1Z0-997-26 High Availability And Disaster Recovery Practice Test 3 — 15 Questions

Question 1

Your organization uses OCI Full Stack Disaster Recovery to manage failovers between Region A and Region B. During a DR drill, you notice that a custom user-defined step failed because the dependent compute instance in Region B was not yet fully running. How should you resolve this dependency issue in the FSDR plan?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Edit the DR plan group and add a dependency or adjust the sequence order so that the start compute step completes before the custom script step.. OCI Full Stack Disaster Recovery (FSDR) plans are built from ordered groups of steps. When a custom user-defined step depends on a compute instance being fully running, the correct fix is to place the 'Start Compute' step in an earlier group or add an explicit dependency so the custom script executes only after the instance reaches the RUNNING state. This is the native sequencing mechanism FSDR provides.

Answer

Manually SSH into each instance during the drill to run the script.

Answer

Increase the OCI Compute instance shape size in Region B to boot faster.

Answer

Disable all pre-checks in the FSDR plan settings.

Question 2

An enterprise application hosted on OCI requires high availability across multiple fault domains within a single availability domain. Which resource placement strategy should you use for your application compute instances?

Accepted Answer

Distribute instances evenly across three different Fault Domains.. Within a single availability domain, fault domains are independent groupings of hardware with separate power and network. Distributing compute instances evenly across the three fault domains ensures that a hardware failure in one fault domain does not take down the entire application, which is the correct HA strategy at the AD-internal level.

Answer

Configure a dedicated virtual cloud network for each fault domain.

Answer

Attach all instances to separate Internet Gateways.

Answer

Place all instances in Fault Domain 1 to optimize network latency.

Question 3

Which TWO of the following statements are correct regarding OCI Load Balancer features for high availability? (Choose two.)

Accepted Answer

An OCI Load Balancer can be deployed as either public (internet-facing) or private (internal).. Option B is correct because OCI Load Balancer supports two deployment types: a public (internet-facing) load balancer with a public IP for external traffic, and a private (internal) load balancer with only private IPs for internal traffic within a VCN. Option C is correct because the OCI Load Balancer is a regional service: when you create it, you select a region and it can span multiple Availability Domains, with the service provisioning the load balancer across the ADs you choose for high availability. Option A is incorrect because the load balancer is not restricted to a single AD; it is regional and can be deployed across multiple ADs. Option D is incorrect because OCI Load Balancer operates at Layer 4 (TCP) and Layer 7 (HTTP/HTTPS), not only Layer 3 packet routing. Option E is incorrect because OCI Load Balancer is a fully managed service that handles failover automatically, so no customer-managed keepalived clustering is required.

Answer

OCI Load Balancers are restricted to a single Availability Domain and cannot cross AD boundaries.

Answer

OCI Load Balancers only support Layer 3 packet routing.

Answer

OCI Load Balancers require manual customer-managed keepalived failover clustering.

Question 4

When designing a disaster recovery plan using OCI Full Stack Disaster Recovery (FSDR), which THREE resource types can be managed and orchestrated within a DR Protection Group? (Choose three.)

Accepted Answer

OCI Load Balancers and Network Load Balancers. OCI Full Stack Disaster Recovery (FSDR) DR Protection Groups support several OCI resource types that can be added as members and orchestrated during switchover/failover. Option A is correct because OCI Load Balancers and Network Load Balancers are supported member types that FSDR can manage as part of the DR plan. Option B is correct because Oracle Base Database and Exadata Database Service systems are supported members, allowing FSDR to orchestrate database-level DR operations. Option C is correct because OCI Compute instances, along with their attached boot and block volumes, are supported members that FSDR can move and start in the standby region. Option D is not correct because KMS Vault encryption keys are not a manageable member type in a DR Protection Group; key replication is handled separately via KMS key replication, not FSDR orchestration. Option E is not correct because IAM global policies are account-wide and not a regional resource that can be added to or orchestrated by a DR Protection Group.

Answer

OCI Key Management service Vault encryption keys

Answer

OCI Identity and Access Management (IAM) global policies

Question 5

Which TWO actions can you take in OCI to ensure high availability of application data stored in Block Volumes? (Choose two.)

Accepted Answer

Enable asynchronous cross-region block volume replication.. Option B is correct because OCI Block Volume cross-region replication asynchronously copies volume data to a volume replica in another region, so if the primary region or availability domain fails, the replica can be activated to keep application data available. Option C is correct because OCI Volume Backup Policies automate scheduled backups (crash-consistent or application-consistent snapshots) of block volumes, enabling point-in-time recovery and protecting data against corruption or accidental deletion. Option A is wrong because storing backups on the compute instance's root partition keeps the backup on the same failure domain as the instance, providing no real high-availability benefit. Option D is wrong because disconnecting volumes nightly via the API causes downtime and does not improve availability. Option E is wrong because disabling encryption weakens security and does not meaningfully improve replication or availability.

Answer

Store block volume backups locally on the compute instance root partition.

Answer

Manually disconnect block volumes every night via the API.

Answer

Disable encryption on block volumes to speed up replication.

Question 6

Which THREE factors should an architect evaluate when determining Recovery Point Objective (RPO) and Recovery Time Objective (RTO) for an OCI database disaster recovery solution? (Choose three.)

Accepted Answer

Level of automation configured for failover (e.g., Fast-Start Failover vs. manual scripts). Option A is correct because the degree of failover automation directly determines how quickly the standby can take over, which sets the achievable RTO — Oracle Data Guard Fast-Start Failover with an observer can cut RTO to seconds or minutes, whereas manual switchover scripts add human detection and execution time. Option B is correct because network bandwidth and latency between primary and DR regions govern how fast redo/archive logs can be shipped and applied; high latency or insufficient bandwidth increases data-loss exposure (RPO) and delays synchronization, especially for synchronous or far-sync configurations. Option C is correct because RPO and RTO are business-driven targets: the criticality of the workload and the tolerable data-loss window during an outage define what values the architecture must meet, and thus what replication mode and topology are required. Option D is incorrect because OCI Console dashboard colors and layout are cosmetic UI preferences with no bearing on data replication or recovery metrics. Option E is incorrect because the length of a tenancy OCID string is a fixed identifier characteristic and has no relationship to RPO or RTO design decisions.

Answer

The color scheme and layout of the OCI Console dashboard

Answer

The default tenant tenancy OCID string length

Question 7

When designing an enterprise-grade disaster recovery architecture on OCI, which THREE practices are recommended to ensure a successful failover and minimize operational risk during a disaster event? (Choose three.)

Accepted Answer

Automate failover orchestration using tools like OCI Full Stack Disaster Recovery.. Option B is correct because OCI Full Stack Disaster Recovery provides automated orchestration of failover and switchover across compute, databases, and storage, reducing human error and failover time during a disaster. Option C is correct because regular DR drills validate runbooks and RTO/RPO assumptions, and non-disruptive testing features such as Snapshot Standby (for Autonomous Database) allow validation without impacting production. Option E is correct because the target DR region must have sufficient compute shapes and database capacity (or reserved capacity) provisioned in advance; otherwise failover will fail or be throttled due to capacity shortages. Option A is incorrect because disabling load balancer health checks removes automatic traffic redirection and failure detection, increasing risk rather than minimizing it. Option D is incorrect because relying solely on manual documentation stored on local laptops is fragile, error-prone, and unavailable if local systems are lost during a disaster.

Answer

Disable all health checks on load balancers to prevent false alarms during failover.

Answer

Rely solely on manual documentation stored on local laptops for failover steps.

Question 8

Which TWO OCI networking features help achieve high availability for applications accessing external services or on-premises datacenters? (Choose two.)

Accepted Answer

Redundant FastConnect virtual circuits terminating on separate DRG ports or diverse provider locations.. Option B is correct because redundant FastConnect virtual circuits that terminate on separate DRG ports or diverse provider locations eliminate single points of failure in the private dedicated connectivity between OCI and on-premises datacenters, allowing traffic to fail over and maintain high availability. Option C is correct because configuring redundant IPSec VPN tunnels on the Dynamic Routing Gateway provides multiple encrypted paths over the internet; if one tunnel or its underlying network path fails, BGP or static routing can shift traffic to the surviving tunnel, preserving connectivity to on-premises or external services. Option A is incorrect because disabling DRG route propagation removes learned routes and would break reachability rather than improve availability. Option D is incorrect because a single Internet Gateway with no backup routes is itself a single point of failure and does not provide redundancy. Option E is incorrect because local peering gateways connect VCNs within the same region and are not used for on-premises connections, which require FastConnect, IPSec VPN, or a DRG.

Answer

Disabling Dynamic Routing Gateway route propagation.

Answer

Single public Internet Gateway attached without backup routes.

Answer

Using local peering gateways for on-premises connections.

Question 9

Which THREE strategies can be implemented in OCI to mitigate the impact of a regional availability outage on a multi-tier web application? (Choose three.)

Accepted Answer

Deploying application tiers across two OCI regions with DNS Traffic Management health checks for automated failover. Option A is correct because deploying the application tiers across two OCI regions and using OCI DNS Traffic Management with health checks enables automated failover: when health checks detect the primary region's endpoints as unhealthy, traffic is steered to the secondary region, keeping the multi-tier app reachable during a regional outage. Option B is correct because replicating critical block volumes (via block volume replication/Cross-Region Replication) and object storage data (via Object Storage replication policies or rclone/OCI CLI copy) to the secondary region ensures the data needed to run the application survives a regional failure and can be attached/accessed in the DR region. Option D is correct because Oracle Data Guard provides physical or logical standby databases in a secondary region with redo transport and role transitions (switchover/failover), which is the standard OCI approach to keep the database tier available when the primary region is lost. Option C is not correct because a single Availability Domain deployment with daily backups offers no live failover capability and cannot mitigate a regional outage, since both the AD and the backups in the same region may be affected. Option E is not correct because synchronous multi-master writes over the public internet between regions introduce unacceptable latency and consistency/locking problems, and OCI does not support such a multi-master database topology as a viable HA/DR strategy.

Answer

Relying on a single Availability Domain deployment with automated daily backups

Answer

Running all database write operations simultaneously against both regions with synchronous multi-master locking over public internet

Question 10

When configuring an OCI Application Load Balancer (Layer 7) for high availability, which THREE settings or components must be properly configured? (Choose three.)

Accepted Answer

SSL/TLS certificates attached to HTTPS listeners if terminating secure traffic. Option C is correct because an OCI Layer 7 load balancer that terminates HTTPS traffic requires an SSL/TLS certificate attached to the HTTPS listener, which enables the load balancer to decrypt incoming requests and re-encrypt or forward them to backends as configured. Option D is correct because backend sets must be defined and associated with health checks so the load balancer can monitor backend instance responsiveness and route traffic only to healthy instances, which is essential for high availability. Option E is correct because listeners must be configured with the appropriate port and protocol (for example, HTTP on port 80 or HTTPS on port 443) so the load balancer can accept and process client traffic correctly. Option A is not required because OCI load balancers operate within the OCI VCN and do not need a direct physical connection to on-premises switches for high availability. Option B is not required because backend compute nodes do not need manual IP routing table modifications; OCI handles load balancer-to-backend routing through the VCN and backend set configuration.

Answer

A direct physical connection between the load balancer and on-premises switches

Answer

Manual IP routing table hacks on every backend compute node

Question 11

When designing high availability for an Oracle RAC (Real Application Clusters) database deployed on OCI Exadata Database Service, which THREE architectural characteristics ensure fault tolerance and uptime? (Choose three.)

Accepted Answer

Multi-node database clustering across distinct Fault Domains or Availability Domains. Option C is correct because Oracle RAC achieves fault tolerance by distributing cluster nodes across distinct Fault Domains or Availability Domains, so the failure of one domain does not take down the entire database. Option D is correct because Application Continuity and Transparent Application Failover (TAF) mask instance or node failures by replaying or failing over in-flight sessions, preserving application uptime during outages. Option E is correct because Exadata Storage Cells use Exadata Smart Flash Cache and ASM redundancy across multiple Storage Servers, so a failed cell does not cause data loss or database downtime. Option A is wrong because a single Oracle Linux instance without Grid Infrastructure cannot form a RAC cluster and provides no node-level redundancy. Option B is wrong because a single local NVMe drive on one node is a single point of failure and is not shared clustered storage, which RAC requires.

Answer

Running the entire cluster on a single Oracle Linux compute instance without Grid Infrastructure

Answer

Storing all database data on a single local NVMe drive on node 1

Question 12

Which TWO methods are valid for protecting OCI Compute instance boot volumes against data loss or corruption? (Choose two.)

Accepted Answer

Creating manual or scheduled boot volume backups.. Option B is correct because OCI Block Volume service supports both manual and policy-driven scheduled backups of boot volumes, which create point-in-time copies stored in Object Storage that can be used to restore or clone the boot volume after data loss or corruption. Option C is correct because cross-region boot volume replication asynchronously copies the boot volume to a volume in another OCI region, providing protection against region-level failures and enabling recovery or disaster-recovery failover. Option A is wrong because an Internet Gateway is a VCN networking component for public connectivity, not a data-protection mechanism for boot volumes. Option D is wrong because OCI Streaming is a Kafka-compatible messaging service for streaming data, not a storage or backup target for OS boot volumes. Option E is wrong because local NVMe scratch disks are ephemeral, non-persistent instance storage that is wiped on reboot or termination, so they cannot provide OS persistence or protection.

Answer

Attaching the boot volume to an Internet Gateway.

Answer

Storing OS files in an OCI Streaming queue.

Answer

Using local NVMe scratch disks for OS persistence.

Question 13

Which TWO features of OCI Object Storage contribute to its high durability and reliability for disaster recovery workflows? (Choose two.)

Accepted Answer

Object versioning support to protect against accidental deletion or overwriting.. Option C is correct because OCI Object Storage supports object versioning, which retains prior versions of an object when it is overwritten or deleted, enabling recovery from accidental deletion or corruption and supporting point-in-time restore in disaster recovery workflows. Option E is correct because OCI Object Storage automatically replicates data across multiple fault domains and availability domains within a region, providing redundancy that protects against hardware and datacenter failures without user intervention. Option A is incorrect because Object Storage access is controlled through IAM policies, pre-authenticated requests, and API/SDK access, not restricted to local console sessions. Option B is incorrect because storing objects on a single physical disk in a single compute instance offers no redundancy and is the opposite of a durable, replicated storage design. Option D is incorrect because replication is handled automatically by the service; manual per-file replication scripts are neither required nor a durability feature.

Answer

Restricting bucket access exclusively to local console sessions.

Answer

Storing all objects on a single physical disk inside a single compute instance.

Answer

Requiring manual user replication scripts for every individual file uploaded.

Question 14

Which THREE operational tasks should be included in a comprehensive disaster recovery runbook when utilizing OCI Full Stack Disaster Recovery for an enterprise application? (Choose three.)

Accepted Answer

Executing pre-checks in the target DR region to validate resource readiness and configurations. Option A is correct because OCI Full Stack Disaster Recovery (FSDR) runbooks should begin with pre-checks in the target DR region to confirm that compute, networking, storage, and configuration prerequisites are met before any switchover or failover is attempted. Option D is correct because for database-inclusive DR plans, the runbook must verify that the standby database has transitioned to the primary role and that redo/apply lag is resolved so no committed transactions are lost. Option E is correct because a complete DR runbook includes the client-facing cutover step, rerouting traffic through DNS (e.g., OCI DNS steering policies) or Load Balancer changes so users reach the DR region after the backend is promoted. Option B is wrong because deleting IAM policies in the primary region during normal operations would break authentication and authorization and is not a DR task. Option C is wrong because formatting primary database storage volumes would destroy production data and is never part of a disaster recovery runbook.

Answer

Manually deleting all IAM policies in the primary region during normal operations

Answer

Format-all commands on primary database storage volumes prior to initiating DR

Question 15

An OCI architect is setting up a disaster recovery environment where compute instances in the DR region need identical network configurations (private IPs, VNICs, security lists) to the primary region. Which OCI capability assists in deploying reproducible network topologies across regions?

Accepted Answer

OCI Resource Manager with Terraform configurations. OCI Resource Manager is a managed Terraform service that lets architects define network topologies (VCNs, subnets, security lists, VNICs, private IP assignments) as code and deploy them repeatedly across regions. Because the same Terraform configuration can be applied to a DR region, it guarantees identical, reproducible network configurations without manual drift. This is the canonical OCI answer for infrastructure-as-code and cross-region DR topology replication.

Answer

OCI File Storage Network File System (NFS) exports

Answer

OCI IAM Domain Federation wizard

Answer

OCI Streaming service partition replication