1Z0-1072-26 Practice Test 28 — 15 Questions

Question 1

Which THREE actions can be performed on compartments in OCI? (Choose three.)

Accepted Answer

Create nested child compartments up to 6 levels deep. Option B is correct because OCI compartments support hierarchical nesting, allowing child compartments to be created up to six levels deep beneath the tenancy root, which helps model organizational structures and isolate resources. Option D is correct because an empty compartment can be deleted; OCI requires that all resources inside it be removed or moved first, since a compartment must be empty before deletion. Option E is correct because OCI allows moving a compartment to a new parent compartment within the same tenancy, which changes its position in the hierarchy while preserving its resources and policies. Option A is not correct because private IP addresses are assigned to VNICs or resources such as compute instances, not to compartments, which are logical containers for governance and resource grouping. Option C is not correct because a compartment is an identity and access management construct and cannot be converted into a virtual cloud network (VCN); VCNs are separate networking resources created within a compartment.

Answer

Assign a private IP address directly to a compartment

Answer

Convert a compartment into a virtual cloud network

Question 2

You need to migrate a 10 TB Oracle Database from an on-premises data center to OCI Base Database Service with minimal downtime. Which migration tool leverages Oracle Data Guard to achieve near-zero downtime?

Accepted Answer

Oracle Zero Downtime Migration (ZDM) with physical migration method. Oracle Zero Downtime Migration (ZDM) with the physical migration method uses Oracle Data Guard to replicate the on-premises database to OCI Base Database Service, keeping the source and target synchronized until a planned switchover. This minimizes downtime to only the final switchover window, which is typically seconds to minutes even for a 10 TB database. Logical methods (Data Pump) would require a full export/import cycle and much longer downtime.

Answer

SQL Developer database copy wizard

Answer

Oracle Data Pump export and import

Answer

OCI Object Storage manual file copy using multipart uploads

Question 3

Which TWO actions can be performed on an active OCI Block Volume without detaching it from the compute instance? (Choose two.)

Accepted Answer

Change the volume from Balanced performance tier to Higher Performance tier. OCI Block Volumes support live resizing and dynamic performance tier adjustments without requiring volume detachment.

Answer

Delete the block volume while it is attached

Answer

Migrate the volume to a different availability domain

Answer

Convert a block volume into a File Storage Service mount target

Question 4

Which THREE conditions can be evaluated using conditional clauses in OCI IAM policies? (Choose three.)

Accepted Answer

Source IP address of the API request (request.ip). OCI IAM policy conditions support variables that describe the request and the target resource, so option A is correct because request.ip lets a policy evaluate the source IP address of the API call, for example to restrict access to a corporate CIDR range. Option C is correct because target.tag allows conditions on the defined tags of the resource being accessed, enabling tag-based authorization such as allowing access only when target.tag.Namespace.Key equals a specific value. Option D is correct because request.subnet.id evaluates the OCID of the source subnet from which the request originates, which is useful for limiting access to workloads in a trusted VCN subnet. Option B is not correct because OCI IAM has no condition variable for a user's corporate salary bracket, and option E is not correct because local weather conditions in a data center region are not exposed as IAM policy condition variables.

Answer

The user's corporate salary bracket

Answer

The local weather conditions in the data center region

Question 5

Which TWO protocols are supported for OCI Site-to-Site VPN IPSec tunnels?

Accepted Answer

IKEv1. OCI Site-to-Site VPN IPSec tunnels support IKEv1 (Option B) and IKEv2 (Option E) as the Internet Key Exchange protocols used to negotiate the IPSec security associations, with IKEv2 being the recommended default for new tunnels because it offers improved security and performance. IKEv1 is also supported for backward compatibility with older on-premises VPN devices. BGP over SSL (Option A) is not an IPSec tunnel protocol; BGP is a routing protocol that can run over the tunnel, but SSL is unrelated to IPSec IKE negotiation. HTTPS tunneling (Option C) is not used for OCI IPSec VPNs, and SNMPv3 (Option D) is a network management protocol, not a tunnel negotiation protocol.

Answer

BGP over SSL

Answer

HTTPS tunneling

Answer

SNMPv3

Question 6

What is required for a human user to authenticate programmatically against OCI using the CLI, SDKs, or API?

Accepted Answer

An API signing key pair (PEM format) and its corresponding fingerprint.. Programmatic access to OCI for a human user requires an API signing key pair in PEM format, with the public key uploaded to the user's IAM account and the corresponding fingerprint recorded. The CLI, SDKs, and direct API calls use the private key to sign requests, and OCI validates the signature against the uploaded public key.

Answer

A SSH key pair generated specifically for IAM authentication.

Answer

A password and an MFA token code.

Answer

A pre-authenticated request URL.

Question 7

You are scaling up an Oracle Base Database System (VM) to add more storage to your existing database data disk group (+DATA). What is the correct procedure in the OCI Console?

Accepted Answer

Edit the DB system storage size in the OCI Console to allocate more storage.. For an Oracle Base Database System (VM), storage can be scaled up by editing the DB system's storage size directly in the OCI Console, which expands the underlying ASM disk group (+DATA) without requiring a rebuild. OCI handles the block volume expansion and ASM rebalancing automatically. This is the supported, non-disruptive scaling path for adding storage to an existing DB system.

Answer

Terminate the DB system, create a larger block volume, and attach it as root.

Answer

Create a clone of the database to a new shape with higher storage limits.

Answer

Log into the OS via SSH, format a new iSCSI disk, and manually add it to the ASM disk group using SQL*Plus.

Question 8

An application requires an Oracle Autonomous Database that supports complex analytical queries, reporting, and high-throughput data warehousing workloads. Which workload type should you select during provisioning?

Accepted Answer

Data Warehouse. The Data Warehouse workload type is optimized for complex analytical queries, reporting, and high-throughput data warehousing. It uses columnar storage, parallel execution, and other optimizations specifically for analytical workloads.

Answer

JSON Database

Answer

APEX

Answer

Transaction Processing

Question 9

You are migrating a database that requires a consistent point-in-time snapshot of multiple volumes. What should you use?

Accepted Answer

Volume Groups. Volume Groups allow you to create a consistent point-in-time snapshot across multiple volumes simultaneously, which is essential for database consistency. Individual volume backups (B) are taken independently and may not be crash-consistent across volumes.

Answer

Individual volume backups

Answer

Storage Gateway

Answer

Object Storage replication

Answer

Clone the volumes

Question 10

What is the maximum number of Internet Gateways allowed per Virtual Cloud Network (VCN) in OCI?

Accepted Answer

1. OCI allows only one Internet Gateway per Virtual Cloud Network (VCN). This is a hard limit set by the service to simplify routing and avoid conflicts. The Internet Gateway is a regional resource that provides a single point of internet access for the VCN, and multiple gateways are not supported.

Answer

2

Answer

Unlimited

Answer

5

Question 11

Which OCI shape family is optimized for High-Performance Computing (HPC) workloads requiring high core counts and low-latency clustering?

Accepted Answer

HPC Shapes. OCI HPC shapes are purpose-built for High-Performance Computing, offering high core counts, large memory, and support for low-latency cluster networking (RDMA). They are the correct family for tightly-coupled HPC workloads.

Answer

Standard Micro Shapes

Answer

Burstable Instances

Answer

General Purpose Standard Shapes

Question 12

You are configuring a Data Guard association between a primary Oracle Base Database Service DB system and a standby DB system in a different availability domain. The primary database encounters a catastrophic failure. Which action must you perform to promote the standby database to primary using the OCI Console?

Accepted Answer

Perform a Failover operation from the standby database details page.. When the primary database has suffered a catastrophic failure and is unavailable, the correct OCI Console action is Failover from the standby database details page. Failover promotes the standby to primary without requiring the original primary to be online, which is exactly the scenario described. Switchover, by contrast, requires both databases to be healthy and is a planned role reversal.

Answer

Perform a Switchover operation from the standby database details page.

Answer

Delete the Data Guard association and create a new primary database from a backup.

Answer

Run RMAN restore commands directly on the standby host operating system.

Question 13

Which THREE options are available for creating a Resource Manager stack?

Accepted Answer

Upload a .zip file. In OCI Resource Manager, a stack can be created by uploading a Terraform configuration as a .zip file (option B), which is the standard way to supply your own local Terraform code. Option C is correct because Resource Manager provides built-in OCI templates (and template-based workflows) that let you create a stack directly from a prebuilt template. Option D is correct because Resource Manager supports connecting a stack to a Git repository (via the Git configuration source) so Terraform configurations can be pulled from a repo. Option A is not a valid stack-creation method because compartments are logical containers for resources, not a source you can copy a stack from. Option E is not valid because Resource Manager does not import stacks from a local database; it works with Terraform configurations, templates, or Git sources.

Answer

Copy from another compartment

Answer

Import from a local database

Question 14

An administrator needs to grant a group of database administrators the ability to manage Autonomous Databases in a specific compartment named DevComp. Which policy syntax is the most secure and adheres to the principle of least privilege?

Accepted Answer

Allow group DBA-Group to manage autonomous-database in compartment DevComp. The policy 'Allow group DBA-Group to manage autonomous-database in compartment DevComp' grants the DBA group full management of Autonomous Databases scoped only to the DevComp compartment. This adheres to least privilege by limiting both the subject (a group, not a user) and the scope (a single compartment) while using the correct resource type 'autonomous-database' and the 'manage' verb needed to administer those databases.

Answer

Allow group DBA-Group to manage all-resources in tenancy

Answer

Allow user DBA-Group to manage autonomous-database in tenancy

Answer

Allow group DBA-Group to use databases in compartment DevComp

Question 15

Which THREE security features are enabled by default or configurable on an Oracle Autonomous Database? (Choose three.)

Accepted Answer

Network Access Control Lists (ACLs) and private endpoints to restrict IP connectivity. Option A is correct because Oracle Autonomous Database supports network ACLs and private endpoints (via Oracle Cloud Infrastructure VCN and private endpoint configuration) to restrict IP connectivity and keep traffic off the public internet. Option B is correct because Oracle autonomously applies mandatory security patches and vulnerability updates to the database and underlying infrastructure, removing that burden from the customer. Option C is correct because Transparent Data Encryption (TDE) is enabled by default on Autonomous Database, encrypting all user data at rest with Oracle-managed keys (with customer-managed keys optionally configurable). Option D is not correct because customers do not manually manage OS root access on Autonomous Database; Oracle manages the operating system and infrastructure. Option E is not correct because disabling all network security controls to allow unrestricted global access is the opposite of the platform's secure-by-default posture and is not a supported security feature.

Answer

Manual customer management of operating system root access permissions

Answer

Disabling all network security controls to allow unrestricted global access