1Z0-1072-26 Practice Test 20 — 15 Questions

Question 1

Your team needs to allow a group of developers to read logs in the Logging service across all compartments, but you want to ensure they cannot modify or delete any logging resources. Which of the following IAM policy verbs should you use?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Read. The 'read' verb in OCI IAM grants permission to view or list a resource but explicitly excludes the ability to create, update, or delete it. Since the requirement is to let developers view logs across all compartments without modifying or deleting logging resources, 'read' is the precise least-privilege verb. It maps to the GET/LIST operations on the logging-family resource types.

Answer

Manage

Answer

Use

Answer

Inspect

Question 2

An application running on OCI requires an Autonomous Transaction Processing (ATP) database with the ability to automatically scale compute resources up and down based on workload demand, without manual intervention. Which feature should you enable during or after database provisioning?

Accepted Answer

Auto Scaling. Auto Scaling is the Autonomous Database feature that automatically scales compute resources up and down based on workload demand without manual intervention. It is enabled during or after provisioning and adjusts the number of OCPUs within the defined base and maximum limits.

Answer

Dynamic Scaling Policy

Answer

Compute Autoscaling Groups

Answer

Elastic Resource Pools

Question 3

An OCI architect is configuring a DRG to handle multiple VCN attachments. They want to ensure that VCN-1 can communicate with the on-premises network, but VCN-2 cannot. How should this be configured using DRG route tables?

Accepted Answer

Associate VCN-1 and VCN-2 attachments with different DRG route tables, ensuring only VCN-1's route table imports routes from the on-premises attachment.. DRG route tables control route import and distribution per attachment, so associating VCN-1 and VCN-2 attachments with different DRG route tables lets you selectively import the on-premises routes only into VCN-1's route table. VCN-2's attachment uses a route table that does not import the on-premises routes, so it has no path to the on-premises network. This is the standard OCI segmentation pattern for DRG v2.

Answer

Configure a NAT Gateway on VCN-2 to drop on-premises packets.

Answer

Place VCN-1 and VCN-2 in different OCI tenancies.

Answer

Attach VCN-2 to an Internet Gateway instead of the DRG.

Question 4

What is the main advantage of the OCI Block Volume performance tier selection?

Accepted Answer

Customizable IOPS and throughput. OCI Block Volume performance tiers (Lower Cost, Balanced, Higher Performance, and Ultra High Performance) let administrators choose and adjust IOPS and throughput independently of capacity. This flexibility to customize performance to workload needs is the main advantage, allowing cost optimization without over-provisioning.

Answer

Always fixed price

Answer

Mandatory for boot volumes

Answer

Only for production

Question 5

What is the primary purpose of OCI Object Storage?

Accepted Answer

Unstructured data storage. OCI Object Storage is a highly durable, scalable service designed for storing unstructured data such as images, videos, logs, backups, and documents. It uses a flat namespace with buckets and objects, accessed via REST APIs, and is not intended for block-level or database workloads. This makes 'unstructured data storage' the defining purpose.

Answer

High-performance cache

Answer

Database storage

Answer

OS swap space

Question 6

Which THREE configuration options are available when creating a new OCI Object Storage bucket? (Choose three.)

Accepted Answer

Object Versioning (Enabled or Disabled). Option B is correct because Object Versioning is a bucket-level setting chosen at creation time, allowing you to enable or disable the retention of multiple versions of objects to protect against accidental overwrites or deletions. Option C is correct because when creating a bucket you select the encryption type: Oracle-managed keys (the default) or customer-managed keys stored in OCI Vault (KMS), which determines how objects in the bucket are encrypted at rest. Option D is correct because the bucket's default storage tier can be set to Standard or Infrequent Access, and this tier applies to objects uploaded to the bucket unless overridden per object. Option A is not a bucket creation setting, since IOPS/throughput limits are not provisioned for Object Storage buckets (that concept applies to block volume performance). Option E is not a creation option because cross-region replication is configured separately as a replication policy after the bucket exists, not as a parameter in the create-bucket workflow.

Answer

Maximum IOPS provisioning limit

Answer

Automatic cross-region replication destination region

Question 7

Which TWO of the following statements regarding OCI Network Security Groups (NSGs) are correct?

Accepted Answer

An NSG can contain VNICs from multiple different subnets within the same VCN.. NSGs apply only to a specified set of VNICs and are independent of VCN subnets. They support both stateful and stateless rules.

Answer

Every subnet must have at least one NSG associated with it by default.

Answer

NSGs can span across multiple different VCNs in the same region.

Answer

NSGs replace Security Lists entirely and Security Lists are deprecated.

Question 8

An administrator wants to enforce strict access control based on resource metadata. They decide to use Tag-Based Access Control. Which of the following defines the correct prerequisite structure required before you can write a policy using tag values?

Accepted Answer

Create a Tag Namespace, define a Tag Key within it, apply the tag to resources, and reference the tag in an IAM policy condition.. Tag-based access control requires creating a Tag Namespace, defining Tag Keys within that namespace, applying the tags to resources or requests, and then using tag conditionals in IAM policies.

Answer

Create an IAM group, add users, assign free-form tags directly to the users, and write a policy.

Answer

Create a Dynamic Group, apply a tag namespace to the tenancy root, and assign compartment quotas.

Answer

Define a Resource Principal, attach a tag to the instance, and create a cross-region replication policy.

Question 9

Which TWO methods can be used to transfer data from an on-premises data center into OCI Object Storage? (Choose two.)

Accepted Answer

OCI Data Transfer Appliance for offline data migration. On-premises data can be uploaded to Object Storage via the OCI CLI/API over the public internet or private VCN connections (FastConnect), or shipped physically using Data Transfer Appliances.

Answer

Directly mounting an Object Storage bucket as a local Windows NTFS drive via SMB protocol

Answer

Attaching an Object Storage bucket as an LVM logical volume to an on-premises server

Answer

Using Block Volume Export to push data into Object Storage buckets automatically

Question 10

An administrator created a private subnet and attached a route table with a rule pointing 0.0.0.0/0 to a NAT Gateway. However, instances in this subnet cannot download OS updates from external public repositories. What should the administrator check first?

Accepted Answer

Check the subnet security lists or NSGs for a matching egress rule allowing outbound traffic to the internet.. Security lists or NSGs associated with the private subnet must have an egress rule allowing outbound traffic to 0.0.0.0/0 (all ports or specific ports like 80/443). Without matching egress rules, traffic hitting the NAT gateway will be dropped.

Answer

Check if the instances have public IP addresses assigned.

Answer

Check if an Internet Gateway is also attached to the VCN.

Answer

Check if a Service Gateway is attached to the VCN.

Question 11

Your serverless application built on OCI Functions needs to process events coming from OCI Object Storage when a new file is uploaded. What is the primary mechanism to trigger the function?

Accepted Answer

OCI Events Service. OCI Events Service is the native, event-driven mechanism that emits Object Storage events (e.g., ObjectCreated) and routes them to a Functions target via a rule. When a new object is uploaded, the Events rule matches the bucket and event type, then invokes the function with the event payload.

Answer

Direct polling of Object Storage buckets by the function container

Answer

Scheduled Cron Jobs in Compute

Answer

API Gateway direct integration

Question 12

Which type of Oracle database deployment provides full administrative privileges (SYS and SYSTEM access) at the operating system and database level in OCI?

Accepted Answer

Oracle Base Database System (Virtual Machine or Bare Metal). Oracle Base Database System (also called Base Database Service) runs on a dedicated VM or Bare Metal shape and gives the customer full OS-level and database-level administrative control, including SYS/SYSTEM access and root/sudo on the host. This is the only OCI database deployment among the options that provides that level of privileged access. Autonomous Database variants deliberately restrict OS and SYSDBA-level access to preserve their self-managing model.

Answer

Autonomous JSON Database

Answer

Oracle Autonomous Database

Answer

Oracle Database Serverless Cloud Service

Question 13

You are managing an Oracle Base Database System and need to configure automated backups. By default, where does OCI store these automated backups?

Accepted Answer

An Oracle-managed Object Storage bucket. By default, OCI stores automated backups of an Oracle Base Database System in an Oracle-managed Object Storage bucket. This bucket is provisioned and managed by Oracle, and customers do not need to configure FSS, local disk, or block volumes for default automated backups. The backups are retained according to the configured retention policy and can be restored via the Console or CLI.

Answer

A customer-managed File Storage Service (FSS) mount target

Answer

The local root file system (/u01) of the database VM

Answer

A locally attached block volume separate from the database data disk

Question 14

Which THREE factors should you evaluate when determining whether to use an Oracle Base Database System versus Exadata Cloud Service?

Accepted Answer

Need for Exadata-specific features such as Smart Scan and Hybrid Columnar Compression. Option B is correct because Exadata Cloud Service is the only platform that delivers Exadata-specific capabilities such as Smart Scan, Storage Indexes, and Hybrid Columnar Compression, so a requirement for those features forces the Exadata choice. Option D is correct because Exadata's scale-out architecture, RDMA over Converged Ethernet (RoCE) fabric, and NVMe flash provide far higher I/O throughput and scalability than a single-VM Oracle Base Database System, making workload performance and growth the primary technical discriminator. Option E is correct because Exadata infrastructure carries a substantially higher entry cost (dedicated Exadata quarter/half racks or Exadata Cloud@Customer) than a base system built on a single VM or bare-metal shape, so budget and cost constraints directly influence the decision. Option A is not a valid factor because MySQL compatibility is not a kernel feature of Oracle Database and is irrelevant to choosing between these two Oracle Database services. Option C is not a valid factor because both Oracle Base Database System and Exadata Cloud Service run on Oracle Linux (and Exadata is not offered on Microsoft Windows), so the OS choice does not differentiate them.

Answer

Requirement for MySQL compatibility in the Oracle database kernel

Answer

Whether the operating system must be Microsoft Windows or Linux

Question 15

An administrator wishes to enable Autonomous Data Guard for an Autonomous Database on Dedicated Exadata Infrastructure. What is the primary benefit of enabling this feature?

Accepted Answer

It automatically provisions a standby database and handles failover and switchover operations to ensure high availability.. Autonomous Data Guard is Oracle's managed standby solution for Autonomous Database on Dedicated Exadata Infrastructure. When enabled, Oracle automatically provisions and maintains a standby database in a separate availability domain or region, and it orchestrates role transitions (switchover for planned maintenance, failover for unplanned outages) without manual intervention. This delivers high availability and disaster recovery with an RPO near zero and minimal administrative overhead.

Answer

It allows read-write operations simultaneously on both primary and standby databases across regions.

Answer

It automatically shards tables across two different cloud regions to speed up write operations.

Answer

It reduces cloud storage billing by compressing redundant backup blocks on the standby instance.