1Z0-1072-26 Practice Test 4 — 25 Questions

Question 1

Your OCI environment requires secure hybrid connectivity using an IPsec VPN over a Dynamic Routing Gateway (DRG). Which THREE parameters or components must be correctly configured to ensure successful IPsec VPN tunnel establishment?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

IPsec connection tunnels configured with appropriate pre-shared keys (PSK) and cryptographic parameters. Establishing an IPsec VPN tunnel requires a Customer-Premises Equipment (CPE) object representing your on-premises router public IP, a DRG attached to your VCN, and IPsec connection tunnels configured with correct static or BGP routing and pre-shared keys.

Answer

A Local Peering Gateway (LPG) bridging the VPN tunnel to the database subnet

Answer

An Internet Gateway attached to the private subnets handling the VPN traffic

Question 2

Which type of compute shape provides the lowest cost per core for general-purpose workloads by utilizing ARM-based Ampere processors?

Accepted Answer

VM.Standard.A1.Flex. VM.Standard.A1.Flex is OCI's Arm-based Ampere Altra compute shape, offering the lowest cost per core for general-purpose workloads. It provides flexible OCPU and memory configurations and is significantly cheaper than x86 equivalents, making it the correct answer for cost-sensitive ARM workloads.

Answer

VM.Standard.E4.Flex

Answer

BM.DenseIO2.52

Answer

VM.Standard3.Flex

Question 3

Which TWO storage options are available when provisioning an Oracle Base Database System?

Accepted Answer

OCI Block Volume storage managed via Automatic Storage Management (ASM). Option D is correct because Oracle Base Database System on OCI can be provisioned with OCI Block Volume storage that is presented to the database host and managed by Automatic Storage Management (ASM), which is the standard Oracle storage management layer for database files. Option E is correct because certain Bare Metal shapes for Base Database System offer local NVMe storage, which can be used as high-performance direct-attached storage for the database. Options A, B, and C are not valid provisioning choices for Oracle Base Database System: Google Cloud Persistent Disk and Amazon S3 are other cloud providers' services, and local floppy disk drives are obsolete and far too small for database storage.

Answer

Google Cloud Persistent Disk

Answer

Local floppy disk drives

Answer

Amazon S3 object storage buckets

Question 4

What is the primary benefit of using Oracle Autonomous Database's autoscaling feature for CPU and storage?

Accepted Answer

It automatically increases OCPU or storage capacity when workload spikes, and scales down when demand drops.. Autoscaling in Autonomous Database automatically increases OCPU count (up to 3x the base) when CPU utilization is high and scales back down when demand drops, without manual intervention. This provides performance elasticity for variable workloads while controlling cost.

Answer

It automatically pauses billing when the database is idle for more than one hour.

Answer

It automatically converts your database from Transaction Processing to Data Warehouse workloads.

Answer

It automatically migrates the database to a different cloud region during high load.

Question 5

Which THREE features are supported by OCI Load Balancer?

Accepted Answer

TCP layer 4 load balancing. OCI Load Balancer supports TCP layer 4 load balancing (option A) because it can distribute raw TCP traffic based on IP address and port without inspecting application-layer content, which is the defining behavior of a Layer 4 load balancer. It also supports HTTP/HTTPS layer 7 load balancing (option C), allowing it to route requests based on HTTP headers, paths, hostnames, and cookies, and to perform health checks at the application layer. SSL termination (option D) is supported because the load balancer can decrypt incoming TLS/SSL traffic at the listener and forward plaintext or re-encrypted traffic to backend servers, offloading certificate processing from the backends. Option B is incorrect because OCI Load Balancer is not a Next-Gen Firewall and does not perform automatic packet filtering or deep packet inspection like a security appliance. Option E is incorrect because OCI Load Balancer distributes traffic to backend compute instances (or backend sets), not directly to database query engines, and it has no native database query routing capability.

Answer

Automatic packet filtering like a Next-Gen Firewall

Answer

Direct database query routing without backend compute instances

Question 6

What is the minimum OCPU allocation required when configuring an OCI Ampere A1 Compute flexible shape (VM.Standard.A1.Flex)?

Accepted Answer

1 OCPU. The OCI Ampere A1 Compute flexible shape (VM.Standard.A1.Flex) allows you to configure as little as 1 OCPU. This is the minimum because the shape is designed for granular, flexible allocation, and Oracle's documentation explicitly states that the minimum OCPU per instance is 1. Therefore, 1 OCPU is the correct answer.

Answer

4 OCPUs

Answer

2 OCPUs

Answer

8 OCPUs

Question 7

Which TWO of the following statements regarding OCI Instance Configurations and Instance Pools are correct? (Choose two.)

Accepted Answer

An instance configuration defines the blueprint (shape, image, metadata) used to provision instances in an instance pool.. Instance configurations act as templates for creating instance pools, and instance pools can be scaled manually or automatically via autoscaling configurations.

Answer

Instance configurations can only be created from scratch using JSON templates, never from an existing running instance.

Answer

Instance pools can only contain instances of different shapes and operating systems.

Answer

Autoscaling policies cannot be attached to instance pools.

Question 8

Which utility is used to authenticate and push custom container images built for OCI Functions to the Oracle Registry (OCIR)?

Accepted Answer

Docker CLI. Custom OCI Functions images are built as Docker images and pushed to OCIR using the Docker CLI after authenticating with `docker login <region>.ocir.io` using an OCI auth token. The Docker CLI is the standard tool for building, tagging, and pushing container images to any OCI-compliant registry, including OCIR.

Answer

VCN Management Console

Answer

Terraform CLI

Answer

OCI Object Storage CLI

Question 9

What is the primary purpose of OCI Compute Instance Launch Options?

Accepted Answer

To configure instance network virtualization, firmware type, and boot parameters.. OCI Compute Instance Launch Options control low-level platform settings applied at launch, including network virtualization type (paravirtualized vs. SR-IOV), firmware type (BIOS vs. UEFI), boot parameters, and secure boot/measured boot settings. These options affect how the hypervisor presents hardware to the guest and how the instance boots.

Answer

To set up automatic IAM user credential rotation.

Answer

To schedule automated block volume backup retention policies.

Answer

To define DNS domain suffix forwarding rules for VCN resolvers.

Question 10

What is the primary purpose of OCI compartments?

Accepted Answer

To organize and isolate cloud resources for security, access control, and billing management.. Compartments are logical containers used to organize and isolate OCI resources. They enable fine-grained access control via IAM policies, simplify billing by allowing cost tracking per compartment, and provide a security boundary for resources. This matches option D exactly.

Answer

To replace Virtual Cloud Networks for internal subnetting.

Answer

To isolate physical data center hardware for specific customers.

Answer

To automatically replicate data across multiple OCI regions for disaster recovery.

Question 11

An administrator needs to allow a group of developers to create and manage File Storage Service (FSS) file systems and mount targets in a compartment named 'FSCompartment'. Which policy statement is correct?

Accepted Answer

Allow group Developers to manage file-storage-family in compartment FSCompartment. File Storage Service resources (file systems, mount targets, snapshots, replication) are all members of the 'file-storage-family' aggregate resource type in OCI IAM. Granting 'manage file-storage-family' in the target compartment gives the Developers group full lifecycle control over FSS resources there, which is exactly what the administrator needs.

Answer

Allow group Developers to read storage-systems in tenancy

Answer

Allow group Developers to manage mount-targets in compartment FSCompartment

Answer

Allow group Developers to use nfs-shares in compartment FSCompartment

Question 12

You are configuring an OCI Public Load Balancer to distribute incoming HTTP traffic to backend compute instances. Which backend set configuration is required to verify the health of the instances?

Accepted Answer

Health check policy defining protocol, port, and optional URL path. Load balancer health checks regularly probe backend servers using specific protocols, ports, and paths to verify that instances are available and healthy.

Answer

A NAT Gateway attached to the backend server subnet

Answer

A security list allowing all incoming traffic from the internet

Answer

An active Service Gateway

Question 13

An administrator wants to allow a group of developers to view and manage Event Service rules and notifications. Which resource types should be used in the IAM policy?

Accepted Answer

Allow group DevOps to manage events, notifications in compartment AppComp. The OCI Events service and Notifications service use 'events' and 'notifications' as their resource types.

Answer

Allow group DevOps to use pub-sub in compartment AppComp

Answer

Allow group DevOps to manage messaging-family in tenancy

Answer

Allow group DevOps to inspect triggers in compartment AppComp

Question 14

What is the primary function of an OCI Internet Gateway?

Accepted Answer

To provide bi-directional communication between a VCN and the public internet for public subnets.. An Internet Gateway provides a path for bi-directional communication between your VCN and the public internet.

Answer

To provide private access to regional Oracle Object Storage.

Answer

To connect on-premises datacenters to OCI over dedicated circuits.

Answer

To route traffic between two VCNs in the same region.

Question 15

Which THREE components are required when configuring an OCI FastConnect direct peering connection?

Accepted Answer

Physical cross-connect or partner provider connection. A FastConnect direct peering connection requires a Dynamic Routing Gateway (DRG) attached to your VCN, a FastConnect virtual circuit, and a physical cross-connect or partner connection setup.

Answer

Internet Gateway

Answer

Local Peering Gateway (LPG)

Question 16

You are configuring an OCI Load Balancer and want to redirect all incoming HTTP traffic on port 80 to HTTPS on port 443. How should you achieve this?

Accepted Answer

Configure a Listener Rule Set with an HTTP-to-HTTPS redirect rule.. OCI Load Balancers support rule sets, including HTTP redirect rules, allowing you to create a rule that redirects incoming HTTP traffic to HTTPS.

Answer

Change the security list egress rules.

Answer

Use a Service Gateway to forward port 80 to 443.

Answer

Attach a NAT Gateway to port 80.

Question 17

You are configuring an OCI DNS Traffic Management steering policy with a Load Balancer steering strategy. What is the primary behavior of this policy type?

Accepted Answer

It distributes traffic across multiple endpoints according to assigned weights and health checks.. Load Balancer steering distributes traffic across a pool of endpoints based on specified weights and health status, similar to load balancing algorithms.

Answer

It routes all traffic to a single primary datacenter until manual failover occurs.

Answer

It routes users based strictly on their geographic location.

Answer

It routes traffic based on client ASN numbers.

Question 18

You are using Service Connector Hub to move data from Logging to Object Storage. What is the primary benefit of this approach?

Accepted Answer

It provides a managed, serverless pipeline for log archiving. Service Connector Hub provides a managed way to move log data to durable storage for archiving.

Answer

It automatically indexes logs for searching

Answer

It replaces the need for a Log Group

Answer

It allows real-time execution of code on logs

Question 19

You are managing an OCI VCN and want to monitor all dropped packets due to security list violations across all subnets. Which OCI feature should you enable?

Accepted Answer

OCI VCN Flow Logs configured to capture rejected traffic. OCI VCN Flow Logs capture traffic information including dropped/rejected packets due to security list or NSG blocks when configured to log 'REJECT' or 'ALL' traffic.

Answer

Service Gateway audit logs

Answer

Internet Gateway access logs

Answer

NAT Gateway traffic logging

Question 20

You are designing an application that requires high availability across two Availability Domains (ADs). You want your OCI Public Load Balancer to span both ADs. Which configuration should you use?

Accepted Answer

Select subnets in two different Availability Domains during load balancer creation.. When provisioning an OCI Public Load Balancer, you select a primary subnet in one AD and a secondary subnet in another AD to ensure high availability across ADs.

Answer

Attach a NAT Gateway to both Availability Domains.

Answer

Configure an LPG between the two AD subnets.

Answer

Deploy two separate load balancers and use an Internet Gateway to load balance between them.