1Z0-997-26 Multiple Select — 60 Questions

Question 1

Which THREE features are supported within OCI Cost Analysis to help administrators analyze and report on cloud spending?

Accepted Answer

Grouping and filtering costs using OCI Defined Tags. Option B is correct because OCI Cost Analysis lets administrators group and filter cost data by dimensions including OCI Defined Tags, enabling chargeback and showback reporting by tag keys/values. Option C is correct because Cost Analysis provides interactive charts that visualize cumulative and non-cumulative cost trends across customizable time ranges such as daily or monthly granularity. Option E is correct because Cost Analysis allows exporting the displayed cost charts and tabular cost data to CSV for offline analysis and reporting. Option A is incorrect because billing details such as credit card information are managed through Oracle Support or the account management/billing console, not by directly editing them in Cost Analysis. Option D is incorrect because Cost Analysis is a cost reporting and visualization tool; it does not execute SQL queries against Autonomous Database instances, which would be done via tools like SQL Developer, Database Actions, or OCI Data Science/APEX.

Answer

Directly modifying customer credit card billing details without contacting Oracle Support

Answer

Automatically executing database SQL queries against Autonomous Database instances

Question 2

You are optimizing the cost and performance of an Exadata Database Service on Dedicated Infrastructure environment hosting multiple large databases. Which THREE practices should you implement to achieve optimal resource utilization and cost efficiency?

Accepted Answer

Consolidate multiple non-CDB databases into a single Multitenant Container Database (CDB) with multiple PDBs.. Option A is correct because consolidating non-CDB databases into a single Multitenant Container Database with multiple PDBs improves consolidation density, reduces per-database overhead, and enables efficient resource sharing through PDB-level resource management on Exadata. Option B is correct because Exadata Smart Flash Cache policies (for example, keeping OLTP data cached while marking DSS scans as non-cacheable) ensure flash is used for latency-sensitive random I/O and not polluted by large sequential scans, improving performance and deferring costly capacity upgrades. Option E is correct because Exadata Database Service on Dedicated Infrastructure supports dynamic OCPU scaling, so matching OCPU counts to peak and off-peak schedules avoids paying for idle compute while preserving performance during demand peaks. Option C is incorrect because moving table data to standard Block Volume bypasses Exadata storage servers, eliminating Smart Scan, storage indexes, and Exadata flash benefits, which hurts performance and cost efficiency. Option D is incorrect because disabling automatic backups removes data protection and is not a valid cost-optimization practice; backup costs should be managed through retention and tiering policies instead.

Answer

Migrate all table data to standard Block Volume storage to bypass Exadata storage servers.

Answer

Disable automatic backups entirely to save OCI Object Storage costs.

Question 3

Your organization is planning to migrate file shares from an on-premises Windows environment (SMB protocol) to OCI. Which THREE factors or options should you consider when selecting the appropriate OCI storage architecture for Windows file shares? (Choose three.)

Accepted Answer

Deploying Windows Server instances on OCI Compute attached to high-performance OCI Block Volumes to act as native SMB file servers.. Option A is correct because deploying Windows Server instances on OCI Compute with attached high-performance Block Volumes lets you run native SMB file servers, preserving SMB semantics such as file locking, ACLs, and Active Directory integration for Windows clients. Option D is correct because OCI Marketplace partner solutions offer enterprise NAS appliances that natively support SMB/CIFS on OCI, providing a managed, protocol-compatible alternative to self-managed Windows file servers. Option E is correct because OCI File Storage Service is an NFSv3-based service and does not natively speak SMB/CIFS, so it cannot directly serve Windows SMB shares without third-party gateways or workarounds. Option B is incorrect because OCI Object Storage is an object store accessed via REST/S3 APIs, not a POSIX/SMB file system, and it does not provide the file locking and share semantics required for active SMB network drives. Option C is incorrect because OCI Archive Storage is a cloud archive tier accessed over the network via APIs, and there is no such thing as attaching it to Windows clients via USB cable simulation.

Answer

Using OCI Object Storage as a direct replacement for active SMB shared network drives requiring file locking.

Answer

Attaching OCI Archive Storage directly to Windows clients via USB cable simulation.

Question 4

Which THREE strategies can be implemented in OCI to mitigate the impact of a regional availability outage on a multi-tier web application? (Choose three.)

Accepted Answer

Deploying application tiers across two OCI regions with DNS Traffic Management health checks for automated failover. Option A is correct because deploying the application tiers across two OCI regions and using OCI DNS Traffic Management with health checks enables automated failover: when health checks detect the primary region's endpoints as unhealthy, traffic is steered to the secondary region, keeping the multi-tier app reachable during a regional outage. Option B is correct because replicating critical block volumes (via block volume replication/Cross-Region Replication) and object storage data (via Object Storage replication policies or rclone/OCI CLI copy) to the secondary region ensures the data needed to run the application survives a regional failure and can be attached/accessed in the DR region. Option D is correct because Oracle Data Guard provides physical or logical standby databases in a secondary region with redo transport and role transitions (switchover/failover), which is the standard OCI approach to keep the database tier available when the primary region is lost. Option C is not correct because a single Availability Domain deployment with daily backups offers no live failover capability and cannot mitigate a regional outage, since both the AD and the backups in the same region may be affected. Option E is not correct because synchronous multi-master writes over the public internet between regions introduce unacceptable latency and consistency/locking problems, and OCI does not support such a multi-master database topology as a viable HA/DR strategy.

Answer

Relying on a single Availability Domain deployment with automated daily backups

Answer

Running all database write operations simultaneously against both regions with synchronous multi-master locking over public internet

Question 5

When designing a high-availability and disaster recovery architecture for an enterprise Oracle Database on OCI, which THREE components or patterns are crucial for achieving optimal recovery and uptime? (Choose three.)

Accepted Answer

Automated and policy-driven backups to OCI Object Storage with cross-region replication. Option A is correct because automated, policy-driven backups written to OCI Object Storage and replicated across regions provide durable, off-site recovery points that survive regional failures and satisfy RPO/RTO objectives. Option C is correct because Oracle Data Guard maintains a synchronized standby database in a remote region, enabling fast failover and near-zero data loss for regional disaster recovery. Option E is correct because Oracle RAC spread across fault domains or availability domains provides local high availability by eliminating single points of failure and enabling instance-level failover within a region. Option B is incorrect because local ephemeral NVMe snapshots are tied to the compute instance and are lost if the host or region fails, so they cannot serve as a disaster recovery mechanism. Option D is incorrect because a single-node database VM cannot be stretched across regions, and unencrypted NFS mounts introduce security and latency problems that undermine both availability and compliance.

Answer

Relying solely on local ephemeral NVMe drive snapshots for disaster recovery

Answer

Stretching a single-node database VM across distinct cloud regions using unencrypted NFS mounts

Question 6

When designing a multi-database architecture with Oracle GoldenGate for high availability and load distribution, which THREE architectural considerations are critical for success? (Choose three.)

Accepted Answer

Implementing Conflict Detection and Resolution (CDR) rules for active-active multi-master topologies. Option B is correct because in an active-active multi-master GoldenGate topology, the same rows can be modified on multiple nodes simultaneously, so Conflict Detection and Resolution (CDR) rules are essential to deterministically resolve update/delete conflicts and prevent data divergence. Option C is correct because each node must generate non-overlapping keys; using unique sequence offsets (or ranges) per node prevents primary key collisions when inserts from different replicas are applied to the same table. Option D is correct because DDL changes must be captured and replicated in a coordinated way (e.g., via DDL replication and synchronized apply order) so that table structures, columns, and indexes remain identical across nodes, avoiding extract/replicat failures and metadata mismatches. Option A is wrong because routing all writes to a single read-only replica without replication is not a GoldenGate HA/load-distribution design and would not propagate changes. Option E is wrong because disabling checkpointing removes recovery positioning, causing data loss and preventing reliable restart after failures.

Answer

Routing all write transactions through a single read-only replica without replication

Answer

Disabling all checkpointing to maximize real-time packet loss tolerance

Question 7

Which THREE features are provided by OCI Application Performance Monitoring (APM)?

Accepted Answer

Distributed Tracing across microservices. OCI Application Performance Monitoring (APM) provides Distributed Tracing across microservices (A), which lets you follow a single request through multiple services and identify latency or errors in the call chain. It also provides Real User Monitoring (RUM) (C), which captures browser-side performance data from actual end users via a JavaScript agent. Additionally, APM offers Synthetic Monitoring (E) using browser and script-based tests to proactively simulate user interactions and measure availability and performance. Options B and D are incorrect because automatic bare metal database backups are a database service capability, and BGP routing table management for FastConnect belongs to OCI networking, not APM.

Answer

Automatic provisioning of bare metal database backups

Answer

Management of BGP routing tables for FastConnect

Question 8

Which TWO architectural best practices should you follow when designing cloud-native microservices on Oracle Container Engine for Kubernetes (OKE) to ensure high availability and resilience? (Choose two.)

Accepted Answer

Distribute OKE worker node pools across multiple Fault Domains or Availability Domains.. Option C is correct because spreading OKE worker node pools across multiple Fault Domains or Availability Domains ensures that a failure in one physical domain does not take down the entire cluster, which is a fundamental high-availability practice for cloud-native microservices. Option E is correct because Kubernetes Pod Disruption Budgets (PDBs) define the minimum number of pods that must remain available during voluntary disruptions such as node maintenance, upgrades, or scaling, directly supporting resilience and availability guarantees. Option A is not recommended because a single flat namespace does not improve communication speed and reduces isolation, making it harder to apply network policies, resource quotas, and RBAC for microservices. Option B is incorrect because storing state or sessions on the ephemeral container root filesystem means data is lost when the pod restarts or is rescheduled, breaking resilience; state should be externalized to a database or persistent volume. Option D is incorrect because exposing all microservices via NodePorts bypasses the OCI Load Balancer, lacks advanced traffic management, TLS termination, and health checks, and is not a best practice for production high availability.

Answer

Deploy all microservices into a single flat Kubernetes namespace to maximize intra-cluster communication speed.

Answer

Store all application state and user sessions locally on the ephemeral container root filesystem.

Answer

Use NodePorts for all external microservice access directly bypassing the OCI Load Balancer.

Question 9

You are migrating a monolithic application to microservices on OKE and implementing resilient design patterns. Which THREE resiliency patterns should you implement to handle transient failures gracefully?

Accepted Answer

Circuit Breaker pattern to prevent cascading failures when downstream services are struggling. Option A (Circuit Breaker) is correct because it detects repeated failures to a downstream service and trips open, failing fast instead of letting threads pile up waiting on a struggling dependency, which prevents cascading failures across the microservice mesh. Option B (Bulkhead) is correct because it partitions resources such as thread pools or connection pools per dependency, so a single slow or failing service cannot exhaust all shared resources and starve healthy services. Option D (Retries with Exponential Backoff and Jitter) is correct because transient network blips, brief DNS hiccups, or momentary 503s are often resolved by retrying, and exponential backoff with jitter avoids synchronized retry storms that would otherwise overwhelm the recovering service. Option C is not a resiliency pattern but an anti-pattern: a single shared monolithic database without connection pooling creates a shared point of contention and failure, coupling all microservices and amplifying outages. Option E is wrong because disabling health checks and liveness probes removes Kubernetes' ability to detect and restart unhealthy containers, degrading rather than improving resilience.

Answer

Single large monolithic database instance shared by all microservices without connection pooling

Answer

Disabling all health checks and liveness probes to prevent container restarts

Question 10

Your organization is preparing to migrate several large Oracle databases to OCI using Oracle Data Pump. Which THREE best practices should you follow to optimize the export and import performance over network connections? (Choose three.)

Accepted Answer

Use the `PARALLEL` parameter during both export and import operations to utilize multiple worker processes.. Option A is correct because the PARALLEL parameter in Oracle Data Pump starts multiple worker processes for both export (expdp) and import (impdp), allowing the job to read and write multiple data files concurrently and thereby maximizing throughput over the network. Option C is correct because the COMPRESS parameter (e.g., COMPRESS=DATA_ONLY or ALL) reduces the size of the dump file set, which directly lowers the volume of bytes transferred across the network and shortens transfer time, especially for large Oracle databases. Option E is correct because NETWORK_LINK lets Data Pump read directly from the source database over a database link and write into the target database, eliminating the intermediate dump file on disk and the associated file transfer step, which is ideal for network-based migrations. Option B is not appropriate because running Data Pump jobs from a laptop on public Wi-Fi is unreliable and insecure, and omitting compression increases transfer volume. Option D is not appropriate because undo tablespaces are required for read consistency and transaction rollback during import; disabling them would break the import and is not a supported performance practice.

Answer

Execute all Data Pump jobs from a local laptop connected via public Wi-Fi without compression.

Answer

Disable database undo tablespaces entirely during the Data Pump import phase.

Question 11

When configuring DRG route tables and route distributions in OCI for hybrid connectivity, which TWO routing actions or concepts are supported? (Choose TWO)

Accepted Answer

Using route distributions to control which routes are imported into or exported from a DRG route table.. Option B is correct because OCI DRG route distributions are exactly the mechanism that governs route import and export behavior between a DRG route table and its attachments, letting you control which routes are learned (imported) or advertised (exported) for each attachment type. Option C is correct because DRG route tables can receive routes from FastConnect virtual circuits and IPSec VPN attachments, including both static routes you configure and dynamic routes learned via BGP, which are then used for hybrid path selection. Option A is wrong because OCI's DRG console has no capability to peer with or manipulate AWS VPC route tables; cross-cloud routing requires customer-managed gateways and BGP, not native DRG peering. Option D is wrong because 'orphaned route garbage collection' is not an OCI feature, and Internet Gateways do not participate in DRG route table management. Option E is wrong because a DRG cannot translate OCI VCN subnets into Azure subnets; there is no such DRG translation rule concept in OCI.

Answer

Automatically peering AWS VPC route tables directly from the DRG console.

Answer

Enabling Ophaned route garbage collection on Internet Gateways.

Answer

Converting OCI VCN subnets into Azure Subnets via DRG translation rules.

Question 12

Which TWO tools or interfaces can administrators use to manage Oracle Autonomous Database instances in OCI? (Choose two.)

Accepted Answer

OCI Command Line Interface (CLI) and REST APIs. Option D is correct because Oracle Autonomous Database is a fully managed OCI service whose lifecycle and management operations (such as scaling, starting/stopping, cloning, and viewing details) are exposed through the OCI Command Line Interface and the OCI REST APIs, which administrators can script and automate. Option E is correct because the OCI Console provides the web-based graphical interface where administrators can create, monitor, and manage Autonomous Database instances without writing code. The other options do not belong: A (floppy disk image uploads) is an obsolete local media method with no role in OCI cloud management, B (RDP to the Autonomous database hypervisor) is impossible because Oracle manages the infrastructure and customers have no hypervisor access, and C (physical serial console cable to Exadata rack blades) is not a customer-accessible management path in a managed cloud service.

Answer

Local floppy disk drive image uploads

Answer

Windows Remote Desktop Connection (RDP) to the Autonomous database hypervisor

Answer

Direct physical serial console cable attached to Exadata rack blades

Question 13

Which TWO logging and monitoring features in OCI are essential for maintaining comprehensive security audit trails and threat detection? (Choose two.)

Accepted Answer

OCI Audit service to capture all control plane API activities and resource modifications.. Option B is correct because the OCI Audit service automatically records all control plane API calls and resource modifications across the tenancy, providing an immutable, tamper-evident audit trail that is essential for security investigations and compliance. Option E is correct because the OCI Logging service ingests, stores, and analyzes log data from sources such as VCN flow logs and compute instances, enabling centralized visibility and threat detection across the environment. Option A is wrong because routing log data to unencrypted public FTP servers exposes sensitive audit information to interception and tampering, violating security best practices. Option C is wrong because disabling logging eliminates the audit trail entirely, making threat detection and compliance impossible. Option D is wrong because relying on user memory dumps is not a reliable or comprehensive audit mechanism and does not provide the continuous, structured logging required for security monitoring.

Answer

Routing all log data to unencrypted public FTP servers.

Answer

Disabling all logging services to save storage costs.

Answer

Relying solely on user memory dumps for audit compliance.

Question 14

During a migration cutover weekend, your team encounters unexpected DNS resolution failures preventing users from reaching the newly migrated OCI application endpoints. Which TWO immediate troubleshooting steps should you perform? (Choose two.)

Accepted Answer

Check OCI VCN DNS resolver settings and custom resolver forwarders if integrating with on-premises DNS.. Option A is correct because during a migration cutover, DNS resolution failures often stem from the OCI VCN resolver configuration — specifically the Internet and VCN Resolver settings, custom resolver endpoints, and forwarding rules used when integrating with on-premises DNS (e.g., via IPSec VPN or FastConnect). Verifying these ensures the VCN's resolver is correctly forwarding queries and resolving OCI-internal names. Option B is correct because the most common cutover issue is stale or incorrect public DNS records; you must confirm the A records (and CNAMEs) point to the new OCI Load Balancer public IP addresses and check TTL values, since high TTLs can cause clients to cache old records long after the cutover. Option C is irrelevant — changing tenant subscription currency from USD to EUR has no effect on DNS resolution. Option D is unrelated — reformatting backend database tables with SQL*Plus addresses data storage, not name resolution. Option E is destructive and nonsensical — deleting all OCI compartments and recreating the tenancy root would break the environment rather than troubleshoot DNS.

Answer

Change the tenant subscription currency from USD to EUR.

Answer

Reformat all backend database tables using SQL*Plus.

Answer

Delete all OCI compartments and recreate the tenancy root structure.

Question 15

When configuring an OCI Application Load Balancer (Layer 7) for high availability, which THREE settings or components must be properly configured? (Choose three.)

Accepted Answer

SSL/TLS certificates attached to HTTPS listeners if terminating secure traffic. Option C is correct because an OCI Layer 7 load balancer that terminates HTTPS traffic requires an SSL/TLS certificate attached to the HTTPS listener, which enables the load balancer to decrypt incoming requests and re-encrypt or forward them to backends as configured. Option D is correct because backend sets must be defined and associated with health checks so the load balancer can monitor backend instance responsiveness and route traffic only to healthy instances, which is essential for high availability. Option E is correct because listeners must be configured with the appropriate port and protocol (for example, HTTP on port 80 or HTTPS on port 443) so the load balancer can accept and process client traffic correctly. Option A is not required because OCI load balancers operate within the OCI VCN and do not need a direct physical connection to on-premises switches for high availability. Option B is not required because backend compute nodes do not need manual IP routing table modifications; OCI handles load balancer-to-backend routing through the VCN and backend set configuration.

Answer

A direct physical connection between the load balancer and on-premises switches

Answer

Manual IP routing table hacks on every backend compute node

Question 16

When configuring OCI Service Connector Hub to move logs from OCI Logging to OCI Object Storage, which THREE components must be defined?

Accepted Answer

Target (e.g., OCI Object Storage bucket). Option A (Target, e.g., OCI Object Storage bucket) is correct because Service Connector Hub requires a target resource to which the connector delivers the data, and for this scenario that target is an Object Storage bucket. Option D (Source, e.g., OCI Logging service) is correct because a service connector must specify the source service whose data it reads, here OCI Logging log groups. Option E (IAM policies granting the service connector permission to read from source and write to target) is correct because the Service Connector Hub service principal needs explicit IAM policy statements authorizing it to read from the Logging source and write to the Object Storage target. Option B is incorrect because Service Connector Hub is a fully managed OCI service that does not require any manual SSH tunnel between regions. Option C is incorrect because no OKE Kubernetes cluster or connector daemon is needed; the service runs as a managed OCI resource.

Answer

A manual SSH tunnel between the source and target regions

Answer

An active Kubernetes cluster in OKE to host the connector daemon

Question 17

Which THREE actions can be performed using OCI Cloud Guard to improve your cloud security posture? (Choose three.)

Accepted Answer

Trigger responder recipes to remediate detected security risks automatically or manually.. Option A is correct because Cloud Guard responder recipes define actions (such as stopping an instance, deleting a public bucket, or invoking a function) that can be triggered automatically or manually when a detector rule fires on a problem. Option C is correct because Cloud Guard continuously monitors tenancy resources against detector recipes that identify security misconfigurations, risky configurations, and policy violations across OCI services. Option E is correct because Cloud Guard aggregates detected problems into a security score for the tenancy, giving an at-a-glance measure of the overall cloud security posture. Option B is incorrect because Cloud Guard is an OCI-native service and does not patch kernel-level vulnerabilities on third-party on-premises servers. Option D is incorrect because point-to-point IPsec VPN tunneling between VCNs is provided by OCI VPN Connect/FastConnect or DRG-based connectivity, not by Cloud Guard.

Answer

Automatically patch kernel-level vulnerabilities on third-party on-premises servers.

Answer

Provide point-to-point IPsec VPN tunneling between VCNs.

Question 18

Which THREE strategies are recommended when planning a large-scale database migration (exceeding 100 TB) from on-premises to Exadata Database Service on Dedicated Infrastructure with minimal downtime? (Choose three.)

Accepted Answer

Leveraging Transportable Tablespaces (TTS) combined with RMAN cross-platform conversion. Option A is correct because Transportable Tablespaces (TTS) with RMAN cross-platform conversion moves datafiles at the physical level, avoiding the slow row-by-row logical extraction that would be impractical for 100 TB, and RMAN's CONVERT DATAFILE handles endianness/platform differences efficiently. Option B is correct because Oracle Zero Downtime Migration (ZDM) physical migration workflows are purpose-built for large on-premises-to-Exadata/ODA moves, orchestrating Data Guard-based synchronization and automated cutover to keep downtime minimal. Option E is correct because configuring Oracle Data Guard or Oracle GoldenGate for ongoing delta synchronization lets the bulk copy happen while changes continue to be applied, so only a brief final switchover is needed at cutover. Option C is not recommended because unencrypted FTP over the public internet is insecure and unreliable for 100 TB of database files. Option D is not recommended because exporting 100 TB into a single plaintext SQL script via SQL Developer is a logical, serialized, and insecure approach that would take far too long and cannot meet minimal-downtime requirements.

Answer

Copying database files across the public internet using standard FTP without encryption

Answer

Exporting the entire 100 TB database into a single plaintext SQL script using SQL*Developer

Question 19

An enterprise is designing a comprehensive cost observability and governance strategy in OCI. Which THREE practices or features should be implemented?

Accepted Answer

Enforce defined tags for resource creation using IAM policy conditions or tag defaults.. Option B is correct because enforcing defined tags via IAM policy conditions (e.g., request.tag.definedTag) or tag defaults ensures consistent cost allocation and governance across compartments and resources. Option C is correct because OCI Cost Analysis provides dashboards and filtering to analyze spending trends and detect cost anomalies by service, compartment, or tag. Option D is correct because OCI Budgets support alert rules on both actual spend and forecasted spend, enabling proactive governance before thresholds are breached. Option A is incorrect because VCN flow logs capture network traffic metadata, not billing data, and Logging Analytics does not calculate OCI infrastructure charges. Option E is incorrect because APM Java agents monitor application performance, not block volume storage encryption costs, and encryption at rest is included in OCI storage pricing.

Answer

Route all VCN flow logs through OCI Logging Analytics to calculate cloud infrastructure billing.

Answer

Install APM Java agents on all block storage volumes to track storage encryption costs.

Question 20

When designing a disaster recovery plan using OCI Full Stack Disaster Recovery (FSDR), which THREE resource types can be managed and orchestrated within a DR Protection Group? (Choose three.)

Accepted Answer

OCI Load Balancers and Network Load Balancers. OCI Full Stack Disaster Recovery (FSDR) DR Protection Groups support several OCI resource types that can be added as members and orchestrated during switchover/failover. Option A is correct because OCI Load Balancers and Network Load Balancers are supported member types that FSDR can manage as part of the DR plan. Option B is correct because Oracle Base Database and Exadata Database Service systems are supported members, allowing FSDR to orchestrate database-level DR operations. Option C is correct because OCI Compute instances, along with their attached boot and block volumes, are supported members that FSDR can move and start in the standby region. Option D is not correct because KMS Vault encryption keys are not a manageable member type in a DR Protection Group; key replication is handled separately via KMS key replication, not FSDR orchestration. Option E is not correct because IAM global policies are account-wide and not a regional resource that can be added to or orchestrated by a DR Protection Group.

Answer

OCI Key Management service Vault encryption keys

Answer

OCI Identity and Access Management (IAM) global policies