1Z0-1072-26 Practice Test 21 — 15 Questions

Question 1

Which TWO editions of Oracle Database are generally available for provisioning when creating an Oracle Base Database System in OCI?

Accepted Answer

Standard Edition 2 (SE2). OCI Base Database Systems support Standard Edition 2 and Enterprise Edition.

Answer

Oracle Database Lite Edition

Answer

Oracle Database Express Edition (XE) Cloud Managed

Answer

Community Edition SQL Server

Question 2

Which TWO characteristics distinguish Exadata Cloud Service (ExaCS) from standard Oracle Base Database Systems?

Accepted Answer

Support for Hybrid Columnar Compression (HCC). ExaCS features specialized Exadata storage servers with Smart Scan and supports Hybrid Columnar Compression, unlike standard Base DB systems.

Answer

Requirement to run exclusively on Windows Server operating systems

Answer

Exclusive reliance on standard OCI Block Volume iSCSI storage

Answer

Inability to use Oracle Real Application Clusters (RAC)

Question 3

Which THREE security features are enabled by default or configurable on an Oracle Autonomous Database? (Choose three.)

Accepted Answer

Network Access Control Lists (ACLs) and private endpoints to restrict IP connectivity. Autonomous Database features Transparent Data Encryption (TDE), automated security patching, and network access controls like access control lists (ACLs) and private endpoints.

Answer

Manual customer management of operating system root access permissions

Answer

Disabling all network security controls to allow unrestricted global access

Question 4

You are migrating an on-premises Oracle database to an OCI Autonomous Database using Oracle Data Pump. Which wallet-related file must be downloaded and used by the client utility to establish a secure connection to the Autonomous Database?

Accepted Answer

Database Connection Wallet (Credentials zip file). Autonomous Database requires mutual TLS (mTLS) or TLS connections, which necessitate downloading the credentials zip file (wallet) containing the keystore, truststore, and tnsnames.ora.

Answer

OS-level password shadow file

Answer

Public SSH Key pair

Answer

Keystore and ciphers configuration file

Question 5

You need to write a policy allowing a dynamic group named 'AppInstances' to read objects in an Object Storage bucket, but ONLY if the bucket is tagged with a defined tag namespace 'Operations' and key 'Environment' set to 'Production'. What policy syntax achieves this?

Accepted Answer

Allow dynamic-group AppInstances to read objects in tenancy where target.tag.Operations.Environment = 'Production'. Policies can enforce tag-based access control using the target.tag variable to check if a resource possesses a specific defined tag.

Answer

Allow dynamic-group AppInstances to read objects in compartment Production where target.tag.Operations.Environment = 'true'

Answer

Allow dynamic-group AppInstances to read objects in tenancy where request.tag.Operations.Environment = 'Production'

Answer

Allow dynamic-group AppInstances to read buckets in tenancy where bucket.tag.Operations.Environment = 'Production'

Question 6

You are configuring security for an Oracle Base Database Service instance in a private subnet. Which OCI networking construct should you configure to allow the database to download software patches from Oracle Object Storage without traversing the public internet?

Accepted Answer

Service Gateway. Service Gateways allow resources in a private subnet to access Oracle services such as Object Storage privately within OCI without public internet access.

Answer

Internet Gateway

Answer

Local Peering Gateway

Answer

NAT Gateway

Question 7

When provisioning an Exadata Database Service on Dedicated Infrastructure, what is the fundamental hardware unit that you provision first before creating database deployments?

Accepted Answer

Exadata Infrastructure (Rack). To use Exadata Database Service on Dedicated Infrastructure, you must first provision an Exadata Cloud Infrastructure resource (the rack/hardware), and then create VM clusters and databases on it.

Answer

Individual DB System node

Answer

Autonomous Data Warehouse instance

Answer

Autonomous Container Database

Question 8

An administrator needs to ensure that a newly created group can view billing and cost data across the tenancy, but cannot modify any resources. Which policy grants the appropriate access?

Accepted Answer

Allow group CostAnalysts to read usage-reports in tenancy. Cost governance and billing data can be viewed by users with read or inspect permissions on 'tenancy' or specific cost-tracking resource types.

Answer

Allow group CostAnalysts to inspect compartments in tenancy

Answer

Allow group CostAnalysts to manage billing in tenancy

Answer

Allow group CostAnalysts to use tenancy-budget in tenancy

Question 9

Which TWO of the following are valid verbs used in OCI IAM policy statements? (Choose two.)

Accepted Answer

manage. OCI IAM policies support exactly four standard verbs: inspect, read, use, and manage.

Answer

write

Answer

delete

Answer

execute

Question 10

You are configuring Data Guard between two Exadata Cloud Service instances across different OCI regions. Which network component is mandatory to facilitate redo transport securely across regional boundaries?

Accepted Answer

Remote VCN Peering. Cross-region Data Guard communication requires secure network connectivity, typically achieved using Remote VCN Peering or an Oracle Cloud Infrastructure FastConnect / VPN connection between virtual cloud networks.

Answer

OCI API Gateway

Answer

An Internet Gateway with public IP addresses

Answer

Local VCN Peering gateway

Question 11

Which TWO methods can be used to connect securely to an Autonomous Database instance? (Choose two.)

Accepted Answer

TLS authentication without a wallet when using private endpoints configured with a keystore. Connections to Autonomous Database can be made using Mutual TLS (mTLS) with a credentials wallet, or through TLS without a wallet if private endpoint or TLS authentication is configured.

Answer

Unencrypted plain text TCP/IP sockets on port 1521

Answer

Direct unauthenticated HTTP REST calls without authorization headers

Answer

Direct SSH tunneling through port 22 without database credentials

Question 12

You are troubleshooting a complex policy evaluation in your tenancy. There are multiple overlapping policies defined at both the tenancy root and various compartment levels. Which principle does OCI IAM follow when evaluating conflicting or overlapping policy statements?

Accepted Answer

OCI policies are additive; if any applicable policy grants access, the user is authorized.. OCI IAM evaluates policies based on an additive model (most permissive wins) across the hierarchy, but specific scoping and explicit denials do not exist (there is no explicit deny statement in OCI IAM).

Answer

Explicit deny statements always take precedence over allow statements.

Answer

Compartment-level policies take strict precedence, overriding and nullifying tenancy root policies.

Answer

The most recently created policy overrides all older conflicting policies.

Question 13

You are scaling up an Oracle Base Database System (VM) to add more storage to your existing database data disk group (+DATA). What is the correct procedure in the OCI Console?

Accepted Answer

Edit the DB system storage size in the OCI Console to allocate more storage.. For Base DB systems, you can increase the storage size directly in the OCI Console, and ASM automatically recognizes and resizes the disk groups.

Answer

Terminate the DB system, create a larger block volume, and attach it as root.

Answer

Create a clone of the database to a new shape with higher storage limits.

Answer

Log into the OS via SSH, format a new iSCSI disk, and manually add it to the ASM disk group using SQL*Plus.

Question 14

You are designing a high availability architecture for a mission-critical Oracle Exadata Database Service. You need to ensure zero data loss and minimal downtime during planned hardware maintenance. Which Oracle feature should you leverage?

Accepted Answer

Rolling infrastructure maintenance combined with Real Application Clusters (RAC) and Data Guard. Exadata infrastructure maintenance is coordinated with Oracle Data Guard switchover or RAC rolling maintenance to ensure continuous application availability.

Answer

Manual database export using Data Pump during the maintenance window

Answer

OCI Load Balancer health checks with DNS failover

Answer

Cold backups taken right before maintenance window execution

Question 15

Which THREE factors should you evaluate when determining whether to use an Oracle Base Database System versus Exadata Cloud Service?

Accepted Answer

Need for Exadata-specific features such as Smart Scan and Hybrid Columnar Compression. Decision factors include workload performance/scale requirements, Advanced Exadata features like Smart Scan, and budget/cost considerations.

Answer

Requirement for MySQL compatibility in the Oracle database kernel

Answer

Whether the operating system must be Microsoft Windows or Linux