1Z0-1072-26 Practice Test 22 — 15 Questions

Question 1

Which THREE features are automatically managed by Oracle Autonomous Database without requiring manual DBA intervention?

Accepted Answer

Performance tuning and indexing. Autonomous Database automates patching, backups, and performance tuning.

Answer

Business requirement definition and data modeling

Answer

Custom corporate application code development

Question 2

Which THREE tools or methods can be used to load data into an Oracle Autonomous Database?

Accepted Answer

DBMS_CLOUD PL/SQL package (loading files from OCI Object Storage). Data can be loaded into Autonomous Database using Oracle Data Pump, Database Actions (SQL Developer Web), and DBMS_CLOUD PL/SQL package from Object Storage.

Answer

Direct raw disk block editing via FTP

Answer

Direct OS command line piping via 'cat' and SSH

Question 3

Your security team requires that developers can only terminate Compute instances if the request originates from a specific corporate CIDR block (192.168.100.0/24). How can you implement this requirement using OCI IAM policies?

Accepted Answer

Allow group Developers to use instance-family in tenancy where request.ip in ('192.168.100.0/24'). OCI IAM policies support conditional access using the 'request.ip' variable in combination with logical operators like 'in'.

Answer

Allow group Developers to terminate instances in tenancy where client.subnet = '192.168.100.0/24'

Answer

Allow group Developers to inspect instances in tenancy where request.ip = '192.168.100.0/24'

Answer

Allow group Developers to manage instance-family in tenancy where request.ip = '192.168.100.0/24'

Question 4

What is the primary function of an OCI IAM policy statement?

Accepted Answer

To specify who can access what resources in OCI and at what level of granularity.. An IAM policy statement grants a specific group permission to perform specific actions on specific resources within a specific scope.

Answer

To establish routing tables for internet gateways.

Answer

To configure automated backup schedules for block storage volumes.

Answer

To define firewall rules for IP traffic filtering across VCN subnets.

Question 5

An enterprise customer has a Hybrid cloud architecture. They need to connect their on-premises datacenter to multiple VCNs in different OCI regions using a single dedicated connection. Which OCI component must be used as the central transit hub?

Accepted Answer

Dynamic Routing Gateway (DRG). A Dynamic Routing Gateway (DRG) version 2 acts as a virtual router that provides a single point of entry for your network traffic and supports attachments to multiple VCNs across regions, as well as on-premises connections via FastConnect or VPN.

Answer

NAT Gateway

Answer

Local Peering Gateway (LPG)

Answer

Internet Gateway

Question 6

Which TWO types of traffic can be routed through an OCI Service Gateway?

Accepted Answer

Traffic to OCI Object Storage in the same region. A Service Gateway routes traffic destined for the Oracle Services Network, which includes regional services like Object Storage and Autonomous Database, as well as public Oracle services.

Answer

General web browsing traffic to external websites like google.com

Answer

Traffic destined for an on-premises datacenter via FastConnect

Answer

Peer traffic to another VCN in a different region

Question 7

You are planning to restore an Oracle Base Database Service DB system from an object storage backup. Which backup types are supported by OCI for creating a new DB system?

Accepted Answer

Automated backups or manual full backups. OCI Base Database Service allows you to restore a database from either automated backups or manual full backups stored in Object Storage.

Answer

OCI Block Volume snapshots

Answer

Only incremental manual backups

Answer

Only Data Pump export dump files

Question 8

You are managing an Oracle Base Database System (DB System) on OCI and need to minimize downtime during a planned operating system patching cycle. Which action should you perform to achieve this for a 2-node RAC DB System?

Accepted Answer

Perform a rolling patch on one node at a time using the OCI console or CLI.. For a 2-node RAC DB System, patching is performed in a rolling fashion node by node to maintain high availability and minimize downtime.

Answer

Apply the patch simultaneously to both nodes to ensure the cluster remains synchronized.

Answer

Take a full manual backup, terminate the DB System, and reprovision with the new patched image.

Answer

Convert the 2-node RAC to a Single Instance database, patch it, and convert it back.

Question 9

When configuring automated backups for an Oracle Base Database System on OCI, which THREE options or parameters can you configure or customize? (Choose three.)

Accepted Answer

Backup window (the 2-hour daily timeframe when automated backups start). When setting up automated backups for Base DB Systems, you can define the backup destination, backup retention period, and the daily backup window start time.

Answer

Custom RMAN compression scripts written in shell script format executed via cron.

Answer

Manual physical block-level checksum encryption algorithms via direct OS kernel edits.

Question 10

What is the primary purpose of OCI compartments?

Accepted Answer

To organize and isolate cloud resources for security, access control, and billing management.. Compartments are logical isolations used to organize and control access to OCI resources across projects and departments.

Answer

To replace Virtual Cloud Networks for internal subnetting.

Answer

To isolate physical data center hardware for specific customers.

Answer

To automatically replicate data across multiple OCI regions for disaster recovery.

Question 11

What is the primary function of OCI Identity Domains?

Accepted Answer

To provide comprehensive identity and access management capabilities such as user lifecycle management, MFA, and OAuth/SAML integration.. Identity Domains provide advanced identity governance, user management, and authentication features in OCI, extending traditional IAM capabilities.

Answer

To manage DNS zones and DNS resolution records.

Answer

To manage physical server racks in Oracle Cloud regions.

Answer

To isolate database traffic across virtual cloud networks.

Question 12

Which THREE statements are true about OCI federation with SAML 2.0 Identity Providers? (Choose three.)

Accepted Answer

Users authenticate against the external Identity Provider, not OCI IAM.. Federation supports external IdPs, maps external groups to OCI groups, and does not require local OCI passwords for users.

Answer

Federated users cannot access OCI via the CLI or SDKs.

Answer

Federation requires manual creation of local user profiles for every employee on day one.

Question 13

Which TWO deployment options are available when provisioning an Oracle Autonomous Database? (Choose two.)

Accepted Answer

Shared Exadata Infrastructure. Autonomous Database can be provisioned on either Shared Exadata Infrastructure or Dedicated Exadata Infrastructure.

Answer

Local on-premises hypervisor virtual machines

Answer

Standard OCI Block Volume multi-attach storage clusters

Answer

Bare metal single-tenant instances without Exadata infrastructure

Question 14

An auditor needs to verify all IAM policies across your entire tenancy to ensure compliance. Which policy statement allows a user in the 'Auditors' group to read all policies in the tenancy root?

Accepted Answer

Allow group Auditors to read policies in tenancy. To view policies, the resource type 'policy' must be specified with the 'read' or 'inspect' verb at the tenancy level.

Answer

Allow group Auditors to manage tenancy-resources in tenancy

Answer

Allow user Auditors to inspect security-rules in tenancy

Answer

Allow group Auditors to use iam-policies in compartment root

Question 15

Your security policy states that users must enable Multi-Factor Authentication (MFA) to access production compartments. How can you enforce MFA for specific users in OCI IAM?

Accepted Answer

Configure a security rule (or sign-on policy) within Identity Domains to require MFA for specific groups upon authentication.. OCI IAM supports native identity domains and security rules (formerly sign-on policies) where MFA can be enforced based on user groups and risk levels.

Answer

Enable MFA in the tenancy root compartment settings under Compartment Quotas.

Answer

Write an IAM policy with the condition where request.mfa = 'true'

Answer

Add a tag to the user account indicating that MFA is required.