1Z0-1072-26 Practice Test 19 — 15 Questions

Question 1

Which TWO of the following capabilities are provided by OCI Container Instances? (Choose two.)

Accepted Answer

Serverless container execution without managing underlying virtual machines. OCI Container Instances allow you to run containers serverlessly without managing virtual machines, supporting both AMD and ARM architectures and attaching block storage.

Answer

Automatic multi-master control plane high availability clustering

Answer

Advanced Kubernetes DaemonSet and StatefulSet orchestration controllers

Answer

Full administrative SSH access to the underlying hypervisor host

Question 2

Which OCI compute shape family is designed specifically for general-purpose workloads, balancing CPU, memory, and network resources?

Accepted Answer

Standard Shapes. Standard compute shapes are designed for general-purpose workloads such as web servers, application servers, and small databases.

Answer

Dense I/O Shapes

Answer

HPC Shapes

Answer

GPU Shapes

Question 3

Which THREE of the following actions can be performed using OCI Container Engine for Kubernetes (OKE)? (Choose three.)

Accepted Answer

Upgrading the Kubernetes control plane version independently of worker nodes. OKE supports automated cluster upgrades, cluster autoscaling via cluster autoscaler, and configuring worker node pools across multiple fault domains or availability domains.

Answer

Running serverless container instances without any Kubernetes pod orchestration

Answer

Directly modifying the underlying Linux kernel parameters of the OKE-managed control plane master nodes

Question 4

You are managing an OKE cluster and need to inspect the logs of the cluster control plane components (such as `kube-apiserver` and `kube-controller-manager`). Where are these logs sent by default in OCI?

Accepted Answer

To the OCI Logging Service under the OKE cluster log categories.. OKE integrates with OCI Logging service. Control plane logs (audit, API server, controller manager, scheduler) can be enabled and streamed directly to log groups in the OCI Logging service.

Answer

To a local file directory `/var/log/kubernetes/` on the worker nodes.

Answer

Control plane logs are permanently discarded for security reasons.

Answer

Directly to an Object Storage bucket without enabling any service configuration.

Question 5

Which utility is used to authenticate and push custom container images built for OCI Functions to the Oracle Registry (OCIR)?

Accepted Answer

Docker CLI. Docker CLI (or podman) is used to log in to OCIR (`docker login iad.ocir.io`) using an auth token and push container images.

Answer

VCN Management Console

Answer

Terraform CLI

Answer

OCI Object Storage CLI

Question 6

Which TWO methods can be used to securely connect to a private OCI compute instance that does not have a public IP address? (Choose two.)

Accepted Answer

OCI Bastion Service. Private instances can be accessed securely using an OCI Bastion service session or by tunneling through a bastion host/jump box deployed in a public subnet.

Answer

Accessing the instance via Object Storage pre-authenticated requests

Answer

Changing the instance subnet to public temporarily while debugging

Answer

Direct RDP or SSH over the Internet Gateway without any intermediate host

Question 7

What is the primary purpose of OCI Compute Instance Launch Options?

Accepted Answer

To configure instance network virtualization, firmware type, and boot parameters.. Launch options allow you to customize settings such as network virtualization type, boot volume firmware (BIOS/UEFI), and secure boot when configuring a custom image or instance.

Answer

To set up automatic IAM user credential rotation.

Answer

To schedule automated block volume backup retention policies.

Answer

To define DNS domain suffix forwarding rules for VCN resolvers.

Question 8

What is the maximum number of Fault Domains typically available within a single OCI Availability Domain?

Accepted Answer

3. OCI Availability Domains are divided into three Fault Domains by default, providing anti-affinity for high availability across physical hardware within an AD.

Answer

1

Answer

Unlimited

Answer

10

Question 9

Which THREE of the following features or actions are supported when managing OCI Custom Images? (Choose three.)

Accepted Answer

You can copy a custom image directly to another OCI region using native cross-region image copy features.. Custom images can be exported to Object Storage, copied across regions, and used to launch instances. However, they cannot be edited directly as files while inside the image repository.

Answer

Custom images automatically sync operating system patches from Oracle update servers daily.

Answer

You can directly mount and edit files inside a custom image using the OCI Console file manager.

Question 10

Which THREE actions occur when you terminate an OCI compute instance? (Choose three.)

Accepted Answer

The compute instance virtual machine is permanently destroyed.. When terminating a compute instance, the virtual machine is destroyed, and the primary VNIC is deleted. You are prompted whether to retain or delete the boot volume, and data block volumes remain attached unless explicitly deleted.

Answer

All attached data block volumes are automatically deleted by default.

Answer

All custom images created from the instance are automatically deleted.

Question 11

Which THREE methods or features are available in OCI to migrate an existing on-premises virtual machine into an OCI Compute instance? (Choose three.)

Accepted Answer

Exporting the boot volume as a QCOW2 or RAW formatted virtual disk file. Migrating on-premises VMs involves exporting disk images (QCOW2/RAW) to Object Storage and importing as custom images, using Oracle-provided migration tools, or utilizing OCI Full Stack Disaster Recovery / Migration services.

Answer

Running `scp` from the on-premises hypervisor directly into the OCI hypervisor control plane

Answer

Directly plugging physical hard drives into OCI compute bare metal server USB ports

Question 12

You are troubleshooting a container image pull failure in your OKE cluster. The error message indicates an authentication failure when trying to pull from the Oracle Container Registry (OCIR). What Kubernetes resource must be configured in your cluster namespace to allow pulling images from a private OCIR repository?

Accepted Answer

A Kubernetes Secret of type `dockerconfigjson` referenced via `imagePullSecrets` in the pod spec.. To pull images from private container registries like OCIR in Kubernetes, you must create an `imagePullSecrets` object referencing a Kubernetes Secret containing your OCIR auth credentials or auth token.

Answer

An OCI IAM Dynamic Group attached to the VCN security list.

Answer

A Persistent Volume Claim attached to the registry endpoint.

Answer

An API Gateway route rule with public auth bypass headers.

Question 13

Which type of Oracle database deployment provides full administrative privileges (SYS and SYSTEM access) at the operating system and database level in OCI?

Accepted Answer

Oracle Base Database System (Virtual Machine or Bare Metal). Base Database Systems (VM and BM) provide full root access to the OS via SSH and full DBA privileges on the database.

Answer

Autonomous JSON Database

Answer

Oracle Autonomous Database

Answer

Oracle Database Serverless Cloud Service

Question 14

You are designing a PCI-DSS compliant architecture on OCI. You need to ensure that all data stored on compute instance boot volumes and block volumes is encrypted using customer-managed encryption keys rather than Oracle-managed keys. Where should you configure these keys?

Accepted Answer

In OCI Vault (Key Management), assigning a master encryption key to the volumes during creation or update.. Customer-managed keys are managed in OCI Vault (Key Management Service - KMS), and you can assign a master encryption key to boot volumes and block volumes when provisioning them.

Answer

Via IAM user password policies.

Answer

Directly in the guest OS kernel encryption configuration files (`/etc/fstab`).

Answer

In the VCN Security List encryption settings.

Question 15

You are managing an Oracle Base Database System and need to configure automated backups. By default, where does OCI store these automated backups?

Accepted Answer

An Oracle-managed Object Storage bucket. OCI stores automated backups of database systems in an Oracle-managed Object Storage bucket specific to your tenancy.

Answer

A customer-managed File Storage Service (FSS) mount target

Answer

The local root file system (/u01) of the database VM

Answer

A locally attached block volume separate from the database data disk