1Z0-1072-26 Practice Test 24 — 15 Questions

Question 1

What happens to the resources inside a compartment when you delete the compartment itself?

Accepted Answer

The compartment cannot be deleted until all resources within it are deleted or moved to another compartment.. Before a compartment can be deleted in OCI, it must be completely empty of all resources and child compartments.

Answer

All resources inside the compartment are automatically deleted along with it.

Answer

Resources become orphaned and are managed by the tenancy administrator group.

Answer

Resources are automatically moved to the root compartment.

Question 2

An administrator needs to allow a group of developers to create and manage File Storage Service (FSS) file systems and mount targets in a compartment named 'FSCompartment'. Which policy statement is correct?

Accepted Answer

Allow group Developers to manage file-storage-family in compartment FSCompartment. File Storage resources are managed using the 'file-storage-family' resource type in OCI IAM policies.

Answer

Allow group Developers to read storage-systems in tenancy

Answer

Allow group Developers to manage mount-targets in compartment FSCompartment

Answer

Allow group Developers to use nfs-shares in compartment FSCompartment

Question 3

Which TWO statements are true regarding cross-tenancy IAM policies? (Choose two.)

Accepted Answer

The resource (target) tenancy must define a policy allowing the external group using the tenancy name.. Cross-tenancy access requires an endorsement policy in the principal tenancy and a commitment policy in the resource tenancy.

Answer

The resource tenancy must define an endorsement policy allowing the external group to access its resources.

Answer

Cross-tenancy access requires every external user to have a local shadow user account.

Answer

Cross-tenancy policies are configured exclusively in the OCI DNS service.

Question 4

Which THREE actions occur or are required when migrating an OCI compartment containing resources to a new parent compartment? (Choose three.)

Accepted Answer

Policies that reference the moved compartment by path may need to be updated.. Moving a compartment requires policies in both source and destination compartments/tenancy, and all child compartments/resources move along with it.

Answer

All compute instances in the compartment are automatically terminated and restarted.

Answer

Virtual Cloud Networks must be deleted before moving the compartment.

Question 5

Which TWO statements are true regarding OCI IAM policy evaluation behavior? (Choose two.)

Accepted Answer

There are no explicit 'Deny' rules in OCI IAM policy grammar.. OCI IAM policies evaluate additively across compartments, and there are no explicit denies.

Answer

Tenancy root policies always override and cancel compartment-level policies.

Answer

Explicit deny statements take precedence over all allow statements.

Answer

Policy evaluation stops immediately upon encountering the first matching statement.

Question 6

What is the primary purpose of an OCI API signing key?

Accepted Answer

To cryptographically sign API requests made by OCI SDKs, CLI, or REST API clients.. API signing keys are cryptographic key pairs used to sign API requests made via the OCI CLI, SDKs, or REST API.

Answer

To encrypt data at rest inside Object Storage buckets.

Answer

To establish IPsec VPN tunnels between corporate datacenters and OCI VCNs.

Answer

To authenticate users logging into the OCI web-based Console.

Question 7

An administrator wants to ensure that users belonging to the 'Contractors' group can only access OCI resources during normal business hours (Monday through Friday, 9 AM to 5 PM). Which policy feature should be used?

Accepted Answer

OCI IAM policies do not support time-of-day or day-of-week conditions; this must be managed via external IdP federation policies or session token lifetimes.. OCI IAM policies do not natively support time-of-day or day-of-week conditional constraints directly in policy syntax.

Answer

Write a policy with the condition: where request.time.hour between '09:00' and '17:00'

Answer

Configure an IAM security policy rule using the schedule builder in the OCI Console.

Answer

Use the 'time-window' parameter in the dynamic group matching rule.

Question 8

Which THREE conditions can be evaluated using conditional clauses in OCI IAM policies? (Choose three.)

Accepted Answer

Source IP address of the API request (request.ip). OCI IAM policies support conditional variables such as request.ip, request.subnet.id, and target.tag.

Answer

The user's corporate salary bracket

Answer

The local weather conditions in the data center region

Question 9

Which THREE attributes can be evaluated in an OCI dynamic group matching rule for compute instances? (Choose three.)

Accepted Answer

Compartment OCID (instance.compartment.id). Dynamic group rules support matching by compartment ID, instance ID, and defined/freeform tags.

Answer

The operating system user password hash

Answer

The public IP address of the user launching the instance

Question 10

Which TWO options are valid ways to organize resources in OCI? (Choose two.)

Accepted Answer

Compartments. OCI resources are primarily organized using compartments and tags.

Answer

Windows Registry hives

Answer

Active Directory organizational units synced directly to resource folders

Answer

Physical server chassis slots

Question 11

Two VCNs (VCN-A and Vcn-B) reside in the same OCI region but in different compartments. You need to establish a low-latency, high-bandwidth connection between them using local VCN peering. Which component is NOT required for this setup?

Accepted Answer

Internet Gateway attached to VCN-A. Local VCN peering requires a Local Peering Gateway (LPG) in each VCN, matching route table rules in both VCNs, and security rules permitting traffic. An Internet Gateway is not required because local peering traffic stays entirely within the Oracle backbone network.

Answer

Local Peering Gateway (LPG) in VCN-A

Answer

Route table rules pointing to the LPG

Answer

Local Peering Gateway (LPG) in VCN-B

Question 12

You are troubleshooting a web application where users intermittently experience 504 Gateway Timeout errors when connecting via the OCI Public Load Balancer. What is the most common cause related to the load balancer or backend configuration?

Accepted Answer

Backend servers are taking longer to process requests than the load balancer idle timeout threshold.. A 504 Gateway Timeout occurs when the load balancer does not receive a timely response from the backend servers within the configured idle timeout period.

Answer

The Internet Gateway has exceeded its bandwidth limit.

Answer

The NAT Gateway is blocking incoming HTTP traffic.

Answer

The VCN route table is missing a default route.

Question 13

Which THREE actions can be performed on compartments in OCI? (Choose three.)

Accepted Answer

Create nested child compartments up to 6 levels deep. Compartments can be created, moved within the hierarchy (reparented), and deleted (when empty).

Answer

Assign a private IP address directly to a compartment

Answer

Convert a compartment into a virtual cloud network

Question 14

Which TWO resource types can be managed using OCI IAM policies? (Choose two.)

Accepted Answer

object-family. OCI IAM policies govern access to virtually all OCI resources, including compute and object storage.

Answer

employee-badge-readers

Answer

corporate-laptop-hardware

Answer

office-wifi-routers

Question 15

Which TWO types of groups exist in OCI IAM? (Choose two.)

Accepted Answer

Dynamic groups. OCI IAM features standard user groups and dynamic groups for resources.

Answer

Compartment security groups

Answer

Virtual network groups

Answer

Billing resource groups