1Z0-1072-26 Practice Exam 4 — 20 Questions

Question 1

You are troubleshooting a deployment failure in Resource Manager. Where can you see the detailed Terraform output logs?

Accepted Answer

Job logs. The Job details page in Resource Manager shows the full output of the terraform apply/plan operations.

Answer

Events logs

Answer

Audit logs

Answer

Cloud Shell logs

Question 2

Which OCI service is responsible for managing users, groups, compartments, and policies?

Accepted Answer

Identity and Access Management (IAM). Identity and Access Management (IAM) is the foundational OCI service responsible for authentication and authorization.

Answer

OCI Audit

Answer

Resource Manager

Answer

Security Advisor

Question 3

You are configuring a custom log in OCI Logging. You want to parse and extract specific fields from unstructured application log lines using search queries. Which log feature allows you to query, analyze, and create visualizations from these ingested logs?

Accepted Answer

OCI Logging Analytics Log Explorer. OCI Logging Search allows users to query ingested log data using a powerful query language, and Log Analytics offers advanced log analysis features.

Answer

OCI Monitoring Metrics Explorer

Answer

OCI Events Rule Builder

Answer

OCI Resource Manager Jobs

Question 4

You are configuring a Data Guard association for an Autonomous Database on Dedicated Infrastructure. How is the Data Guard standby database provisioned and managed?

Accepted Answer

You enable Data Guard through the OCI Console, and OCI automatically provisions and manages the standby database.. On Dedicated Exadata Infrastructure, Autonomous Data Guard is enabled via the OCI Console or API by selecting the peer region, and OCI automates the provisioning and synchronization of the standby.

Answer

You must manually configure Oracle Net listener files and run 'DGMGRL' commands from the OS command line.

Answer

You must back up the database to Object Storage and restore it manually as a standby in the target region.

Answer

Data Guard is not supported on Autonomous Database Dedicated; you must use GoldenGate instead.

Question 5

Which TWO actions can be performed on an Oracle Autonomous Transaction Processing database using the OCI Console? (Choose two.)

Accepted Answer

Scale up or down the number of OCPUs and storage capacity.. Through the OCI Console, administrators can manage database users, scale CPU and storage resources, restart the database, and configure backups.

Answer

Manually configure custom standby redo log files using SQL*Plus.

Answer

Directly access the database server via SSH using root privileges.

Answer

Modify the underlying Linux operating system kernel parameters.

Question 6

You need to ingest custom application logs from multiple compute instances into OCI Logging. What is the correct sequence of components you must configure within OCI?

Accepted Answer

Create a Log Group, install and configure the OCI Logging Unified Agent on the instances, and create a custom Log pointing to the agent configuration.. To ship custom logs from compute instances, you install the Unified Agent, configure a log group, and create a log resource associated with a unified agent configuration.

Answer

Create a Notification Topic, add HTTP endpoints, and enable Audit logs.

Answer

Create a Resource Manager stack, deploy a Terraform template, and configure an email subscription.

Answer

Create a Monitoring Alarm, configure OCI Events, and link them to an Object Storage bucket.

Question 7

You are managing an Autonomous Database instance on shared infrastructure and need to restrict database access so that only clients connecting from a specific Corporate CIDR block (e.g., 192.168.10.0/24) can connect. How should you implement this?

Accepted Answer

Configure an Access Control List (ACL) specifying the allowed IP CIDR block in the OCI Console.. Autonomous Database allows you to configure Access Control Lists (ACLs) using IP notations or Virtual Cloud Networks to restrict network access.

Answer

Modify the SQL*Net configuration file (sqlnet.ora) stored in the database home.

Answer

Deploy an OCI Web Application Firewall (WAF) policy in front of the database port.

Answer

Attach a VCN Security List directly to the Autonomous Database service endpoint IP.

Question 8

Which feature of Autonomous Database allows you to create a point-in-time read-only or read-write copy of your database instantly without duplicating all the underlying physical data blocks?

Accepted Answer

Database Cloning. Autonomous Database cloning allows you to create quick metadata-based clones (full or metadata clones) without duplicating all storage blocks initially.

Answer

Database backup and restore

Answer

Manual RMAN duplicate command

Answer

Data Pump Export and Import

Question 9

Which THREE features are provided natively by Exadata Cloud Service to deliver high performance and high availability for Oracle databases? (Choose three.)

Accepted Answer

Oracle Real Application Clusters (RAC) support for database high availability.. Exadata Cloud Service leverages Smart Scan (offloading SQL processing to storage cells), Exadata RDMA over Converged Ethernet (RoCE) for ultra-low latency cluster communication, and built-in database high availability through RAC.

Answer

Automatic translation of PL/SQL code into native AWS Redshift SQL syntax.

Answer

Client-managed hypervisor patching via direct SSH access to Dom0 dom0 hypervisor nodes.

Question 10

Your company uses Compute instances deployed across various departments to access OCI Object Storage buckets. Instead of storing API keys on the instances, you decide to use Instance Principals. Which of the following components is NOT required to configure Instance Principals for this workflow?

Accepted Answer

An individual IAM user account created for each compute instance to authenticate API calls.. Instance Principals use dynamic groups to match instances based on tags or compartment OCIDs, and policies to grant permissions. Individual IAM users are never required or created for instance principals.

Answer

Compute instances launched within OCI that support instance metadata services.

Answer

An IAM Policy that grants the Dynamic Group permission to access the Object Storage bucket.

Answer

A Dynamic Group that includes the target Compute instances based on matching rules.

Question 11

Which THREE resource types are associated with networking and can be managed via OCI IAM policies? (Choose three.)

Accepted Answer

virtual-network-family. Networking resource types include virtual-network-family, subnets, route-tables, and security-lists.

Answer

autonomous-databases

Answer

object-storage-buckets

Question 12

An application running on OCI requires an Autonomous Transaction Processing (ATP) database with the ability to automatically scale compute resources up and down based on workload demand, without manual intervention. Which feature should you enable during or after database provisioning?

Accepted Answer

Auto Scaling. Auto Scaling allows the database to use up to three times the base CPU and memory resources when demand requires it, billing only for the resources actually consumed.

Answer

Dynamic Scaling Policy

Answer

Compute Autoscaling Groups

Answer

Elastic Resource Pools

Question 13

What is required for a human user to authenticate programmatically against OCI using the CLI, SDKs, or API?

Accepted Answer

An API signing key pair (PEM format) and its corresponding fingerprint.. Programmatic access requires API signing key pairs (public/private key) along with the user's tenancy OCID, user OCID, and region.

Answer

A SSH key pair generated specifically for IAM authentication.

Answer

A password and an MFA token code.

Answer

A pre-authenticated request URL.

Question 14

When you create a new OCI tenancy, what is the name of the default top-level compartment created automatically by Oracle?

Accepted Answer

Tenancy root (or the root compartment). The root compartment, which is created automatically with every tenancy, is named the tenancy root (or referred to by the tenancy name itself).

Answer

MasterCompartment

Answer

RootComp

Answer

Default-Tenant

Question 15

You are designing a security policy where a dynamic group named 'BatchProcessors' must be allowed to read and write objects in an Object Storage bucket, but ONLY if the request comes from an instance whose tags match a defined tag. However, your policy syntax validation fails when you submit it. Which rule structure is valid for combining resource permissions with tag conditions?

Accepted Answer

Allow dynamic-group BatchProcessors to manage objects in tenancy where target.tag.Project.Name = 'Analytics'. OCI IAM policy conditions are appended using the 'where' keyword followed by variable evaluations like target.tag or request.tag.

Answer

Allow dynamic-group BatchProcessors to manage objects in tenancy CONDITION tag.Project.Name = 'Analytics'

Answer

Allow dynamic-group BatchProcessors to manage objects in tenancy IF target.tag.Project.Name == 'Analytics'

Answer

Allow dynamic-group BatchProcessors to manage objects in tenancy WITH tag Project.Name = 'Analytics'

Question 16

Your organization is implementing dynamic groups to manage automated deployments from OCI Functions and Compute instances. Which THREE of the following matching rule criteria are valid for constructing OCI dynamic groups? (Choose three.)

Accepted Answer

Matching by compartment OCID (ALL {instance.compartment.id = 'ocid1...'}). Dynamic group matching rules can evaluate instance OCIDs, compartment OCIDs, resource tags (defined tags), and image OCIDs. They do not evaluate local Unix user accounts or static IAM user passwords.

Answer

Matching by local Linux operating system user accounts (e.g., /etc/passwd UID).

Answer

Matching by specific static IAM user password expiration dates.

Question 17

Your organization uses Identity Domains. You need to configure a dynamic group matching rule that includes all compute instances tagged with a defined tag namespace 'Department' and key 'CostCenter' equal to '400'. What is the correct syntax?

Accepted Answer

ALL {tag.Department.CostCenter.value = '400'}. Dynamic group rules support defined tags using the syntax tag...value = '' or similar notation depending on the exact schema, but standard OCI grammar uses tag.namespace.tagkey.value = 'val' or tag.namespace.tagkey = 'val'. Specifically, for defined tags: tag.Department.CostCenter.value = '400'.

Answer

ANY {defined.tag.Department.CostCenter == '400'}

Answer

ALL {instance.tag.Department.CostCenter = '400'}

Answer

MATCH {tag:Department:CostCenter = '400'}

Question 18

Which TWO actions can an OCI administrator perform on user accounts? (Choose two.)

Accepted Answer

Manage group memberships for the user. Administrators can deactivate user accounts, force password resets, and manage group memberships.

Answer

Modify the physical hardware serial number of the user's laptop

Answer

Configure the user's home Wi-Fi router security settings

Answer

Directly access the user's corporate email inbox

Question 19

You are troubleshooting a federated user login issue where users authenticate successfully through your corporate SAML IdP, but upon redirection to OCI, they encounter an error stating that no matching user account or group mapping exists. What is the most likely misconfiguration?

Accepted Answer

The group mapping rule in the OCI Identity Provider configuration does not match the incoming group claim in the SAML assertion.. Federated group mappings link external IdP group names to OCI IAM group names. If the group name in the SAML assertion does not match the mapped rule in OCI, the user cannot be authorized.

Answer

The user's password in OCI IAM has expired and must be reset.

Answer

The API signing key of the IdP metadata XML file needs to be rotated daily.

Answer

OCI requires manual creation of local user profiles for every federated login attempt.

Question 20

Your organization requires that all IAM policies created in the tenancy must be reviewed and approved. To facilitate auditing, you need to write a policy allowing the 'ComplianceTeam' group to read IAM policies and read tenancy metadata. Which policy statement correctly implements this?

Accepted Answer

Allow group ComplianceTeam to read policies, tenancy in tenancy. Reading IAM policies requires the 'policies' resource type, and tenancy metadata requires the 'tenancy' resource type.

Answer

Allow group ComplianceTeam to use security-audits in compartment root

Answer

Allow group ComplianceTeam to inspect all-resources in tenancy

Answer

Allow group ComplianceTeam to manage iam-configs in tenancy