1Z0-997-26 Practice Test 5 — 10 Questions

Question 1

Your operations team needs to receive immediate notifications via PagerDuty and Slack whenever a high-severity alarm is triggered in OCI Monitoring. Which OCI service should be used as the intermediary to dispatch these notifications?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

OCI Notifications Service. OCI Notifications Service is the correct intermediary because it natively supports publishing messages to external endpoints such as PagerDuty and Slack via HTTPS subscriptions. When an OCI Monitoring alarm fires, it can publish to a Notifications topic, and the service delivers the message to all subscribed endpoints. This is the standard OCI pattern for alert fan-out to third-party incident management and chat tools.

Answer

OCI API Gateway

Answer

OCI Streaming Service

Answer

OCI Events Service

Question 2

Your organization is preparing to migrate several large Oracle databases to OCI using Oracle Data Pump. Which THREE best practices should you follow to optimize the export and import performance over network connections? (Choose three.)

Accepted Answer

Use the `PARALLEL` parameter during both export and import operations to utilize multiple worker processes.. Option A is correct because the PARALLEL parameter in Oracle Data Pump starts multiple worker processes for both export (expdp) and import (impdp), allowing the job to read and write multiple data files concurrently and thereby maximizing throughput over the network. Option C is correct because the COMPRESS parameter (e.g., COMPRESS=DATA_ONLY or ALL) reduces the size of the dump file set, which directly lowers the volume of bytes transferred across the network and shortens transfer time, especially for large Oracle databases. Option E is correct because NETWORK_LINK lets Data Pump read directly from the source database over a database link and write into the target database, eliminating the intermediate dump file on disk and the associated file transfer step, which is ideal for network-based migrations. Option B is not appropriate because running Data Pump jobs from a laptop on public Wi-Fi is unreliable and insecure, and omitting compression increases transfer volume. Option D is not appropriate because undo tablespaces are required for read consistency and transaction rollback during import; disabling them would break the import and is not a supported performance practice.

Answer

Execute all Data Pump jobs from a local laptop connected via public Wi-Fi without compression.

Answer

Disable database undo tablespaces entirely during the Data Pump import phase.

Question 3

You need to migrate an on-premises Oracle Database to OCI Exadata Database Service using Oracle GoldenGate for zero-downtime migration with bi-directional replication. Which critical design consideration must be addressed regarding table design on both databases?

Accepted Answer

Tables must have primary keys or unique identifiers, and Conflict Detection and Resolution (CDR) must be configured. For bi-directional replication with Oracle GoldenGate, tables must have primary keys or unique identifiers to ensure that each row can be uniquely identified for conflict detection and resolution. Conflict Detection and Resolution (CDR) must be configured to handle conflicts that arise when the same row is modified on both databases. This is critical for zero-downtime migration with bi-directional replication.

Answer

Primary keys must be omitted to allow duplicate row insertion across databases

Answer

Tables must not contain any indexes, triggers, or constraints

Answer

All tables must be converted to temporary unlogged tables

Question 4

Which protocol is used by OCI FastConnect and Site-to-Site VPN to dynamically exchange routing information with on-premises routers?

Accepted Answer

BGP (Border Gateway Protocol). Both OCI FastConnect and Site-to-Site VPN use BGP to dynamically exchange routes between the on-premises customer edge router and the OCI Dynamic Routing Gateway. BGP is the standard exterior gateway protocol for hybrid cloud routing and supports dynamic failover and prefix advertisement.

Answer

RIP (Routing Information Protocol)

Answer

EIGRP (Enhanced Interior Gateway Routing Protocol)

Answer

OSPF (Open Shortest Path First)

Question 5

Your organization mandates that any newly created compartment must automatically enforce rigid security baselines (such as blocking public buckets and disallowing open security list rules). Which OCI feature should you configure to enforce these guardrails at creation time?

Accepted Answer

OCI Security Zones. OCI Security Zones are a feature of Cloud Guard that enforce a set of security policies on compartments, preventing actions that violate the policies. When you create a security zone, you specify a security zone policy that includes restrictions such as blocking public buckets and disallowing open security list rules. Any attempt to create or modify resources in the compartment that violates the policy is denied. This enforces guardrails at creation time.

Answer

IAM Policy Condition statements with 'request.time'

Answer

OCI Audit Log Service with Event-Driven Automation

Answer

OCI Tag Defaults with validation rules

Question 6

You are designing a multi-tenant microservices platform on OKE. You need to ensure that tenant workloads are strictly isolated at the kernel level, preventing potential container breakout vulnerabilities from affecting other tenants. Which OCI Container Engine for Kubernetes node configuration should you choose?

Accepted Answer

Worker nodes utilizing Kata Containers runtime for hardware-level isolation. Kata Containers provide hardware-level isolation by running each container inside a lightweight virtual machine with its own kernel, so a container breakout affects only that VM and cannot compromise other tenants. This is the correct choice when strict kernel-level isolation is required on OKE.

Answer

Standard OKE worker nodes with Kubernetes LimitRanges

Answer

Standard worker nodes with Network Security Groups (NSGs) applied per pod

Answer

Worker nodes running Docker Engine with privileged containers enabled

Question 7

An Oracle Cloud Infrastructure (OCI) Administrator needs to collect log data from custom applications running on Compute instances. Which OCI service should be configured to ship these logs to OCI Logging?

Accepted Answer

OCI Logging Agent. The OCI Logging Agent is a lightweight agent installed on Compute instances that collects custom application logs (and system logs) from the instance and ships them to the OCI Logging service via the Unified Monitoring Agent framework. It is the designated mechanism for ingesting instance-originated custom logs into OCI Logging.

Answer

OS Management Hub

Answer

OCI Service Connector Hub

Answer

OCI Streaming Service

Question 8

An enterprise is designing a cost observability architecture in OCI. They want to attribute cloud spend dynamically to different business units based on resource metadata tags, and they need historical trend analysis with anomaly detection. Which combination of features and tools provides the most robust solution?

Accepted Answer

Use OCI Cost Analysis with defined tags, export Cost Reports to Object Storage, and configure Budgets with alert rules.. OCI Cost Analysis supports filtering and grouping by defined tags, enabling dynamic attribution of spend to business units based on resource metadata. Exporting Cost Reports to Object Storage provides durable historical data for trend analysis, and Budgets with alert rules deliver anomaly detection and threshold-based notifications. This combination directly satisfies the requirements for tag-based attribution, historical trends, and anomaly detection.

Answer

Use Logging Analytics custom parsers on generated invoice PDFs stored in Object Storage.

Answer

Use native OCI Tag Defaults and OCI Monitoring alarms on the 'Billing' metric namespace.

Answer

Deploy OCI APM Java agents to every compute node and query the JVM memory usage to estimate spend.

Question 9

You are troubleshooting an issue where an on-premises server cannot reach an OCI compute instance over an IPSec VPN tunnel. The VPN status in the OCI console shows 'Tunnel Up', but ping tests fail. What is the most likely cause?

Accepted Answer

Security Lists in the OCI VCN or Network Security Groups (NSGs) are blocking ICMP or traffic, or OS firewalls on the compute instance are dropping packets.. A 'Tunnel Up' status only confirms that IKE Phase 1 and Phase 2 completed and the IPSec SA is established; it does not guarantee that traffic is permitted or routed. The most common cause of ping failure with an up tunnel is that Security Lists, NSGs, or the instance's OS firewall are dropping ICMP or the relevant traffic.

Answer

The FastConnect virtual circuit is disabled.

Answer

The OCI VCN does not have an Internet Gateway attached.

Answer

The BGP ASN number is misconfigured on the OCI Dynamic Routing Gateway.

Question 10

Your organization has completed migrating a database to OCI Base Database Service. To ensure compliance with corporate data protection policies, you must verify that all database backups stored in OCI Object Storage are automatically encrypted using customer-managed encryption keys. Where should you configure this key management integration?

Accepted Answer

OCI Vault service (Key Management). OCI Base Database Service integrates with OCI Vault (Key Management) to allow customer-managed encryption keys (CMKs) for backups stored in Object Storage. When you configure the database's backup destination to use a customer-managed key, the service automatically encrypts backups with that key. This ensures compliance with policies requiring customer-controlled encryption rather than Oracle-managed keys.

Answer

OCI Database Migration service connection profiles

Answer

OCI Audit log configuration

Answer

OCI Identity and Access Management (IAM) password policies