1Z0-997-26 Practice Test 22 — 15 Questions

Question 1

Which TWO of the following services are native components of the Oracle Cloud Infrastructure Observability and Management platform?

Accepted Answer

OCI Application Performance Monitoring (APM). OCI Logging Analytics and OCI Application Performance Monitoring (APM) are core services within the OCI Observability and Management suite.

Answer

OCI Autonomous Database

Answer

OCI Container Engine for Kubernetes

Answer

OCI File Storage Service

Question 2

An OCI Security Administrator is designing a multi-tenancy IAM architecture using compartments and dynamic groups. Which TWO best practices should be implemented to ensure least-privilege access and scalable policy management?

Accepted Answer

Write all IAM policies at the tenancy level referencing compartment-scoped dynamic groups to minimize the total number of policy statements.. Best practices for IAM at scale include using tenancy-level policies pointing to compartment-scoped dynamic groups for cross-compartment automation, and leveraging groups with dynamic matching rules based on resource attributes rather than static user assignments.

Answer

Disable multi-factor authentication (MFA) for federation users relying on external IdPs to streamline administrative logins.

Answer

Assign users directly to administrative compartments using inline policies instead of defining groups.

Answer

Use dynamic group matching rules based on resource OCIDs rather than compartment OCIDs for maximum flexibility.

Question 3

You are migrating a multi-tier web application to OCI. The web tier consists of Apache HTTP servers that need to be auto-scaled based on CPU utilization. Which combination of OCI services should you configure to achieve automated horizontal scaling?

Accepted Answer

OCI Instance Pools and OCI Auto-Scaling Configurations. OCI Compute Auto-Scaling configurations integrated with Instance Pools allow you to automatically provision or terminate compute instances based on metrics such as CPU or memory utilization, sitting behind an OCI Load Balancer.

Answer

OCI Resource Manager and Terraform apply schedules

Answer

OCI Events Service and OCI Notifications triggered by Object Storage uploads

Answer

OCI Cloud Guard and OCI Vulnerability Scanning

Question 4

An enterprise is designing a cost observability architecture in OCI. They want to attribute cloud spend dynamically to different business units based on resource metadata tags, and they need historical trend analysis with anomaly detection. Which combination of features and tools provides the most robust solution?

Accepted Answer

Use OCI Cost Analysis with defined tags, export Cost Reports to Object Storage, and configure Budgets with alert rules.. OCI Cost Analysis, Cost Reports, and Budgets combined with Defined Tags provide the best mechanism for tracking, forecasting, and attributing costs across business units.

Answer

Use Logging Analytics custom parsers on generated invoice PDFs stored in Object Storage.

Answer

Use native OCI Tag Defaults and OCI Monitoring alarms on the 'Billing' metric namespace.

Answer

Deploy OCI APM Java agents to every compute node and query the JVM memory usage to estimate spend.

Question 5

An SRE team is configuring OCI Application Performance Monitoring (APM) synthetic monitoring. They need to run browser-based synthetic scripts periodically from multiple geographic locations to ensure user-facing login workflows function correctly. Which APM feature should they configure?

Accepted Answer

APM Synthetic Monitoring Browser Monitors using Dedicated Vantage Points. APM Synthetic Monitoring supports browser monitors that execute Selenium-based scripts from public or dedicated Vantage Points globally.

Answer

OCI Health Checks Ping Monitors

Answer

Logging Analytics synthetic agent extensions

Answer

OCI Monitoring service Synthetic Probes

Question 6

Your company requires all logs generated within the root compartment to be automatically archived to a centralized OCI Object Storage bucket in a different security tenancy for compliance purposes. Which OCI feature facilitates this serverless data pipeline?

Accepted Answer

OCI Service Connector Hub. OCI Service Connector Hub enables seamless, serverless movement of data between OCI services, such as streaming logs from OCI Logging to Object Storage or Streaming.

Answer

OCI Data Flow

Answer

OCI GoldenGate

Answer

OCI Archive Storage lifecycle rules

Question 7

Your organization has set strict budgets in OCI to monitor cloud expenditure. A finance team member needs to receive an alert when forecasted spending reaches 100% of the monthly budget. How should you configure this alert?

Accepted Answer

Configure an OCI Budget alert rule with threshold type set to 'FORECASTED' and threshold value set to 100.. OCI Budgets support alerts based on actual spend or forecasted spend. You can configure a threshold type of 'FORECASTED' with a percentage of 100.

Answer

Create an OCI Monitoring alarm on the Billing namespace with a metric expression for forecasted cost.

Answer

Use OCI Cost Analysis scheduled reports with an integrated SMTP relay.

Answer

Set up an OCI Events rule listening for billing threshold exceedance events.

Question 8

Which TWO of the following statements are correct regarding the architecture and capabilities of OCI Application Performance Monitoring (APM)?

Accepted Answer

OCI APM supports ingestion of standard OpenTelemetry traces from applications running on-premises, in OCI, or in other clouds.. OCI APM supports both server-side tracing (Java, Node.js, Python, etc.) and real user monitoring (RUM) via browser agents. It ingests OpenTelemetry standard traces and does not require dedicated database storage to be provisioned manually by the user.

Answer

OCI APM can only monitor applications deployed inside OCI Compute instances and cannot trace traffic originating from API Gateways.

Answer

OCI APM alerting is strictly limited to SMS notifications and cannot integrate with external incident management systems like PagerDuty.

Answer

OCI APM requires the user to manually provision and manage an underlying Autonomous Transaction Processing database to store trace spans.

Question 9

An incident response team needs to automatically isolate a compromised compute instance in OCI by revoking its network access while preserving its storage volumes for forensic analysis. Which sequence of actions should be automated using OCI Events and Functions?

Accepted Answer

Update the instance's Network Security Groups (NSGs) to remove existing rules and apply a restrictive quarantine NSG that denies all traffic.. To isolate a compromised instance while keeping volumes intact, the automated function should remove the instance's existing NSGs and attach a restrictive quarantine NSG that blocks all traffic, or disassociate its VNIC from active subnets, while leaving block volumes untouched.

Answer

Delete the VCN containing the instance to stop all routing.

Answer

Terminate the compute instance and delete all attached block volumes immediately.

Answer

Revoke the IAM user credentials of the administrator who launched the instance.

Question 10

An application architect is troubleshooting intermittent latency spikes in a distributed microservices application deployed across multiple OCI regions. Which OCI capability should be used to trace requests end-to-end across service boundaries?

Accepted Answer

OCI Application Performance Monitoring (APM) Distributed Tracing. OCI Application Performance Monitoring (APM) provides distributed tracing, capturing the end-to-end journey of requests across complex microservice architectures.

Answer

OCI Network Visualizer

Answer

OCI Logging Analytics with out-of-the-box system parsers

Answer

OCI Monitoring service anomaly detection

Question 11

Your organization runs a multi-tier microservices application deployed across multiple OCI regions. You are tasked with implementing OCI Application Performance Monitoring (APM) to trace distributed transactions across different API gateways and containerized services. To correlate user browser sessions with backend database queries, what is the required configuration step on the client-facing application tier?

Accepted Answer

Inject the APM Browser Agent (JavaScript tracer) into the web pages and ensure trace context propagation headers are enabled.. To correlate browser-level real user monitoring (RUM) with server-side APM traces, the APM JavaScript agent must be injected into the HTML pages, and it must propagate trace context headers (such as 'oracle-apm-trace-header') across HTTP boundaries to the backend services.

Answer

Deploy the APM Java asynchronous agent to the client browser using a browser extension.

Answer

Enable OCI Audit logs on the client subnets and stream the audit records into the APM Data Domain.

Answer

Configure the OCI API Gateway to natively intercept and inject synthetic monitoring payloads into the user cookies.

Question 12

Which TWO of the following are valid deployment models or connection types supported by OCI FastConnect?

Accepted Answer

FastConnect direct model. OCI FastConnect supports provider-specific connections (Layer 2 or Layer 3 via partners) and direct connections where the customer connects directly to an Oracle router in a FastConnect location.

Answer

FastConnect public internet gateway model

Answer

FastConnect IPsec tunnel overlay model

Answer

FastConnect satellite uplink model

Question 13

An observability architect is designing a high-availability alerting and incident response strategy in OCI. Which THREE best practices should be incorporated?

Accepted Answer

Set appropriate evaluation periods and repeat intervals to prevent alarm flapping.. Good alerting strategies include using composite alarms to reduce noise, routing alerts through Notifications to multiple endpoints (like PagerDuty or email), and setting appropriate evaluation windows to prevent flapping.

Answer

Rely exclusively on manual polling of the OCI Metrics Explorer console by the on-call engineer.

Answer

Disable all IAM security policies during alarm firing to allow unrestricted troubleshooting access.

Question 14

A DevOps engineer wants to monitor custom application metrics (such as active shopping cart count) emitted by microservices running on OCI Container Engine for Kubernetes (OKE). Which OCI service provides the necessary API to ingest and query these custom metrics?

Accepted Answer

OCI Monitoring Service. OCI Monitoring service provides metrics ingestion and querying APIs that allow developers to publish custom metrics using the Monitoring API or StatsD protocols.

Answer

Events Service

Answer

OCI Logging Analytics

Answer

Application Performance Monitoring (APM)

Question 15

An enterprise wants to monitor an enterprise application stack consisting of Oracle WebLogic Server and Oracle Database, tracking their deep internal health metrics, resource utilization, and dependency topology. Which OCI service is specifically designed for full-stack enterprise application monitoring?

Accepted Answer

OCI Stack Monitoring. OCI Stack Monitoring provides out-of-the-box discovery and monitoring of enterprise application stacks, including Oracle databases, WebLogic servers, and underlying host infrastructure.

Answer

OCI Application Performance Monitoring (APM)

Answer

OCI Logging Analytics

Answer

OCI Monitoring Service