1Z0-997-26 Observability — 30 Questions

Question 1

An enterprise is designing a cost observability architecture in OCI. They want to attribute cloud spend dynamically to different business units based on resource metadata tags, and they need historical trend analysis with anomaly detection. Which combination of features and tools provides the most robust solution?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Use OCI Cost Analysis with defined tags, export Cost Reports to Object Storage, and configure Budgets with alert rules.. OCI Cost Analysis, Cost Reports, and Budgets combined with Defined Tags provide the best mechanism for tracking, forecasting, and attributing costs across business units.

Answer

Use Logging Analytics custom parsers on generated invoice PDFs stored in Object Storage.

Answer

Use native OCI Tag Defaults and OCI Monitoring alarms on the 'Billing' metric namespace.

Answer

Deploy OCI APM Java agents to every compute node and query the JVM memory usage to estimate spend.

Question 2

A DevOps engineer wants to monitor custom application metrics (such as active shopping cart count) emitted by microservices running on OCI Container Engine for Kubernetes (OKE). Which OCI service provides the necessary API to ingest and query these custom metrics?

Accepted Answer

OCI Monitoring Service. OCI Monitoring service provides metrics ingestion and querying APIs that allow developers to publish custom metrics using the Monitoring API or StatsD protocols.

Answer

Events Service

Answer

OCI Logging Analytics

Answer

Application Performance Monitoring (APM)

Question 3

Your company requires all logs generated within the root compartment to be automatically archived to a centralized OCI Object Storage bucket in a different security tenancy for compliance purposes. Which OCI feature facilitates this serverless data pipeline?

Accepted Answer

OCI Service Connector Hub. OCI Service Connector Hub enables seamless, serverless movement of data between OCI services, such as streaming logs from OCI Logging to Object Storage or Streaming.

Answer

OCI Data Flow

Answer

OCI GoldenGate

Answer

OCI Archive Storage lifecycle rules

Question 4

An administrator wants to analyze log data collected from various OCI resources by running complex SQL-like queries and creating visualization dashboards. Which OCI service is designed for this purpose?

Accepted Answer

OCI Logging Analytics. OCI Logging Analytics provides powerful log exploration, parsing, ML-driven clustering, and SQL-like query capabilities for deep log analysis.

Answer

OCI Audit Service

Answer

OCI Health Checks

Answer

OCI Object Storage

Question 5

An application architect is troubleshooting intermittent latency spikes in a distributed microservices application deployed across multiple OCI regions. Which OCI capability should be used to trace requests end-to-end across service boundaries?

Accepted Answer

OCI Application Performance Monitoring (APM) Distributed Tracing. OCI Application Performance Monitoring (APM) provides distributed tracing, capturing the end-to-end journey of requests across complex microservice architectures.

Answer

OCI Network Visualizer

Answer

OCI Logging Analytics with out-of-the-box system parsers

Answer

OCI Monitoring service anomaly detection

Question 6

You are designing an alerting strategy in OCI Monitoring. You want to avoid alert storms by ensuring that if a metric fluctuates above a threshold repeatedly, the alarm notification is sent only once every 30 minutes until the condition clears. How should you configure this?

Accepted Answer

Configure the 'Repeat Notification' setting in the OCI Monitoring alarm definition to 30 minutes.. OCI Monitoring alarms support configuring the 'Repeat notification' interval or suppression/cooldown configurations to control how often alerts are re-sent.

Answer

Set the alarm evaluation window to 30 minutes and enable metric smoothing.

Answer

Create an OCI Events rule with a batch window of 30 minutes.

Answer

Configure a notification suppression window in the Notifications service topic settings.

Question 7

An Oracle Cloud Infrastructure (OCI) Administrator needs to collect log data from custom applications running on Compute instances. Which OCI service should be configured to ship these logs to OCI Logging?

Accepted Answer

OCI Logging Agent. The OCI Logging Agent is a unified agent that can be installed on Compute instances (both Linux and Windows) to collect custom log files and OS logs and forward them to OCI Logging.

Answer

OS Management Hub

Answer

OCI Service Connector Hub

Answer

OCI Streaming Service

Question 8

Your operations team needs to receive immediate notifications via PagerDuty and Slack whenever a high-severity alarm is triggered in OCI Monitoring. Which OCI service should be used as the intermediary to dispatch these notifications?

Accepted Answer

OCI Notifications Service. OCI Notifications service broadcasts messages to distributed endpoints such as HTTPS endpoints, PagerDuty, Slack, email, and SMS.

Answer

OCI API Gateway

Answer

OCI Streaming Service

Answer

OCI Events Service

Question 9

You want to monitor the health and performance of your Oracle Autonomous Database in OCI. Which built-in metric namespace in OCI Monitoring should you query?

Accepted Answer

oci_database. Oracle Database services in OCI publish their metrics to the oci_database namespace in the OCI Monitoring service.

Answer

oci_autonomous_metrics

Answer

oci_apm_metrics

Answer

oci_compute_infra

Question 10

You want to quickly visualize CPU utilization across 50 Compute instances on a single pane of glass without creating complex custom dashboards. Which OCI Monitoring feature allows you to view pre-packaged metrics grouped by resource?

Accepted Answer

OCI Metrics Explorer. OCI Monitoring provides Metrics Explorer, allowing users to query, filter, and visualize metrics across compartments and resources instantly.

Answer

OCI Logging Analytics Dashboards

Answer

OCI APM Dashboards

Answer

OCI Stack Monitoring

Question 11

An auditor requests a complete historical record of all console sign-ins, IAM policy modifications, and compartment deletions across your OCI tenancy for the past 365 days. Which OCI service provides this data natively?

Accepted Answer

OCI Audit Service. OCI Audit service records API calls for all OCI services. To retain logs beyond the default retention, they should be archived to Object Storage via Service Connector Hub.

Answer

OCI Events Service

Answer

OCI Cloud Guard Activity Tracking

Answer

OCI Logging Analytics

Question 12

Your organization has strict security policies requiring all log data in OCI Logging to be encrypted using a customer-managed encryption key (CMK) stored in OCI Vault. How should you implement this?

Accepted Answer

Assign a customer-managed master encryption key from OCI Vault to the Log Group in OCI Logging.. OCI Logging supports encrypting log groups using Customer-Managed Keys (CMK) from OCI Vault.

Answer

Configure the OCI Logging Agent on compute instances with local disk encryption enabled via IAM policies.

Answer

Attach the master encryption key directly to each individual log object stored in Object Storage.

Answer

Use OCI Streaming to intercept logs and apply customer-managed keys before writing to OCI Logging.

Question 13

An SRE team is configuring OCI Application Performance Monitoring (APM) synthetic monitoring. They need to run browser-based synthetic scripts periodically from multiple geographic locations to ensure user-facing login workflows function correctly. Which APM feature should they configure?

Accepted Answer

APM Synthetic Monitoring Browser Monitors using Dedicated Vantage Points. APM Synthetic Monitoring supports browser monitors that execute Selenium-based scripts from public or dedicated Vantage Points globally.

Answer

OCI Health Checks Ping Monitors

Answer

Logging Analytics synthetic agent extensions

Answer

OCI Monitoring service Synthetic Probes

Question 14

An enterprise wants to monitor an enterprise application stack consisting of Oracle WebLogic Server and Oracle Database, tracking their deep internal health metrics, resource utilization, and dependency topology. Which OCI service is specifically designed for full-stack enterprise application monitoring?

Accepted Answer

OCI Stack Monitoring. OCI Stack Monitoring provides out-of-the-box discovery and monitoring of enterprise application stacks, including Oracle databases, WebLogic servers, and underlying host infrastructure.

Answer

OCI Application Performance Monitoring (APM)

Answer

OCI Logging Analytics

Answer

OCI Monitoring Service

Question 15

Your organization has set strict budgets in OCI to monitor cloud expenditure. A finance team member needs to receive an alert when forecasted spending reaches 100% of the monthly budget. How should you configure this alert?

Accepted Answer

Configure an OCI Budget alert rule with threshold type set to 'FORECASTED' and threshold value set to 100.. OCI Budgets support alerts based on actual spend or forecasted spend. You can configure a threshold type of 'FORECASTED' with a percentage of 100.

Answer

Create an OCI Monitoring alarm on the Billing namespace with a metric expression for forecasted cost.

Answer

Use OCI Cost Analysis scheduled reports with an integrated SMTP relay.

Answer

Set up an OCI Events rule listening for billing threshold exceedance events.

Question 16

You want to monitor the availability of a public-facing corporate web application from multiple global locations outside of OCI. Which OCI service provides this capability?

Accepted Answer

OCI Health Checks. OCI Health Checks service provides ping and HTTP/HTTPS monitors to check the availability and performance of public endpoints from external vantage points.

Answer

OCI Logging Analytics

Answer

OCI Network Firewall

Answer

OCI APM Synthetic Monitoring

Question 17

You want to track API calls made by a specific user who deleted a critical production database in OCI. Which OCI service log should you examine?

Accepted Answer

OCI Audit Log. OCI Audit service logs all API calls, recording who did what, when, and from which IP address.

Answer

OCI VCN Flow Log

Answer

OCI APM Transaction Log

Answer

OCI Database Alert Log

Question 18

An OCI administrator wants to ingest application logs stored in an Object Storage bucket into OCI Logging Analytics for complex log searching and parsing. What is the recommended way to ingest these logs?

Accepted Answer

Configure an Object Storage source in OCI Logging Analytics to automatically discover and ingest log files from the bucket.. OCI Logging Analytics provides native Object Storage log ingestion capabilities where you can configure ingestion rules to pull and parse logs from designated Object Storage buckets.

Answer

Write a custom Python script using OCI SDK to read the bucket and insert logs into Logging Analytics via REST API.

Answer

Mount the Object Storage bucket as a file system using OCI File Storage Service and install the Logging Agent.

Answer

Use OCI Streaming to stream bucket objects directly to the Logging Analytics console.

Question 19

An administrator is setting up composite alarms in OCI Monitoring. They want an alarm to trigger ONLY if both Database CPU utilization is above 90% AND Application latency is above 500ms simultaneously. How should this be implemented?

Accepted Answer

Create two separate alarms and define an OCI Monitoring Composite Alarm using the logical AND operator.. OCI Monitoring supports Composite Alarms, which allow combining multiple individual metric alarms using boolean operators (AND, OR, NOT).

Answer

Configure an OCI Notifications service topic subscription with a logical filter rule.

Answer

Use OCI Events service with a custom JSON payload condition.

Answer

Create a single standard alarm with a compound mathematical metric expression joining CPU and latency.

Question 20

You are troubleshooting a networking issue where virtual machines in a private subnet cannot communicate with an external endpoint over the internet. You suspect security lists or network security groups might be dropping the packets. Which OCI observability feature can help verify whether packets are being accepted or rejected at the VNIC level?

Accepted Answer

OCI VCN Flow Logs. OCI VCN Flow Logs record accepted and rejected traffic flowing through VNICs, helping troubleshoot security list and NSG rules.

Answer

OCI Health Checks ping monitors

Answer

OCI Monitoring service VNIC packet counters

Answer

OCI Network Firewall system logs