1Z0-1072-26 Practice Exam 3 — 20 Questions

Question 1

An enterprise workload requires a fully managed Oracle Autonomous Data Warehouse with dedicated infrastructure to guarantee isolation from other tenants. Which deployment architecture should you select when provisioning this database?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Autonomous Data Warehouse on Dedicated Exadata Infrastructure. Autonomous Database on Dedicated Exadata Infrastructure provides a dedicated database environment that gives you an isolated Exadata infrastructure exclusively for your organization.

Answer

Autonomous Data Warehouse on Shared Exadata Infrastructure

Answer

Exadata Cloud@Customer without Autonomous operations

Answer

Oracle Base Database Service on Dedicated Exadata

Question 2

Your team needs to allow a group of developers to read logs in the Logging service across all compartments, but you want to ensure they cannot modify or delete any logging resources. Which of the following IAM policy verbs should you use?

Accepted Answer

Read. OCI verbs include inspect, read, use, and manage. 'Inspect' lets you list resources, 'read' includes inspect plus getting resource content (like log data), 'use' includes read plus updating/patching, and 'manage' includes all actions. To read logs without modifying, 'read' is appropriate.

Answer

Manage

Answer

Use

Answer

Inspect

Question 3

You are troubleshooting a custom OCI compute image that fails to boot properly after launching an instance. The instance gets stuck in a pre-boot state. Where can you view serial console logs to diagnose the low-level boot sequence and kernel panic messages?

Accepted Answer

OCI Compute Instance Serial Console connection. OCI provides access to the serial console for compute instances, allowing administrators to view low-level kernel boot messages, GRUB menus, and interactive login prompts even if network access is down.

Answer

Object Storage boot bucket logs

Answer

OCI Logging service via custom log agents

Answer

OCI Monitoring service under instance metrics

Question 4

Your development team wants to automatically trigger a serverless function whenever a new object is uploaded to an OCI Object Storage bucket. Which OCI service acts as the foundational router to capture this object upload event and invoke the function?

Accepted Answer

OCI Events Service. The OCI Events service enables you to create automation based on the lifecycle changes of resources in OCI, such as Object Storage creations.

Answer

OCI Monitoring Service

Answer

OCI Logging Service

Answer

OCI Resource Manager

Question 5

You are writing a dynamic group matching rule for compute instances that need access to Object Storage. The instances must be members of the dynamic group if their OCID matches a specific value or if they are tagged with a specific freeform tag. Which syntax is valid for matching either condition using any/all operators?

Accepted Answer

ANY {instance.id = 'ocid1.instance...', tag.Project.Value = 'Alpha'}. Dynamic group matching rules support matching conditions using ALL or ANY operators with parameters such as instance.id and tag.namespace.tagkey.

Answer

MATCH {instance.id == 'ocid1.instance...' OR tag.Project == 'Alpha'}

Answer

DYNAMIC {instance.id IN ('ocid1.instance...'))}

Answer

ALL {instance.id = 'ocid1.instance...', tag.Project.name = 'Alpha'}

Question 6

You are creating an instance configuration from an existing compute instance that has two secondary data block volumes attached in addition to its boot volume. What happens to the data block volumes when you use this instance configuration to create an instance pool?

Accepted Answer

Secondary block volumes are excluded from the instance pool configuration template; instance pools manage compute instances and boot volumes.. Instance configurations capture the instance metadata, shape, image, and boot volume settings. However, secondary block volume attachments are typically not cloned or automatically attached as independent writable block volumes for every new instance in the pool unless explicitly defined or managed via shared storage like File Storage.

Answer

The instance pool creation fails because secondary block volumes are prohibited in instance pools.

Answer

The block volumes become shared network file systems across all pool members simultaneously in read-write mode.

Answer

Identical copies of the block volumes are automatically created and attached to every new instance in the pool.

Question 7

You are configuring a Data Guard association between a primary Oracle Base Database Service DB system and a standby DB system in a different availability domain. The primary database encounters a catastrophic failure. Which action must you perform to promote the standby database to primary using the OCI Console?

Accepted Answer

Perform a Failover operation from the standby database details page.. In OCI Base Database Service, you perform a 'Switchover' for planned maintenance or a 'Failover' for unplanned primary outages.

Answer

Perform a Switchover operation from the standby database details page.

Answer

Delete the Data Guard association and create a new primary database from a backup.

Answer

Run RMAN restore commands directly on the standby host operating system.

Question 8

You are configuring identity federation with an enterprise SAML 2.0 Identity Provider. After mapping the external IdP groups to OCI IAM groups, users successfully log in via SSO but receive an authorization error (404/Not Authorized) when trying to view any resources. What is the most likely cause?

Accepted Answer

No IAM policies have been created granting permissions to the mapped OCI IAM groups.. Successful authentication via federation only proves who the user is; authorization requires IAM policies to be written that grant the mapped OCI IAM groups permissions to resources.

Answer

The SAML assertion signature certificate has expired in the external IdP.

Answer

Federated users cannot access OCI without first creating local user accounts.

Answer

The user's browser blocked the OCI redirection cookies.

Question 9

You are troubleshooting a function timeout in OCI Functions. You notice that the function takes 30 seconds to initialize database connections on every cold start. How can you optimize this initialization overhead?

Accepted Answer

Place the database connection initialization code outside the main function handler method so it executes during container warm start.. To avoid connection overhead on every cold start, database connection pools or initialization logic can be placed outside the function handler method so that container warm starts reuse existing connections.

Answer

Enable instance pool autoscaling on the function application.

Answer

Increase the function memory allocation to 32 GB.

Answer

Migrate the function container to an OKE cluster DaemonSet.

Question 10

You are using the Events service to trigger a Function. What is a required step before this can work?

Accepted Answer

Grant 'use' permissions on the function to the Events service. You must have a policy that allows the Events service to invoke the function.

Answer

Attach a load balancer

Answer

Enable HTTP access on the function

Answer

Create a Service Connector

Question 11

Which TWO methods can be used to authenticate human users to the OCI Console? (Choose two.)

Accepted Answer

Username and password with optional Multi-Factor Authentication (MFA). Console login requires username/password and supports optional or mandatory MFA, as well as federation via external IdPs.

Answer

SSH private keys (.ppk)

Answer

Pre-authenticated request URLs

Answer

API signing key PEM files uploaded via web browser

Question 12

Which TWO pieces of information are required when configuring an OCI IAM Identity Provider for SAML federation? (Choose two.)

Accepted Answer

The SAML 2.0 metadata XML file provided by the external Identity Provider. Configuring a SAML 2.0 IdP requires the IdP metadata XML file (or metadata URL) and a name for the IdP in OCI.

Answer

The physical rack serial number in the data center

Answer

The root compartment database sysadmin password

Answer

The local VCN CIDR block

Question 13

You are configuring backups for an Oracle Base Database System on OCI. You want to store automated full backups and incremental backups to OCI Object Storage. What is the default retention period you can select for automated backups when using the console?

Accepted Answer

Configurable retention periods such as 7, 15, 30, 45, or 60 days. OCI automated database backups support configurable retention periods, commonly 7, 15, 30, 45, or up to 60 days.

Answer

Up to 7 days only

Answer

Real-time streaming backups with no retention limits

Answer

Exactly 365 days fixed

Question 14

You are configuring an Exadata Cloud Service (ExaCS) instance and need to ensure maximum isolation and security for your database infrastructure. Which architectural layer provides tenant isolation at the hypervisor level in ExaCS?

Accepted Answer

Oracle VM or KVM guest virtualization (domU). In Exadata Cloud Service, Oracle manages the underlying hardware, and tenant isolation is achieved using Oracle VM (OVM) or KVM-based virtualization to isolate dom0 and guest domU virtual machines.

Answer

Virtual Cloud Network (VCN) security lists and network security groups

Answer

Storage Server Cell software zones

Answer

Exadata Database Vault compartment boundaries

Question 15

An OCI administrator needs to be notified via email whenever CPU utilization on a critical production compute instance exceeds 90% for a sustained period of 5 minutes. Which combination of services should the administrator configure to achieve this?

Accepted Answer

OCI Monitoring service (to create an alarm on the CpuUtilization metric) and OCI Notifications service (to send the email).. OCI Monitoring service is used to collect metrics, create alarms based on thresholds, and integrate with the OCI Notifications service to dispatch emails.

Answer

OCI Logging Analytics and OCI Notifications service.

Answer

OCI Resource Manager and OCI Monitoring service.

Answer

OCI Events service (to listen for CPU threshold events) and OCI Email Delivery service (to dispatch the email).

Question 16

You need to deploy a traditional Oracle Database on OCI where you have complete administrative root access to the underlying operating system and database server. Which Oracle Database service should you choose?

Accepted Answer

Oracle Base Database Service. Oracle Base Database Service allows you full administrative control, including SYSDBA access and root access to the underlying virtual machine compute instances.

Answer

OCI NoSQL Database

Answer

Exadata Cloud Service with Autonomous Container Databases

Answer

Oracle Autonomous Database

Question 17

You need to back up an Oracle Base Database System to an external target or move database files manually using RMAN. Which OCI storage service is typically used as a staging area for manual RMAN backups?

Accepted Answer

OCI Object Storage. OCI Object Storage is used for storing RMAN backup sets when performing manual backups or database migrations.

Answer

OCI File Storage Service (FSS) NFS mount

Answer

OCI Block Volume service attached via iSCSI

Answer

Local NVMe scratch disks

Question 18

Which TWO actions can be performed using OCI Resource Manager stacks? (Choose two.)

Accepted Answer

Provision and configure cloud infrastructure resources using Terraform configuration files.. OCI Resource Manager uses Terraform to provision, update, import, and destroy infrastructure stacks.

Answer

Send email notifications when an object storage bucket size exceeds a threshold.

Answer

Create custom time-series metric alarms to monitor CPU and memory utilization.

Answer

Automatically ingest and parse custom application log files from compute instances.

Question 19

An administrator wants to allow a group of developers to create and manage Kubernetes clusters (OKE - Oracle Container Engine for Kubernetes) in a specific compartment named 'K8sCompartment'. Which policy statement is correct?

Accepted Answer

Allow group Developers to manage cluster-family in compartment K8sCompartment. Container Engine for Kubernetes resources are managed using the 'cluster-family' resource type in OCI IAM policies.

Answer

Allow group Developers to manage containers in tenancy

Answer

Allow group Developers to use kubernetes in compartment K8sCompartment

Answer

Allow group Developers to read k8s-clusters in compartment K8sCompartment

Question 20

You are designing an IAM policy hierarchy for a multi-tenant OCI environment. You write the following statement in the root compartment: 'Define tenancy TenantA as ocid1.tenancy.oc1..aaaaaaa...; Define group NetworkAdmins as ocid1.group.oc1..aaaaaaa...; Allow group NetworkAdmins to manage virtual-network-family in tenancy TenantA'. What type of policy cross-tenancy grant does this represent?

Accepted Answer

A cross-tenancy policy where the remote group is granted permissions within the defining tenancy.. This represents a remote policy (or cross-tenancy access) where the administrator of TenantA trusts a principal (NetworkAdmins) from another tenancy by defining the remote tenancy and group, and allowing them access.

Answer

A cross-tenancy policy where TenantA is the granting tenancy and the principal belongs to an external identity provider.

Answer

A local policy granting compartment-level administration.

Answer

An invalid policy because cross-tenancy policies cannot span virtual network families.