1Z0-997-26 Practice Test 21 — 15 Questions

Question 1

When configuring OCI API Gateway, which THREE types of backends are natively supported for routing incoming API requests?

Accepted Answer

OCI Functions backend. OCI API Gateway supports HTTP/HTTPS backends (URL), OCI Functions backends, and Stock Response (Mock) backends.

Answer

OCI Identity Domain SAML federation metadata XML file store

Answer

Direct raw magnetic tape drive backup backend

Question 2

When configuring an OCI Network Load Balancer (NLB) for high availability across availability domains, what is a key architectural characteristic of the NLB service?

Accepted Answer

It is a regional service that automatically provisions endpoints across availability domains.. OCI Network Load Balancer is a regional service that operates at layer 4 (TCP/UDP/ICMP) and provisions load balancer ENIs across multiple ADs for high availability.

Answer

It requires manual setup of keepalived and IP failover scripts on backend compute instances.

Answer

It terminates SSL/TLS connections before forwarding traffic to backend servers.

Answer

It can only route HTTP and HTTPS traffic.

Question 3

Which TWO methods can developers use to interact with OCI Registry (OCIR) for pushing and pulling container images?

Accepted Answer

Docker CLI authenticated with an OCI Auth Token. Developers can interact with OCIR using standard Docker CLI (authenticated via auth tokens) or OCI CLI.

Answer

Windows Remote Desktop (RDP) file transfer

Answer

Kubernetes kubelet raw disk mounting

Answer

Direct FTP client over port 21

Question 4

When designing an API Gateway implementation on OCI to expose backend microservices running on OKE, which THREE features or capabilities can you configure directly within the API Gateway deployment? (Choose three.)

Accepted Answer

Request throttling and rate-limiting to protect backend microservices from traffic surges.. OCI API Gateway supports CORS configuration, rate limiting / request throttling, and JWT authentication natively within its deployment specifications.

Answer

Automatic multi-region database failover orchestration for Oracle Autonomous Database.

Answer

Automatic provisioning and scaling of Kubernetes worker node pools inside OKE.

Question 5

You are configuring an Autonomous Database instance and need to restrict incoming database traffic so that only specific corporate subnet CIDR blocks can access the database service endpoints. Which feature should you configure?

Accepted Answer

Autonomous Database Access Control Lists (ACLs) specifying allowed IP CIDR blocks. Access Control Lists (ACLs) on Autonomous Database allow administrators to restrict network access using IP addresses or VCN OCIDs.

Answer

OCI Web Application Firewall (WAF) attached directly to the database listener port

Answer

OCI Identity and Access Management dynamic groups

Answer

Database Vault realm restrictions

Question 6

Your organization has deployed an enterprise workload on OCI Exadata Database Service. You are configuring Data Guard with Fast-Start Failover (FSFO). To prevent split-brain scenarios where both primary and standby databases assume primary roles simultaneously, where must the Data Guard Observer be placed?

Accepted Answer

In a separate fault domain or external location independent of both the primary and standby database nodes.. The Data Guard Observer must run on a third, independent fault domain, availability domain, or separate site (such as another OCI region or on-premises) to act as a neutral arbiter preventing split-brain.

Answer

Directly on the primary database compute node to ensure low-latency communication.

Answer

Inside an OCI Object Storage bucket as a serverless function.

Answer

Inside the same Oracle Grid Infrastructure clusterware home on the standby database.

Question 7

Which TWO methods can be used to securely connect an application running in an OCI compute instance to an Autonomous Database instance with private endpoint access enabled? (Choose two.)

Accepted Answer

Using mTLS authentication with the downloaded database connection wallet. Private endpoint Autonomous Databases can be accessed via private IP addresses using mTLS with a wallet or TLS without a wallet.

Answer

Exposing the database via an Internet Gateway and public IP address mapping

Answer

Establishing an SSH tunnel through the OCI Vault key management service

Answer

Routing application traffic through OCI Object Storage public pre-authenticated requests

Question 8

When creating an Oracle Base Database system, which database edition options are available for licensing on OCI?

Accepted Answer

Standard Edition 2, Enterprise Edition, Enterprise Edition High Performance, and Enterprise Edition Extreme Performance. Oracle Base Database systems support Standard Edition 2, Enterprise Edition, Enterprise Edition High Performance, and Enterprise Edition Extreme Performance.

Answer

Oracle Database Express Edition (XE) exclusively

Answer

Microsoft SQL Server Enterprise Edition

Answer

MySQL Enterprise Edition and PostgreSQL Community Edition only

Question 9

Which TWO methods are valid for protecting OCI Compute instance boot volumes against data loss or corruption? (Choose two.)

Accepted Answer

Creating manual or scheduled boot volume backups.. Boot volumes can be protected using manual or scheduled volume backups, as well as cross-region volume replication.

Answer

Attaching the boot volume to an Internet Gateway.

Answer

Storing OS files in an OCI Streaming queue.

Answer

Using local NVMe scratch disks for OS persistence.

Question 10

Which TWO actions can you take in OCI to ensure high availability of application data stored in Block Volumes? (Choose two.)

Accepted Answer

Enable asynchronous cross-region block volume replication.. Block Volume high availability and disaster recovery can be achieved using automated backup policies and cross-region block volume replication.

Answer

Store block volume backups locally on the compute instance root partition.

Answer

Manually disconnect block volumes every night via the API.

Answer

Disable encryption on block volumes to speed up replication.

Question 11

When configuring an OCI Application Load Balancer (Layer 7) for high availability, which THREE settings or components must be properly configured? (Choose three.)

Accepted Answer

SSL/TLS certificates attached to HTTPS listeners if terminating secure traffic. Layer 7 Load Balancers require backend sets with health checks, listener rules (HTTP/HTTPS), and SSL certificates if terminating TLS traffic.

Answer

A direct physical connection between the load balancer and on-premises switches

Answer

Manual IP routing table hacks on every backend compute node

Question 12

An application tier in a private VCN subnet needs to securely access an Oracle Autonomous Database without traversing the public internet. Which OCI networking feature provides the most secure and performant connection?

Accepted Answer

An OCI Service Gateway.. OCI Service Gateway allows private access from a VCN to Oracle services (like Autonomous Database and Object Storage) without using public IPs or traversing the public internet.

Answer

A NAT Gateway combined with a public IP address on the database.

Answer

A Site-to-Site VPN connection back to the corporate data center.

Answer

An Internet Gateway attached to the VCN route table.

Question 13

Your organization has completed migrating a database to OCI Base Database Service. To ensure compliance with corporate data protection policies, you must verify that all database backups stored in OCI Object Storage are automatically encrypted using customer-managed encryption keys. Where should you configure this key management integration?

Accepted Answer

OCI Vault service (Key Management). OCI Vault service allows customers to create and manage master encryption keys. Both database backups and block volumes can be encrypted using keys stored in OCI Vault (KMS).

Answer

OCI Database Migration service connection profiles

Answer

OCI Audit log configuration

Answer

OCI Identity and Access Management (IAM) password policies

Question 14

Which TWO destinations can receive messages dispatched from an OCI Notifications service topic?

Accepted Answer

HTTPS / Webhook endpoints (e.g., Slack, PagerDuty). OCI Notifications service supports delivering messages to Email endpoints, HTTPS endpoints (such as webhooks, Slack, PagerDuty), SMS, and OCI Functions.

Answer

OCI Internet Gateway route tables

Answer

OCI Dynamic Routing Gateway (DRG)

Answer

OCI Block Volume backup policies

Question 15

Your organization is implementing an alerting strategy in OCI Monitoring to avoid alert fatigue caused by transient network blips. You need to configure an alarm so that it only fires when a high CPU utilization condition persists for at least 3 consecutive evaluation periods of 5 minutes each. Which parameter in the Alarm definition should you modify?

Accepted Answer

Configure the Alarm evaluation window and set the trigger condition based on consecutive evaluation periods exceeding the threshold.. In OCI Monitoring alarms, the 'Trigger rule' configuration includes the metric evaluation window and the time interval/repetition settings that control how many consecutive evaluation periods must breach the threshold before the alarm transitions to FIRING.

Answer

Modify the OCI Events service emission frequency to throttle metric collection to once every 15 minutes.

Answer

Apply a smoothing function like 'Moving Average' directly within the OCI Notifications topic subscription settings.

Answer

Set the Repetition Interval to 15 minutes.