1Z0-1072-26 Practice Exam 2 — 20 Questions

Question 1

You are implementing automated disaster recovery for your OCI compute instances. You configure automated backups for boot volumes and block volumes using volume groups. What is the primary advantage of using Volume Groups for backups?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Volume groups ensure point-in-time, coordinated crash-consistent or application-consistent backups across multiple attached volumes.. Volume Groups allow you to group multiple boot and block volumes together and take crash-consistent or application-consistent point-in-time backups simultaneously across all volumes in the group.

Answer

Volume groups automatically replicate data across different cloud providers.

Answer

Volume groups convert block volumes into high-performance local NVMe storage.

Answer

Volume groups eliminate all storage costs associated with snapshots.

Question 2

You want to deploy a Windows compute instance in OCI using your own custom software pre-installed. What is the recommended workflow to achieve this?

Accepted Answer

Launch an instance from a standard Windows image, install your software, create a custom image from the boot volume, and use it to launch new instances.. The workflow for custom software deployment involves launching a base image instance, installing and configuring your software, capturing a custom image from the boot volume, and using that custom image for future deployments.

Answer

Upload your local virtual machine disk (VMDK/VHD) directly to a compute instance as a running process.

Answer

Run a bash script via user data on every new instance launch to download and install the software every time.

Answer

Use Block Volume backups as direct instance templates without creating custom images.

Question 3

How can you prevent users from deleting a tag namespace?

Accepted Answer

Remove 'delete' permissions in an IAM policy. IAM policies are required to restrict deletion permissions on tag namespaces.

Answer

Enable soft delete

Answer

Set the namespace to read-only

Answer

Apply a lifecycle policy

Question 4

Which tool or command-line utility is primarily used to build, test, and push OCI Functions container images to the Oracle Functions Registry?

Accepted Answer

fn CLI. The Fn Project CLI is the open-source command-line tool used to develop, build, and deploy functions to OCI Functions.

Answer

terraform

Answer

oci-cli

Answer

kubectl

Question 5

Which OCI service feature enables you to automatically create identical compute instances based on an instance configuration and adjust the pool size based on demand?

Accepted Answer

Instance Pools and Autoscaling. Instance Pools combined with Autoscaling Configurations allow you to manage groups of identical instances and scale them automatically.

Answer

Dedicated Virtual Machine Hosts

Answer

Compute Cluster Placement Groups

Answer

Managed File Storage

Question 6

You are running an application on an OKE cluster. You want to ensure that specific pods belonging to a high-priority database caching tier are never scheduled onto the same worker node as each other to avoid a single node failure taking down the entire cache tier. What Kubernetes feature should you configure?

Accepted Answer

Pod Anti-Affinity. Kubernetes pod anti-affinity allows you to specify rules that prevent pods with matching labels from being scheduled on the same node, availability domain, or fault domain.

Answer

Persistent Volume Claims

Answer

Kubernetes Network Policies

Answer

Horizontal Pod Autoscaler

Question 7

You have deployed an OCI Function and invoked it, but it returns a timeout error. What is the maximum execution timeout limit supported by OCI Functions?

Accepted Answer

900 seconds (15 minutes). OCI Functions have a configurable timeout limit up to a maximum of 900 seconds (15 minutes).

Answer

Infinite

Answer

60 seconds

Answer

3600 seconds (1 hour)

Question 8

A company uses OCI Resource Manager to manage its cloud infrastructure using Terraform. A developer has modified a Terraform configuration file locally and needs to preview the changes that Resource Manager will make to the cloud environment before actually applying them. Which Resource Manager job type should be executed?

Accepted Answer

Plan Job. A 'Plan' job in OCI Resource Manager generates an execution plan, showing what actions Terraform will take when applied against the current state.

Answer

Apply Job

Answer

Import Job

Answer

Destroy Job

Question 9

Your development team needs to access an Autonomous Transaction Processing (ATP) database instance securely over the internet. What artifact must be downloaded and distributed to clients to establish a secure, encrypted connection?

Accepted Answer

A Client Credentials Wallet (wallet.zip) file. Clients connecting to an Autonomous Database require a Mutual TLS (mTLS) wallet, which contains the required SSL certificates and connection descriptors.

Answer

An Identity and Access Management (IAM) API signing key

Answer

An SSH Private Key (.ppk) file

Answer

A Transparent Data Encryption (TDE) master key file

Question 10

An autoscaling configuration is attached to your instance pool. You notice that instances are scaling out correctly based on CPU utilization, but you want to ensure that scaling events do not happen too frequently in response to brief traffic spikes. Which setting should you adjust?

Accepted Answer

The Autoscaling Cooldown Period. Autoscaling configurations allow you to define a cooldown period (step delay) to prevent rapid scaling oscillations.

Answer

The Instance Pool capacity limits

Answer

The VCN DHCP Options timeout value

Answer

The Monitoring service metric polling interval

Question 11

Which OCI service feature enables you to run software containers without provisioning virtual machines or managing Kubernetes clusters, offering simple container execution?

Accepted Answer

Container Instances. OCI Container Instances provide serverless execution for containers without requiring VMs or Kubernetes clusters.

Answer

Bare Metal Compute

Answer

Dedicated VM Hosts

Answer

Instance Pools

Question 12

You are planning to deploy a high-performance computing (HPC) cluster on OCI requiring extremely high packet per second (PPS) and ultra-low latency between compute nodes. Which feature must you utilize?

Accepted Answer

Cluster Networks with RDMA (Remote Direct Memory Access). OCI HPC and bare metal clusters support Cluster Networks with RDMA (Remote Direct Memory Access) over RoCE (RDMA over Converged Ethernet) for ultra-low latency and high throughput.

Answer

NAT Gateway with bandwidth throttling disabled

Answer

Public IP addresses on all compute nodes

Answer

OCI Local Peering Gateway

Question 13

You need to be alerted only when the average CPU utilization of a cluster of instances exceeds 80% for 5 consecutive minutes. Which alarm feature achieves this?

Accepted Answer

Alarm duration and aggregation window. An alarm with a 'statistical' function (average) and a 'duration' setting of 5 minutes satisfies this requirement.

Answer

Event rule

Answer

Notification frequency

Answer

Threshold delay

Question 14

When provisioning an Oracle Base Database Service DB system, which storage management software is used underneath to provide high performance and reliable storage volumes?

Accepted Answer

Oracle Automatic Storage Management (ASM). Oracle Base Database Service utilizes Oracle Automatic Storage Management (ASM) for managing database storage volumes.

Answer

ZFS Storage Appliance software

Answer

EXT4 journaling file system

Answer

Linux Logical Volume Manager (LVM)

Question 15

You need to grant an OCI Function permission to read objects from an OCI Object Storage bucket. How should you configure this securely?

Accepted Answer

Create a dynamic group for the functions and write an IAM policy granting the dynamic group read access to the bucket.. To allow OCI Functions or other services to access other OCI resources securely, you create a dynamic group containing the function(s) and write an IAM policy granting that dynamic group permissions to access the target resource.

Answer

Make the Object Storage bucket completely public so any function can read from it without authentication.

Answer

Embed the tenancy administrator API signing key directly in the function's source code.

Answer

Attach a user credential to the function environment variables.

Question 16

You need to run an OCI Function that connects to an Oracle Autonomous Database secured within a private subnet. How should you configure the function to access the database securely without exposing it to the public internet?

Accepted Answer

Attach the function application to a private subnet within your VCN using VCN configuration.. OCI Functions support VCN configuration, allowing you to attach a function application to a specific subnet within a VCN so that functions can access private resources like databases via private IP addresses.

Answer

Use an API Gateway with a public endpoint and route database queries through HTTP headers.

Answer

Configure a public IP address on the function execution environment.

Answer

Functions cannot access private subnets; you must use an internet gateway.

Question 17

You are designing a disaster recovery strategy for an OCI compute instance. You need to replicate boot volume backups to a secondary region. How should you accomplish this?

Accepted Answer

Use the OCI Console or CLI to copy the boot volume backup to the destination region.. Boot volume backups can be copied across regions using the cross-region copy feature in the OCI Console or CLI, allowing you to restore them as boot volumes in another region.

Answer

Configure a local peering gateway between the two regions' boot storage endpoints.

Answer

Boot volume backups cannot be copied across regions; you must recreate the instance manually.

Answer

Attach the boot volume backup as an Object Storage bucket and sync via FTP.

Question 18

Which THREE features are associated with OCI Dedicated Virtual Machine Hosts? (Choose three.)

Accepted Answer

Visibility into host-level resource capacity and placement control. Dedicated VM hosts provide physical hardware isolation, allow you to run multiple virtual machine instances on a single dedicated server, and give you visibility into host resource capacity.

Answer

Automatic multi-cloud replication across AWS and Azure physical datacenters

Answer

The ability to convert the dedicated host directly into a Kubernetes master node without OS reinstallation

Question 19

What is the primary benefit of using OCI Container Instances compared to managing containers on OCI Container Engine for Kubernetes (OKE)?

Accepted Answer

Container Instances allow you to run containers directly without managing servers, clusters, or orchestrators.. OCI Container Instances are serverless container execution environments that allow you to run containers instantly without having to provision, manage, or scale underlying virtual machines or Kubernetes control planes.

Answer

Container Instances offer lower pricing for long-running enterprise microservices than OKE.

Answer

Container Instances allow direct access to bare metal hypervisors.

Answer

Container Instances support multi-cluster service meshes and advanced ingress controllers.

Question 20

Which OCI shape family is optimized for High-Performance Computing (HPC) workloads requiring high core counts and low-latency clustering?

Accepted Answer

HPC Shapes. HPC shapes are engineered specifically for demanding computational workloads that require massive parallel processing and ultra-low latency.

Answer

Standard Micro Shapes

Answer

Burstable Instances

Answer

General Purpose Standard Shapes