1Z0-1072-26 Practice Test 13 — 15 Questions

Question 1

An enterprise customer has a Hybrid cloud architecture. They need to connect their on-premises datacenter to multiple VCNs in different OCI regions using a single dedicated connection. Which OCI component must be used as the central transit hub?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Dynamic Routing Gateway (DRG). The Dynamic Routing Gateway (DRG) is OCI's virtual router that acts as the single transit hub between on-premises networks and multiple VCNs, including VCNs in different regions. A single FastConnect or IPSec connection terminates on the DRG, and the DRG can be attached to many VCNs across regions, enabling transitive routing. This is exactly the central transit hub role described in the question.

Answer

NAT Gateway

Answer

Local Peering Gateway (LPG)

Answer

Internet Gateway

Question 2

You are troubleshooting a complex policy evaluation in your tenancy. There are multiple overlapping policies defined at both the tenancy root and various compartment levels. Which principle does OCI IAM follow when evaluating conflicting or overlapping policy statements?

Accepted Answer

OCI policies are additive; if any applicable policy grants access, the user is authorized.. OCI IAM policies are additive by design: there is no concept of an explicit 'deny' rule in the policy language. When multiple policies apply to a request, OCI evaluates all of them and grants access if at least one applicable statement allows the action on the resource. This means overlapping policies at the tenancy root and compartment levels simply accumulate permissions rather than conflict in a precedence hierarchy.

Answer

Explicit deny statements always take precedence over allow statements.

Answer

Compartment-level policies take strict precedence, overriding and nullifying tenancy root policies.

Answer

The most recently created policy overrides all older conflicting policies.

Question 3

Which THREE statements regarding OCI VCN DNS and Hostname resolution are correct?

Accepted Answer

Instances in a VCN can resolve each other using their assigned hostnames.. Option A is correct because OCI's VCN Resolver automatically provides internal DNS resolution, allowing instances within a VCN to resolve each other by their assigned hostnames (e.g., instance FQDN in the vcn.oraclevcn.com domain) without any additional DNS infrastructure. Option C is correct because the VCN Resolver supports forwarding rules that send DNS queries for specific domains to on-premises DNS servers, enabling hybrid DNS resolution over FastConnect or VPN. Option D is correct because OCI allows you to create custom private DNS zones (via the DNS service) and associate them with one or more VCNs, so instances can resolve custom internal names. Option B is wrong because OCI fully supports hosting public DNS zones through the OCI DNS service. Option E is wrong because OCI provides built-in VCN hostname resolution via the VCN Resolver; deploying external BIND servers is not required for basic resolution.

Answer

Public DNS zones cannot be hosted on OCI.

Answer

OCI requires you to deploy external bind DNS servers for basic VCN hostname resolution.

Question 4

If you detach a Block Volume, what happens to the data?

Accepted Answer

Data remains intact. Detaching a Block Volume in Oracle Cloud Infrastructure (OCI) is a non-destructive operation. The data on the volume persists independently of its attachment state; the volume is simply disassociated from the instance. The data remains intact and can be reattached to the same or a different instance later. This is a fundamental characteristic of block storage, which provides persistent, durable storage separate from compute lifecycle.

Answer

Data is lost if not backed up

Answer

Data is encrypted for migration

Answer

Data is deleted

Question 5

You are using File Storage and want to mount it to an instance. What is the necessary network step?

Accepted Answer

Open NFS ports in security list. You must allow ingress for NFS and Network Status Monitor traffic on the subnet's security list.

Answer

Enable DHCP

Answer

Open port 80

Answer

Install iSCSI initiator

Question 6

You have an OKE cluster and want to expose multiple HTTP and HTTPS microservices running in your cluster externally using a single public IP address and path-based routing. Which OCI native component should you deploy?

Accepted Answer

OCI Load Balancer with Kubernetes Ingress Controller. OCI Load Balancer or Native Ingress Controller integrated with OCI Load Balancer allows you to route external traffic to different Kubernetes services based on paths or hostnames.

Answer

Internet Gateway directly attached to worker node pods

Answer

Service Gateway

Answer

OCI Network Load Balancer

Question 7

Which THREE are characteristics of Object Storage lifecycle rules?

Accepted Answer

Automated execution. JSON-based, filterable by name, and target-specific actions.

Answer

Supports database commands

Answer

Real-time trigger

Question 8

You are managing an Oracle Base Database System (Virtual Machine) and need to scale up the compute shape to a higher number of OCPUs to handle an upcoming month-end processing spike. Which action should you perform?

Accepted Answer

Edit the DB system configuration in the OCI Console and update the OCPU count or shape directly.. For an Oracle Base Database System (VM), you can scale the compute shape by editing the DB system configuration in the OCI Console, which allows you to change the OCPU count or select a different shape. This operation can be performed online or may require a brief restart depending on the change, but it does not require terminating and recreating the system.

Answer

Terminate the current DB system and provision a new one with the larger shape, then restore from a manual backup.

Answer

Stop the database instance via SQL*Plus and run the 'alter system modify shape' command.

Answer

Attach an additional block storage volume with higher performance tiers to absorb the extra compute load.

Question 9

You are designing an OCI VCN and need to configure DNS so that instances can resolve custom internal domain names as well as internet domain names. Which OCI VCN Resolver feature should you utilize?

Accepted Answer

VCN Resolver custom forwarders. The OCI VCN Resolver supports custom forwarders, which let you forward DNS queries for specific domains to your own DNS servers (for example, on-premises or third-party resolvers) while still resolving internet names through the VCN resolver. This is the feature that satisfies resolving both custom internal domain names and public internet domains from the same VCN. You configure forwarding rules that match the internal domain and point to the target nameserver IPs.

Answer

Internet Gateway DNS proxy

Answer

Service Gateway name server

Answer

NAT Gateway DNS translation

Question 10

An administrator is managing an OCI File Storage Service file system and notices that storage consumption has grown significantly. They want to identify which directories and users are consuming the most space. How can this be accomplished?

Accepted Answer

Mount the file system on a compute instance and use standard Linux tools such as 'du' or quota management.. OCI File Storage Service does not provide a native per-directory usage reporting dashboard within the console, but administrators can mount the file system and use standard Linux utilities (like du or quota tools if configured via NFS) to analyze storage consumption.

Answer

View the Storage Consumption metric in OCI Monitoring service aggregated by directory path.

Answer

Check the Object Storage Metrics explorer for FSS bucket utilization.

Answer

Enable FSS Analytics in the OCI Console under Storage Administration.

Question 11

When provisioning an Oracle Base Database Service DB system, which storage management software is used underneath to provide high performance and reliable storage volumes?

Accepted Answer

Oracle Automatic Storage Management (ASM). Oracle Base Database Service (formerly Bare Metal and VM DB Systems) uses Oracle Automatic Storage Management (ASM) as the underlying storage management software. ASM provides striping, mirroring, and rebalancing across available block volumes, delivering high performance and reliability for the database files.

Answer

ZFS Storage Appliance software

Answer

EXT4 journaling file system

Answer

Linux Logical Volume Manager (LVM)

Question 12

An administrator needs to write a policy that grants a group read-only access to all databases across the tenancy. Which resource type should be specified in the policy?

Accepted Answer

database-family. In OCI IAM policy syntax, 'database-family' is the aggregate resource type that encompasses all database-related resources, including Autonomous Databases, DB systems, and related database services. Granting read access to 'database-family' in the tenancy scope provides read-only visibility across all databases in the tenancy. This is the correct resource type to use when a policy must cover the entire database service family rather than a single database resource.

Answer

db-resources

Answer

sql-databases

Answer

databases

Question 13

You are troubleshooting a web application where users are reporting intermittent connection failures when accessing your OCI Public Load Balancer. You check the load balancer metrics and notice that the `DroppedConnections` metric is spiking. What is the most likely cause?

Accepted Answer

The load balancer has reached its maximum bandwidth or connection rate limit, or backend instances are overwhelmed.. The DroppedConnections metric on an OCI Load Balancer increments when the load balancer cannot accept or complete a connection — typically because it has hit its bandwidth or new-connections-per-second limit, or because backend servers are too slow to respond and connections time out. Intermittent user-facing failures combined with a spiking DroppedConnections metric point directly to capacity saturation on the load balancer or its backends. NAT Gateway, route table, and DNS TTL issues would produce different symptoms (total unreachability, routing failures, or stale resolution) rather than intermittent drops under load.

Answer

The NAT Gateway is misconfigured.

Answer

The VCN route table is missing a default route.

Answer

The DNS record has an incorrect TTL.

Question 14

Which feature of Autonomous Database allows you to create a point-in-time read-only or read-write copy of your database instantly without duplicating all the underlying physical data blocks?

Accepted Answer

Database Cloning. Database Cloning in Autonomous Database creates a point-in-time copy of the database using copy-on-write technology, so it does not physically duplicate all underlying data blocks at creation time. The clone is immediately available as read-only or read-write, depending on the option chosen.

Answer

Database backup and restore

Answer

Manual RMAN duplicate command

Answer

Data Pump Export and Import

Question 15

An OCI customer has configured an IPSec VPN tunnel between their on-premises datacenter and an OCI DRG. The tunnel status in the OCI Console shows as 'DOWN'. The customer verifies that the public IP of the CPE is correct and internet connectivity works. What is the most likely cause of the tunnel being down?

Accepted Answer

Mismatched IKE security parameters (Phase 1 or Phase 2) or blocked UDP ports 500/4500 on the firewall.. VPN tunnel down status is commonly caused by mismatched IKE security parameters (Phase 1/Phase 2 pre-shared key, encryption/authentication algorithms, Diffie-Hellman groups) or blocked UDP ports 500/4500 on local firewalls.

Answer

The NAT Gateway is misconfigured.

Answer

The FastConnect virtual circuit is disabled.

Answer

The VCN subnet route table is missing a route to 0.0.0.0/0.