1Z0-997-26 Workload Migration Practice Test 3 — 15 Questions

Question 1

You are migrating a 50 TB Oracle Database from an on-premises Sun Solaris SPARC server to OCI Exadata Database Service on X9M hardware (Linux x86-64 architecture). Because the source and target platforms have different endianness and operating system architectures, standard RMAN backup restoration is not possible. Which migration strategy should you implement?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Use Transportable Tablespaces with RMAN `CONVERT DATAFILE` or Oracle Data Pump to transfer and convert data between different endian architectures.. Transportable Tablespaces (TTS) with RMAN CONVERT DATAFILE or Data Pump is the standard Oracle-supported method for cross-platform, cross-endian migration because it performs the required byte-order conversion of datafiles during transport. It moves only the tablespace data plus metadata rather than the entire database, and it is explicitly designed for heterogeneous source/target platforms such as Solaris SPARC (big-endian) to Linux x86-64 (little-endian).

Answer

Perform a cold OS-level tar/gzip copy of the Oracle home and data directories from Solaris to Linux.

Answer

Use OCI Zero Downtime Migration (ZDM) physical offline migration mode without endian conversion parameters.

Answer

Take an RMAN incremental backup on Solaris SPARC, copy the backup pieces to OCI Object Storage, and restore them directly onto the Exadata target.

Question 2

You are designing a hybrid cloud architecture during a phased workload migration to OCI. On-premises applications must securely communicate with migrated OCI workloads over a private, dedicated connection with high throughput and encryption. Which OCI networking service combination provides this capability?

Accepted Answer

OCI FastConnect with MACsec encryption or an IPsec VPN tunnel over FastConnect. OCI FastConnect provides a dedicated private connection from on-premises to OCI, and pairing it with MACsec (Layer 2 encryption) or running an IPsec VPN over the FastConnect virtual circuit delivers the required encryption and high throughput. This is the standard hybrid pattern for private, dedicated, encrypted connectivity.

Answer

OCI Local Peering Gateway with public IP addressing

Answer

OCI NAT Gateway combined with Service Gateway

Answer

OCI Internet Gateway with SSL/TLS certificates

Question 3

Your organization is migrating a high-throughput transactional database to OCI. During peak business hours, the database experiences massive I/O bursts. You want to ensure the underlying storage configuration can scale its IOPS independently of storage capacity. Which OCI block volume feature should you enable?

Accepted Answer

OCI Block Volume Auto-Tune performance feature or manual VPU adjustment.. OCI Block Volume's Auto-Tune feature (or manual VPU adjustment) allows you to change performance independently of capacity, scaling IOPS and throughput up or down without resizing the volume. This directly addresses the requirement for independent IOPS scaling during I/O bursts. Auto-Tune can be set to monitor and adjust VPUs based on demand, or you can manually set a higher VPU.

Answer

OCI Object Storage Infrequent Access tier

Answer

OCI File Storage Service snapshot policies

Answer

OCI Local NVMe RAID striping

Question 4

Your company is migrating static web assets and user-uploaded media files from an on-premises web server to OCI. The web application requires high durability, low latency, and global content delivery. Which OCI service should you use to store and serve these assets?

Accepted Answer

OCI Object Storage (Standard Tier). OCI Object Storage Standard Tier is designed for frequently accessed data and provides high durability (11 nines), low latency, and native integration with OCI CDN for global content delivery. It is the canonical service for serving static web assets and user-uploaded media because it supports HTTP/HTTPS access via pre-authenticated requests or public buckets. Archive Storage is for rarely accessed data with retrieval delays, File Storage is a shared NFS filesystem not optimized for web serving, and Block Volume is raw block storage attached to a single compute instance.

Answer

OCI Archive Storage

Answer

OCI File Storage Service

Answer

OCI Block Volume service

Question 5

Your organization is performing a zero-downtime database migration from an Oracle Database on-premises to OCI Exadata Database Service using Oracle Zero Downtime Migration (ZDM). During the migration job execution, the workflow pauses during the dataguard broker configuration step. Reviewing the ZDM logs, you find a network timeout error communicating between the ZDM service host and the OCI database listener. What is the most likely cause?

Accepted Answer

OCI VCN Security Lists or Network Security Groups block incoming TCP port 1521 or SSH port 22 from the ZDM client subnet.. The ZDM workflow pauses at Data Guard broker configuration because the ZDM service host cannot reach the OCI database listener. This is almost always caused by network security rules (Security Lists or NSGs) blocking inbound TCP 1521 (database listener) or SSH port 22 from the ZDM client subnet to the Exadata Database Service.

Answer

OCI Object Storage bucket policies prevent ZDM from reading temporary backup files.

Answer

The Exadata database service requires Autonomous Database credentials to establish connection.

Answer

OCI IAM quotas restrict the creation of more than 10 Data Guard associations per tenancy.

Question 6

An enterprise is migrating a cluster of microservices running on Kubernetes from an on-premises data center to OCI Container Engine for Kubernetes (OKE). The cluster uses custom CNI (Container Network Interface) plugins and persistent storage backed by an on-premises Ceph cluster. During migration planning, how should you architect the persistent storage layer in OCI to support OKE stateful workloads?

Accepted Answer

Install the OCI Block Volume and OCI File Storage CSI drivers in the OKE cluster to dynamically provision persistent storage volumes.. OCI Block Volume and OCI File Storage CSI drivers integrate with OKE to dynamically provision PersistentVolumes backed by OCI Block Volume (for ReadWriteOnce block storage) and OCI File Storage (for ReadWriteMany NFS storage). This replaces the on-premises Ceph-backed persistent storage with native OCI storage that supports stateful workloads, snapshots, and dynamic provisioning. The CSI drivers are the supported mechanism for persistent storage in OKE and align with Kubernetes storage classes.

Answer

Use ephemeral container scratch space for all persistent state requirements in OKE.

Answer

Mount the on-premises Ceph cluster directly inside OKE worker nodes using public IP addresses over an internet gateway.

Answer

Store all database and application state inside OCI Object Storage bucket folders mounted via local loop devices.

Question 7

You are migrating a legacy application that relies on hardcoded IP addresses for inter-service communication. During the migration to OCI VCNs, you need to ensure that virtual machines can resolve each other's hostnames dynamically without maintaining manual /etc/hosts files. What OCI networking feature should you configure?

Accepted Answer

OCI Default VCN Resolver with assigned hostname prefixes. OCI's Default VCN Resolver (part of the VCN's built-in DNS) automatically resolves instance hostnames when you assign a DNS hostname prefix to the subnet and enable hostname assignment on each VNIC. This eliminates manual /etc/hosts maintenance and lets instances resolve each other by FQDN such as ..oraclevcn.com. It is the native, zero-cost DNS service provided per VCN.

Answer

OCI API Gateway DNS forwarding rules

Answer

OCI Streaming service message brokers

Answer

OCI Network Load Balancer hostname rewriting

Question 8

An architect is designing a lift-and-shift migration strategy for an enterprise running diverse workloads on-premises. Which TWO of the following factors should be evaluated when deciding whether to choose a lift-and-shift (rehost) approach versus a re-architect approach? (Choose two.)

Accepted Answer

Migration timeline urgency and available project budget. Option A is correct because rehost (lift-and-shift) migrations are typically chosen when time-to-migration is short and budget is limited, since they avoid the cost and duration of rewriting code; re-architecting demands significantly more time, skilled staff, and investment. Option E is correct because re-architecting requires access to the application's source code and sufficient developer resources to refactor it into a cloud-native design (e.g., microservices, managed services); if source code is unavailable or developers are scarce, rehosting becomes the practical choice. The remaining options (B, C, and D) are irrelevant to migration strategy decisions, as carpeted floors, server bezel colors, and coffee machine brands have no bearing on whether to rehost or re-architect a workload.

Answer

Whether the on-premises facility uses carpeted floors

Answer

The physical color of the server bezels in the on-premises rack

Answer

The brand of office coffee machine currently installed in the data center

Question 9

Your organization is preparing to migrate several large Oracle databases to OCI using Oracle Data Pump. Which THREE best practices should you follow to optimize the export and import performance over network connections? (Choose three.)

Accepted Answer

Use the `PARALLEL` parameter during both export and import operations to utilize multiple worker processes.. Option A is correct because the PARALLEL parameter in Oracle Data Pump starts multiple worker processes for both export (expdp) and import (impdp), allowing the job to read and write multiple data files concurrently and thereby maximizing throughput over the network. Option C is correct because the COMPRESS parameter (e.g., COMPRESS=DATA_ONLY or ALL) reduces the size of the dump file set, which directly lowers the volume of bytes transferred across the network and shortens transfer time, especially for large Oracle databases. Option E is correct because NETWORK_LINK lets Data Pump read directly from the source database over a database link and write into the target database, eliminating the intermediate dump file on disk and the associated file transfer step, which is ideal for network-based migrations. Option B is not appropriate because running Data Pump jobs from a laptop on public Wi-Fi is unreliable and insecure, and omitting compression increases transfer volume. Option D is not appropriate because undo tablespaces are required for read consistency and transaction rollback during import; disabling them would break the import and is not a supported performance practice.

Answer

Execute all Data Pump jobs from a local laptop connected via public Wi-Fi without compression.

Answer

Disable database undo tablespaces entirely during the Data Pump import phase.

Question 10

You are designing a secure network architecture for migrating production workloads into an OCI Virtual Cloud Network (VCN). Compliance standards require strict traffic inspection, isolation, and secure administrative access. Which THREE OCI networking and security features should you incorporate into your design? (Choose three.)

Accepted Answer

Implement stateful Security Lists and Network Security Groups (NSGs) to enforce least-privilege traffic filtering at the subnet and VNIC levels.. Option A is correct because OCI Security Lists provide stateful, subnet-level filtering while Network Security Groups (NSGs) apply stateful rules at the VNIC level, together enabling least-privilege micro-segmentation required for strict isolation and compliance. Option C is correct because the OCI Bastion service creates ephemeral, time-limited SSH/RDP sessions to private instances that have no public IP, with all sessions audited, satisfying the secure administrative access requirement. Option E is correct because OCI Network Firewall is a managed next-generation firewall that inspects inter-subnet (east-west) traffic inside the VCN, providing the traffic inspection layer the compliance standards demand. Option B is wrong because removing route tables and allowing free public broadcast destroys network segmentation, routing control, and isolation. Option D is wrong because exposing database and backend servers with public IPs violates least privilege and isolation, and direct public administrative access is exactly what the Bastion service is meant to avoid.

Answer

Disable all VCN route tables and allow all subnets to broadcast traffic freely across the public internet.

Answer

Attach public IP addresses to all database and application backend servers to ensure direct administrator troubleshooting capability.

Question 11

You are tasked with migrating a large enterprise database to OCI Exadata Database Service. To ensure minimal downtime and high reliability during cutover, which TWO Oracle migration tools or features are specifically designed for this purpose? (Choose two.)

Accepted Answer

Oracle Zero Downtime Migration (ZDM). Oracle Zero Downtime Migration (ZDM) (C) is purpose-built for migrating Oracle databases to OCI with near-zero downtime, using Oracle Data Guard or logical/physical methods and automated orchestration to keep the source online until cutover. Oracle Data Guard (E) is the core Oracle high-availability and disaster-recovery feature that maintains a synchronized standby database, enabling a fast switchover with minimal downtime during the cutover to Exadata Database Service. The other options do not fit: Robocopy (A) is a Windows file-copy utility with no database awareness, the OCI File Storage CLI (B) only uploads files to a file system, and OCI Streaming Kafka APIs (D) are for event-streaming ingestion, none of which provide Oracle database migration or cutover reliability.

Answer

Windows Robocopy utility

Answer

OCI File Storage CLI upload utility

Answer

OCI Streaming Service Kafka producer APIs

Question 12

During a migration cutover weekend, your team encounters unexpected DNS resolution failures preventing users from reaching the newly migrated OCI application endpoints. Which TWO immediate troubleshooting steps should you perform? (Choose two.)

Accepted Answer

Check OCI VCN DNS resolver settings and custom resolver forwarders if integrating with on-premises DNS.. Option A is correct because during a migration cutover, DNS resolution failures often stem from the OCI VCN resolver configuration — specifically the Internet and VCN Resolver settings, custom resolver endpoints, and forwarding rules used when integrating with on-premises DNS (e.g., via IPSec VPN or FastConnect). Verifying these ensures the VCN's resolver is correctly forwarding queries and resolving OCI-internal names. Option B is correct because the most common cutover issue is stale or incorrect public DNS records; you must confirm the A records (and CNAMEs) point to the new OCI Load Balancer public IP addresses and check TTL values, since high TTLs can cause clients to cache old records long after the cutover. Option C is irrelevant — changing tenant subscription currency from USD to EUR has no effect on DNS resolution. Option D is unrelated — reformatting backend database tables with SQL*Plus addresses data storage, not name resolution. Option E is destructive and nonsensical — deleting all OCI compartments and recreating the tenancy root would break the environment rather than troubleshoot DNS.

Answer

Change the tenant subscription currency from USD to EUR.

Answer

Reformat all backend database tables using SQL*Plus.

Answer

Delete all OCI compartments and recreate the tenancy root structure.

Question 13

Your organization is planning to migrate file shares from an on-premises Windows environment (SMB protocol) to OCI. Which THREE factors or options should you consider when selecting the appropriate OCI storage architecture for Windows file shares? (Choose three.)

Accepted Answer

Deploying Windows Server instances on OCI Compute attached to high-performance OCI Block Volumes to act as native SMB file servers.. Option A is correct because deploying Windows Server instances on OCI Compute with attached high-performance Block Volumes lets you run native SMB file servers, preserving SMB semantics such as file locking, ACLs, and Active Directory integration for Windows clients. Option D is correct because OCI Marketplace partner solutions offer enterprise NAS appliances that natively support SMB/CIFS on OCI, providing a managed, protocol-compatible alternative to self-managed Windows file servers. Option E is correct because OCI File Storage Service is an NFSv3-based service and does not natively speak SMB/CIFS, so it cannot directly serve Windows SMB shares without third-party gateways or workarounds. Option B is incorrect because OCI Object Storage is an object store accessed via REST/S3 APIs, not a POSIX/SMB file system, and it does not provide the file locking and share semantics required for active SMB network drives. Option C is incorrect because OCI Archive Storage is a cloud archive tier accessed over the network via APIs, and there is no such thing as attaching it to Windows clients via USB cable simulation.

Answer

Using OCI Object Storage as a direct replacement for active SMB shared network drives requiring file locking.

Answer

Attaching OCI Archive Storage directly to Windows clients via USB cable simulation.

Question 14

During the post-migration validation phase of an application migration to OCI, your team needs to verify security compliance and resource configuration posture. Which TWO OCI services should you use to assess security posture and detect misconfigurations? (Choose two.)

Accepted Answer

OCI Vulnerability Scanning Service. OCI Vulnerability Scanning Service (A) is correct because it scans compute instances and container images for vulnerabilities and also checks host and application configurations against CIS benchmarks, directly supporting security-compliance verification and misconfiguration detection during post-migration validation. OCI Cloud Guard (D) is correct because it continuously monitors the tenancy for risky configurations and insecure activities, using detectors and responder recipes to identify misconfigured resources and security posture problems. Together these two services provide the vulnerability and configuration-posture assessment the scenario requires. OCI Cost Estimator (B) only estimates costs for planned resources and has no security-assessment capability. OCI Streaming Service (C) is a publish-subscribe messaging platform for real-time data ingestion, unrelated to security posture. OCI Resource Manager (E) is a Terraform-based infrastructure-as-code provisioning service, not a security or misconfiguration assessment tool.

Answer

OCI Cost Estimator

Answer

OCI Streaming Service

Answer

OCI Resource Manager

Question 15

Your organization is planning a phased workload migration to OCI. To minimize risk, you decide to use a canary deployment and traffic splitting strategy for web applications. Which TWO OCI services or features can assist in routing fractional traffic percentages between on-premises and OCI environments during migration? (Choose two.)

Accepted Answer

OCI Load Balancer backend set weight configurations. Option B is correct because an OCI Load Balancer backend set can contain multiple backends (for example, an on-premises web server and an OCI web server) and each backend is assigned a weight; the load balancer distributes incoming requests proportionally to those weights, so setting weights like 90/10 or 95/5 lets you route fractional traffic percentages between on-premises and OCI during a canary migration. Option E is correct because OCI Traffic Management Steering supports Weighted traffic steering policies, which answer DNS queries with different answers according to assigned weights, and Load Limiting policies, which can direct a controlled fraction of users to a target; both enable fractional traffic splitting across on-premises and OCI endpoints. Option A is not relevant because OCI Vault master encryption keys provide key management and encryption for data at rest, not traffic routing. Option C is not relevant because IAM dynamic groups grant permissions to compute instances based on matching rules, which is authorization, not traffic distribution. Option D is not relevant because Block Volume backup policies define scheduled backups of block volumes, which has nothing to do with routing fractional web traffic.

Answer

OCI Vault master encryption keys

Answer

OCI IAM dynamic groups

Answer

OCI Block Volume backup policies