1Z0-997-26 Databases — Timed 25 Questions

Question 1

You are migrating an on-premises Oracle Database (version 19c) to Oracle Autonomous Database (Serverless) using Oracle Data Pump. Which action is mandatory to ensure compatibility before generating the Data Pump export dump file?

25 minute time limit — choose an answer to begin.

Accepted Answer

Run the DBMS_CLOUD.PREPARE_FOR_AUTONOMOUS PL/SQL package on the source database. When migrating to Autonomous Database using Data Pump, you must run the DBMS_CLOUD.PREPARE_FOR_AUTONOMOUS procedure or use the Autonomous Database Migration tool to check and convert incompatible tablespaces, segments, and objects.

Answer

Disable Automatic Workload Repository (AWR) collection on the source database

Answer

Convert the source database into an Oracle Multitenant Container Database with a single pluggable database

Answer

Manually drop all custom triggers and indexes to prevent import failures

Question 2

You need to migrate a 50 TB Oracle Database from on-premises to Exadata Database Service on Dedicated Infrastructure with minimal downtime. The source database is operating on AIX and uses big-endian architecture, while OCI Exadata runs on little-endian Linux. Which migration method handles cross-platform endian conversion most efficiently?

Accepted Answer

RMAN Transportable Tablespaces with cross-platform data file conversion. RMAN Transportable Tablespaces with cross-platform data file conversion is the Oracle-recommended method for moving data between platforms with different endianness. It uses RMAN CONVERT DATAFILE (or CONVERT TABLESPACE) to transform data files from big-endian AIX to little-endian Linux, and only the metadata is exported/imported via Data Pump, minimizing downtime for a 50 TB database.

Answer

Direct database clone via SQL*Developer migration wizard

Answer

Oracle GoldenGate initial load using SQL direct paths

Answer

Standard Oracle Data Pump export and import over direct database links

Question 3

You are configuring scaling parameters for an Autonomous Database on Dedicated Infrastructure. You need to enable automatic scaling of CPU cores to handle unpredictable traffic bursts while maintaining strict cost controls. What is the maximum CPU core auto-scaling limit for an Autonomous Container Database on Dedicated Infrastructure?

Accepted Answer

Up to the total number of unallocated CPU cores available in the underlying Exadata Infrastructure instance. The maximum CPU core auto-scaling limit for an Autonomous Container Database on Dedicated Infrastructure is up to the total number of unallocated CPU cores available in the underlying Exadata Infrastructure instance. Auto-scaling allows the database to use more CPU cores than the base OCPU count, but it cannot exceed the total available cores in the Exadata system that are not already allocated to other ACDs or databases. This ensures that resources are shared efficiently within the dedicated infrastructure.

Answer

Exactly three times the base OCPU count provisioned for the database instance

Answer

An unlimited amount limited only by OCI regional capacity limits

Answer

Fixed at a maximum of 128 OCPUs regardless of hardware size

Question 4

You are designing a multi-database architecture where applications require read-scaling across different geographic regions with minimal replication lag. You decide to deploy Autonomous Data Warehouse (ADW) instances across three regions connected via GoldenGate. Which feature of Autonomous Database can be leveraged alongside GoldenGate to prevent sequence cache duplication conflicts across regions?

Accepted Answer

Configuring autonomous database global sequences with specific increment and offset parameters. When multiple Autonomous Data Warehouse instances in different regions each generate sequence values locally, GoldenGate replication can produce duplicate keys because each region's sequence cache starts at the same point. Configuring global sequences with distinct increment and offset values per region (e.g., region A: increment 3, offset 1; region B: increment 3, offset 2; region C: increment 3, offset 3) guarantees non-overlapping value ranges. This is the standard Oracle mechanism for multi-master sequence coordination.

Answer

Setting the database character set to AL32UTF8 to handle multi-region strings

Answer

Using Oracle Autonomous Health Framework to automatically resolve distributed deadlocks

Answer

Enabling Autonomous Data Guard in Snapshot Standby mode in all regions simultaneously

Question 5

An architect is configuring disaster recovery for an Autonomous Database (Serverless) instance using Autonomous Data Guard. The primary database resides in the US East (Ashburn) region, and the standby is in US West (Phoenix). What is the behavior of the standby database regarding read operations?

Accepted Answer

The standby database can be accessed in read-only mode for reporting and queries. Autonomous Data Guard standby databases in Oracle Autonomous Database (Serverless) are maintained in a read-only, mounted state that permits reporting and query workloads while the primary continues to serve read-write traffic. This is a core benefit of ADG: offloading analytics to the standby without impacting the primary. The standby continuously applies redo from the primary but does not accept DML until a switchover or failover promotes it.

Answer

The standby database automatically accepts write operations and replicates them back to the primary

Answer

The standby database accepts read-write transactions concurrently with the primary database

Answer

The standby database is completely inaccessible until a manual switchover or failover occurs

Question 6

When provisioning an Oracle Base Database system on OCI, which storage management architecture is utilized by default for storing database files (datafiles, redo logs, control files)?

Accepted Answer

Oracle Automatic Storage Management (ASM) configured across OCI Block Volumes. Oracle Base Database Service on OCI uses Oracle Automatic Storage Management (ASM) by default, with ASM disk groups built on OCI Block Volumes. ASM provides striping, mirroring, and rebalancing across the block volumes, which is the standard storage architecture for Oracle databases on OCI. This is the default for both Base Database and Exadata systems.

Answer

Network File System (NFS) shared mounts from a third-party NAS filer

Answer

Raw Device Mapping (RDM) shared via Fibre Channel SAN

Answer

Local NVMe drives directly attached to the hypervisor without redundancy

Question 7

Which TWO actions are required when migrating an on-premises Oracle database to an Oracle Autonomous Database (Serverless) using Oracle Data Pump? (Choose two.)

Accepted Answer

Run the DBMS_CLOUD.PREPARE_FOR_AUTONOMOUS procedure on the source database to ensure compatibility. Option A is correct because DBMS_CLOUD.PREPARE_FOR_AUTONOMOUS is the Oracle-supplied procedure that scans the source database and identifies/fixes incompatibilities (unsupported objects, invalid data types, etc.) before exporting for Autonomous Database, making it a required migration step. Option B is correct because Data Pump export/import to Autonomous Database Serverless requires a downloaded and configured connection wallet (containing the tnsnames.ora, sqlnet.ora, and cwallet.sso credentials) on the host running the Data Pump client so it can authenticate over TCPS to the ADB instance. Option C is not required — TDE is mandatory on Autonomous Database and the source export does not need TDE disabled; in fact, encrypted data is handled during import. Option D is wrong because Autonomous Database manages its own storage; you never manually format source datafiles into ASM disk groups as part of a Data Pump migration. Option E is wrong because no direct NFS mount exists between on-premises servers and Autonomous Database storage; connectivity is via SQL*Net/TCPS using the wallet, not NFS.

Answer

Disable Transparent Data Encryption (TDE) on the source database before export

Answer

Manually format all source datafiles into Oracle ASM disk groups prior to export

Answer

Configure a direct NFS mount between the source server and the Autonomous Database storage tier

Question 8

Which TWO workload types are natively supported when provisioning an Oracle Autonomous Database in OCI? (Choose two.)

Accepted Answer

Autonomous Transaction Processing (ATP). Autonomous Database offers multiple workload types including Autonomous Transaction Processing and Autonomous Data Warehouse.

Answer

Autonomous Spark Analytics Engine (ASAE)

Answer

Autonomous Hadoop Distributed File System (AHDFS)

Question 9

Which TWO methods can be used to securely connect an application running in an OCI compute instance to an Autonomous Database instance with private endpoint access enabled? (Choose two.)

Accepted Answer

Using mTLS authentication with the downloaded database connection wallet. Option D is correct because Autonomous Database with a private endpoint still supports mutual TLS (mTLS) authentication: you download the client credentials wallet from the OCI Console, and the application uses the wallet's tnsnames.ora, sqlnet.ora, and ewallet.pem to establish an encrypted, mutually authenticated connection to the database's private IP. Option E is correct because Autonomous Database also supports TLS (one-way) authentication without a wallet, where the client connects using the database's private IP address and the service name (for example, <dbname>_high) with a server-side certificate validated against a root CA, and access is controlled by network ACLs/private endpoint rules. Option A is wrong because exposing the database through an Internet Gateway and public IP mapping defeats the purpose of private endpoint access and is not a supported secure method for a private-endpoint ADB. Option B is wrong because OCI Vault is a key management service, not an SSH tunneling mechanism, and SSH tunneling is not the supported connectivity method for Autonomous Database. Option C is wrong because Object Storage pre-authenticated requests are for object access, not for connecting an application to an Autonomous Database.

Answer

Exposing the database via an Internet Gateway and public IP address mapping

Answer

Establishing an SSH tunnel through the OCI Vault key management service

Answer

Routing application traffic through OCI Object Storage public pre-authenticated requests

Question 10

Which TWO factors should an architect consider when sizing an Exadata Database Service on Dedicated Infrastructure? (Choose three/two - Choose two.)

Accepted Answer

Total OCPU count required across database VM clusters. Sizing Exadata Dedicated infrastructure requires evaluating current and future OCPU needs as well as storage requirements for database files and backups.

Answer

The number of local user SSH keys required for root password resets

Answer

OCI Identity and Access Management policy statement limits

Answer

The public IP bandwidth quotas allocated to OCI API endpoints

Question 11

Which TWO network security features can be applied to an Oracle Base Database system on OCI to protect database traffic and restrict access? (Choose two.)

Accepted Answer

Oracle Database Firewall and Audit Vault (AVDF) integration. Option A (Oracle Database Firewall and Audit Vault, AVDF) is correct because AVDF is a supported security control for Oracle Base Database systems on OCI that monitors and filters SQL traffic to the database, enforces database firewall policies, and captures audit data to protect database access and activity. Option D (VCN Security Lists and Network Security Groups, NSGs) is correct because these are the native OCI network controls that define ingress and egress rules for the database subnet/VNIC, allowing you to restrict access to the database listener port (for example, TCP 1521) to only trusted CIDR blocks or source NSGs. Option B is incorrect because disabling VCN route tables would break required network routing rather than provide a supported security feature for protecting database traffic. Option C is incorrect because OCI WAF protects HTTP/HTTPS web applications at Layer 7 and is not applied directly to the Oracle SQL*Net port 1521. Option E is incorrect because exposing database ports to the public Internet with default security lists is insecure and contrary to the goal of restricting access.

Answer

Disabling all VCN route tables to block internal routing

Answer

OCI Web Application Firewall (WAF) applied directly to SQL port 1521

Answer

Exposing database ports directly to the public Internet with default security lists

Question 12

You are planning to migrate a large, mission-critical Oracle Database (12.1.0.2) on-premises to Exadata Database Service on Dedicated Infrastructure in OCI. The migration requires minimal downtime and must handle cross-endian platform conversion since the source is IBM AIX. Which migration tool and strategy combination is most appropriate?

Accepted Answer

Oracle Data Pump transportable tablespaces with RMAN cross-platform incremental backup.. The source is IBM AIX (big-endian) and the target is Exadata on OCI (Linux x86-64, little-endian), so cross-endian conversion is mandatory. Data Pump transportable tablespaces combined with RMAN cross-platform incremental backups is the Oracle-recommended approach for cross-endian migration with minimal downtime, because it moves datafiles at the block level and converts them on the target, avoiding full export/import of every row. This combination minimizes downtime while handling the endianness requirement.

Answer

Oracle Zero Downtime Migration (ZDM) with physical online migration workflow.

Answer

Oracle GoldenGate for real-time replication with initial load via datapump.

Answer

Standard RMAN backup and restore directly from an on-premises NFS mount to OCI Object Storage.

Question 13

Which TWO backup destinations are natively supported when configuring automated backups for Oracle Base Database systems on OCI? (Choose two.)

Accepted Answer

OCI Object Storage Archive tier (for long-term retention policies). Option A (OCI Object Storage Archive tier) is correct because Oracle Base Database Service automated backups natively support Object Storage buckets, including the Archive tier for long-term retention policies. Option C (OCI Object Storage Standard tier buckets) is also correct because Standard tier Object Storage buckets are the default native destination for automated backups of Base Database systems. Option B is wrong because local unformatted swap partitions are OS memory/swap space, not a supported backup repository. Option D is wrong because public GitHub repositories are code-hosting services, not OCI backup targets. Option E is wrong because local USB flash drives attached to the DB VM guest are not a supported automated backup destination.

Answer

Local unformatted swap partitions on the database host

Answer

Public GitHub code repositories

Answer

Local USB flash drives plugged into the database VM guest node

Question 14

You are configuring Oracle Data Guard between an Exadata Database Service on Dedicated Infrastructure primary database and a remote standby database in another OCI region. To ensure maximum performance with zero data loss risk under normal operations, which Data Guard protection mode and transport setting should you configure?

Accepted Answer

Maximum Protection mode with SYNC and AFFIRM transport.. Maximum Protection mode with SYNC and AFFIRM transport guarantees zero data loss by ensuring the primary database does not commit until the standby acknowledges receipt and write to disk (AFFIRM). This is the only mode that guarantees zero data loss under normal operations, as it requires synchronous redo transport with acknowledgment. The trade-off is potential performance impact and the possibility of primary shutdown if the standby becomes unavailable.

Answer

Maximum Availability mode with SYNC transport and NOAFFIRM.

Answer

Maximum Availability mode with ASYNC transport and ARCHivelog compression.

Answer

Maximum Performance mode with ASYNC transport.

Question 15

A financial services company runs an Oracle Base Database Service (VM DB) system in the Frankfurt region. Compliance requires that all database backups remain within the EU and be encrypted with a customer-managed key rather than an Oracle-managed key. The architect enables automatic backups on the DB system. Which combination of configuration steps satisfies both requirements?

Accepted Answer

Enable automatic backups on the DB system, choose a local Object Storage bucket in the Frankfurt region as the backup destination, and select a customer-managed master encryption key from an OCI Vault in the same region.. Automatic backups on Base Database Service can be written to an Object Storage bucket, and the backup encryption can use a customer-managed master encryption key held in an OCI Vault in the same region. Placing both the bucket and the vault in Frankfurt satisfies data residency and ensures the customer controls the key. Default Oracle-managed TDE wallets and cross-region or cross-realm vault arrangements do not meet the stated requirements.

Answer

Enable automatic backups with a retention period, then set the backup destination to an Object Storage bucket in a different commercial realm and assign an OCI Vault key to that bucket.

Answer

Enable automatic backups, store them in a local Object Storage bucket, and configure a customer-managed key in OCI Vault located in a different region, since OCI Vault keys are global resources accessible from any region.

Answer

Enable automatic backups, store them in a local Object Storage bucket, and rely on the DB system's default TDE wallet key to encrypt the backup files, since TDE keys are always customer-managed.

Question 16

An architect is deploying Oracle Exadata Database Service on Dedicated Infrastructure and must enable Transparent Data Encryption (TDE) using a customer-managed key stored in OCI Vault. The deployment spans two regions for disaster recovery. Which two statements are correct about key management for this configuration? (Choose two.)

Accepted Answer

The master encryption key must exist in an OCI Vault in the same region as the Exadata infrastructure, and the standby region requires its own vault and key.. OCI Vault is regional, so each region hosting an Exadata system needs its own vault and master encryption key, and the primary and standby databases each reference a key in their own region. OCI Vault supports key rotation, and rotating the vault key re-wraps the TDE master key without re-encrypting existing data, so the database keeps decrypting older data with prior key versions while new writes use the rotated key.

Answer

A single OCI Vault master encryption key can be shared across both regions because OCI Vault keys are globally replicated by default.

Answer

Deleting the OCI Vault key immediately renders the Exadata database unrecoverable, because TDE master keys cannot be restored from vault backups.

Answer

The customer-managed key in OCI Vault replaces the need for a TDE wallet on the Exadata database, so no wallet files are created or managed.

Question 17

An organization is designing a disaster recovery strategy using Exadata Database Service on Dedicated Infrastructure. They require an Recovery Time Objective (RTO) of less than 30 seconds and a Recovery Point Objective (RPO) of zero for an enterprise database handling mission-critical workloads. Which Data Guard configuration should be implemented?

Accepted Answer

Oracle Active Data Guard configured in Maximum Protection mode with synchronous transport. RPO of zero requires synchronous redo transport so no committed transaction can be lost, and RTO under 30 seconds requires a standby that is already mounted, open read-only, and ready for immediate failover. Maximum Protection mode with Active Data Guard satisfies both: SYNC transport guarantees zero data loss, and Active Data Guard keeps the standby continuously applying redo so failover is near-instant. This is the only option that meets both objectives simultaneously.

Answer

Manual RMAN backup replication via OCI Object Storage every 15 minutes

Answer

Oracle Data Guard configured in Maximum Performance mode with asynchronous transport

Answer

Oracle GoldenGate real-time replication with asynchronous extract configurations

Question 18

Which OCI tool should a cloud architect recommend for automating the lifecycle management, patching, and backing up of a fleet of Oracle Base Database systems across multiple compartments?

Accepted Answer

OCI Database Management service. OCI Database Management service is purpose-built for fleet-level lifecycle operations on Base Database and Exadata systems: it provides patching, backup management, performance monitoring, and compliance reporting across compartments from a single console. It integrates with OCI IAM for compartment-scoped access and supports both autonomous and non-autonomous databases. This is the only option that directly addresses patching and backup automation for a fleet of Base Database systems.

Answer

OCI Compute Instance Scheduler

Answer

Oracle Cloud Infrastructure GoldenGate deployment console

Answer

OCI Identity and Access Management (IAM) policies

Question 19

An enterprise requires deploying an Oracle Autonomous Database on Dedicated Infrastructure to meet stringent data isolation and security mandates. Which foundational resource must be provisioned first before creating the Autonomous Container Database?

Accepted Answer

An Autonomous Exadata Infrastructure resource. To deploy an Autonomous Database on Dedicated Infrastructure, the foundational resource is the Autonomous Exadata Infrastructure (AEI). This is a dedicated Exadata system in OCI that provides the hardware and infrastructure for hosting Autonomous Container Databases (ACDs). The AEI must be provisioned first because it supplies the compute, storage, and network resources that the ACDs and subsequent Autonomous Databases will use. Without an AEI, you cannot create an ACD or any dedicated autonomous databases.

Answer

An Autonomous Database on Shared Infrastructure instance

Answer

A standard Oracle Base Database system

Answer

A Virtual Cloud Network with a default database subnet only

Question 20

Your development team wants to connect securely to an Autonomous Database (Serverless) instance using mutual TLS (mTLS) authentication. Where must the client application obtain the required credentials to establish this secure connection?

Accepted Answer

Download the database connection wallet zip file from the OCI Console or CLI and extract it on the client host. For mTLS connections to Autonomous Database Serverless, the client must download the connection wallet zip from the OCI Console or CLI (or via the ADB API) and extract it on the client host. The wallet contains the client credentials (e.g., cwallet.sso, tnsnames.ora, sqlnet.ora) required to authenticate the client to the database over TLS. Without the wallet, mTLS cannot be established.

Answer

Generate a Kerberos ticket granting service token via the IAM security console

Answer

Retrieve the master encryption key directly from OCI Vault using an API key

Answer

Configure a public SSL certificate issued by Let's Encrypt in the database parameter settings