1Z0-1072-26 Practice Test 13 — 15 Questions

Question 1

You have a web application behind an OCI Public Load Balancer. You want to restrict access so that only clients coming from a specific corporate external IP address range can access your application. Where should you configure this restriction?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Load Balancer Access Control Rules (Rule Sets) or Security Lists on the Load Balancer subnet. To restrict incoming traffic based on client IP addresses at the load balancer level, you can configure Load Balancer Rule Sets (such as access control rules / IP filtering) or use Security Lists/NSGs on the load balancer subnet.

Answer

Database security groups

Answer

Service Gateway route table

Answer

NAT Gateway routing rules

Question 2

When designing an OCI Block Volume backup strategy, which THREE statements are correct regarding backup types and management? (Choose three.)

Accepted Answer

Automatic backup policies allow defining schedules such as Bronze, Silver, and Gold tiers.. Block Volume backups can be full or incremental, managed automatically by backup policies, and can be restored as new volumes.

Answer

Full backups must be manually triggered because policies only support incremental backups.

Answer

Block volume backups are stored in File Storage Service file systems by default.

Question 3

What is the maximum size of a single Object in OCI Object Storage?

Accepted Answer

10 TB. The maximum object size supported is 10 TiB.

Answer

Unlimited

Answer

1 TB

Answer

1 GB

Question 4

What is the main benefit of using a 'Clone' of a block volume?

Accepted Answer

Creating an immediate, independent volume. Clones allow you to create a new, independent volume from a point-in-time snapshot.

Answer

Backup automation

Answer

Reducing storage usage

Answer

Moving to another region

Question 5

You are troubleshooting a web application where users are reporting intermittent connection failures when accessing your OCI Public Load Balancer. You check the load balancer metrics and notice that the `DroppedConnections` metric is spiking. What is the most likely cause?

Accepted Answer

The load balancer has reached its maximum bandwidth or connection rate limit, or backend instances are overwhelmed.. Dropped connections on an OCI Load Balancer typically occur when the load balancer or backend servers reach capacity limits, or security lists/NSGs drop packets due to rate limiting or connection tracking limits.

Answer

The NAT Gateway is misconfigured.

Answer

The VCN route table is missing a default route.

Answer

The DNS record has an incorrect TTL.

Question 6

You are troubleshooting an issue where an application cannot access an OCI Object Storage bucket. The IAM policies are verified as correct, and the object storage endpoint is reachable. However, the client receives HTTP 403 Forbidden errors when attempting to perform a GET request. The bucket is private. What could be causing this?

Accepted Answer

The OCI KMS master encryption key associated with the bucket has been disabled or scheduled for deletion.. If a bucket is private and public access is blocked or IAM policies check out, pre-authenticated requests (PAR) or missing object-read permissions, or VCN Service Gateway restrictions could cause 403 errors. Another common cause is customer-managed encryption key state changes (e.g., the KMS key was disabled).

Answer

The VCN lacks an Internet Gateway, and traffic is attempting to go over the public internet.

Answer

The bucket name is not globally unique within the tenancy.

Answer

The Object Storage bucket is configured in the Infrequent Access tier instead of Standard.

Question 7

Which feature allows you to restrict access to an Object Storage bucket to only specific VCNs?

Accepted Answer

Bucket Policies. Service Gateways and IAM policies allow restricted access to Object Storage from VCNs.

Answer

Encryption

Answer

Object Versioning

Answer

Lifecycle Rules

Question 8

Which OCI Object Storage feature enables users without an OCI account to securely download or upload a specific object via a generated URL with a defined expiration time?

Accepted Answer

Pre-Authenticated Requests (PAR). Pre-authenticated requests (PAR) provide a way to let users securely access or upload a specific object or bucket without requiring credentials, using a unique URL with an expiration time.

Answer

OCI IAM Federation

Answer

API Signing Keys

Answer

Object Storage Public Access Buckets

Question 9

A company requires an extremely low-cost storage solution for data archiving that is rarely accessed, with a retrieval time requirement of within an hour. Which OCI storage tier should be used?

Accepted Answer

Archive Storage Tier. OCI Archive Storage provides the lowest cost per gigabyte for long-term data retention, with a standard time-to-first-byte retrieval SLA of within one hour.

Answer

Block Volume Performance Level 'Lower Cost'

Answer

Object Storage Standard Tier

Answer

Object Storage Infrequent Access Tier

Question 10

A database application requires high-performance block storage with low latency. Which Block Volume performance tier should you select?

Accepted Answer

Ultra High Performance. The Ultra High Performance tier is designed for extreme IOPS requirements for databases.

Answer

Balanced

Answer

Higher Performance

Answer

Lower Cost

Question 11

What is the maximum size of a single object that can be uploaded to OCI Object Storage using a single PUT request?

Accepted Answer

10 TiB. For standard single PUT operations, the maximum object size is 50 GiB. Larger files require multipart uploads.

Answer

5 TiB

Answer

100 GiB

Question 12

What is the primary purpose of OCI Object Storage?

Accepted Answer

Unstructured data storage. Object storage is designed for unstructured data storage.

Answer

High-performance cache

Answer

Database storage

Answer

OS swap space

Question 13

What is the main advantage of the OCI Block Volume performance tier selection?

Accepted Answer

Customizable IOPS and throughput. Performance tiers allow users to balance cost and performance for specific workloads.

Answer

Always fixed price

Answer

Mandatory for boot volumes

Answer

Only for production

Question 14

Which THREE of the following operations are supported by OCI Vault in the context of storage?

Accepted Answer

Encryption of Block Volumes. Encrypting buckets, block volumes, and file systems.

Answer

Encryption of ephemeral storage

Answer

Encryption of compute memory

Question 15

You need to store infrequently accessed data in Oracle Cloud Infrastructure (OCI) with the lowest possible cost while maintaining data retrieval times within a few hours. Which storage tier should you choose?

Accepted Answer

Archive Storage. Archive Storage is designed for long-term data retention at the lowest cost, with a retrieval time of up to 4 hours.

Answer

Block Volume

Answer

Standard Object Storage

Answer

Infrequent Access Object Storage