1Z0-997-26 Hard Questions — 25 Difficult Questions

Question 1

You are building a high-throughput event-processing pipeline where multiple consumer instances need to read messages from an OCI Stream concurrently. Each consumer instance must maintain its own independent cursor position and process every message in the stream without interfering with other consumer instances. How should you configure your consumers?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Configure each consumer instance to belong to a separate, unique consumer group.. In OCI Streaming, a consumer group allows multiple consumers to coordinate and share the message processing load, with each message delivered to only one consumer in the group. To have each consumer instance maintain its own independent cursor and process every message, each instance must belong to a separate, unique consumer group. This way, each group gets its own copy of all messages, and each instance can track its own offset independently.

Answer

Use the OCI Streaming default single-consumer mode with multithreaded polling.

Answer

Assign all consumer instances to the exact same consumer group and increase the number of partitions.

Answer

Publish events via OCI Notifications instead, as Streaming does not support consumer groups.

Question 2

An organization is designing a disaster recovery strategy using Exadata Database Service on Dedicated Infrastructure. They require an Recovery Time Objective (RTO) of less than 30 seconds and a Recovery Point Objective (RPO) of zero for an enterprise database handling mission-critical workloads. Which Data Guard configuration should be implemented?

Accepted Answer

Oracle Active Data Guard configured in Maximum Protection mode with synchronous transport. RPO of zero requires synchronous redo transport so no committed transaction can be lost, and RTO under 30 seconds requires a standby that is already mounted, open read-only, and ready for immediate failover. Maximum Protection mode with Active Data Guard satisfies both: SYNC transport guarantees zero data loss, and Active Data Guard keeps the standby continuously applying redo so failover is near-instant. This is the only option that meets both objectives simultaneously.

Answer

Manual RMAN backup replication via OCI Object Storage every 15 minutes

Answer

Oracle Data Guard configured in Maximum Performance mode with asynchronous transport

Answer

Oracle GoldenGate real-time replication with asynchronous extract configurations

Question 3

You are optimizing the cost and performance of an Exadata Database Service on Dedicated Infrastructure environment hosting multiple large databases. Which THREE practices should you implement to achieve optimal resource utilization and cost efficiency?

Accepted Answer

Consolidate multiple non-CDB databases into a single Multitenant Container Database (CDB) with multiple PDBs.. Option A is correct because consolidating non-CDB databases into a single Multitenant Container Database with multiple PDBs improves consolidation density, reduces per-database overhead, and enables efficient resource sharing through PDB-level resource management on Exadata. Option B is correct because Exadata Smart Flash Cache policies (for example, keeping OLTP data cached while marking DSS scans as non-cacheable) ensure flash is used for latency-sensitive random I/O and not polluted by large sequential scans, improving performance and deferring costly capacity upgrades. Option E is correct because Exadata Database Service on Dedicated Infrastructure supports dynamic OCPU scaling, so matching OCPU counts to peak and off-peak schedules avoids paying for idle compute while preserving performance during demand peaks. Option C is incorrect because moving table data to standard Block Volume bypasses Exadata storage servers, eliminating Smart Scan, storage indexes, and Exadata flash benefits, which hurts performance and cost efficiency. Option D is incorrect because disabling automatic backups removes data protection and is not a valid cost-optimization practice; backup costs should be managed through retention and tiering policies instead.

Answer

Migrate all table data to standard Block Volume storage to bypass Exadata storage servers.

Answer

Disable automatic backups entirely to save OCI Object Storage costs.

Question 4

You are troubleshooting a microservice on OKE that is experiencing intermittent 502 Bad Gateway errors when communicating with another internal service. The application uses Kubernetes ClusterIP services for discovery. You suspect DNS resolution failure within the cluster. Which diagnostic tool and approach should you use inside the OKE cluster?

Accepted Answer

Deploy a temporary diagnostic container pod (such as netshoot) and test DNS resolution using nslookup against CoreDNS.. Deploying a temporary diagnostic container pod such as netshoot and testing DNS resolution with nslookup against CoreDNS is the correct approach. This allows you to verify whether the cluster's DNS service (CoreDNS) is resolving the internal service name correctly from within a pod, which directly addresses the suspected DNS resolution failure causing 502 errors. It is a standard Kubernetes troubleshooting technique that isolates DNS issues from application or network issues.

Answer

Check the OCI VCN internet gateway route table.

Answer

Review OCI Cloud Guard threat detection policies.

Answer

Restart the OCI API Gateway service.

Question 5

An architect is configuring Oracle Autonomous Database Disaster Recovery with cross-region Data Guard. The primary database is in Ashburn, and the standby is in Phoenix. You execute a switchover operation. What happens to the connection strings (such as tnsnames.ora entries) used by client applications?

Accepted Answer

Client connection strings remain valid; applications reconnect, and the regional endpoint automatically routes traffic to the new primary.. When using Oracle Autonomous Database with cross-region Data Guard, the connection strings (such as those in tnsnames.ora) remain valid after a switchover because the regional endpoint automatically routes traffic to the new primary database. Applications reconnect without any changes to their configuration. This is a key benefit of the managed service, which abstracts the underlying infrastructure changes.

Answer

The database IP addresses change, requiring manual DNS A-record updates in OCI DNS.

Answer

You must manually regenerate new wallet zip files and redeploy them to all application servers.

Answer

Client applications must be rewritten to use hardcoded IP addresses instead of TNS names.

Question 6

Which THREE strategies can be implemented in OCI to mitigate the impact of a regional availability outage on a multi-tier web application? (Choose three.)

Accepted Answer

Deploying application tiers across two OCI regions with DNS Traffic Management health checks for automated failover. Option A is correct because deploying the application tiers across two OCI regions and using OCI DNS Traffic Management with health checks enables automated failover: when health checks detect the primary region's endpoints as unhealthy, traffic is steered to the secondary region, keeping the multi-tier app reachable during a regional outage. Option B is correct because replicating critical block volumes (via block volume replication/Cross-Region Replication) and object storage data (via Object Storage replication policies or rclone/OCI CLI copy) to the secondary region ensures the data needed to run the application survives a regional failure and can be attached/accessed in the DR region. Option D is correct because Oracle Data Guard provides physical or logical standby databases in a secondary region with redo transport and role transitions (switchover/failover), which is the standard OCI approach to keep the database tier available when the primary region is lost. Option C is not correct because a single Availability Domain deployment with daily backups offers no live failover capability and cannot mitigate a regional outage, since both the AD and the backups in the same region may be affected. Option E is not correct because synchronous multi-master writes over the public internet between regions introduce unacceptable latency and consistency/locking problems, and OCI does not support such a multi-master database topology as a viable HA/DR strategy.

Answer

Relying on a single Availability Domain deployment with automated daily backups

Answer

Running all database write operations simultaneously against both regions with synchronous multi-master locking over public internet

Question 7

When designing a high-availability and disaster recovery architecture for an enterprise Oracle Database on OCI, which THREE components or patterns are crucial for achieving optimal recovery and uptime? (Choose three.)

Accepted Answer

Automated and policy-driven backups to OCI Object Storage with cross-region replication. Option A is correct because automated, policy-driven backups written to OCI Object Storage and replicated across regions provide durable, off-site recovery points that survive regional failures and satisfy RPO/RTO objectives. Option C is correct because Oracle Data Guard maintains a synchronized standby database in a remote region, enabling fast failover and near-zero data loss for regional disaster recovery. Option E is correct because Oracle RAC spread across fault domains or availability domains provides local high availability by eliminating single points of failure and enabling instance-level failover within a region. Option B is incorrect because local ephemeral NVMe snapshots are tied to the compute instance and are lost if the host or region fails, so they cannot serve as a disaster recovery mechanism. Option D is incorrect because a single-node database VM cannot be stretched across regions, and unencrypted NFS mounts introduce security and latency problems that undermine both availability and compliance.

Answer

Relying solely on local ephemeral NVMe drive snapshots for disaster recovery

Answer

Stretching a single-node database VM across distinct cloud regions using unencrypted NFS mounts

Question 8

When designing a multi-database architecture with Oracle GoldenGate for high availability and load distribution, which THREE architectural considerations are critical for success? (Choose three.)

Accepted Answer

Implementing Conflict Detection and Resolution (CDR) rules for active-active multi-master topologies. Option B is correct because in an active-active multi-master GoldenGate topology, the same rows can be modified on multiple nodes simultaneously, so Conflict Detection and Resolution (CDR) rules are essential to deterministically resolve update/delete conflicts and prevent data divergence. Option C is correct because each node must generate non-overlapping keys; using unique sequence offsets (or ranges) per node prevents primary key collisions when inserts from different replicas are applied to the same table. Option D is correct because DDL changes must be captured and replicated in a coordinated way (e.g., via DDL replication and synchronized apply order) so that table structures, columns, and indexes remain identical across nodes, avoiding extract/replicat failures and metadata mismatches. Option A is wrong because routing all writes to a single read-only replica without replication is not a GoldenGate HA/load-distribution design and would not propagate changes. Option E is wrong because disabling checkpointing removes recovery positioning, causing data loss and preventing reliable restart after failures.

Answer

Routing all write transactions through a single read-only replica without replication

Answer

Disabling all checkpointing to maximize real-time packet loss tolerance

Question 9

An enterprise has workloads running in OCI and Google Cloud Platform (GCP). They require low-latency, private connectivity between OCI and GCP without traffic traversing the public internet. Which architectural design pattern achieves this?

Accepted Answer

Connect OCI FastConnect and GCP Interconnect using a Layer 2 software-defined interconnection provider like Megaport or Equinix Fabric.. OCI and GCP do not have a native direct interconnect between them, so private low-latency connectivity requires a Layer 2 fabric provider. FastConnect on the OCI side and Cloud Interconnect on the GCP side both terminate at the same Equinix Fabric or Megaport switch, where a virtual cross-connect joins the two circuits. This keeps traffic off the public internet and gives deterministic latency.

Answer

Peer an OCI Dynamic Routing Gateway directly to a GCP Virtual Private Cloud using a Google Cloud Interconnect cable.

Answer

Configure an OCI Internet Gateway to peer with GCP Cloud DNS.

Answer

Attach a GCP VPC as a secondary VCN in the OCI console.

Question 10

An organization has multiple child compartments under a parent compartment. A security architect needs to write an IAM policy that allows a specific developer group to manage compute instances across all child compartments without granting permissions at the root tenancy level. How should this policy be structured?

Accepted Answer

Allow group Developers to manage compute-instances in compartment ParentCompartment. OCI IAM policies are hierarchical: a policy statement that grants access at a parent compartment automatically applies to all child compartments within that hierarchy. By writing the policy at ParentCompartment, the developer group gets manage permissions on compute instances in all child compartments without granting tenancy-wide access. This follows the principle of least privilege while meeting the requirement.

Answer

Allow group Developers to manage compute-instances in tenancy

Answer

Allow group Developers to manage compute-instances in root

Answer

Write individual policies for every single child compartment separately without referencing the parent.

Question 11

Your security team mandates that all traffic entering your OCI VCN from the internet must be inspected by a next-generation firewall before reaching backend web servers. How should you design this architecture?

Accepted Answer

Route inbound traffic from the Internet Gateway through a firewall appliance subnet before forwarding it to backend subnets via route tables.. To force all inbound internet traffic through a next-generation firewall before it reaches backend web servers, you place the firewall appliance in its own subnet and use route tables to steer traffic: the Internet Gateway routes inbound traffic to the firewall subnet, and the firewall subnet's route table forwards inspected traffic to the backend subnet. This is the standard hub-and-spoke or DMZ architecture in OCI, where the firewall is the next hop for the backend subnet's ingress path.

Answer

Attach public IP addresses directly to all backend web servers.

Answer

Rely entirely on default VCN Security Lists without route table modifications.

Answer

Use OCI Object Storage to filter incoming HTTP packets.

Question 12

You are configuring transparent data encryption (TDE) for an Oracle Database on Exadata Database Service using OCI Vault for master encryption key management. What happens if the database loses connectivity to the OCI Vault key management service?

Accepted Answer

The database continues to run using keys cached in memory for a period, but cannot be restarted until connectivity to OCI Vault is restored. When TDE uses OCI Vault as the external key management service, the database caches the master encryption key in memory after first retrieval. If connectivity to OCI Vault is lost, running instances continue to operate using the cached key, but any restart or new instance mount fails because the key cannot be fetched to open the TDE wallet. This is the documented behavior for external key management with TDE.

Answer

The database instantly crashes and forces an immediate failover to the standby database

Answer

The database automatically falls back to self-managed wallet storage without alerting administrators

Answer

All encrypted data files are automatically wiped to prevent security breaches

Question 13

Which TWO architectural best practices should you follow when designing cloud-native microservices on Oracle Container Engine for Kubernetes (OKE) to ensure high availability and resilience? (Choose two.)

Accepted Answer

Distribute OKE worker node pools across multiple Fault Domains or Availability Domains.. Option C is correct because spreading OKE worker node pools across multiple Fault Domains or Availability Domains ensures that a failure in one physical domain does not take down the entire cluster, which is a fundamental high-availability practice for cloud-native microservices. Option E is correct because Kubernetes Pod Disruption Budgets (PDBs) define the minimum number of pods that must remain available during voluntary disruptions such as node maintenance, upgrades, or scaling, directly supporting resilience and availability guarantees. Option A is not recommended because a single flat namespace does not improve communication speed and reduces isolation, making it harder to apply network policies, resource quotas, and RBAC for microservices. Option B is incorrect because storing state or sessions on the ephemeral container root filesystem means data is lost when the pod restarts or is rescheduled, breaking resilience; state should be externalized to a database or persistent volume. Option D is incorrect because exposing all microservices via NodePorts bypasses the OCI Load Balancer, lacks advanced traffic management, TLS termination, and health checks, and is not a best practice for production high availability.

Answer

Deploy all microservices into a single flat Kubernetes namespace to maximize intra-cluster communication speed.

Answer

Store all application state and user sessions locally on the ephemeral container root filesystem.

Answer

Use NodePorts for all external microservice access directly bypassing the OCI Load Balancer.

Question 14

You are designing a secure zero-trust architecture for database access in OCI. Developers must authenticate using short-lived tokens rather than long-term database passwords. Which OCI and database feature combination supports token-based authentication?

Accepted Answer

OCI IAM token-based database authentication combined with Oracle Autonomous Database.. OCI IAM token-based database authentication, when combined with Oracle Autonomous Database, allows developers to authenticate using short-lived tokens issued by OCI IAM instead of long-term database passwords. This supports zero-trust principles by eliminating static credentials and enabling centralized identity management with token expiration and revocation.

Answer

Disabling all authentication to maximize application performance.

Answer

Hardcoded administrator passwords stored in plain text configuration files.

Answer

Using static API signing keys for database connection strings.

Question 15

You are migrating a monolithic application to microservices on OKE and implementing resilient design patterns. Which THREE resiliency patterns should you implement to handle transient failures gracefully?

Accepted Answer

Circuit Breaker pattern to prevent cascading failures when downstream services are struggling. Option A (Circuit Breaker) is correct because it detects repeated failures to a downstream service and trips open, failing fast instead of letting threads pile up waiting on a struggling dependency, which prevents cascading failures across the microservice mesh. Option B (Bulkhead) is correct because it partitions resources such as thread pools or connection pools per dependency, so a single slow or failing service cannot exhaust all shared resources and starve healthy services. Option D (Retries with Exponential Backoff and Jitter) is correct because transient network blips, brief DNS hiccups, or momentary 503s are often resolved by retrying, and exponential backoff with jitter avoids synchronized retry storms that would otherwise overwhelm the recovering service. Option C is not a resiliency pattern but an anti-pattern: a single shared monolithic database without connection pooling creates a shared point of contention and failure, coupling all microservices and amplifying outages. Option E is wrong because disabling health checks and liveness probes removes Kubernetes' ability to detect and restart unhealthy containers, degrading rather than improving resilience.

Answer

Single large monolithic database instance shared by all microservices without connection pooling

Answer

Disabling all health checks and liveness probes to prevent container restarts

Question 16

You are configuring a Data Guard association between two Oracle Base Database Systems in different OCI regions. The primary database encounters an unplanned outage, and you perform a manual failover. What action must you take afterward if you wish to restore the original architecture with the old primary as the new standby?

Accepted Answer

Recreate or reinstate the former primary database (using Flashback Database or backup restoration) to convert it into a valid standby.. After a manual failover, the old primary is no longer a valid standby because its data files and control file reflect a different point in time. To restore the original architecture, you must reinstate or recreate the former primary as a standby, typically using Flashback Database to the point of the last redo it transmitted, or by restoring from backup and re-establishing the Data Guard association. Only then can redo transport resume in the reverse direction.

Answer

Run a simple 'SWITCHOVER' command to reverse roles without any data synchronization checks.

Answer

Modify the listener.ora file manually via SSH and restart the clusterware.

Answer

Delete the standby database and provision a brand-new VCN in the primary region.

Question 17

Your organization mandates that any newly created compartment must automatically enforce rigid security baselines (such as blocking public buckets and disallowing open security list rules). Which OCI feature should you configure to enforce these guardrails at creation time?

Accepted Answer

OCI Security Zones. OCI Security Zones are a feature of Cloud Guard that enforce a set of security policies on compartments, preventing actions that violate the policies. When you create a security zone, you specify a security zone policy that includes restrictions such as blocking public buckets and disallowing open security list rules. Any attempt to create or modify resources in the compartment that violates the policy is denied. This enforces guardrails at creation time.

Answer

IAM Policy Condition statements with 'request.time'

Answer

OCI Audit Log Service with Event-Driven Automation

Answer

OCI Tag Defaults with validation rules

Question 18

You are designing a multi-tenant microservices platform on OKE. You need to ensure that tenant workloads are strictly isolated at the kernel level, preventing potential container breakout vulnerabilities from affecting other tenants. Which OCI Container Engine for Kubernetes node configuration should you choose?

Accepted Answer

Worker nodes utilizing Kata Containers runtime for hardware-level isolation. Kata Containers provide hardware-level isolation by running each container inside a lightweight virtual machine with its own kernel, so a container breakout affects only that VM and cannot compromise other tenants. This is the correct choice when strict kernel-level isolation is required on OKE.

Answer

Standard OKE worker nodes with Kubernetes LimitRanges

Answer

Standard worker nodes with Network Security Groups (NSGs) applied per pod

Answer

Worker nodes running Docker Engine with privileged containers enabled

Question 19

An enterprise is designing a cost observability architecture in OCI. They want to attribute cloud spend dynamically to different business units based on resource metadata tags, and they need historical trend analysis with anomaly detection. Which combination of features and tools provides the most robust solution?

Accepted Answer

Use OCI Cost Analysis with defined tags, export Cost Reports to Object Storage, and configure Budgets with alert rules.. OCI Cost Analysis supports filtering and grouping by defined tags, enabling dynamic attribution of spend to business units based on resource metadata. Exporting Cost Reports to Object Storage provides durable historical data for trend analysis, and Budgets with alert rules deliver anomaly detection and threshold-based notifications. This combination directly satisfies the requirements for tag-based attribution, historical trends, and anomaly detection.

Answer

Use Logging Analytics custom parsers on generated invoice PDFs stored in Object Storage.

Answer

Use native OCI Tag Defaults and OCI Monitoring alarms on the 'Billing' metric namespace.

Answer

Deploy OCI APM Java agents to every compute node and query the JVM memory usage to estimate spend.

Question 20

Your organization has a strict Recovery Point Objective (RPO) of 5 minutes and Recovery Time Objective (RTO) of 15 minutes for a multi-tier application. The database tier uses Oracle Data Guard. During a test drill, you notice that redo transport lag spikes to 8 minutes. What is the most likely architectural bottleneck causing this issue?

Accepted Answer

Inadequate cross-region network bandwidth or high latency causing redo transport congestion.. A redo transport lag spike to 8 minutes most likely indicates a network bottleneck between the primary and standby regions. Data Guard redo transport depends on sufficient cross-region bandwidth and low latency; if bandwidth is constrained or latency is high, the standby cannot receive and apply redo fast enough, causing the lag to exceed the 5-minute RPO. This is an architectural issue, not a database or application configuration issue.

Answer

Exceeded OCI Block Volume IOPS limits on the standby database's local NVMe scratchpad.

Answer

Misconfigured OCI IAM policy allowing read-only access to database backups.

Answer

Incorrect OCI Load Balancer SSL certificate configuration on the web tier.