1Z0-1072-26 Practice Test 29 — 15 Questions

Question 1

Which TWO statements are true regarding OCI VCN Flow Logs?

Accepted Answer

Flow logs capture information about traffic flowing through VNICs in your VCN.. VCN Flow Logs capture accepted and rejected traffic traffic flows across VNICs in your VCN. They can be stored in OCI Object Storage or streamed to Logging Analytics.

Answer

Flow logs are only supported on public subnets.

Answer

Flow logs automatically encrypt your database data at rest.

Answer

Flow logs require an Internet Gateway to export logs out of the VCN.

Question 2

Which OCI service acts as a centralized dashboard to view health status of all OCI services in your region?

Accepted Answer

Service Health Dashboard. The OCI Status page or Health dashboard provides a global view of service status.

Answer

Audit service

Answer

Monitoring service

Answer

OCI Health Check

Question 3

Which TWO items are components of an OCI Alarm?

Accepted Answer

Metric. Alarms consist of a metric and a notification trigger.

Answer

Load Balancer

Answer

Compartment ID

Answer

Policy

Question 4

Which THREE aspects of a Terraform stack can you modify in a Resource Manager job?

Accepted Answer

Logging level. You can change variables, the terraform version, and the logging level in a job.

Answer

Identity Domain

Answer

Resource compartment

Question 5

An administrator wants to ensure that a compute instance in a private subnet can communicate with other compute instances in a peered VCN, but cannot initiate outbound connections to the internet. Which combination of components correctly satisfies this requirement?

Accepted Answer

Local Peering Gateway (or DRG) and route table rules pointing to the peer VCN CIDR, with no NAT or Internet Gateway.. To allow peering without internet access, you need a peering connection (LPG or DRG) and proper route table rules pointing to the peer. You should omit any Internet Gateway or NAT Gateway to prevent internet access.

Answer

NAT Gateway and a route table pointing 0.0.0.0/0 to the peer VCN.

Answer

Service Gateway pointing to the peered VCN CIDR.

Answer

Internet Gateway attached to the private subnet route table.

Question 6

An Oracle Cloud Infrastructure (OCI) architect needs to provision a web application that must be accessible directly from the public internet. Which component must be attached to the Virtual Cloud Network (VCN) to allow inbound traffic from the internet?

Accepted Answer

Internet Gateway. An Internet Gateway is a routing component that connects the edge of a VCN with the public internet, enabling bidirectional communication for public resources.

Answer

Service Gateway

Answer

Dynamic Routing Gateway

Answer

NAT Gateway

Question 7

You are using Service Connector Hub to move data from Logging to Object Storage. What is the primary benefit of this approach?

Accepted Answer

It provides a managed, serverless pipeline for log archiving. Service Connector Hub provides a managed way to move log data to durable storage for archiving.

Answer

It automatically indexes logs for searching

Answer

It replaces the need for a Log Group

Answer

It allows real-time execution of code on logs

Question 8

Which THREE things can you do with Resource Manager?

Accepted Answer

Provision infrastructure using Terraform. Resource Manager supports provisioning resources, managing state, and importing existing configurations.

Answer

Scan for malware on compute instances

Answer

Directly patch OS images

Question 9

Which TWO services provide visibility into your infrastructure usage and health?

Accepted Answer

Monitoring. Monitoring and Logging are the primary tools for observability.

Answer

Block Volume

Answer

Object Storage

Answer

Vault

Question 10

You are configuring a Site-to-Site VPN connection and need to test connectivity between an on-premises host and an OCI compute instance. The ping fails. You check the security lists and notice that ICMP traffic is blocked. Which rule type must you add to the security list to allow incoming ping requests?

Accepted Answer

An Ingress rule allowing ICMP traffic (Type 8, Code 0 or All). To allow ping (ICMP Type 8, Code 0 for Echo Request) into a subnet, you must add a stateful Ingress Security List rule specifying ICMP as the protocol.

Answer

A Service Gateway rule for ping requests

Answer

An Egress rule allowing TCP port 80

Answer

A NAT Gateway rule for ICMP translation

Question 11

You are designing an application that requires high availability across two Availability Domains (ADs). You want your OCI Public Load Balancer to span both ADs. Which configuration should you use?

Accepted Answer

Select subnets in two different Availability Domains during load balancer creation.. When provisioning an OCI Public Load Balancer, you select a primary subnet in one AD and a secondary subnet in another AD to ensure high availability across ADs.

Answer

Attach a NAT Gateway to both Availability Domains.

Answer

Configure an LPG between the two AD subnets.

Answer

Deploy two separate load balancers and use an Internet Gateway to load balance between them.

Question 12

An OCI customer has a VCN with CIDR 10.0.0.0/16. They have deployed a Kubernetes cluster (OKE) where worker nodes are placed in a private subnet. The cluster requires internal service discovery and pod-to-pod communication across different worker subnets. What is required in the subnet route table to support standard OKE cluster networking?

Accepted Answer

A default 'local' route covering the VCN CIDR (10.0.0.0/16) pointing to 'local' target. Standard OKE subnets require intra-VCN routing, which is automatically handled by the default local route (10.0.0.0/16 pointing to 'local'), ensuring all subnets within the VCN can communicate freely.

Answer

A route pointing to a NAT Gateway for every pod CIDR

Answer

A Service Gateway for container image downloads

Answer

A route pointing 0.0.0.0/0 to an Internet Gateway

Question 13

Which TWO metrics are available for monitoring OCI Public Load Balancers in OCI Monitoring service?

Accepted Answer

BackendSetHealthyInstanceCount. OCI Load Balancer metrics include bytes evaluation, backend set health, active connections, request/response latency, and HTTP status code counts.

Answer

DatabaseCPUUtilization

Answer

BlockStorageIOPS

Answer

ComputeInstanceVCPUTime

Question 14

You are managing an OCI VCN and want to monitor all dropped packets due to security list violations across all subnets. Which OCI feature should you enable?

Accepted Answer

OCI VCN Flow Logs configured to capture rejected traffic. OCI VCN Flow Logs capture traffic information including dropped/rejected packets due to security list or NSG blocks when configured to log 'REJECT' or 'ALL' traffic.

Answer

Service Gateway audit logs

Answer

Internet Gateway access logs

Answer

NAT Gateway traffic logging

Question 15

Which THREE statements regarding OCI VCN DNS and Hostname resolution are correct?

Accepted Answer

Instances in a VCN can resolve each other using their assigned hostnames.. OCI assigns internal domain names to instances based on VCN and subnet configuration. Instances can resolve each other using hostname prefixes or fully qualified domain names (FQDNs), and custom DNS zones can be integrated.

Answer

Public DNS zones cannot be hosted on OCI.

Answer

OCI requires you to deploy external bind DNS servers for basic VCN hostname resolution.