1Z0-997-26 Observability Practice Test 2 — 15 Questions

Question 1

You want to monitor the availability of a public-facing corporate web application from multiple global locations outside of OCI. Which OCI service provides this capability?

Accepted Answer

OCI Health Checks. OCI Health Checks service provides ping and HTTP/HTTPS monitors to check the availability and performance of public endpoints from external vantage points.

Answer

OCI Logging Analytics

Answer

OCI Network Firewall

Answer

OCI APM Synthetic Monitoring

Question 2

You want to track API calls made by a specific user who deleted a critical production database in OCI. Which OCI service log should you examine?

Accepted Answer

OCI Audit Log. OCI Audit service logs all API calls, recording who did what, when, and from which IP address.

Answer

OCI VCN Flow Log

Answer

OCI APM Transaction Log

Answer

OCI Database Alert Log

Question 3

An OCI administrator wants to ingest application logs stored in an Object Storage bucket into OCI Logging Analytics for complex log searching and parsing. What is the recommended way to ingest these logs?

Accepted Answer

Configure an Object Storage source in OCI Logging Analytics to automatically discover and ingest log files from the bucket.. OCI Logging Analytics provides native Object Storage log ingestion capabilities where you can configure ingestion rules to pull and parse logs from designated Object Storage buckets.

Answer

Write a custom Python script using OCI SDK to read the bucket and insert logs into Logging Analytics via REST API.

Answer

Mount the Object Storage bucket as a file system using OCI File Storage Service and install the Logging Agent.

Answer

Use OCI Streaming to stream bucket objects directly to the Logging Analytics console.

Question 4

An administrator is setting up composite alarms in OCI Monitoring. They want an alarm to trigger ONLY if both Database CPU utilization is above 90% AND Application latency is above 500ms simultaneously. How should this be implemented?

Accepted Answer

Create two separate alarms and define an OCI Monitoring Composite Alarm using the logical AND operator.. OCI Monitoring supports Composite Alarms, which allow combining multiple individual metric alarms using boolean operators (AND, OR, NOT).

Answer

Configure an OCI Notifications service topic subscription with a logical filter rule.

Answer

Use OCI Events service with a custom JSON payload condition.

Answer

Create a single standard alarm with a compound mathematical metric expression joining CPU and latency.

Question 5

You are troubleshooting a networking issue where virtual machines in a private subnet cannot communicate with an external endpoint over the internet. You suspect security lists or network security groups might be dropping the packets. Which OCI observability feature can help verify whether packets are being accepted or rejected at the VNIC level?

Accepted Answer

OCI VCN Flow Logs. OCI VCN Flow Logs record accepted and rejected traffic flowing through VNICs, helping troubleshoot security list and NSG rules.

Answer

OCI Health Checks ping monitors

Answer

OCI Monitoring service VNIC packet counters

Answer

OCI Network Firewall system logs

Question 6

Your enterprise tenancy has hundreds of compartments. You need to ensure that any newly created compute instance across any compartment automatically has the OCI Logging Agent configured to ship system logs. Which feature should you implement?

Accepted Answer

Enable the Management Agent plugin via OCI Compute Instance Configurations and IAM tenancy-level policies.. OCI Agent Management and Cloud Agent framework, combined with Dynamic Groups and IAM policies, can automatically manage and enable plugins like the Logging Agent across compute instances.

Answer

Configure a Service Connector Hub rule to push agent binaries to new instances upon creation.

Answer

Rely on default OCI Monitoring service metric collection, which automatically collects guest OS log files without agents.

Answer

Create an OCI Events rule for instance creation that triggers a Resource Manager stack to install the agent via SSH.

Question 7

An organization wants to monitor their cloud spend trends and receive a weekly email summary of top spending services without manually logging into the OCI Console. Which OCI feature can accomplish this?

Accepted Answer

OCI Cost Analysis Scheduled Reports. OCI Cost Analysis supports scheduled reports that can be exported or emailed regularly to stakeholders.

Answer

OCI Events service scheduled triggers

Answer

OCI Audit log exports

Answer

OCI Monitoring service billing alarms

Question 8

Your security operations team wants to identify log anomalies, such as sudden spikes in failed SSH login attempts across your OCI Compute fleet, without manually writing complex regex queries. Which Logging Analytics feature leverages machine learning to automatically group and identify patterns in logs?

Accepted Answer

Logging Analytics Cluster and Link commands. OCI Logging Analytics features ML-driven cluster analysis, which automatically groups similar log records together to highlight patterns and anomalies.

Answer

OCI Service Connector Hub pattern matching

Answer

OCI Cloud Guard Threat Detector rules

Answer

OCI APM Anomaly Detection agent

Question 9

An enterprise application running on OCI is instrumented with the OCI APM Java agent. Developers notice that certain sensitive header tokens and credit card numbers are appearing in trace spans. How can they prevent sensitive data from being collected by the APM agent?

Accepted Answer

Configure APM Data Masking rules or agent configuration properties to exclude or scrub sensitive attributes.. OCI APM supports data masking and filtering rules to scrub sensitive information such as passwords, tokens, and PII from trace spans before they are sent to the APM domain.

Answer

Set up an OCI Vault encryption key to automatically encrypt span attribute strings in transit.

Answer

Configure IAM policies to redact payload strings at the APM domain boundary.

Answer

Modify the OCI Monitoring alarm expression to filter out PII strings.

Question 10

You need to export OCI Audit logs to a third-party SIEM tool (such as Splunk or Elastic) in real-time. Which OCI architecture is best suited for this requirement?

Accepted Answer

Use OCI Service Connector Hub to route logs from OCI Audit to OCI Streaming or Object Storage for SIEM consumption.. OCI Service Connector Hub can stream Audit logs directly to OCI Streaming, which can then be consumed by third-party SIEM integrations.

Answer

Schedule an OCI Resource Manager job to FTP log files every night.

Answer

Install the OCI Logging Agent directly on the OCI Audit service control plane.

Answer

Configure OCI Health Checks to poll the Audit API.

Question 11

When configuring alarms in OCI Monitoring, which THREE parameters or settings must be specified?

Accepted Answer

Evaluation window (time interval and period). Creating an OCI Monitoring alarm requires defining the metric namespace and name, the evaluation window/period, and the threshold condition.

Answer

OCI Vault Master Encryption Key OCID

Answer

Virtual Cloud Network (VCN) CIDR block

Question 12

Which TWO of the following services are native components of the Oracle Cloud Infrastructure Observability and Management platform?

Accepted Answer

OCI Application Performance Monitoring (APM). OCI Logging Analytics and OCI Application Performance Monitoring (APM) are core services within the OCI Observability and Management suite.

Answer

OCI Autonomous Database

Answer

OCI Container Engine for Kubernetes

Answer

OCI File Storage Service

Question 13

You are managing a multi-tenancy OCI architecture where cost allocation is critical. Certain shared infrastructure resources (such as shared VCN NAT Gateways and Object Storage transfer buckets) generate shared costs. How can you allocate these shared costs across different child compartments using OCI Cost Analysis?

Accepted Answer

Use OCI Cost Analysis Cost Distribution Rules to proportionally allocate shared costs based on defined tags.. OCI Cost Analysis supports cost distribution rules (or proportional splitting based on defined tags or consumption metrics) to allocate shared costs across compartments.

Answer

Attach IAM permission tags to shared resources to automatically split charges at the bank level.

Answer

Write custom OCI Monitoring metric alarms that automatically credit compartments when shared resources are used.

Answer

Manually split CSV invoice files in Excel after downloading monthly Cost Reports.

Question 14

An administrator wants to set up automated remediation when an OCI Monitoring alarm is triggered for high CPU utilization on a database. Specifically, they want a serverless function to execute to scale up resources. Which OCI service acts as the bridge to trigger the function upon alarm firing?

Accepted Answer

OCI Notifications Service. OCI Notifications service can invoke OCI Functions as a subscriber to an alert topic, enabling serverless event-driven remediation.

Answer

OCI Service Connector Hub

Answer

OCI API Gateway

Answer

OCI Events Service

Question 15

An enterprise is designing a comprehensive cost observability and governance strategy in OCI. Which THREE practices or features should be implemented?

Accepted Answer

Enforce defined tags for resource creation using IAM policy conditions or tag defaults.. Effective OCI cost governance involves enforcing defined tags for attribution, using Budgets with forecast alerts, and leveraging Cost Analysis for trend monitoring.

Answer

Route all VCN flow logs through OCI Logging Analytics to calculate cloud infrastructure billing.

Answer

Install APM Java agents on all block storage volumes to track storage encryption costs.