1Z0-997-26 Practice Test 9 — 10 Questions

Question 1

Your finance department requires detailed cost visibility and granular chargeback reporting for multiple cloud environments spanning different business units, departments, and environments (Prod/Dev). Tagging is strictly enforced via OCI Tag Defaults. To analyze historical cost trends and forecast future cloud spend across these business dimensions, which OCI native feature should you use?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

OCI Cost Analysis dashboards filtered by Cost-Tracking Tags.. OCI Cost Analysis is the native cost visibility and chargeback tool that supports filtering by Cost-Tracking Tags, which are the tags enforced by Tag Defaults. It provides historical trend analysis and forecasting across business dimensions like business unit, department, and environment. Unlike Budgets, which are for threshold alerts, Cost Analysis is designed for granular cost exploration and reporting.

Answer

OCI Logging Analytics custom dashboards querying the Usage Report log stream.

Answer

OCI Budgets with scheduled CSV report exports sent to an Object Storage bucket.

Answer

OCI Resource Manager stack drift reports mapped against IAM compartment hierarchies.

Question 2

Your organization has strict security policies requiring all log data in OCI Logging to be encrypted using a customer-managed encryption key (CMK) stored in OCI Vault. How should you implement this?

Accepted Answer

Assign a customer-managed master encryption key from OCI Vault to the Log Group in OCI Logging.. OCI Logging allows you to assign a customer-managed master encryption key from OCI Vault at the Log Group level. All logs stored in that log group are then encrypted with the specified CMK, satisfying the policy without per-object configuration. This is the native, supported mechanism for CMK encryption of log data in OCI Logging.

Answer

Configure the OCI Logging Agent on compute instances with local disk encryption enabled via IAM policies.

Answer

Attach the master encryption key directly to each individual log object stored in Object Storage.

Answer

Use OCI Streaming to intercept logs and apply customer-managed keys before writing to OCI Logging.

Question 3

An architect is designing a database migration from an on-premises Oracle Database (Non-CDB structure) to an OCI Autonomous Database (Serverless). Which migration method is mandatory because of the architectural constraints of Autonomous Database?

Accepted Answer

Logical migration using Oracle Data Pump or Oracle Zero Downtime Migration (logical workflow). Autonomous Database (Serverless) is a fully managed, sealed platform that does not expose the OS, filesystem, or SYSDBA-level access needed for physical migration techniques, so migration must be logical. Oracle Data Pump (expdp/impdp) or ZDM's logical workflow moves schemas and data over a database link or dump files, which is the only supported path into Autonomous Database.

Answer

Direct block-level storage snapshot replication using OCI Block Volume replication

Answer

RMAN transportable tablespaces with physical file conversion

Answer

Physical standby database via Oracle Data Guard broker

Question 4

You are architecting a multi-region cloud-native application where OCI API Gateway is deployed in Region A and Region B. You need to ensure that global users are automatically routed to the closest healthy API Gateway endpoint with automatic failover if an entire OCI region experiences an outage. Which OCI service should you use in front of the API Gateways?

Accepted Answer

OCI DNS Traffic Management Steering with Failover and Health Checks. OCI Traffic Management (or OCI DNS Traffic Management / Global Load Balancing) routes users across multiple regions based on latency, geo-location, or failover policies.

Answer

OCI File Storage cross-region replication

Answer

OCI Bastion Service in the primary region

Answer

OCI Local VCN Peering across regions

Question 5

You are setting up FastConnect and need to choose between the FastConnect Provider model and the FastConnect Colocation model. What is the key characteristic of the Provider model?

Accepted Answer

You connect via an OCI partner network provider without needing physical equipment in an Oracle-partner datacenter.. In the FastConnect Provider model, you establish connectivity through an Oracle-approved partner (e.g., Equinix Fabric, Megaport, AT&T) that already has a presence in the Oracle Cloud region. You do not need to install or patch your own equipment in an Oracle Meet-Me-Room; the partner handles the Layer 2/3 handoff. This contrasts with the Colocation model, where you must physically deploy your router in a colocation facility connected to Oracle.

Answer

You must physically patch your fiber into Oracle's Meet-Me-Room.

Answer

Traffic is routed exclusively over the public internet with guaranteed SLA.

Answer

Oracle installs a dedicated router inside your on-premises datacenter.

Question 6

Your organization uses an external identity provider (IdP), such as Microsoft Entra ID (Azure AD), to authenticate users. You need to map IdP group memberships to OCI IAM groups so that users inherit the correct permissions upon login. How is this integration achieved?

Accepted Answer

Configure a Federation in OCI IAM using SAML 2.0, establish the IdP trust, and then create IdP Group Mappings to OCI IAM groups.. OCI IAM federation with SAML 2.0 establishes trust with the external IdP, and IdP Group Mappings map the IdP's group claims to OCI IAM groups. When a user logs in, OCI reads the group attribute from the SAML assertion and grants the permissions associated with the mapped OCI groups. This provides automatic, centralized authorization based on corporate group membership.

Answer

Attach API signing keys to each federated user profile manually through the OCI Console.

Answer

Create dynamic groups in OCI with matching rules checking the user's corporate email domain string.

Answer

Write a custom Python script running on compute instances that synchronizes user passwords from the IdP to OCI local users every hour.

Question 7

An organization running an Oracle Exadata Database Service requires compliance auditing where all database administrative actions and sensitive data queries must be logged, tamper-proof, and retained in an isolated repository. Which combination of OCI and Oracle Database features provides this capability?

Accepted Answer

Oracle Data Safe combined with Database Unified Audit policies. Oracle Data Safe combined with Database Unified Audit policies provides centralized, tamper-proof auditing for administrative actions and sensitive data queries. Data Safe collects audit trails into a secure repository, applies masking and security assessments, and Unified Auditing captures the required events at the database level.

Answer

OCI Object Storage unversioned buckets with public read permissions

Answer

Oracle Data Pump export logs stored in local temporary directories

Answer

Standard Linux syslog daemon writing to local disk partitions

Question 8

An architect is configuring an OCI Full Stack Disaster Recovery plan. The plan includes a step to run a custom script on an application server during a failover drill. Which OCI service executes this custom script?

Accepted Answer

OCI Functions or OCI Compute instance run-command actions orchestrated by Full Stack DR.. OCI Full Stack Disaster Recovery orchestrates failover and drill plans that can include user-defined custom scripts. These scripts are executed either as OCI Functions invocations or as Compute instance run-command actions, which Full Stack DR calls as plan steps to run arbitrary logic on application servers during a drill or failover.

Answer

Oracle Autonomous Linux Auto-Update Daemon

Answer

OCI Resource Manager Terraform apply jobs exclusively

Answer

OCI Streaming Service consumer groups

Question 9

What is the primary benefit of using OCI Autonomous Database Serverless compared to Provisioned (Dedicated) infrastructure regarding database administration?

Accepted Answer

Oracle fully automates all patching, tuning, scaling, and provisioning with zero infrastructure management required. Autonomous Database Serverless is fully managed by Oracle: provisioning, patching, upgrades, tuning, scaling, and backups are automated with no customer access to the underlying Exadata infrastructure. This contrasts with Provisioned/Dedicated, where the customer still controls Exadata infrastructure lifecycle tasks even though the database itself is autonomous. The primary administrative benefit is therefore the elimination of infrastructure management overhead.

Answer

Customers must manually configure Exadata cell software versions

Answer

Serverless databases do not support automated backups

Answer

Customers are required to manually apply quarterly database security patches

Question 10

An application tier in a private VCN subnet needs to securely access an Oracle Autonomous Database without traversing the public internet. Which OCI networking feature provides the most secure and performant connection?

Accepted Answer

An OCI Service Gateway.. An OCI Service Gateway provides a private, secure path from a VCN to supported Oracle services like Autonomous Database without exposing traffic to the public internet. It is the most performant option because traffic stays on Oracle's private backbone, avoiding internet latency and inspection. The Service Gateway is attached to the VCN and referenced in route rules, so only resources in the VCN can use it, and access can be further restricted with IAM policies and security rules.

Answer

A NAT Gateway combined with a public IP address on the database.

Answer

A Site-to-Site VPN connection back to the corporate data center.

Answer

An Internet Gateway attached to the VCN route table.