1Z0-1072-26 Practice Test 2 — 10 Questions

Question 1

You are managing a Kubernetes cluster on OCI (OKE) and need to upgrade the Kubernetes control plane version. What happens to the existing worker nodes when you perform a control plane upgrade?

Accepted Answer

Worker nodes continue to run workloads, but you must manually or via node pool upgrades bring them to the matching version.. When you upgrade the Kubernetes control plane on OKE, the existing worker nodes are not automatically upgraded. They continue running workloads, but you must upgrade them separately — either manually or by upgrading the node pool — to match the control plane version. This is the correct behavior for OKE control plane upgrades.

Answer

The cluster becomes completely inaccessible, and all pods are evicted permanently.

Answer

Control plane upgrades are blocked until all worker nodes are upgraded first.

Answer

All worker nodes are automatically terminated and recreated with the new version.

Question 2

You are deploying a Public Load Balancer in OCI to distribute incoming web traffic across multiple backend compute instances in different availability domains. You notice that backend health checks are failing. Which component's configuration should you check first to ensure health check probes can reach the backend instances?

Accepted Answer

Security lists or Network Security Groups of the backend instances to allow traffic from the Load Balancer subnet.. Load Balancer backend health checks originate from the Load Balancer's subnet. Security Lists or NSGs attached to the backend instances must allow inbound traffic from the Load Balancer subnet on the backend application ports and health check ports.

Answer

The Service Gateway rules to enable Oracle Object Storage communication.

Answer

The Internet Gateway route table associated with the private subnets.

Answer

The Dynamic Routing Gateway route table to ensure BGP routes are propagated.

Question 3

You are deploying an Exadata Cloud Service instance and need to configure separate Virtual Machine clusters on the same Exadata rack. Which architectural feature enables this separation?

Accepted Answer

Exadata VM Clusters. Exadata VM Clusters are the architectural construct that lets you carve a single Exadata Cloud Service rack into multiple isolated VM clusters, each with its own compute nodes, storage access, and network configuration. This is the supported mechanism for multi-tenant separation on the same physical rack.

Answer

OCI Compartment boundaries

Answer

Oracle Multitenant container databases with PDB isolation

Answer

Dynamic Routing Gateways (DRG)

Question 4

You have a web application behind an OCI Public Load Balancer. You want to restrict access so that only clients coming from a specific corporate external IP address range can access your application. Where should you configure this restriction?

Accepted Answer

Load Balancer Access Control Rules (Rule Sets) or Security Lists on the Load Balancer subnet. A Public Load Balancer in OCI supports Access Control Rules (Rule Sets) that allow or deny traffic based on source CIDR blocks, and Security Lists on the load balancer's subnet can also restrict ingress by source IP. Configuring the corporate IP range as an allow rule in the load balancer's rule set (or a security list ingress rule) restricts access at the network edge before traffic reaches the backend.

Answer

Database security groups

Answer

Service Gateway route table

Answer

NAT Gateway routing rules

Question 5

You are designing a Disaster Recovery architecture where VCN-1 in the Ashburn region needs to peer with VCN-2 in the Phoenix region. Which OCI networking construct is required to achieve this cross-region peering?

Accepted Answer

Dynamic Routing Gateway (DRG). Cross-region VCN peering in OCI requires a Dynamic Routing Gateway (DRG) in each VCN, with a remote peering connection (RPC) established between the two DRGs. The DRG is the virtual router that provides the path for traffic between VCNs in different regions. Local peering gateways only work within a single region, so they cannot satisfy this requirement.

Answer

Local Peering Gateway (LPG)

Answer

NAT Gateway

Answer

Internet Gateway

Question 6

You want to automate the installation of packages and configuration scripts on newly launched compute instances without manual intervention. What OCI feature should you use?

Accepted Answer

Instance User Data (Cloud-init). Instance User Data (Cloud-init) allows you to supply a script or cloud-config that runs automatically on first boot of a compute instance, enabling unattended installation of packages and execution of configuration scripts. This is the standard OCI mechanism for bootstrapping instances without manual intervention. The user data is passed via the instance metadata service and consumed by cloud-init.

Answer

Block Volume Attachment scripts

Answer

VCN Security List rules

Answer

IAM Instance Principals policy generator

Question 7

You are setting up OCI DNS and want to configure a zone transfer (AXFR) from your on-premises DNS server to OCI Private DNS. Which feature enables secondary DNS functionality in OCI?

Accepted Answer

OCI DNS Secondary DNS feature with TSIG key authentication. OCI DNS Secondary DNS enables OCI to act as a secondary DNS provider by transferring zones from an external primary via AXFR/IXFR, authenticated with a TSIG key. This is the feature that supports zone transfers into OCI Private DNS or public DNS zones.

Answer

NAT Gateway port forwarding for DNS ports

Answer

Internet Gateway DNS proxy

Answer

Service Gateway DNS resolver

Question 8

Which OCI compute feature allows you to group multiple compute instances together into a low-latency, high-bandwidth physical placement group?

Accepted Answer

Cluster Placement Groups. Cluster Placement Groups in OCI are a compute feature that logically groups compute instances within a single availability domain to provide low-latency, high-bandwidth network connectivity. They are designed for tightly coupled workloads like HPC, big data, and machine learning that require high-speed inter-node communication. By placing instances in close physical proximity, cluster placement groups minimize network latency and maximize throughput.

Answer

Dynamic Routing Groups

Answer

IAM Security Zones

Answer

Autonomous Linux Pools

Question 9

Which THREE services can be used as a destination for the Events service?

Accepted Answer

Functions. The Events service supports Functions, Notifications, and Streaming as targets.

Answer

Compute Instance

Answer

Object Storage

Question 10

You are setting up a File Storage mount target. What is required at the subnet level?

Accepted Answer

An IP address within the subnet. An OCI File Storage mount target is a virtual network interface (NIC) that resides in a specific subnet within a VCN, and it must be assigned an available private IP address from that subnet's CIDR block. The mount target is what NFS clients connect to over TCP/2049, so it needs a routable private IP within the VCN. Without a free IP in the subnet, the mount target cannot be created.

Answer

A NAT Gateway

Answer

A Public IP

Answer

A Service Gateway