1Z0-1072-26 Practice Test 30 — 15 Questions

Question 1

When writing an LQL query, which keyword is used to filter log records based on a specific field value?

Accepted Answer

filter. The 'search' or 'where' clause in LQL is used to filter records.

Answer

limit

Answer

find

Answer

select

Question 2

You are migrating workloads to OCI and need to route traffic between two VCNs that reside in the same tenancy but in different regions (Ashburn and Phoenix). Which OCI component is required to establish this cross-region connection?

Accepted Answer

Dynamic Routing Gateway (DRG). Cross-region VCN peering requires a Dynamic Routing Gateway (DRG) attached to each VCN, configured with a remote peering connection between the two DRGs.

Answer

Internet Gateway

Answer

Local Peering Gateway (LPG)

Answer

NAT Gateway

Question 3

An architect is configuring an OCI Public Load Balancer to handle high volumes of incoming client traffic. Which THREE features or capabilities are supported by OCI Public Load Balancers?

Accepted Answer

Multiple backend sets associated with a single listener via rule sets. OCI Public Load Balancers support SSL/TLS termination, path-based routing (flexibility based on URL paths), and multiple backend sets.

Answer

Native BGP routing directly from the Load Balancer IP to on-premises routers

Answer

Automatic translation of IPv6 client traffic into native IPv4 backend compute instances without dual-stack configuration

Question 4

Which OCI networking component acts as a virtual firewall at the subnet level?

Accepted Answer

Security List. Security Lists act as virtual firewalls that apply to all VNICs within a given subnet.

Answer

Internet Gateway

Answer

Dynamic Routing Gateway

Answer

Service Gateway

Question 5

You are configuring a site-to-site VPN connection in OCI. During the tunnel setup, your on-premises firewall administrator asks for the pre-shared key (PSK). Where is the PSK defined or generated in OCI?

Accepted Answer

During the IPSec connection tunnel creation in the OCI Console. When creating an IPSec tunnel in OCI, you can either provide your own pre-shared key or let OCI automatically generate one during the tunnel configuration.

Answer

In the VCN Route Table settings

Answer

In the NAT Gateway security policies

Answer

On the Internet Gateway configuration page

Question 6

An OCI customer has a VCN with CIDR 10.0.0.0/16 and wants to peer it with another VCN having CIDR 10.1.0.0/16. However, they also have an on-premises network connected via FastConnect using the CIDR 10.0.0.0/14. What routing challenge does this create?

Accepted Answer

The on-premises CIDR (10.0.0.0/14) subsumes the VCN CIDRs, creating overlapping prefix routing conflicts.. The on-premises CIDR (10.0.0.0/14) encompasses both VCN CIDRs (10.0.0.0/16 and 10.1.0.0/16). This creates overlapping address spaces where the more specific VCN routes might conflict or cause unpredictable routing behavior between hybrid and cloud peers.

Answer

FastConnect does not support CIDRs larger than /16.

Answer

The Internet Gateway will drop all 10.x.x.x traffic.

Answer

Peered VCNs cannot use private IP addresses.

Question 7

What is the primary purpose of an OCI Service Gateway?

Accepted Answer

To privately connect a VCN to Oracle services like Object Storage without using the public internet.. A Service Gateway enables private connectivity from a VCN to Oracle services in the Oracle Services Network without traversing the public internet.

Answer

To load balance HTTP traffic across backend servers.

Answer

To provide internet access to public subnets.

Answer

To connect on-premises datacenters to cloud subnets.

Question 8

Which THREE statements regarding OCI IPv6 implementation in VCNs are correct?

Accepted Answer

Security lists and NSGs support rules for IPv6 traffic filtering.. OCI supports IPv6 addressing. You can assign IPv6 CIDR blocks (/56) to your VCN, assign IPv6 subnets (/64) to subnets, and configure security rules and route tables for IPv6 traffic.

Answer

IPv6 is mandatory for all new VCN creation in OCI.

Answer

IPv6 addresses in OCI require a NAT Gateway for outbound internet access.

Question 9

What is the maximum number of VCNs allowed per region in an OCI tenancy by default (subject to service limits)?

Accepted Answer

50 (default service limit). The default service limit for VCNs per region in an OCI tenancy is typically 50, but can be increased upon request.

Answer

1

Answer

Unlimited

Answer

5

Question 10

Which TWO types of targets can be specified in an OCI VCN route table rule?

Accepted Answer

NAT Gateway. Route table targets in OCI include Internet Gateways, NAT Gateways, Service Gateways, Dynamic Routing Gateways, Local Peering Gateways, and private IPs of VNICs (such as firewalls).

Answer

Block Volume

Answer

Identity and Access Management (IAM) Policy

Answer

Object Storage Bucket

Question 11

You are designing an OCI VCN and need to ensure that database instances in a private subnet can communicate with backend storage endpoints over the Oracle network backbone. Which gateway should you ensure is attached and routed to?

Accepted Answer

Service Gateway. Service Gateway provides private access to Oracle services like Object Storage across the Oracle network backbone.

Answer

Internet Gateway

Answer

NAT Gateway

Answer

Local Peering Gateway

Question 12

Your organization has two Virtual Cloud Networks (VCN-A and VCN-B) in the same OCI region with overlapping CIDR blocks (10.0.0.0/16). You need to establish private communication between instances in VCN-A and VCN-B. Which networking feature should you implement?

Accepted Answer

Dynamic Routing Gateway (DRG) with overlapping CIDR encapsulation or IPsec VPN over DRG loopback. When VCNs have overlapping CIDRs, standard Local Peering or standard DRG VCN attachments will fail due to route conflicts. You must use a DRG with VCN-to-VCN routing features combined with Network Address Translation (NAT) inside the DRG or utilize IP tunneling constructs, but standard direct local peering is impossible.

Answer

Remote Peering Connection (RPC)

Answer

Local Peering Gateway (LPG)

Answer

Internet Gateway with IP masquerading rules

Question 13

Which component of the Notifications service is used to define the destination for alerts?

Accepted Answer

Subscription. A Subscription defines the delivery protocol (e.g., Email, PagerDuty, Slack) for a Topic.

Answer

Topic

Answer

Policy

Answer

Alarm

Question 14

Which TWO methods can be used to assign public IP addresses to OCI compute instances?

Accepted Answer

Reserved public IP. OCI supports Ephemeral public IPs (which exist for the lifetime of the instance) and Reserved public IPs (persistent public IPs that can be reassigned).

Answer

Dynamic public IP lease via DHCP

Answer

Static NAT Gateway public IP

Answer

Service Gateway public IP allocation

Question 15

An OCI architect configures a Hub-and-Spoke architecture using DRG version 2. Hub VCN contains security appliances. Spoke VCN-A needs to inspect all outbound internet traffic through the security appliances in the Hub VCN before it hits the Internet Gateway. How should the Spoke VCN route table be configured?

Accepted Answer

Configure the Spoke VCN route table with 0.0.0.0/0 pointing to the DRG, and configure the DRG to route traffic to the Hub VCN security appliance.. To direct spoke internet traffic through a firewall appliance in the hub VCN, the spoke VCN subnet route table must have a route for 0.0.0.0/0 pointing to the DRG attachment, and the DRG route table routes that traffic to the hub security appliance VNIC.

Answer

Attach an Internet Gateway directly to the Spoke VCN private subnet.

Answer

Configure a NAT Gateway in every spoke VCN.

Answer

Use a Local Peering Gateway for internet inspection.