chunks using Object Storage API range requests and process data iteratively without full local storage.. Streaming the file in chunks using Object Storage API range requests allows the function to process data iteratively without storing the entire 5GB file locally, staying within the /tmp ephemeral storage limit. This is the recommended serverless pattern for large files, as it avoids memory and disk exhaustion.

Answer

Attach an OCI Block Volume directly to the OCI Function container instance.

Answer

Increase the OCI Function memory allocation to automatically provision a larger /tmp filesystem.

Answer

Mount an OCI File Storage Service (FSS) target over the internet inside the function code.

Question 6

You have deployed an API on OCI API Gateway and want to protect it from common web attacks such as SQL injection, cross-site scripting (XSS), and bad bots. Which OCI service should you integrate with API Gateway?

Accepted Answer

OCI Web Application Firewall (WAF). OCI Web Application Firewall (WAF) is designed to protect web applications and APIs from common web attacks like SQL injection, XSS, and bad bots by inspecting HTTP/HTTPS traffic and applying rule-based filtering. It integrates directly with OCI API Gateway, allowing you to attach a WAF policy to the gateway to enforce security rules at the edge. This integration provides layer 7 protection without modifying the backend API.

Answer

OCI Vulnerability Scanning Service

Answer

OCI Bastion Service

Answer

OCI Cloud Guard

Question 7

When designing an enterprise-grade disaster recovery architecture on OCI, which THREE practices are recommended to ensure a successful failover and minimize operational risk during a disaster event? (Choose three.)

Accepted Answer

Automate failover orchestration using tools like OCI Full Stack Disaster Recovery.. Option B is correct because OCI Full Stack Disaster Recovery provides automated orchestration of failover and switchover across compute, databases, and storage, reducing human error and failover time during a disaster. Option C is correct because regular DR drills validate runbooks and RTO/RPO assumptions, and non-disruptive testing features such as Snapshot Standby (for Autonomous Database) allow validation without impacting production. Option E is correct because the target DR region must have sufficient compute shapes and database capacity (or reserved capacity) provisioned in advance; otherwise failover will fail or be throttled due to capacity shortages. Option A is incorrect because disabling load balancer health checks removes automatic traffic redirection and failure detection, increasing risk rather than minimizing it. Option D is incorrect because relying solely on manual documentation stored on local laptops is fragile, error-prone, and unavailable if local systems are lost during a disaster.

Answer

Disable all health checks on load balancers to prevent false alarms during failover.

Answer

Rely solely on manual documentation stored on local laptops for failover steps.

Question 8

Which THREE features are unique or heavily enhanced capabilities of Oracle Exadata Database Service on Dedicated Infrastructure compared to standard OCI Base Database systems? (Choose three.)

Accepted Answer

Exadata Storage Server Resource Management (IORM) for fine-grained I/O prioritization. Option C is correct because Exadata Database Service on Dedicated Infrastructure includes Exadata's I/O Resource Management (IORM), which lets you define and enforce fine-grained I/O prioritization and limits across databases, consumer groups, and interconnects—capabilities not available in standard OCI Base Database systems. Option D is correct because Exadata systems uniquely combine Exadata Smart Flash Cache with Persistent Memory (PMEM) to accelerate I/O and reduce latency for critical database workloads, a hardware-level optimization absent from Base Database. Option E is correct because Exadata Smart Scan offloads query processing (filtering, column projection, and some aggregation) to the Exadata Storage Servers, dramatically reducing data transferred to the database nodes—this storage-offload architecture is a defining Exadata feature not present in Base Database. Option A is incorrect because Exadata does not natively attach Azure Blob Storage containers as ASM disk groups; ASM disks are provided by Exadata storage cells or local/attached block storage, not Azure Blob. Option B is incorrect because automatic index creation is not performed by a Linux kernel swap daemon; index management is handled by the database (e.g., Automatic Indexing in Oracle Database), and the swap daemon has no role in index creation.

Answer

Native support for attaching external Microsoft Azure Blob Storage containers as ASM disk groups

Answer

Automatic index creation managed entirely by the local Linux kernel swap daemon

Question 9

Which THREE factors should an architect evaluate when determining Recovery Point Objective (RPO) and Recovery Time Objective (RTO) for an OCI database disaster recovery solution? (Choose three.)

Accepted Answer

Level of automation configured for failover (e.g., Fast-Start Failover vs. manual scripts). Option A is correct because the degree of failover automation directly determines how quickly the standby can take over, which sets the achievable RTO — Oracle Data Guard Fast-Start Failover with an observer can cut RTO to seconds or minutes, whereas manual switchover scripts add human detection and execution time. Option B is correct because network bandwidth and latency between primary and DR regions govern how fast redo/archive logs can be shipped and applied; high latency or insufficient bandwidth increases data-loss exposure (RPO) and delays synchronization, especially for synchronous or far-sync configurations. Option C is correct because RPO and RTO are business-driven targets: the criticality of the workload and the tolerable data-loss window during an outage define what values the architecture must meet, and thus what replication mode and topology are required. Option D is incorrect because OCI Console dashboard colors and layout are cosmetic UI preferences with no bearing on data replication or recovery metrics. Option E is incorrect because the length of a tenancy OCID string is a fixed identifier characteristic and has no relationship to RPO or RTO design decisions.

Answer

The color scheme and layout of the OCI Console dashboard

Answer

The default tenant tenancy OCID string length

Question 10

Which TWO editions of Oracle Database are available when deploying an Oracle Base Database system on OCI? (Choose two.)

Accepted Answer

Oracle Database Enterprise Edition (EE). Oracle Base Database Service on OCI supports Oracle Database Enterprise Edition (EE), option B, which provides the full feature set including options like RAC, Data Guard, partitioning, and advanced security for mission-critical workloads. It also supports Oracle Database Standard Edition 2 (SE2), option D, a lower-cost edition suited for smaller deployments with up to two sockets per node. Options A, C, and E are not valid Oracle Database editions offered on OCI: Oracle Database Micro Edition (ME) and Web Edition (WE) are not real Oracle Database editions, and Personal Edition (PE) is a desktop-only edition not available for cloud deployment.

Answer

Oracle Database Micro Edition (ME)

Answer

Oracle Database Web Edition (WE)

Answer

Oracle Database Personal Edition (PE)

Question 11

Which TWO features of OCI Object Storage contribute to its high durability and reliability for disaster recovery workflows? (Choose two.)

Accepted Answer

Object versioning support to protect against accidental deletion or overwriting.. Option C is correct because OCI Object Storage supports object versioning, which retains prior versions of an object when it is overwritten or deleted, enabling recovery from accidental deletion or corruption and supporting point-in-time restore in disaster recovery workflows. Option E is correct because OCI Object Storage automatically replicates data across multiple fault domains and availability domains within a region, providing redundancy that protects against hardware and datacenter failures without user intervention. Option A is incorrect because Object Storage access is controlled through IAM policies, pre-authenticated requests, and API/SDK access, not restricted to local console sessions. Option B is incorrect because storing objects on a single physical disk in a single compute instance offers no redundancy and is the opposite of a durable, replicated storage design. Option D is incorrect because replication is handled automatically by the service; manual per-file replication scripts are neither required nor a durability feature.

Answer

Restricting bucket access exclusively to local console sessions.

Answer

Storing all objects on a single physical disk inside a single compute instance.

Answer

Requiring manual user replication scripts for every individual file uploaded.

Question 12

An administrator needs to configure DNS resolution between an on-premises datacenter and OCI. On-premises servers must resolve hostnames of compute instances in an OCI VCN. Which OCI service component must be utilized to achieve this?

Accepted Answer

OCI Private DNS Resolver with a Listener and forwarding rules. OCI Private DNS Resolver provides a Listener endpoint in the VCN that on-premises DNS servers can forward queries to, and forwarding rules direct specific domains to on-premises resolvers. This enables bidirectional DNS resolution between on-premises and OCI VCN hostnames. It is the only OCI-native component designed for hybrid DNS.

Answer

OCI Internet Gateway DNS proxy

Answer

OCI Email Delivery DNS records

Answer

OCI Load Balancer DNS plugin

Question 13

You are migrating an Oracle Database to an Exadata Database Service on Dedicated Infrastructure. You need to ensure that database backups are stored securely with zero public internet exposure. What is the recommended networking architecture for backup transmission?

Accepted Answer

Configure a Service Gateway in your VCN to access OCI Object Storage privately. A Service Gateway in the VCN provides a private path from the VCN to OCI Object Storage (and other Oracle services) without traversing the internet or requiring a NAT or internet gateway. Traffic to Object Storage stays on the Oracle backbone network, so backups from Exadata Database Service on Dedicated Infrastructure are transmitted with zero public internet exposure, satisfying the security requirement.

Answer

Deploy an internet gateway with IPSec VPN tunnels terminating at the backup bucket

Answer

Expose a NAT Gateway with strict IP whitelisting

Answer

Attach a secondary public IP address to the database VM guest nodes

Question 14

An architect is designing an Oracle Autonomous JSON Database instance to store flexible document workloads. Which feature is automatically enabled on Autonomous JSON Database that distinguishes it from general-purpose Autonomous Transaction Processing instances regarding storage management?

Accepted Answer

Storage and indexing are specifically optimized for JSON collections with restrictions on non-JSON relational tables. Autonomous JSON Database is a specialized ADB workload type whose storage and indexing are optimized for JSON collections, and it restricts the use of non-JSON relational tables. This distinguishes it from general-purpose Autonomous Transaction Processing, which supports full relational schemas alongside JSON. The optimization targets document-style access patterns and JSON-native indexing.

Answer

Automatic conversion of all JSON documents into relational third-normal-form tables upon ingestion

Answer

Mandatory requirement to define fixed database schemas via JSON Schema validators before inserting data

Answer

Exclusion of automated backups to reduce operational overhead

Question 15

You are designing a high availability disaster recovery architecture for an Oracle Base Database Service system deployed on a 2-node Virtual Machine DB System. You need to configure automated backups. Which storage destination is automatically used by OCI to store these automated backups?

Accepted Answer

OCI Object Storage bucket managed by the database service.. OCI Base Database Service automatically stores automated backups in an OCI Object Storage bucket that is managed by the database service itself, not visible or configurable as a customer bucket. This provides durable, cross-fault-domain storage without requiring the customer to provision or manage the bucket.

Answer

A separate standby Oracle ASM disk group on Block Volume storage.

Answer

Local NVMe scratch disk attached to the primary database node.

Answer

An independent File Storage Service (FSS) mount target shared across availability domains.