1Z0-1072-26 Practice Test 27 — 15 Questions

Question 1

An architect needs to perform a point-in-time recovery (PITR) on an Oracle Base Database Service DB system using the OCI Console. What is a prerequisite constraint when selecting a recovery timestamp?

Accepted Answer

The timestamp must be within the retention window of the automated backups and archive log backups.. Point-in-time recovery on Oracle Base Database Service relies on automated backups plus archived redo logs to reconstruct the database to a chosen moment. The selected timestamp must fall within the retention window configured for those backups and archive logs; if the timestamp is older than the retention period, the required redo is no longer available and recovery cannot proceed. This is the fundamental prerequisite constraint when choosing a recovery timestamp in the OCI Console.

Answer

Point-in-time recovery is only supported via SQL*Plus and cannot be initiated from the OCI Console.

Answer

The target timestamp must be aligned precisely with the exact minute of the last incremental backup.

Answer

The database must first be converted to an Autonomous Database before PITR can be executed.

Question 2

You are designing an OCI VCN and need to allow resources in a private subnet to access Oracle Cloud Infrastructure Object Storage in the same region without traversing the public internet. Which gateway should you create and configure?

Accepted Answer

Service Gateway. A Service Gateway provides access to Oracle Services Network (such as Object Storage) from a private subnet without requiring an Internet Gateway or NAT Gateway.

Answer

Dynamic Routing Gateway

Answer

Internet Gateway

Answer

NAT Gateway

Question 3

Which tool or command-line utility is primarily used to build, test, and push OCI Functions container images to the Oracle Functions Registry?

Accepted Answer

fn CLI. The fn CLI (Fn Project command-line tool) is the primary utility for OCI Functions development. It handles the full lifecycle: 'fn init' scaffolds a function, 'fn build' creates the Docker container image, 'fn test' runs it locally, and 'fn deploy' pushes the image to the configured Docker registry (OCIR) and registers the function with the OCI Functions service. OCI's Fn service is built on the open-source Fn Project, so the fn CLI is the native tool.

Answer

terraform

Answer

oci-cli

Answer

kubectl

Question 4

You are migrating an on-premises Oracle database to an OCI Autonomous Database using Oracle Data Pump. Which wallet-related file must be downloaded and used by the client utility to establish a secure connection to the Autonomous Database?

Accepted Answer

Database Connection Wallet (Credentials zip file). To connect a client utility such as Oracle Data Pump to an Autonomous Database, you must download the Database Connection Wallet (Credentials zip file) from the OCI Console. This wallet contains the tnsnames.ora, sqlnet.ora, and keystore files needed to establish a secure TLS connection to the Autonomous Database. The client references the wallet directory via the TNS_ADMIN environment variable or connection string.

Answer

OS-level password shadow file

Answer

Public SSH Key pair

Answer

Keystore and ciphers configuration file

Question 5

Which type of Oracle Cloud Infrastructure Database service provides full access to Oracle Database features and root access to the underlying database operating system, while OCI manages the physical hardware and hypervisor?

Accepted Answer

Base Database. Oracle Base Database Service (Base DB) provides full access to Oracle Database features and gives you root access to the underlying database operating system, while OCI manages the physical hardware and hypervisor. This distinguishes it from Autonomous Database, which abstracts OS access entirely. Thus, Base Database is the correct answer.

Answer

Autonomous JSON Database

Answer

Autonomous Database

Answer

NoSQL Database

Question 6

An OCI administrator creates a subnet route table with a route rule pointing 0.0.0.0/0 to an Internet Gateway. However, compute instances in this subnet cannot reach the internet. Upon checking the instance details, you notice the instances have private IP addresses only and no public IP assigned. What is missing?

Accepted Answer

The compute instances need a public IP address (ephemeral or reserved) assigned to their VNICs.. Instances in a public subnet require a public IP address (ephemeral or reserved) in addition to the subnet's route to the Internet Gateway in order to communicate bi-directionally with the public internet.

Answer

The VCN CIDR block must be changed to /8.

Answer

A Service Gateway must be attached to the VCN.

Answer

A NAT Gateway must be attached to the public subnet.

Question 7

When configuring federation with an external Identity Provider (IdP) such as Microsoft Azure AD or Okta using SAML 2.0, which THREE tasks must be completed in Oracle Cloud Infrastructure? (Choose three.)

Accepted Answer

Download the Identity Provider metadata XML file from your IdP.. Option A is correct because OCI federation requires the IdP's SAML 2.0 metadata XML, which contains the IdP entity ID, SSO endpoint URL, and signing certificate needed to establish trust. Option B is correct because you must create an Identity Provider record in the OCI console (Identity > Federation) and upload that metadata XML so OCI can validate SAML assertions from the external IdP. Option E is correct because after federation, IdP groups must be mapped to OCI IAM groups so that OCI policies grant the appropriate permissions to federated users. Option C is not required for federation because MFA is typically enforced at the external IdP, not by modifying local OCI user security settings. Option D is incorrect because federated users are provisioned just-in-time via SAML assertions and do not need local OCI passwords matching enterprise credentials.

Answer

Enable multi-factor authentication (MFA) exclusively by modifying local OCI user security settings.

Answer

Manually create individual IAM users in OCI and assign them local passwords matching their enterprise credentials.

Question 8

You have created an instance configuration from a running compute instance. You now want to use this instance configuration to create an instance pool. Which parameter must you specify during the creation of the instance pool?

Accepted Answer

The placement (subnets and availability domains/fault domains) and the number of instances. When creating an instance pool from an instance configuration, you must specify the target availability domains or fault domains and the subnet(s) where the instances will be deployed, along with the desired number of instances.

Answer

The custom OS username and SSH password

Answer

The external DNS provider settings

Answer

The new root password for the boot volumes

Question 9

Which OCI service acts as a centralized dashboard to view health status of all OCI services in your region?

Accepted Answer

Service Health Dashboard. The OCI Status page or Health dashboard provides a global view of service status.

Answer

Audit service

Answer

Monitoring service

Answer

OCI Health Check

Question 10

Your organization has a requirement to allow users from a trusted partner company to authenticate to your OCI tenancy using Microsoft Entra ID (Azure AD) as the Identity Provider. Which component must be configured first in OCI before setting up the federation trust relationship?

Accepted Answer

Configure an Identity Provider (IdP) in OCI IAM by importing the SAML 2.0 metadata from the external IdP.. Before OCI can trust an external IdP such as Microsoft Entra ID, you must create an Identity Provider resource in OCI IAM and import the SAML 2.0 metadata XML from the external IdP. This establishes the federation trust by registering the IdP's entity ID, SSO URL, and signing certificate. Only after this IdP resource exists can you configure group mapping rules and grant federated users access via policies.

Answer

Provision local user accounts in OCI IAM for every partner employee.

Answer

Write a tenancy-wide policy allowing all external users to manage tenancy resources.

Answer

Create an API signing key pair for each partner user in OCI IAM.

Question 11

You are configuring a Site-to-Site VPN connection and need to test connectivity between an on-premises host and an OCI compute instance. The ping fails. You check the security lists and notice that ICMP traffic is blocked. Which rule type must you add to the security list to allow incoming ping requests?

Accepted Answer

An Ingress rule allowing ICMP traffic (Type 8, Code 0 or All). To allow ping (ICMP Type 8, Code 0 for Echo Request) into a subnet, you must add a stateful Ingress Security List rule specifying ICMP as the protocol.

Answer

A Service Gateway rule for ping requests

Answer

An Egress rule allowing TCP port 80

Answer

A NAT Gateway rule for ICMP translation

Question 12

Which Autonomous Database deployment model runs on dedicated Exadata infrastructure residing in a customer's OCI tenancy, providing maximum isolation?

Accepted Answer

Autonomous Database on Dedicated Exadata Infrastructure. Autonomous Database on Dedicated Exadata Infrastructure (Autonomous Dedicated) provides a completely dedicated database environment within a dedicated Exadata rack.

Answer

Exadata Cloud at Customer (ExaCC)

Answer

Autonomous Database on Shared Infrastructure

Answer

Oracle Base Database System

Question 13

What is the primary benefit of enabling 'Versioning' on an Object Storage bucket?

Accepted Answer

Recovery from accidental deletion. Versioning protects against accidental overwrites or deletions by keeping historical versions.

Answer

Faster data access

Answer

Lower storage costs

Answer

Improved data security

Question 14

Your development team needs to perform automated regression testing against a production copy of an Autonomous Transaction Processing (ATP) database. Which feature allows you to create a point-in-time, space-efficient copy of the production database instantly?

Accepted Answer

Autonomous Database Clone (Thin Clone). Autonomous Database Clones allow you to create either a full clone or a metadata-only thin clone instantly for development and testing purposes.

Answer

Cross-Region Object Storage Export

Answer

Autonomous Database Data Guard

Answer

Oracle RMAN Duplicate Database

Question 15

Which THREE actions are required to successfully set up an Alarm?

Accepted Answer

Define a Metric query. To set up an alarm, you must have a metric, a notification topic, and a subscription to that topic.

Answer

Create an IAM user for the metric

Answer

Configure a Service Gateway