1Z0-1072-26 Practice Test 2 — 25 Questions

Question 1

You are running an application on an OKE cluster. You want to ensure that specific pods belonging to a high-priority database caching tier are never scheduled onto the same worker node as each other to avoid a single node failure taking down the entire cache tier. What Kubernetes feature should you configure?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Pod Anti-Affinity. Kubernetes pod anti-affinity allows you to specify rules that prevent pods with matching labels from being scheduled on the same node, availability domain, or fault domain.

Answer

Persistent Volume Claims

Answer

Kubernetes Network Policies

Answer

Horizontal Pod Autoscaler

Question 2

You have deployed an OCI Function and invoked it, but it returns a timeout error. What is the maximum execution timeout limit supported by OCI Functions?

Accepted Answer

900 seconds (15 minutes). OCI Functions have a configurable timeout limit up to a maximum of 900 seconds (15 minutes).

Answer

Infinite

Answer

60 seconds

Answer

3600 seconds (1 hour)

Question 3

A company uses OCI Resource Manager to manage its cloud infrastructure using Terraform. A developer has modified a Terraform configuration file locally and needs to preview the changes that Resource Manager will make to the cloud environment before actually applying them. Which Resource Manager job type should be executed?

Accepted Answer

Plan Job. A 'Plan' job in OCI Resource Manager generates an execution plan, showing what actions Terraform will take when applied against the current state.

Answer

Apply Job

Answer

Import Job

Answer

Destroy Job

Question 4

Your development team needs to access an Autonomous Transaction Processing (ATP) database instance securely over the internet. What artifact must be downloaded and distributed to clients to establish a secure, encrypted connection?

Accepted Answer

A Client Credentials Wallet (wallet.zip) file. Clients connecting to an Autonomous Database require a Mutual TLS (mTLS) wallet, which contains the required SSL certificates and connection descriptors.

Answer

An Identity and Access Management (IAM) API signing key

Answer

An SSH Private Key (.ppk) file

Answer

A Transparent Data Encryption (TDE) master key file

Question 5

An autoscaling configuration is attached to your instance pool. You notice that instances are scaling out correctly based on CPU utilization, but you want to ensure that scaling events do not happen too frequently in response to brief traffic spikes. Which setting should you adjust?

Accepted Answer

The Autoscaling Cooldown Period. Autoscaling configurations allow you to define a cooldown period (step delay) to prevent rapid scaling oscillations.

Answer

The Instance Pool capacity limits

Answer

The VCN DHCP Options timeout value

Answer

The Monitoring service metric polling interval

Question 6

Which OCI service feature enables you to run software containers without provisioning virtual machines or managing Kubernetes clusters, offering simple container execution?

Accepted Answer

Container Instances. OCI Container Instances provide serverless execution for containers without requiring VMs or Kubernetes clusters.

Answer

Bare Metal Compute

Answer

Dedicated VM Hosts

Answer

Instance Pools

Question 7

You are planning to deploy a high-performance computing (HPC) cluster on OCI requiring extremely high packet per second (PPS) and ultra-low latency between compute nodes. Which feature must you utilize?

Accepted Answer

Cluster Networks with RDMA (Remote Direct Memory Access). OCI HPC and bare metal clusters support Cluster Networks with RDMA (Remote Direct Memory Access) over RoCE (RDMA over Converged Ethernet) for ultra-low latency and high throughput.

Answer

NAT Gateway with bandwidth throttling disabled

Answer

Public IP addresses on all compute nodes

Answer

OCI Local Peering Gateway

Question 8

You need to be alerted only when the average CPU utilization of a cluster of instances exceeds 80% for 5 consecutive minutes. Which alarm feature achieves this?

Accepted Answer

Alarm duration and aggregation window. An alarm with a 'statistical' function (average) and a 'duration' setting of 5 minutes satisfies this requirement.

Answer

Event rule

Answer

Notification frequency

Answer

Threshold delay

Question 9

When provisioning an Oracle Base Database Service DB system, which storage management software is used underneath to provide high performance and reliable storage volumes?

Accepted Answer

Oracle Automatic Storage Management (ASM). Oracle Base Database Service utilizes Oracle Automatic Storage Management (ASM) for managing database storage volumes.

Answer

ZFS Storage Appliance software

Answer

EXT4 journaling file system

Answer

Linux Logical Volume Manager (LVM)

Question 10

You need to grant an OCI Function permission to read objects from an OCI Object Storage bucket. How should you configure this securely?

Accepted Answer

Create a dynamic group for the functions and write an IAM policy granting the dynamic group read access to the bucket.. To allow OCI Functions or other services to access other OCI resources securely, you create a dynamic group containing the function(s) and write an IAM policy granting that dynamic group permissions to access the target resource.

Answer

Make the Object Storage bucket completely public so any function can read from it without authentication.

Answer

Embed the tenancy administrator API signing key directly in the function's source code.

Answer

Attach a user credential to the function environment variables.

Question 11

You need to run an OCI Function that connects to an Oracle Autonomous Database secured within a private subnet. How should you configure the function to access the database securely without exposing it to the public internet?

Accepted Answer

Attach the function application to a private subnet within your VCN using VCN configuration.. OCI Functions support VCN configuration, allowing you to attach a function application to a specific subnet within a VCN so that functions can access private resources like databases via private IP addresses.

Answer

Use an API Gateway with a public endpoint and route database queries through HTTP headers.

Answer

Configure a public IP address on the function execution environment.

Answer

Functions cannot access private subnets; you must use an internet gateway.

Question 12

You are designing a disaster recovery strategy for an OCI compute instance. You need to replicate boot volume backups to a secondary region. How should you accomplish this?

Accepted Answer

Use the OCI Console or CLI to copy the boot volume backup to the destination region.. Boot volume backups can be copied across regions using the cross-region copy feature in the OCI Console or CLI, allowing you to restore them as boot volumes in another region.

Answer

Configure a local peering gateway between the two regions' boot storage endpoints.

Answer

Boot volume backups cannot be copied across regions; you must recreate the instance manually.

Answer

Attach the boot volume backup as an Object Storage bucket and sync via FTP.

Question 13

Which THREE features are associated with OCI Dedicated Virtual Machine Hosts? (Choose three.)

Accepted Answer

Visibility into host-level resource capacity and placement control. Dedicated VM hosts provide physical hardware isolation, allow you to run multiple virtual machine instances on a single dedicated server, and give you visibility into host resource capacity.

Answer

Automatic multi-cloud replication across AWS and Azure physical datacenters

Answer

The ability to convert the dedicated host directly into a Kubernetes master node without OS reinstallation

Question 14

What is the primary benefit of using OCI Container Instances compared to managing containers on OCI Container Engine for Kubernetes (OKE)?

Accepted Answer

Container Instances allow you to run containers directly without managing servers, clusters, or orchestrators.. OCI Container Instances are serverless container execution environments that allow you to run containers instantly without having to provision, manage, or scale underlying virtual machines or Kubernetes control planes.

Answer

Container Instances offer lower pricing for long-running enterprise microservices than OKE.

Answer

Container Instances allow direct access to bare metal hypervisors.

Answer

Container Instances support multi-cluster service meshes and advanced ingress controllers.

Question 15

Which OCI shape family is optimized for High-Performance Computing (HPC) workloads requiring high core counts and low-latency clustering?

Accepted Answer

HPC Shapes. HPC shapes are engineered specifically for demanding computational workloads that require massive parallel processing and ultra-low latency.

Answer

Standard Micro Shapes

Answer

Burstable Instances

Answer

General Purpose Standard Shapes

Question 16

An enterprise workload requires a fully managed Oracle Autonomous Data Warehouse with dedicated infrastructure to guarantee isolation from other tenants. Which deployment architecture should you select when provisioning this database?

Accepted Answer

Autonomous Data Warehouse on Dedicated Exadata Infrastructure. Autonomous Database on Dedicated Exadata Infrastructure provides a dedicated database environment that gives you an isolated Exadata infrastructure exclusively for your organization.

Answer

Autonomous Data Warehouse on Shared Exadata Infrastructure

Answer

Exadata Cloud@Customer without Autonomous operations

Answer

Oracle Base Database Service on Dedicated Exadata

Question 17

Your team needs to allow a group of developers to read logs in the Logging service across all compartments, but you want to ensure they cannot modify or delete any logging resources. Which of the following IAM policy verbs should you use?

Accepted Answer

Read. OCI verbs include inspect, read, use, and manage. 'Inspect' lets you list resources, 'read' includes inspect plus getting resource content (like log data), 'use' includes read plus updating/patching, and 'manage' includes all actions. To read logs without modifying, 'read' is appropriate.

Answer

Manage

Answer

Use

Answer

Inspect

Question 18

You are troubleshooting a custom OCI compute image that fails to boot properly after launching an instance. The instance gets stuck in a pre-boot state. Where can you view serial console logs to diagnose the low-level boot sequence and kernel panic messages?

Accepted Answer

OCI Compute Instance Serial Console connection. OCI provides access to the serial console for compute instances, allowing administrators to view low-level kernel boot messages, GRUB menus, and interactive login prompts even if network access is down.

Answer

Object Storage boot bucket logs

Answer

OCI Logging service via custom log agents

Answer

OCI Monitoring service under instance metrics

Question 19

Your development team wants to automatically trigger a serverless function whenever a new object is uploaded to an OCI Object Storage bucket. Which OCI service acts as the foundational router to capture this object upload event and invoke the function?

Accepted Answer

OCI Events Service. The OCI Events service enables you to create automation based on the lifecycle changes of resources in OCI, such as Object Storage creations.

Answer

OCI Monitoring Service

Answer

OCI Logging Service

Answer

OCI Resource Manager

Question 20

You are writing a dynamic group matching rule for compute instances that need access to Object Storage. The instances must be members of the dynamic group if their OCID matches a specific value or if they are tagged with a specific freeform tag. Which syntax is valid for matching either condition using any/all operators?

Accepted Answer

ANY {instance.id = 'ocid1.instance...', tag.Project.Value = 'Alpha'}. Dynamic group matching rules support matching conditions using ALL or ANY operators with parameters such as instance.id and tag.namespace.tagkey.

Answer

MATCH {instance.id == 'ocid1.instance...' OR tag.Project == 'Alpha'}

Answer

DYNAMIC {instance.id IN ('ocid1.instance...'))}

Answer

ALL {instance.id = 'ocid1.instance...', tag.Project.name = 'Alpha'}