1Z0-1072-26 Practice Test 15 — 15 Questions

Question 1

You are configuring an autoscaling policy for an instance pool. You choose a schedule-based policy to scale out the pool to 20 instances every Monday at 8:00 AM. What happens if an instance within the pool fails due to hardware degradation during the weekend when the pool size is set to 5?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

The instance pool automatically replaces the failed instance immediately to maintain the current desired capacity of 5.. Instance pools continuously maintain their desired capacity by monitoring instance health and automatically replacing any instance that fails, regardless of whether a schedule-based autoscaling policy is active. The schedule only dictates when the desired count changes (e.g., scaling to 20 on Monday), not whether failed instances are replaced. Therefore, a hardware failure on the weekend triggers immediate replacement to keep the pool at its current desired size of 5.

Answer

The failed instance is left in a failed state until Monday at 8:00 AM when the scheduled scaling event runs.

Answer

The autoscaling configuration disables itself due to a health check failure.

Answer

The entire instance pool is shut down to prevent data corruption.

Question 2

Which THREE characteristics of OCI Security Lists are correct?

Accepted Answer

Security list rules are stateful by default.. Option A is correct because OCI security list rules are stateful by default, meaning return traffic for an allowed connection is automatically permitted without needing a corresponding inbound or outbound rule. Option B is correct because security lists are attached to a subnet, and their rules apply to all VNICs in that subnet. Option C is correct because OCI security lists allow you to configure rules as stateless, in which case you must explicitly define rules for both request and response traffic. Option D is incorrect because a subnet can have multiple security lists associated with it, not just one. Option E is incorrect because security lists are bound at the subnet level, whereas network security groups (NSGs) are the construct that can be assigned to individual VNICs.

Answer

A subnet can have a maximum of only one security list.

Answer

Security lists can be assigned to individual VNICs independently of subnets.

Question 3

What is the primary benefit of using OCI Container Instances compared to managing containers on OCI Container Engine for Kubernetes (OKE)?

Accepted Answer

Container Instances allow you to run containers directly without managing servers, clusters, or orchestrators.. OCI Container Instances is a serverless container runtime that lets you launch a container directly without provisioning or managing any compute host, cluster, or orchestrator. It is designed for simple, short-lived or bursty workloads where the overhead of running and patching an OKE cluster is not justified. This directly matches option D, which describes the core value proposition of the service.

Answer

Container Instances offer lower pricing for long-running enterprise microservices than OKE.

Answer

Container Instances allow direct access to bare metal hypervisors.

Answer

Container Instances support multi-cluster service meshes and advanced ingress controllers.

Question 4

You are designing a high availability architecture for a mission-critical Oracle Exadata Database Service. You need to ensure zero data loss and minimal downtime during planned hardware maintenance. Which Oracle feature should you leverage?

Accepted Answer

Rolling infrastructure maintenance combined with Real Application Clusters (RAC) and Data Guard. Rolling infrastructure maintenance combined with RAC and Data Guard provides zero data loss and minimal downtime: RAC allows one node to remain available while another is patched, and Data Guard synchronizes a standby database for failover protection. Together they enable maintenance to proceed without taking the entire database offline. This is the standard Oracle-recommended approach for mission-critical Exadata deployments.

Answer

Manual database export using Data Pump during the maintenance window

Answer

OCI Load Balancer health checks with DNS failover

Answer

Cold backups taken right before maintenance window execution

Question 5

You are configuring an Exadata Cloud Service (ExaCS) instance and need to ensure maximum isolation and security for your database infrastructure. Which architectural layer provides tenant isolation at the hypervisor level in ExaCS?

Accepted Answer

Oracle VM or KVM guest virtualization (domU). In Exadata Cloud Service (ExaCS), tenant isolation at the hypervisor level is provided by Oracle VM or KVM guest virtualization (domU). Each customer's database infrastructure runs in isolated virtual machines (domU) on the Exadata hardware, managed by a hypervisor (dom0). This ensures that tenants are separated at the virtualization layer, preventing cross-tenant access.

Answer

Virtual Cloud Network (VCN) security lists and network security groups

Answer

Storage Server Cell software zones

Answer

Exadata Database Vault compartment boundaries

Question 6

Which TWO statements are true regarding OCI IAM policy syntax scoping rules? (Choose two.)

Accepted Answer

Policies defined in a child compartment cannot grant permissions on resources in parent compartments.. Policies must specify a valid scope (compartment or tenancy) and correctly reference subjects and resources.

Answer

Compartment names in policy statements are case-insensitive and can be replaced by user OCIDs.

Answer

Policies are attached directly to individual users rather than groups.

Answer

Policies can grant permissions across completely unrelated tenancies without any endorsement or commitment.

Question 7

When using File Storage Service, how do you restrict access to the file system to specific instances?

Accepted Answer

Export Options. Export Options in FSS allow you to define access rules by IP or CIDR.

Answer

OS-level permissions only

Answer

IAM Policies only

Answer

Bucket Policies

Question 8

You need to resize the boot volume of an existing OCI Linux compute instance to provide more disk space for application logs. What is the correct sequence of actions?

Accepted Answer

Modify the boot volume size in the OCI Console, then use OS-level commands (such as `resizepart` and `xfs_growfs`) to extend the file system.. To expand a boot volume, you first update the boot volume size in the OCI Console, and then you must log in to the instance and extend the operating system partition and file system to recognize the new capacity.

Answer

Terminate the instance, detach the boot volume, attach it to another instance, expand it, and reattach it.

Answer

Reboot the instance; OCI automatically detects the new size and extends the file system partitions automatically.

Answer

Create a new block volume, mount it as the root directory, and delete the old boot volume.

Question 9

Your development team wants to automatically trigger a serverless function whenever a new object is uploaded to an OCI Object Storage bucket. Which OCI service acts as the foundational router to capture this object upload event and invoke the function?

Accepted Answer

OCI Events Service. The OCI Events service enables you to create automation based on the lifecycle changes of resources in OCI, such as Object Storage creations.

Answer

OCI Monitoring Service

Answer

OCI Logging Service

Answer

OCI Resource Manager

Question 10

An administrator needs to back up a critical Oracle Database running on an OCI Block Volume. The database spans across three separate block volumes that must be backed up simultaneously to ensure crash consistency. What is the most efficient feature to use?

Accepted Answer

OCI Volume Groups. Volume Groups allow you to group multiple block volumes together and perform coordinated operations like backups, clones, and cross-region replications simultaneously.

Answer

Object Storage Multipart Upload

Answer

Individual Block Volume Backups triggered sequentially

Answer

FSS Snapshots

Question 11

Which THREE security best practices should be implemented when deploying and managing OCI Functions? (Choose three.)

Accepted Answer

Using dynamic groups and IAM policies to grant functions least-privilege access to other OCI resources. Security best practices for functions include using dynamic groups and IAM policies for least-privilege resource access, storing sensitive strings in OCI Vault, and deploying functions in private subnets with VCN integration.

Answer

Hardcoding tenancy administrator credentials in environment variables for easy access

Answer

Disabling authentication on API Gateways triggering functions to allow open public access

Question 12

A database application requires high-performance block storage with low latency. Which Block Volume performance tier should you select?

Accepted Answer

Ultra High Performance. The Ultra High Performance tier is designed for extreme IOPS requirements for databases.

Answer

Balanced

Answer

Higher Performance

Answer

Lower Cost

Question 13

Which THREE components are required when configuring OCI VCN Remote Peering between two regions?

Accepted Answer

Remote Peering Connection (RPC) between the two DRGs. Remote VCN peering across regions requires a Dynamic Routing Gateway (DRG) attached to each VCN, a Remote Peering Connection (RPC) established between the two DRGs, and matching route table/security rules.

Answer

Local Peering Gateway (LPG)

Answer

Internet Gateway in both VCNs

Question 14

Which OCI service provides authoritative Domain Name System (DNS) management and allows you to host public and private DNS zones?

Accepted Answer

OCI DNS. OCI DNS is the managed Domain Name System service that enables customers to create and manage public and private DNS zones.

Answer

OCI Load Balancer

Answer

OCI VCN Resolver

Answer

OCI Traffic Management

Question 15

Your organization wants to grant an external team of auditors read-only access to a specific compartment named FinanceAudits without creating individual IAM users for each auditor. You decide to use identity federation with a SAML 2.0-compliant Identity Provider (IdP). Which of the following steps is NOT required to achieve this?

Accepted Answer

Manually create individual IAM user accounts for each auditor in the Oracle Cloud Infrastructure Console.. To federate an IdP, you must configure the IdP, create an IdP group, map that IdP group to an OCI group, and write a policy granting the OCI group access. You do not manually create local IAM users for the federated users.

Answer

Map the Identity Provider's user group to an Oracle Cloud Infrastructure IAM group.

Answer

Create an IAM policy granting the mapped OCI group read access to the FinanceAudits compartment.

Answer

Configure the Identity Provider (IdP) metadata XML file in the OCI IAM identity provider console.