1Z0-997-26 Workload Migration Practice Test 2 — 15 Questions

Question 1

You are leading a multi-cloud migration project where 200 virtual machines from an on-premises data center are being assessed for migration to OCI. You have deployed the OCI Migration discovery agent, but some Linux VMs are failing inventory collection due to SSH authentication failures and lack of root privileges. How should you resolve this issue without compromising security?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Create a dedicated migration user account on each Linux VM, grant passwordless sudo access for the specific discovery commands, and distribute the OCI Migration SSH key pair to that user.. The OCI Migration discovery agent needs SSH access to Linux VMs to inventory packages, services, and configurations. The secure best practice is to create a dedicated, least-privilege migration user, grant passwordless sudo only for the specific discovery commands (via a sudoers entry), and deploy the OCI Migration SSH key pair to that user. This avoids sharing root credentials, avoids plaintext passwords, and limits the blast radius if the key is compromised.

Answer

Grant root access directly to the default 'opc' user across all on-premises enterprise Linux servers via group policy objects.

Answer

Disable password authentication globally on all target VMs and configure the OCI Migration appliance with the root password in plain text.

Answer

Switch the OCI Migration discovery mechanism from agent-based SSH to agentless SNMPv1 polling across the internal firewall.

Question 2

Your organization is migrating a 3-tier web application running on VMware vSphere to OCI Compute. The application requires exact operating system configurations, strict security policies, and custom kernel modules. You want to automate the migration process while maintaining network consistency. Which migration approach is most suitable?

Accepted Answer

Migrate the workloads to Oracle Cloud VMware Solution (OCVS) using VMware HCX for seamless live migration without altering the hypervisor layer or guest OS configurations.. Oracle Cloud VMware Solution (OCVS) provides a native VMware SDDC environment in OCI, including vSphere, vSAN, and NSX-T, so existing VMs can be migrated without modifying the guest OS, kernel modules, or security policies. VMware HCX enables live migration (vMotion, cold, and bulk) with network extension, preserving IP addresses and network consistency. This is the only option that maintains the exact OS configurations and hypervisor layer while automating the migration.

Answer

Deploy new bare metal instances in OCI and use rsync to copy the root file systems over a secure IPsec VPN tunnel.

Answer

Rebuild the application from scratch using Terraform and OCI Resource Manager, then redeploy application binaries.

Answer

Export each virtual machine as a VMDK file, upload it to OCI Object Storage, and import it as a generic OCI custom image using the CLI.

Question 3

An enterprise is planning to migrate a large on-premises Oracle Database of 15 TB to Oracle Cloud Infrastructure (OCI) Exadata Database Service. The maintenance window for the final cutover is extremely short (less than 2 hours). Which migration method should you recommend to minimize application downtime?

Accepted Answer

Set up an Oracle Data Guard standby database in OCI from an on-premises primary database using RMAN duplication over FastConnect, then perform a switchover during the maintenance window.. Oracle Data Guard with an OCI standby built via RMAN duplication over FastConnect keeps the standby continuously synchronized with the on-premises primary. During the short maintenance window, a switchover promotes the OCI standby to primary in minutes, achieving minimal downtime. This is the standard Oracle-recommended approach for large databases with tight cutover windows.

Answer

Use Oracle Database Actions to export all schemas to a local staging server and import them into the new database.

Answer

Migrate the database using OCI Database Migration service with a standard full database backup without incremental backups.

Answer

Perform a cold backup on-premises, upload it to OCI Object Storage, and restore it using RMAN during the maintenance window.

Question 4

An administrator needs to transfer 80 TB of unstructured file backup data from an on-premises Network Attached Storage (NAS) device to OCI Object Storage. The available internet bandwidth is only 50 Mbps, which would take months to upload. Which OCI service should be utilized to complete this physical migration efficiently?

Accepted Answer

OCI Data Transfer Service using physical Data Transfer Appliances.. OCI Data Transfer Service using physical Data Transfer Appliances is designed for exactly this scenario: moving very large datasets (tens to hundreds of TB) when internet bandwidth is insufficient. You copy data to an encrypted appliance, ship it to Oracle, and Oracle uploads it to Object Storage, bypassing the 50 Mbps bottleneck entirely.

Answer

OCI FastConnect with a dedicated 1 Gbps partner circuit.

Answer

OCI Storage Gateway deployed on an edge server compressing and streaming over the 50 Mbps line.

Answer

Parallelized multi-part uploads using the OCI CLI over public internet connections.

Question 5

You are migrating a custom web application from an on-premises Linux server to OCI Compute. The application is packaged as a standard Docker container. Your management wants to avoid managing underlying operating systems, kernel patching, and VM scaling. Which OCI service should you select for this containerized workload migration?

Accepted Answer

OCI Container Instances. OCI Container Instances is a serverless compute service that runs containers directly without requiring you to manage the underlying host OS, kernel patching, or VM scaling. It is purpose-built for running single containers or small groups of tightly coupled containers, making it the ideal fit for migrating a standard Docker container with minimal operational overhead. Unlike OKE, it abstracts away the Kubernetes control plane and worker nodes, so you don't manage any cluster infrastructure. This directly satisfies the requirement to avoid OS management and VM scaling.

Answer

OCI Functions

Answer

Oracle Container Engine for Kubernetes (OKE)

Answer

OCI Compute Standard virtual machine instances

Question 6

Your organization is designing a disaster recovery strategy as part of a workload migration project to OCI. The business requirement states that in the event of a regional outage in OCI region A, workloads must fail over to OCI region B with a Recovery Point Objective (RPO) of zero and a Recovery Time Objective (RTO) of less than 15 minutes. Which OCI networking feature should you deploy to interconnect the two regions for database replication?

Accepted Answer

OCI Dynamic Routing Gateway (DRG) with Remote Peering Connection (RPC). A DRG attached to VCNs in both regions, connected via a Remote Peering Connection (RPC), provides private, low-latency, high-bandwidth interconnect between OCI regions over Oracle's backbone. This is the standard OCI mechanism for cross-region database replication (e.g., Data Guard, GoldenGate) needed to achieve RPO=0 and RTO<15 minutes. RPC traffic stays on Oracle's private network, avoiding public internet variability that would jeopardize the aggressive RTO.

Answer

OCI Local Peering Gateway (LPG)

Answer

OCI Service Gateway

Answer

OCI Internet Gateway with IPsec VPN tunnels over the public internet

Question 7

Your company is migrating a large PostgreSQL database from AWS RDS to OCI Database with PostgreSQL. The database is 4 TB in size, and write operations continue 24/7. To ensure zero data loss and minimal downtime during cutover, which migration strategy should you employ?

Accepted Answer

Configure PostgreSQL logical replication (or use OCI GoldenGate / DMS equivalents) to stream ongoing transaction logs after performing an initial consistent dump and restore.. Logical replication (or OCI GoldenGate/DMS) performs an initial consistent dump and restore, then continuously streams transaction logs from the source to the target, keeping the OCI database in sync with near-zero data loss. At cutover, you stop writes briefly, apply remaining changes, and redirect the application — achieving zero data loss and minimal downtime. This is the standard approach for large, continuously written databases.

Answer

Establish AWS Direct Connect to OCI FastConnect and mount an AWS EBS volume directly to an OCI VM running PostgreSQL.

Answer

Take an AWS RDS snapshot, download the snapshot files via AWS CLI, and restore them onto an OCI Compute instance running PostgreSQL.

Answer

Stop the application writes, take a pg_dump file, transfer it via SCP, and restore it into OCI during a scheduled 12-hour outage window.

Question 8

Your engineering team is troubleshooting an issue where migrated Linux virtual machines in OCI are experiencing severe disk I/O performance bottlenecks. The instances were migrated using raw block-level cloning from on-premises SAN storage. The volumes in OCI are provisioned as Lower Cost (Balanced) block volumes. What action should you take to resolve the performance bottleneck while maintaining data integrity?

Accepted Answer

Modify the OCI block volume performance tier or increase the assigned Volume Performance Units (VPUs) per GB.. Lower Cost (Balanced) block volumes deliver a baseline of 10 VPUs per GB, which caps IOPS and throughput well below what a migrated SAN-backed workload typically expects. OCI lets you change a volume's performance tier or increase its VPUs per GB online without detaching or reformatting, so the data and file system remain intact while I/O limits rise. This directly resolves the bottleneck while preserving data integrity.

Answer

Format the attached block volumes with ext3 file systems instead of ext4.

Answer

Recreate the virtual machines using denser AMD compute shapes with local NVMe storage.

Answer

Attach an OCI File Storage Service (FSS) mount target as the primary root volume.

Question 9

During a lift-and-shift migration planning phase, your team needs to estimate the monthly running costs of various OCI Compute shapes, block storage volumes, and egress data transfer fees before provisioning resources. Which OCI tool should you use to generate this detailed cost breakdown?

Accepted Answer

OCI Cost Estimator. OCI Cost Estimator is a free, web-based planning tool that lets you model a full OCI environment — Compute shapes, Block Volume capacity/performance tiers, Object Storage, and outbound data transfer — and produces a detailed monthly cost breakdown before any resources are provisioned. It is purpose-built for pre-provisioning TCO/ROI analysis and lift-and-shift sizing exercises, and it can export the estimate to a spreadsheet for stakeholder review.

Answer

OCI Budgets and Alerts

Answer

OCI Resource Manager

Answer

OCI Migration Asset Inventory dashboard

Question 10

An organization is preparing to migrate 500 virtual machines to OCI. To govern resource creation, budget allocation, and access control effectively, how should the OCI tenancy be structured prior to starting resource migrations?

Accepted Answer

Create a structured hierarchy of compartments (e.g., Prod, Non-Prod, Networking) beneath the root tenancy and apply least-privilege IAM policies to each compartment.. OCI governance is built on a compartment hierarchy under the tenancy root, with IAM policies attached at the compartment level to grant least-privilege access. Creating a structured hierarchy such as Prod, Non-Prod, and Networking before migration lets you apply budgets, quotas, and policies consistently as resources are onboarded. This is the foundational step for governing 500 VMs at scale.

Answer

Deploy all migrated virtual machines into the tenancy root compartment with a single administrator policy.

Answer

Create a separate OCI tenancy for every single virtual machine being migrated.

Answer

Rely entirely on tags without creating compartments or IAM policies.

Question 11

Your organization has completed migrating a database to OCI Base Database Service. To ensure compliance with corporate data protection policies, you must verify that all database backups stored in OCI Object Storage are automatically encrypted using customer-managed encryption keys. Where should you configure this key management integration?

Accepted Answer

OCI Vault service (Key Management). OCI Base Database Service integrates with OCI Vault (Key Management) to allow customer-managed encryption keys (CMKs) for backups stored in Object Storage. When you configure the database's backup destination to use a customer-managed key, the service automatically encrypts backups with that key. This ensures compliance with policies requiring customer-controlled encryption rather than Oracle-managed keys.

Answer

OCI Database Migration service connection profiles

Answer

OCI Audit log configuration

Answer

OCI Identity and Access Management (IAM) password policies

Question 12

An enterprise is migrating a legacy Java application that requires sticky sessions and complex path-based routing rules to OCI. The migration plan requires zero dropped connections during backend server updates. Which OCI Load Balancer configuration feature should you implement?

Accepted Answer

Configure backend server draining with a specified timeout period in the backend set.. Backend server draining (connection draining) in an OCI Load Balancer backend set lets in-flight requests complete before a backend is removed from rotation, which is exactly what prevents dropped connections during backend updates. You configure it per backend set with a drain timeout, and the load balancer stops sending new requests to the draining backend while allowing existing sessions to finish.

Answer

Enable IP Hash load balancing policy without health checks.

Answer

Use OCI Web Application Firewall (WAF) rate limiting rules to drop incoming traffic during maintenance.

Answer

Configure a Layer 4 TCP Network Load Balancer with TCP session persistence disabled.

Question 13

You are migrating a multi-tier web application to OCI. The web tier consists of Apache HTTP servers that need to be auto-scaled based on CPU utilization. Which combination of OCI services should you configure to achieve automated horizontal scaling?

Accepted Answer

OCI Instance Pools and OCI Auto-Scaling Configurations. OCI Instance Pools let you manage a group of identical compute instances as a single entity, and Auto-Scaling Configurations define scaling policies (e.g., CPU utilization thresholds) that automatically adjust the pool size. Together they provide horizontal auto-scaling for the web tier based on CPU metrics. This is the native OCI solution for automated horizontal scaling.

Answer

OCI Resource Manager and Terraform apply schedules

Answer

OCI Events Service and OCI Notifications triggered by Object Storage uploads

Answer

OCI Cloud Guard and OCI Vulnerability Scanning

Question 14

You are planning the network cutover for a large-scale migration to OCI. The on-premises data center is connected to OCI via an OCI FastConnect circuit configured with private virtual circuits. During cutover, DNS records must be updated so that client traffic resolves to OCI load balancers. Which OCI service should you use to manage internal and external DNS authoritative resolution smoothly?

Accepted Answer

OCI DNS (Public and Private Zones). OCI DNS provides both public and private authoritative zones, allowing you to manage internal and external name resolution from a single service during cutover. It integrates with the VCN resolver so private zones resolve inside OCI while public zones serve external clients, making it the right tool for updating DNS records to point at OCI load balancers.

Answer

OCI API Gateway

Answer

OCI Traffic Management Steering

Answer

OCI Network Firewall

Question 15

During a database migration project using Oracle Zero Downtime Migration (ZDM), the pre-migration validation phase fails with an error indicating that the source database's time zone file version does not match the target OCI Database service time zone file version. How should you resolve this issue?

Accepted Answer

Use the DBMS_DST package on the source database to update the time zone file version to match the target database before restarting the ZDM workflow.. The DBMS_DST package is Oracle's supported mechanism for updating a database's time zone file version. When ZDM pre-migration validation detects a mismatch between source and target time zone file versions, the correct remediation is to upgrade the source database's DST version to match or exceed the target using DBMS_DST (typically via DBMS_DST.BEGIN_PREPARE, BEGIN_UPGRADE, and related procedures). This ensures data consistency for TIMESTAMP WITH TIME ZONE columns and allows the physical migration to proceed without errors.

Answer

Manually downgrade the OCI Database service time zone binaries using root OS access.

Answer

Modify the ZDM response file parameter `SKIP_DST_CHECK=TRUE` to bypass the validation check.

Answer

Restart the ZDM migration job using the logical migration workflow instead of the physical workflow.