1Z0-997-26 Workload Migration — 30 Questions

Question 1

An architect is planning the migration of a large enterprise application repository stored in an on-premises NFS filer to OCI. The application requires POSIX-compliant shared file storage accessible by multiple compute instances simultaneously across different availability domains. Which OCI storage service should be deployed?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

OCI File Storage Service (FSS). OCI File Storage Service (FSS) is the only OCI storage offering that provides POSIX-compliant, NFSv3 shared file systems that can be mounted concurrently by multiple compute instances, including instances in different availability domains within the same region. It is purpose-built for exactly this shared-filer migration scenario. Object and Archive Storage are HTTP-based object stores without POSIX semantics, and Block Volume is single-instance attached storage.

Answer

OCI Archive Storage

Answer

OCI Object Storage standard tier

Answer

OCI Block Volume service

Question 2

You are migrating a mission-critical multi-tier application from an on-premises data center to OCI. During the migration assessment phase, you identify that the application relies heavily on low-latency network communication (< 1ms round trip time) between the web tier and database tier. Which OCI architectural feature should you implement to satisfy this latency requirement?

Accepted Answer

Utilize OCI Compute Placement Groups with a 'Cluster' strategy or deploy instances within the same Fault Domain with a strict locality policy.. OCI Compute Placement Groups with the 'Cluster' strategy place instances physically close within a single Availability Domain, minimizing network latency (often sub-millisecond) between them. Deploying the web and database tiers in the same fault domain with a strict locality policy further reduces hops. This is the correct architectural choice for <1ms RTT requirements.

Answer

Use OCI Local Peering Gateways (LPGs) to connect different Virtual Cloud Networks (VCNs) containing the tiers.

Answer

Deploy the instances across different Availability Domains within the same OCI region.

Answer

Utilize OCI Compute Placement Groups with a 'Spread' strategy.

Question 3

Your company is executing a lift-and-shift migration of 50 physical servers running Red Hat Enterprise Linux (RHEL) to OCI. You want to ensure that the operating systems remain supported, patched, and entitled to Oracle Linux Premier Support without having to rebuild the servers. What conversion utility should you use?

Accepted Answer

Oracle Linux Upgrade and Conversion tool (using the `leapp` utility and Oracle Linux yum repositories). The Oracle Linux Upgrade and Conversion tool leverages the `leapp` utility to perform an in-place conversion of RHEL systems to Oracle Linux without rebuilding. It replaces Red Hat subscription packages with Oracle Linux equivalents and reconfigures yum repositories to point to Oracle's public yum servers, thereby granting access to Oracle Linux Premier Support. This is the only option that directly addresses OS-level conversion and entitlement for RHEL-to-Oracle Linux migrations on OCI.

Answer

VMware HCX OS conversion engine

Answer

OCI Database Migration service

Answer

OCI Instance Export/Import wizard

Question 4

Your team is executing a cutover plan for migrating a production Microsoft SQL Server database from an on-premises environment to OCI Compute running Windows Server. To ensure data integrity, you decide to use Always On Availability Groups with the on-premises primary and the OCI replica. After completing the initial seed and syncing the databases, you perform the failover. However, application servers in OCI cannot connect to the new primary database. What is the most likely root cause?

Accepted Answer

OCI VCN Security Lists or Network Security Groups block TCP port 1433 or the Availability Group listener port between the application tier subnet and the database subnet.. After a successful Always On Availability Group failover, the new primary replica listens on TCP port 1433 (default SQL Server port) and on the Availability Group listener port (default 1433 or a custom port). If application servers in OCI cannot connect, the most likely cause is that OCI VCN Security Lists or Network Security Groups are blocking traffic on those ports between the application subnet and the database subnet. Unlike on-premises environments where firewall rules may already be open, OCI's virtual cloud network enforces default-deny ingress, so explicit rules are required to allow SQL traffic.

Answer

SQL Server Enterprise Edition requires an active Azure ExpressRoute connection to validate cluster heartbeat packets.

Answer

OCI Compute instances running Windows do not support Windows Server Failover Clustering (WSFC).

Answer

OCI block volumes do not support Microsoft NTFS file systems, causing the database files to corrupt upon failover.

Question 5

During a database migration assessment from an on-premises Oracle Database (version 11.2.0.4) to OCI Base Database Service running Oracle Database 19c, you discover that the legacy database uses deprecated initialization parameters and character sets that are incompatible with 19c. How should you address this migration blocker?

Accepted Answer

Run the Pre-Upgrade Information Tool (utlu19i.sql) on the source database, remediate reported issues, upgrade the database binaries locally, and then migrate using Oracle Data Pump or RMAN.. Oracle's supported upgrade path from 11.2.0.4 to 19c requires running the Pre-Upgrade Information Tool (utlu19i.sql) to identify deprecated parameters, invalid objects, and character set issues, remediating them, upgrading the binaries, and then migrating via Data Pump or RMAN transportable techniques. This addresses the blocker at its root rather than trying to bypass version incompatibilities.

Answer

Perform a direct binary block-level copy of the 11.2.0.4 datafiles to OCI and start the 19c instance using the old parameter file.

Answer

Migrate the database to an OCI Autonomous Database directly, as Autonomous Database automatically converts any legacy version and character set on the fly.

Answer

Use OCI GoldenGate to stream the 11.2.0.4 data directly into a 19c target database without any schema adjustments.

Question 6

You are migrating an enterprise application that requires strict compliance and regulatory isolation. The application must run on dedicated physical hardware where no other customer's virtual instances can reside. Which OCI compute provisioning model should you choose?

Accepted Answer

OCI Dedicated VM Hosts. OCI Dedicated Virtual Host or Dedicated Compute Instances (Bare Metal or Dedicated VM Hosts) provide single-tenant hardware isolation where all VMs running on the host belong exclusively to a single tenant.

Answer

OCI Standard Multi-Tenant Compute Instances with high-density shapes

Answer

OCI Burstable Instances

Answer

OCI Container Instances

Question 7

Your team is planning to migrate virtual machines from an on-premises hypervisor to OCI Compute. You want to generate an automated report detailing resource utilization (CPU, memory, storage IOPS) over the past 30 days to right-size the target OCI instance shapes. Which OCI tool supports this discovery phase?

Accepted Answer

OCI Migration Discovery and Assessment. OCI Migration Discovery and Assessment is the tool designed to discover on-premises workloads, collect utilization metrics such as CPU, memory, and storage IOPS over a period, and generate reports that help right-size target OCI shapes. It supports the discovery phase of a migration by providing automated inventory and performance data. This directly matches the requirement to generate an automated 30-day utilization report for right-sizing.

Answer

OCI Cost Estimator

Answer

OCI Logging Analytics

Answer

OCI Database Migration Service

Question 8

You are executing a lift-and-shift migration of a multi-tier application where subnet IP addressing must remain identical to the on-premises environment due to hardcoded IP configurations in legacy software. How should you configure the OCI Virtual Cloud Network (VCN) to accommodate this requirement?

Accepted Answer

Configure the OCI VCN and subnets with the exact same CIDR block ranges as the on-premises network.. To preserve hardcoded on-premises IP addresses, the OCI VCN and its subnets must use the exact same CIDR ranges as the source network, so migrated VMs retain their addresses without reconfiguration. OCI allows any RFC 1918 (or even public) CIDR in a VCN as long as it does not overlap with other VCNs you intend to peer.

Answer

Use OCI Flexible Load Balancers configured in Layer 2 bridging mode.

Answer

Design the OCI VCN with disjoint RFC 1918 address space and use OCI NAT gateways to rewrite hardcoded IP addresses dynamically.

Answer

Deploy an OCI API Gateway in front of each virtual machine to proxy internal IP traffic.

Question 9

When planning a workload migration to OCI, what are TWO primary benefits of conducting a comprehensive discovery and assessment phase using tools like OCI Migration? (Choose two.)

Accepted Answer

Accurately right-sizing OCI compute and storage resources based on historical utilization metrics. Option A is correct because discovery and assessment tools such as OCI Migration collect historical CPU, memory, and storage utilization metrics from on-premises workloads, which lets you map each server to the most appropriate OCI compute shape and block volume size instead of guessing, avoiding both over-provisioning and performance shortfalls. Option E is correct because the same discovery process inventories installed software, network connections, and inter-server communication, revealing application dependencies so related servers can be grouped into logical migration waves and moved together without breaking multi-tier applications. Option B is not a migration-assessment capability; OCI Migration does not automatically translate COBOL into Python, which would require separate code-modernization tooling. Option C is a hardware-refresh activity unrelated to cloud migration planning, and Option D concerns on-premises facilities rather than any OCI discovery or assessment function.

Answer

Automatically rewriting legacy COBOL source code into modern Python applications

Answer

Physically replacing hard drives in on-premises servers before shipping them

Answer

Instantly upgrading on-premises cooling systems without cloud involvement

Question 10

Your enterprise is migrating several mission-critical applications to OCI and requires high availability and disaster recovery across multiple regions. Which THREE OCI architectural components should you configure to meet these requirements? (Choose three.)

Accepted Answer

Cross-region Database Data Guard or OCI GoldenGate replication. Option B is correct because Oracle Data Guard (for Autonomous Database/DB systems) and OCI GoldenGate provide asynchronous cross-region replication of database data, which is the foundation of a multi-region DR strategy with defined RPO/RTO. Option C is correct because Object Storage buckets can be configured with cross-region replication (or the newer replication policies) to automatically copy objects to a bucket in another region, protecting unstructured data and backups against regional failure. Option E is correct because a Dynamic Routing Gateway (DRG) attached to each VCN, joined by Remote Peering Connections (RPCs) over the OCI backbone, provides private, low-latency, encrypted connectivity between VCNs in different regions — essential for cross-region application tiers and replication traffic. Option A is not valid: a Block Volume is a zonal resource that can only be attached to instances in the same availability domain, and it cannot be simultaneously attached across two regions over iSCSI. Option D is not valid: hairpinning all regional traffic through a single legacy on-premises firewall in a third country introduces a single point of failure, adds latency, and defeats the purpose of multi-region high availability and DR.

Answer

Attaching a single Block Volume across two distinct OCI regions simultaneously over standard iSCSI

Answer

Routing all regional traffic through a single legacy on-premises firewall in a third country

Question 11

You are migrating a tiered enterprise application suite to OCI. Certain legacy components require specific static MAC addresses and direct layer 2 broadcast communication, which standard OCI virtual cloud networks (VCNs) do not support by default. Which THREE OCI architectural approaches or features can you utilize to solve this requirement? (Choose three.)

Accepted Answer

Deploy Oracle Cloud VMware Solution (OCVS), which provides a fully dedicated VMware SDDC environment supporting standard VLANs and layer 2 guest networking.. Option A is correct because Oracle Cloud VMware Solution (OCVS) deploys a dedicated, fully customer-managed VMware SDDC (vSphere, vSAN, NSX-T) on bare metal in OCI, where NSX-T provides standard VLAN-backed logical segments that carry layer 2 broadcast/multicast traffic and allow fixed MAC addresses, which a native OCI VCN cannot do. Option B is correct because OCI Bare Metal instances with SR-IOV expose physical NIC functions (VFs) directly to the guest, permitting layer 2 frames, custom MAC addressing, and broadcast behavior that paravirtualized VNICs do not support. Option D is correct because OCI allows you to assign a custom MAC address to a VNIC at creation time (and to secondary VNICs/private IPs), so legacy components needing specific static MACs can be satisfied within a VCN. Option C is not correct because a Load Balancer is a layer 4/7 traffic-distribution service; disabling TCP backend health checks does not create layer 2 broadcast domains or enable static MAC addressing. Option E is not correct because an Internet Gateway is a layer 3 NAT/routing construct for public IP connectivity and cannot bridge layer 2 broadcast domains, let alone across the public internet.

Answer

Enable OCI Load Balancer TCP termination without backend health checks.

Answer

Rely on standard OCI Internet Gateways to bridge layer 2 broadcast domains across the public internet.

Question 12

An enterprise is planning to migrate a large monolithic .NET application from on-premises VMware to Oracle Cloud Infrastructure (OCI). The database is Microsoft SQL Server Enterprise Edition, and the virtual machines require persistent shared block storage using NFS. Which combination of OCI services provides the most native and seamless lift-and-shift architecture?

Accepted Answer

OCI Compute, OCI Database with Microsoft SQL Server, and OCI File Storage Service (FSS). OCI Compute hosts the .NET VMs, OCI Database with Microsoft SQL Server provides a managed SQL Server Enterprise Edition service (including Always On availability groups), and OCI File Storage Service (FSS) delivers NFS-compatible shared block storage. This trio maps directly to the on-premises VMware + SQL Server + NFS stack with minimal refactoring.

Answer

Oracle Container Engine for Kubernetes (OKE), Autonomous Database, and OCI Object Storage

Answer

Oracle Zero Downtime Migration, OCI Exadata Database Service, and OCI Archive Storage

Answer

OCI Functions, MySQL HeatWave, and OCI Block Volume Service

Question 13

An architect is migrating a multi-tier enterprise web application from an on-premises data center to OCI using the Lift and Shift Migration tool. During the migration assessment phase, the migration agent reports that several source VMs have unsupported guest operating system kernels and specific block device partitioning that cannot be directly converted by the OCI Image Builder. What is the recommended remediation strategy before initiating the bulk instance migration?

Accepted Answer

Export the source VMs as custom VMDK/QCOW2 images, upload them to OCI Object Storage, and import them as OCI Custom Images to provision new instances.. When source VMs have unsupported kernels or partitioning that the OCI Lift and Shift tool cannot convert directly, the recommended remediation is to export the VMs as VMDK/QCOW2 images, upload them to OCI Object Storage, and import them as OCI Custom Images. This bypasses the tool's conversion limitations and lets you provision instances from the imported images.

Answer

Use Oracle Zero Downtime Migration to rewrite the kernel binary during the transition phase.

Answer

Deploy OCI Full Stack Disaster Recovery to automatically fix and patch the kernel partitions upon boot.

Answer

Convert the instances directly into OKE worker nodes using the OCI Migration Workbench.

Question 14

When planning a lift-and-shift migration of virtual machines from an on-premises VMware environment to OCI Compute, which THREE key readiness assessments must be performed prior to migration? (Choose three.)

Accepted Answer

Analyze CPU and memory utilization metrics to select appropriate OCI Compute shapes.. Successful VM migrations require verifying operating system compatibility, ensuring network/subnet mapping and firewall rules are aligned, and verifying that resource sizing (CPU/RAM) maps to available OCI VM shapes.

Answer

Convert all block storage volumes directly into OCI Autonomous Database instances.

Question 15

Your organization is migrating a critical Oracle Database to OCI Base Database Service. The database uses Transparent Data Encryption (TDE) with an on-premises Oracle Wallet. After migration, you need to ensure that TDE continues to work seamlessly. What should you do before the migration?

Accepted Answer

Export the TDE master encryption key from the on-premises wallet and import it into OCI Vault.. OCI Base Database Service uses OCI Vault for TDE key management. To maintain TDE, you must export the TDE master encryption key from the on-premises wallet and import it into OCI Vault before or during migration. This allows the database to decrypt data after migration.

Answer

Disable TDE on the source database before migration.

Answer

Use Oracle Data Pump to export the data and import it into a new database without TDE.

Answer

Copy the on-premises Oracle Wallet file to the OCI database server.

Question 16

You are leading a multi-cloud migration project where 200 virtual machines from an on-premises data center are being assessed for migration to OCI. You have deployed the OCI Migration discovery agent, but some Linux VMs are failing inventory collection due to SSH authentication failures and lack of root privileges. How should you resolve this issue without compromising security?

Accepted Answer

Create a dedicated migration user account on each Linux VM, grant passwordless sudo access for the specific discovery commands, and distribute the OCI Migration SSH key pair to that user.. The OCI Migration discovery agent needs SSH access to Linux VMs to inventory packages, services, and configurations. The secure best practice is to create a dedicated, least-privilege migration user, grant passwordless sudo only for the specific discovery commands (via a sudoers entry), and deploy the OCI Migration SSH key pair to that user. This avoids sharing root credentials, avoids plaintext passwords, and limits the blast radius if the key is compromised.

Answer

Grant root access directly to the default 'opc' user across all on-premises enterprise Linux servers via group policy objects.

Answer

Disable password authentication globally on all target VMs and configure the OCI Migration appliance with the root password in plain text.

Answer

Switch the OCI Migration discovery mechanism from agent-based SSH to agentless SNMPv1 polling across the internal firewall.

Question 17

Your organization is migrating a 3-tier web application running on VMware vSphere to OCI Compute. The application requires exact operating system configurations, strict security policies, and custom kernel modules. You want to automate the migration process while maintaining network consistency. Which migration approach is most suitable?

Accepted Answer

Migrate the workloads to Oracle Cloud VMware Solution (OCVS) using VMware HCX for seamless live migration without altering the hypervisor layer or guest OS configurations.. Oracle Cloud VMware Solution (OCVS) provides a native VMware SDDC environment in OCI, including vSphere, vSAN, and NSX-T, so existing VMs can be migrated without modifying the guest OS, kernel modules, or security policies. VMware HCX enables live migration (vMotion, cold, and bulk) with network extension, preserving IP addresses and network consistency. This is the only option that maintains the exact OS configurations and hypervisor layer while automating the migration.

Answer

Deploy new bare metal instances in OCI and use rsync to copy the root file systems over a secure IPsec VPN tunnel.

Answer

Rebuild the application from scratch using Terraform and OCI Resource Manager, then redeploy application binaries.

Answer

Export each virtual machine as a VMDK file, upload it to OCI Object Storage, and import it as a generic OCI custom image using the CLI.

Question 18

An enterprise is planning to migrate a large on-premises Oracle Database of 15 TB to Oracle Cloud Infrastructure (OCI) Exadata Database Service. The maintenance window for the final cutover is extremely short (less than 2 hours). Which migration method should you recommend to minimize application downtime?

Accepted Answer

Set up an Oracle Data Guard standby database in OCI from an on-premises primary database using RMAN duplication over FastConnect, then perform a switchover during the maintenance window.. Oracle Data Guard with an OCI standby built via RMAN duplication over FastConnect keeps the standby continuously synchronized with the on-premises primary. During the short maintenance window, a switchover promotes the OCI standby to primary in minutes, achieving minimal downtime. This is the standard Oracle-recommended approach for large databases with tight cutover windows.

Answer

Use Oracle Database Actions to export all schemas to a local staging server and import them into the new database.

Answer

Migrate the database using OCI Database Migration service with a standard full database backup without incremental backups.

Answer

Perform a cold backup on-premises, upload it to OCI Object Storage, and restore it using RMAN during the maintenance window.

Question 19

An administrator needs to transfer 80 TB of unstructured file backup data from an on-premises Network Attached Storage (NAS) device to OCI Object Storage. The available internet bandwidth is only 50 Mbps, which would take months to upload. Which OCI service should be utilized to complete this physical migration efficiently?

Accepted Answer

OCI Data Transfer Service using physical Data Transfer Appliances.. OCI Data Transfer Service using physical Data Transfer Appliances is designed for exactly this scenario: moving very large datasets (tens to hundreds of TB) when internet bandwidth is insufficient. You copy data to an encrypted appliance, ship it to Oracle, and Oracle uploads it to Object Storage, bypassing the 50 Mbps bottleneck entirely.

Answer

OCI FastConnect with a dedicated 1 Gbps partner circuit.

Answer

OCI Storage Gateway deployed on an edge server compressing and streaming over the 50 Mbps line.

Answer

Parallelized multi-part uploads using the OCI CLI over public internet connections.

Question 20

You are migrating a custom web application from an on-premises Linux server to OCI Compute. The application is packaged as a standard Docker container. Your management wants to avoid managing underlying operating systems, kernel patching, and VM scaling. Which OCI service should you select for this containerized workload migration?

Accepted Answer

OCI Container Instances. OCI Container Instances is a serverless compute service that runs containers directly without requiring you to manage the underlying host OS, kernel patching, or VM scaling. It is purpose-built for running single containers or small groups of tightly coupled containers, making it the ideal fit for migrating a standard Docker container with minimal operational overhead. Unlike OKE, it abstracts away the Kubernetes control plane and worker nodes, so you don't manage any cluster infrastructure. This directly satisfies the requirement to avoid OS management and VM scaling.

Answer

OCI Functions

Answer

Oracle Container Engine for Kubernetes (OKE)

Answer

OCI Compute Standard virtual machine instances