1Z0-1072-26 Practice Test 3 — 25 Questions

Question 1

You are deploying a microservices application on OKE and want to implement zero-downtime rolling deployments for your pods. Which Kubernetes deployment strategy and configuration parameter should you utilize?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

RollingUpdate strategy with maxSurge and maxUnavailable configured. The RollingUpdate strategy is Kubernetes' native mechanism for replacing pods incrementally so that some old replicas remain available while new ones come up, enabling zero-downtime deployments. The maxSurge parameter controls how many extra pods above the desired count can be created during the rollout, and maxUnavailable controls how many pods below the desired count can be temporarily unavailable. Tuning both ensures capacity is maintained throughout the update.

Answer

Horizontal Pod Autoscaler with metric-based CPU triggers

Answer

Static Pod assignment via node selectors

Answer

Recreate strategy with immediate termination of all old pods

Question 2

Your organization requires that all database traffic originating from OCI subnets to Oracle Autonomous Database bypass the public internet and use private IP paths. You have configured a Service Gateway. What additional configuration is mandatory in the subnet route table?

Accepted Answer

Add a route rule with destination service cidr (e.g. All Services in Oracle Services Network) and target as the Service Gateway.. To direct traffic to the Service Gateway, the subnet route table must have a route rule where the destination is the Oracle Services Network (or a specific service region prefix) and the target is the Service Gateway.

Answer

No route table changes are required once the Service Gateway is attached to the VCN.

Answer

Add a route rule pointing to the Dynamic Routing Gateway.

Answer

Add a route rule with destination 0.0.0.0/0 and target as the Service Gateway.

Question 3

Which TWO components are involved when routing traffic from an OCI private subnet to an on-premises datacenter via FastConnect?

Accepted Answer

Dynamic Routing Gateway (DRG). Traffic from a private subnet to on-premises via FastConnect requires a route table rule pointing to the Dynamic Routing Gateway (DRG), and the FastConnect virtual circuit terminating on that DRG.

Answer

Internet Gateway

Answer

Local Peering Gateway

Answer

NAT Gateway

Question 4

Which TWO default resource types are available in every new OCI tenancy? (Choose two.)

Accepted Answer

The tenancy root compartment. Option C is correct because every new OCI tenancy is created with a single root compartment that serves as the top-level container for all resources and cannot be deleted. Option D is correct because OCI automatically provisions a default group named Administrators and an initial tenancy administrator user during tenancy creation, and this user is the first identity that can manage the tenancy. Option A is incorrect because Autonomous Data Warehouse instances are not created by default and must be provisioned by the customer. Option B is incorrect because Object Storage buckets, including archive-tier buckets, are not pre-created in a new tenancy. Option E is incorrect because Kubernetes clusters, including production clusters, are not pre-configured and must be created by the user.

Answer

A fully configured Autonomous Data Warehouse

Answer

A 10TB Object Storage archive bucket

Answer

A pre-configured Kubernetes production cluster

Question 5

You are configuring a Site-to-Site VPN connection in OCI. Your on-premises firewall requires you to specify the Oracle VPN IP address and configure IPSec tunnel parameters. Where do you find the Oracle VPN public IP addresses in the OCI Console?

Accepted Answer

In the IPSec Connection details page under the DRG. When you create an IPSec connection under the DRG details, OCI automatically provisions two redundant VPN tunnels, displaying their respective public IP addresses in the IPSec Connection details page.

Answer

In the NAT Gateway configuration settings

Answer

In the FastConnect Virtual Circuit overview

Answer

In the VCN Details page under Internet Gateway

Question 6

An OCI administrator needs to store large amounts of unstructured data that is accessed infrequently, but must be retained for compliance purposes for at least 5 years. Data retrieval times of up to 4 hours are acceptable. Which OCI Object Storage tier should be used?

Accepted Answer

Archive Storage Tier. OCI Archive Storage is designed for data that is infrequently accessed and requires long retention periods, offering the lowest storage cost with a time-to-first-byte retrieval time of up to 4 hours.

Answer

Object Storage Standard Tier

Answer

Object Storage Infrequent Access Tier

Answer

File Storage Service

Question 7

Which OCI Object Storage feature enables users without an OCI account to securely download or upload a specific object via a generated URL with a defined expiration time?

Accepted Answer

Pre-Authenticated Requests (PAR). Pre-authenticated requests (PAR) provide a way to let users securely access or upload a specific object or bucket without requiring credentials, using a unique URL with an expiration time.

Answer

OCI IAM Federation

Answer

API Signing Keys

Answer

Object Storage Public Access Buckets

Question 8

Which TWO of the following are valid Object Storage tiers in OCI?

Accepted Answer

Archive. Standard and Archive are the primary tiers in OCI Object Storage.

Answer

Fast Storage

Answer

Temporary Storage

Answer

Cold Storage

Question 9

You have an existing compute instance with a standard boot volume size of 47 GB. Your application requires 200 GB. You successfully increase the boot volume size to 200 GB in the OCI Console. However, when you run `df -h` inside the guest OS, it still shows 47 GB. What is the cause?

Accepted Answer

The guest OS partition and file system have not yet been resized to claim the expanded storage.. While OCI resizes the physical storage block device at the hypervisor level, the guest operating system partition and file system must be manually or automatically extended to utilize the new space.

Answer

OCI does not support expanding boot volumes online; you must reboot the instance.

Answer

You must detach the boot volume and reattach it for the OS to notice the change.

Answer

Boot volumes have a hard cap of 50 GB unless converted to Block Volumes.

Question 10

Which TWO resource types can be managed using OCI IAM policies? (Choose two.)

Accepted Answer

object-family. OCI IAM policies govern access to virtually all OCI resources, including compute and object storage.

Answer

employee-badge-readers

Answer

corporate-laptop-hardware

Answer

office-wifi-routers

Question 11

You are troubleshooting a slow-running query on an Exadata Cloud Service database. You suspect that smart scan is not being utilized by the storage cells. Which Exadata feature enables offloading SQL processing operations like filtering and projections directly to the storage servers?

Accepted Answer

Exadata Smart Scan (Storage Offload). Exadata Smart Scan is the storage-offload feature that pushes predicate filtering, column projection, and certain joins down to the Exadata storage cells, so only relevant rows and columns return to the database nodes. This dramatically reduces I/O and CPU load on the compute tier, which is why a query that fails to offload runs noticeably slower.

Answer

Oracle Database In-Memory Column Store

Answer

Hybrid Columnar Compression (HCC)

Answer

Automatic Storage Management (ASM) Mirroring

Question 12

You need to share a file system between multiple OCI Compute instances across different availability domains. Which service should you use?

Accepted Answer

File Storage Service. File Storage Service (FSS) is a shared file system that can be mounted across ADs in a region.

Answer

Local NVMe storage

Answer

Object Storage

Answer

Block Volume

Question 13

Which THREE components are involved in OCI File Storage Service?

Accepted Answer

Export. File systems, mount targets, and exports are the main components.

Answer

Bucket

Answer

Backup gateway

Question 14

When creating an OCI Function application, you must select one or more subnets. What type of subnets should you choose if your function needs to call external public APIs over the internet?

Accepted Answer

Subnets associated with a NAT Gateway or Internet Gateway route table. For an OCI Function to call external public APIs over the internet, the subnet it runs in must have a route to the internet — either through a NAT Gateway (for private subnets, outbound-only) or an Internet Gateway (for public subnets). The route table associated with the function's subnet must contain a rule directing 0.0.0.0/0 to one of these gateways. Without such a route, the function has no path to external endpoints.

Answer

Subnets with a Service Gateway only

Answer

Subnets configured strictly as local peering endpoints

Answer

Subnets with no route table entries

Question 15

You are deploying a high-performance database workload on OCI that requires raw, low-latency NVMe drives for transaction logging. Which compute shape should you select?

Accepted Answer

BM.DenseIO2.52. Bare Metal Dense I/O shapes include directly attached NVMe SSDs, providing extreme IOPS and low latency suitable for databases and transactional logs.

Answer

BM.Standard3.64

Answer

VM.Standard.E4.Flex

Answer

BM.GPU3.8

Question 16

You want to deploy a Windows compute instance in OCI using your own custom software pre-installed. What is the recommended workflow to achieve this?

Accepted Answer

Launch an instance from a standard Windows image, install your software, create a custom image from the boot volume, and use it to launch new instances.. The recommended OCI workflow for deploying Windows instances with custom software is to launch a standard Windows instance, install and configure the software, then create a custom image from the boot volume and use that image for future launches. This captures the fully configured state and ensures consistent, repeatable deployments.

Answer

Upload your local virtual machine disk (VMDK/VHD) directly to a compute instance as a running process.

Answer

Run a bash script via user data on every new instance launch to download and install the software every time.

Answer

Use Block Volume backups as direct instance templates without creating custom images.

Question 17

You are managing an Oracle Base Database System (DB System) on OCI and need to minimize downtime during a planned operating system patching cycle. Which action should you perform to achieve this for a 2-node RAC DB System?

Accepted Answer

Perform a rolling patch on one node at a time using the OCI console or CLI.. For a 2-node RAC DB System on OCI, a rolling patch applies the OS update to one node at a time while the other node continues serving database traffic, so the RAC cluster maintains availability throughout the patching cycle. The OCI console and CLI expose this as a patching option that orchestrates the node-by-node sequence and waits for each node to rejoin the cluster before proceeding. This is the standard, supported method to minimize downtime for planned OS maintenance on multi-node RAC systems.

Answer

Apply the patch simultaneously to both nodes to ensure the cluster remains synchronized.

Answer

Take a full manual backup, terminate the DB System, and reprovision with the new patched image.

Answer

Convert the 2-node RAC to a Single Instance database, patch it, and convert it back.

Question 18

You are troubleshooting a federated user login issue where users authenticate successfully through your corporate SAML IdP, but upon redirection to OCI, they encounter an error stating that no matching user account or group mapping exists. What is the most likely misconfiguration?

Accepted Answer

The group mapping rule in the OCI Identity Provider configuration does not match the incoming group claim in the SAML assertion.. In OCI federation, the external SAML IdP asserts group membership via a group claim, and OCI maps those asserted groups to OCI IAM groups through group mapping rules configured on the Identity Provider. If the incoming group claim value does not match any configured mapping rule, OCI cannot resolve the user to an OCI group and returns the 'no matching user account or group mapping' error. The fix is to align the IdP's group claim attribute and values with the OCI IdP group mapping configuration.

Answer

The user's password in OCI IAM has expired and must be reset.

Answer

The API signing key of the IdP metadata XML file needs to be rotated daily.

Answer

OCI requires manual creation of local user profiles for every federated login attempt.

Question 19

Which THREE operations can be performed on an Oracle Base Database System from the OCI Console?

Accepted Answer

Scale storage size. Option B (Scale storage size) is correct because the OCI Console for Oracle Base Database Service lets you scale the storage of the DB system, increasing the usable data storage capacity allocated to the database. Option D (Create manual backups) is correct because the console provides backup management where you can create on-demand (manual) backups of the database in addition to configuring automatic backups. Option E (Apply database and grid infrastructure patches) is correct because the console exposes patching operations that apply database and Grid Infrastructure patches to the DB system. Option A is not a supported operation since customers cannot modify the operating system kernel source code of the managed DB system, and Option C is not allowed because direct modification of Oracle internal data dictionary tables is unsupported and would corrupt the database.

Answer

Modify the operating system kernel source code

Answer

Directly modify Oracle internal data dictionary tables

Question 20

Which TWO actions can you perform on an OCI Virtual Cloud Network (VCN) after it has been created?

Accepted Answer

Create new subnets within the VCN. Option C is correct because a VCN is a container for subnets, and you can always create additional subnets (regional or AD-specific) within an existing VCN after creation, as long as the CIDR ranges fall within the VCN's address space. Option D is correct because OCI allows you to associate secondary CIDR blocks with an existing VCN to expand its address space, which is useful for peering or adding workloads without recreating the VCN. Option A is incorrect because an OCID is an Oracle-assigned immutable identifier and cannot be renamed. Option B is incorrect because the primary CIDR block of a VCN is fixed at creation and cannot be modified (only secondary CIDRs can be added). Option E is incorrect because a subnet's type (regional vs. AD-specific) is determined at creation and cannot be converted afterward.

Answer

Rename the underlying VCN OCID

Answer

Modify the primary CIDR block of the VCN

Answer

Convert a regional subnet into an Availability Domain-specific subnet