1Z0-1072-26 Practice Test 17 — 15 Questions

Question 1

A development team needs to deploy an application that requires exactly 6 OCPUs and 32 GB of memory. Which compute option best satisfies this requirement efficiently without wasting resources?

Accepted Answer

VM.Standard.E4.Flex configured with 6 OCPUs and 32 GB of RAM. Flexible shapes allow you to independently configure OCPUs and memory to match exact workload requirements.

Answer

VM.Standard1.16

Answer

BM.Standard.E3.128

Answer

VM.Standard2.8

Question 2

You are migrating an on-premises virtual machine image in QCOW2 format to OCI. Before you can launch compute instances from this image in OCI, what must you do with the file?

Accepted Answer

Upload the image to an Object Storage bucket and import it as a custom image.. To migrate a QCOW2 image to OCI, you upload the file to an Object Storage bucket and then import it as a custom image via the OCI Console or CLI. OCI supports QCOW2 and VMDK formats for custom image import.

Answer

Convert the file to an ISO and mount it using the OCI Console virtual console.

Answer

Attach the QCOW2 file to a VCN subnet as a storage gateway resource.

Answer

Upload the QCOW2 file directly to a compute instance boot volume via SSH.

Question 3

You are managing a large OKE cluster and notice that pods are failing to schedule because the worker nodes have run out of ephemeral storage. What is the most robust architectural solution to address this?

Accepted Answer

Increase the size of the worker node boot volumes in the node pool configuration or add node pools with larger boot volumes.. Pods failing to schedule due to exhausted ephemeral storage on worker nodes are best addressed by increasing the boot volume size of the worker nodes in the node pool configuration, or by adding node pools with larger boot volumes. Ephemeral storage on OKE worker nodes is backed by the boot volume, so expanding it directly increases the capacity available to pods for emptyDir, logs, and container writable layers. This is the most robust architectural fix because it addresses the root capacity constraint.

Answer

Change the VCN MTU size from 9000 to 1500.

Answer

Attach a Block Volume to the Kubernetes control plane nodes.

Answer

Restart the Kubernetes API server.

Question 4

You are designing a disaster recovery strategy for an OCI compute instance. You need to replicate boot volume backups to a secondary region. How should you accomplish this?

Accepted Answer

Use the OCI Console or CLI to copy the boot volume backup to the destination region.. Boot volume backups can be copied across regions using the cross-region copy feature in the OCI Console or CLI, allowing you to restore them as boot volumes in another region.

Answer

Configure a local peering gateway between the two regions' boot storage endpoints.

Answer

Boot volume backups cannot be copied across regions; you must recreate the instance manually.

Answer

Attach the boot volume backup as an Object Storage bucket and sync via FTP.

Question 5

Which OCI service is best suited for real-time monitoring of CPU and Memory utilization on a Compute instance?

Accepted Answer

Monitoring service. The Monitoring service automatically collects standard metrics for Compute instances.

Answer

Resource Manager

Answer

Logging service

Answer

Events service

Question 6

Which THREE statements regarding OCI VCN Route Tables are correct?

Accepted Answer

Each subnet in a VCN must be associated with a route table.. Route tables contain rules that map destination CIDR blocks to target gateways. Each subnet must be associated with a route table, and route tables can be shared across multiple subnets.

Answer

Route tables perform firewall packet inspection like Network Security Groups.

Answer

A subnet can be associated with multiple route tables simultaneously.

Question 7

Which TWO statements are correct regarding OCI Block Volume backups and clones?

Accepted Answer

Block volume backups can be restored as new volumes in any Availability Domain within the same region.. Option C is correct because OCI Block Volume backups are regional constructs: a backup taken from a volume in one Availability Domain can be restored as a new block volume in any Availability Domain within the same region (though not across regions unless copied). Option D is correct because block volume clones leverage the Block Volume service's instant, space-efficient copy-on-write capability, so a clone can be created immediately from a source volume without requiring a completed backup first. Option A is incorrect because backups are stored in Object Storage (OCI Object Storage buckets), not in File Storage Service file systems. Option B is incorrect because restoring a backup creates a new volume and does not require deleting the parent/source volume. Option E is incorrect because a block volume clone is an AD-local copy and must reside in the same Availability Domain as the source volume, so it cannot be attached to instances in a different AD.

Answer

Block volume backups are stored directly in File Storage Service file systems.

Answer

Block volume backups require manual deletion of the parent volume before the backup can be restored.

Answer

A block volume clone can be attached to compute instances in a different Availability Domain than the source volume.

Question 8

Which service is the best choice for storing thousands of small, frequently accessed image files?

Accepted Answer

Object Storage. Object Storage is optimized for high-scale, flat-namespace object storage.

Answer

Archive Storage

Answer

Block Volume

Answer

File Storage

Question 9

What is the primary function of OCI IAM federation?

Accepted Answer

To allow users authenticated by an external Identity Provider to access OCI resources using single sign-on (SSO).. Federation enables external identity providers (like Microsoft Entra ID or Okta) to authenticate users seeking access to OCI without requiring local OCI user accounts.

Answer

To replicate compute instances across multiple cloud providers.

Answer

To share VCN routing tables between different tenancies.

Answer

To synchronize Object Storage buckets across different regions.

Question 10

Your development team deployed a three-tier application in an OCI VCN. You need to restrict database instances so they only accept incoming traffic from specific application instances, regardless of which subnet the application instances reside in. Which OCI networking feature should you use?

Accepted Answer

Network Security Groups (NSGs). Network Security Groups (NSGs) allow you to group VNICs of a similar security posture (like the application tier) and apply security rules to them, independent of subnet boundaries.

Answer

Local Peering Gateway (LPG) access control lists

Answer

Security Lists associated with the database subnet

Answer

Dynamic Routing Gateway (DRG) security policies

Question 11

An OCI administrator creates a subnet and associates a security list with it. An instance in this subnet cannot connect to an external API on HTTPS (port 443). The security list has an ingress rule for port 443, but no egress rules defined. Why is the connection failing?

Accepted Answer

The security list lacks an egress rule allowing outbound traffic to port 443 (or all ports), or the default egress rule was removed.. By default, OCI Security Lists are stateful, meaning return traffic for ingress is automatically allowed. However, outbound (egress) traffic initiated by the instance requires an explicit egress rule (or a default egress rule allowing all traffic out) if egress rules are modified or restricted.

Answer

Ingress rules apply to outbound connections.

Answer

The instance needs a public IP address to make outbound API calls.

Answer

Port 443 is blocked globally across all OCI regions.

Question 12

Which THREE statements regarding OCI IPv6 implementation in VCNs are correct?

Accepted Answer

Security lists and NSGs support rules for IPv6 traffic filtering.. OCI supports IPv6 addressing. You can assign IPv6 CIDR blocks (/56) to your VCN, assign IPv6 subnets (/64) to subnets, and configure security rules and route tables for IPv6 traffic.

Answer

IPv6 is mandatory for all new VCN creation in OCI.

Answer

IPv6 addresses in OCI require a NAT Gateway for outbound internet access.

Question 13

When designing a comprehensive tagging strategy in OCI, which THREE practices or features should you implement for effective governance and cost management? (Choose three.)

Accepted Answer

Use IAM policies to control which user groups are permitted to update specific defined tag values.. Option A is correct because IAM policies can be scoped to the tag-namespace and tag-key level (for example, using `Allow group X to use tag-namespaces in tenancy where request.principal...` and `inspect`/`use` verbs on defined tags), letting you restrict which user groups may create or update specific defined tag values, which is essential for governance and preventing unauthorized tag changes. Option C is correct because Defined Tags live in a tag namespace with a controlled, schema-like key-value structure, support validation and default values, and are the recommended mechanism for enforcing consistent, governed metadata across resources. Option E is correct because Tag Defaults are a compartment-level feature that automatically applies specified defined tags (and their values) to resources created in that compartment, ensuring new resources are tagged without relying on user discipline. Option B is not correct because Freeform Tags have no namespace, no schema, and no access control at the tag level, so relying on them exclusively would undermine governance and enforcement rather than improve it. Option D is not correct because OCI Notifications is a publish/subscribe messaging service for topics and subscriptions; it does not automatically convert tag keys into email subscriptions, and no such native tag-to-email feature exists.

Answer

Rely exclusively on Freeform Tags to eliminate administrative overhead for tag namespaces.

Answer

Configure OCI Notifications to convert tag keys into email subscriptions automatically.

Question 14

You are configuring an OCI Public Load Balancer and notice that backend instances are marked as unhealthy. Upon inspecting the health check URL on the backend server via curl, it returns HTTP 200. What is the most likely reason the load balancer still reports them as unhealthy?

Accepted Answer

Security lists or NSGs on the backend instances are blocking traffic from the Load Balancer subnet on the listener/health check port.. If backend servers return HTTP 200 locally but are unhealthy in the load balancer, security list rules or NSGs on the backend subnet are likely blocking incoming health check probes from the load balancer subnet.

Answer

The VCN has an Internet Gateway attached.

Answer

The load balancer shape is set to 10 Gbps instead of 100 Mbps.

Answer

The NAT Gateway is misconfigured.

Question 15

Which THREE factors should you consider when selecting an OCI Compute shape for an enterprise application? (Choose three.)

Accepted Answer

Specific workload requirements such as local NVMe storage, GPUs, or high-performance networking. Option A is correct because OCI Compute shapes differ in hardware capabilities, and workloads that need local NVMe storage (dense I/O shapes), GPUs (GPU shapes), or high-performance networking (cluster networks/RDMA) must select a shape that provides those features. Option D is correct because OCI flexible shapes let you independently choose OCPUs and memory within supported ranges, so you can right-size an enterprise application instead of over- or under-provisioning with fixed shapes. Option E is correct because OCI offers Intel Xeon, AMD EPYC, and ARM Ampere A1 processors, and the chosen architecture affects performance, cost, and application compatibility. Option B is not a shape-selection factor because public IP assignment is a networking choice (VCN/subnet and public IP settings), not a property of the compute shape. Option C is not relevant because Autonomous Database is a separate managed database service and a compute instance cannot be converted into one.

Answer

The requirement that all compute instances must use public IP addresses by default

Answer

Whether the compute instance can be converted into an Autonomous Database instance