1Z0-1072-26 Practice Test 21 — 15 Questions

Question 1

An administrator needs to scale up CPU cores for an existing Oracle Autonomous Transaction Processing database without causing application downtime. Which feature of Autonomous Database allows this?

Accepted Answer

Autonomous Database Elastic Resource Scaling. Autonomous Database Elastic Resource Scaling allows you to scale the number of OCPU cores (and optionally storage) up or down on a running Autonomous Transaction Processing database without any downtime. The scaling operation is performed online by Oracle's managed infrastructure, so active sessions and applications continue to run. This is the built-in feature specifically designed for the 'scale up CPU cores without downtime' requirement.

Answer

Database migration via Oracle Zero Downtime Migration tool

Answer

Manual resizing through operating system configuration files

Answer

Database cloning

Question 2

Which THREE components are required when setting up OCI Functions to build, push, and deploy a serverless function? (Choose three.)

Accepted Answer

The Fn Project CLI tool installed on your machine or cloud shell. Option C is correct because the Fn Project CLI (fn) is the primary tool used to initialize, build, push, and deploy functions to OCI Functions, and it must be installed on the developer's machine or used via OCI Cloud Shell. Option D is correct because an OCI Functions Application is a logical grouping of functions that provides the namespace and configuration context in which functions are created and deployed. Option E is correct because OCI Functions packages each function as a Docker container image, and that image must be pushed to and stored in an Oracle Cloud Infrastructure Registry (OCIR) repository before it can be deployed. Option A is not required because File Storage Service mount targets are unrelated to the function build/push/deploy workflow and are not attached to a function registry. Option B is not required because OCI Functions is a fully managed serverless service; customers do not provision or manage Bare Metal instances or Kubernetes master nodes themselves.

Answer

An active File Storage Service mount target attached directly to the function registry

Answer

A dedicated Bare Metal compute instance running Kubernetes master nodes

Question 3

What is the function of the OCI IAM 'inspect' verb?

Accepted Answer

It allows users to list resources of a given type without viewing their contents or configuration details.. The OCI IAM 'inspect' verb grants permission to list resources of a given type — for example, seeing that a compute instance exists — but it does not permit viewing the resource's contents, configuration, or metadata. It is the lowest-privilege verb in the OCI verb hierarchy, sitting below 'read'. This makes it ideal for scenarios where a user needs inventory visibility without access to sensitive configuration details.

Answer

It allows users to inspect security vulnerabilities on compute instances.

Answer

It allows users to create, update, and delete resources.

Answer

It allows users to download object storage bucket files.

Question 4

An auditor needs to verify all IAM policies across your entire tenancy to ensure compliance. Which policy statement allows a user in the 'Auditors' group to read all policies in the tenancy root?

Accepted Answer

Allow group Auditors to read policies in tenancy. The verb 'read' in OCI IAM includes the ability to list and get details of a resource, and 'policies' is the correct resource-type for IAM policy objects. Scoping the statement to 'in tenancy' grants visibility across the entire tenancy root, which is exactly what an auditor needs to review all policies. The correct syntax is 'Allow group Auditors to read policies in tenancy'.

Answer

Allow group Auditors to manage tenancy-resources in tenancy

Answer

Allow user Auditors to inspect security-rules in tenancy

Answer

Allow group Auditors to use iam-policies in compartment root

Question 5

You need to configure custom DNS resolution for instances within your OCI VCN so they can resolve hostnames of your on-premises datacenter servers. What should you configure in OCI?

Accepted Answer

Custom DNS forwarders in the VCN Resolver pointing to on-premises DNS servers via the DRG. OCI's VCN Resolver supports custom DNS forwarders that send queries for specific domains to on-premises DNS servers reachable through the DRG (over FastConnect or Site-to-Site VPN). This is the correct mechanism for hybrid DNS resolution where VCN instances need to resolve on-premises hostnames.

Answer

A NAT Gateway configured with DNS proxy settings

Answer

A public DNS zone for your on-premises domain

Answer

An Internet Gateway with custom host file mappings

Question 6

You are managing an Oracle Base Database System and need to secure data at rest by using your own encryption keys rather than Oracle-managed keys. Which OCI service must you integrate with the database?

Accepted Answer

OCI Vault (Key Management Service). To use customer-managed encryption keys for data at rest on an Oracle Base Database System, you must integrate with OCI Vault (Key Management Service). OCI Vault stores and manages the master encryption keys, and the database uses them to encrypt datafiles, backups, and other storage. This satisfies compliance requirements that mandate customer-controlled keys rather than Oracle-managed keys.

Answer

Oracle Cloud Guard

Answer

Identity and Access Management (IAM) Policies

Answer

OCI Object Storage Server-Side Encryption

Question 7

You are planning disaster recovery for an Exadata Database Service on Dedicated Infrastructure. You need to configure Oracle Active Data Guard with real-time apply. What unique capability does Active Data Guard provide over standard Data Guard?wirtschaft

Accepted Answer

It allows read-only queries to run on the physical standby database while real-time redo apply is active.. Oracle Active Data Guard extends standard Data Guard by allowing the physical standby database to be open in read-only mode while redo apply (including real-time apply) continues. This means reporting, ad-hoc queries, and read-only workloads can be offloaded to the standby without interrupting the apply process. Standard Data Guard requires the standby to be mounted (not open) for redo apply, so it cannot serve queries. Active Data Guard thus provides both disaster recovery and read scalability from the same standby.

Answer

It replicates data at the block level across heterogeneous database engines (e.g., PostgreSQL to Oracle).

Answer

It automatically shards the primary database tables across multiple standby regions.

Answer

It allows read-write operations on the standby database while synchronizing with the primary.

Question 8

An OCI architect configures a DRG with transit routing, connecting VCN-A and Vcn-B to the DRG. Both VCNs need to communicate with the on-premises datacenter connected via FastConnect. However, VCN-A instances can reach on-premises, but Vcn-B cannot. What is the most likely misconfiguration in the DRG?

Accepted Answer

The DRG attachment for Vcn-B is associated with a DRG route table that lacks the import route distribution for the on-premises network.. In DRG transit routing, each VCN attachment is associated with a DRG route table, and that route table must import routes from the appropriate route distribution (e.g., the distribution containing on-premises routes learned via FastConnect). If VCN-B's attachment uses a route table that does not import the on-premises distribution, VCN-B has no route to on-premises even though VCN-A does.

Answer

VCN CIDRs must be identical for transit routing to function.

Answer

FastConnect only supports a single VCN attachment at a time.

Answer

Vcn-B must use an Internet Gateway instead of a DRG.

Question 9

You are managing an Oracle Base Database System and need to configure automated backups to retain backups for a custom period (e.g., 60 days). Where can you configure this retention period?

Accepted Answer

In the DB system backup configuration settings within the OCI Console. For Oracle Base Database Service (DB Systems) on OCI, the backup retention period is configured directly in the DB system's backup configuration settings in the OCI Console (or via CLI/SDK). You can set a custom retention period (e.g., 60 days) when enabling automatic backups, and this value is stored as part of the DB system's backup policy. This is a native OCI-level configuration, not something managed through Object Storage lifecycle rules or database initialization parameters.

Answer

By modifying retention rules on Object Storage lifecycle policies

Answer

Backup retention is fixed at 30 days and cannot be modified.

Answer

By editing the 'init.ora' parameter file using SQL*Plus

Question 10

A team is using OCI File Storage Service and needs to protect against accidental deletion of files by end users. Which feature should be implemented?

Accepted Answer

FSS Snapshots. File Storage Service supports snapshots, which are read-only, point-in-time versions of a file system that allow users to recover accidental deletions.

Answer

Object Storage Lifecycle Policies

Answer

FSS Object Versioning

Answer

Block Volume Volume Groups

Question 11

You are running an application on an OKE cluster. You want to ensure that specific pods belonging to a high-priority database caching tier are never scheduled onto the same worker node as each other to avoid a single node failure taking down the entire cache tier. What Kubernetes feature should you configure?

Accepted Answer

Pod Anti-Affinity. Kubernetes pod anti-affinity allows you to specify rules that prevent pods with matching labels from being scheduled on the same node, availability domain, or fault domain.

Answer

Persistent Volume Claims

Answer

Kubernetes Network Policies

Answer

Horizontal Pod Autoscaler

Question 12

A database administrator requires a Block Volume attached to an Oracle Linux compute instance to deliver ultra-high IOPS and throughput with minimal latency for a high-transaction workload. Which volume performance level should be selected?

Accepted Answer

Ultra High Performance. OCI Block Volume performance levels range from Lower Cost to Ultra High Performance. Ultra High Performance is designed for the most demanding workloads, delivering up to 225,000 IOPS and 4,800 MB/s throughput per volume with sub-millisecond latency, making it the correct choice for a high-transaction database requiring ultra-high IOPS and minimal latency.

Answer