1Z0-1072-26 Practice Test 30 — 15 Questions

Question 1

You are setting up OCI DNS for a private domain `internal.corp`. You want instances within your VCN to query records in this private zone. What needs to be created and associated with the VCN?

Accepted Answer

A Private DNS Zone associated with the VCN via a VCN view. OCI DNS private zones are resolved only within the VCNs they are associated with, and the association is made through a VCN view. You create a private zone for internal.corp, create or use a VCN view, and attach the zone to that view so instances in the VCN can query the records. This keeps internal names off the public internet and lets the VCN resolver answer queries for the private domain.

Answer

A Public DNS Zone with an Internet Gateway

Answer

A Service Gateway pointing to the DNS service

Answer

A NAT Gateway with DNS forwarding rules

Question 2

You want to use your own encryption keys for Object Storage. What feature should you use?

Accepted Answer

OCI Vault. OCI Vault allows you to manage keys for server-side encryption.

Answer

Public keys

Answer

IAM policies

Answer

Encryption Gateway

Question 3

You are configuring a Public Load Balancer in OCI. You want to ensure that incoming traffic is encrypted using TLS 1.3. Where do you configure the SSL certificate and TLS protocol version?

Accepted Answer

On the Load Balancer Listener configuration. SSL certificates and TLS protocol preferences are configured on the Load Balancer Listener settings.

Answer

In the VCN route table settings

Answer

On the NAT Gateway configuration page

Answer

In the backend set health check policy

Question 4

What is the scope of an OCI IAM policy by default when it is created in the root compartment (tenancy)?

Accepted Answer

It applies across the entire tenancy and all compartments within it.. An OCI IAM policy created in the root compartment (tenancy) applies across the entire tenancy and all compartments within it, because the root compartment is the top-level container and policies inherit downward. This is the default scope unless the policy statement explicitly narrows the location to a specific compartment.

Answer

It applies exclusively to the Identity and Access Management service.

Answer

It must be explicitly attached to each child compartment individually to take effect.

Answer

It applies only to the root compartment and cannot affect child compartments.

Question 5

Which OCI compute shape family is designed specifically for general-purpose workloads, balancing CPU, memory, and network resources?

Accepted Answer

Standard Shapes. Standard Shapes are OCI's general-purpose compute family, offering a balanced ratio of CPU, memory, and network bandwidth suitable for web servers, application servers, and dev/test workloads. They use Intel, AMD, or Ampere processors and are the default choice when no specialized hardware profile is required.

Answer

Dense I/O Shapes

Answer

HPC Shapes

Answer

GPU Shapes

Question 6

What is the maximum number of VCNs allowed per region in an OCI tenancy by default (subject to service limits)?

Accepted Answer

50 (default service limit). The default service limit for VCNs per region in an OCI tenancy is typically 50, but can be increased upon request.

Answer

1

Answer

Unlimited

Answer

5

Question 7

Which TWO metrics are available for monitoring OCI Public Load Balancers in OCI Monitoring service?

Accepted Answer

BackendSetHealthyInstanceCount. Option C (BackendSetHealthyInstanceCount) is correct because OCI Monitoring exposes this load balancer metric to report how many backend servers in a given backend set are passing health checks, which is essential for availability monitoring. Option E (BytesProcessed) is correct because the Load Balancer service publishes this metric to show the total volume of traffic processed by the load balancer, useful for throughput and capacity analysis. The other options are not load balancer metrics: DatabaseCPUUtilization (A) belongs to the Database service, BlockStorageIOPS (B) is a Block Volume metric, and ComputeInstanceVCPUTime (D) is a Compute instance metric, so none of them are available for OCI Public Load Balancers in Monitoring.

Answer

DatabaseCPUUtilization

Answer

BlockStorageIOPS

Answer

ComputeInstanceVCPUTime

Question 8

A company uses OCI Resource Manager to manage its cloud infrastructure using Terraform. A developer has modified a Terraform configuration file locally and needs to preview the changes that Resource Manager will make to the cloud environment before actually applying them. Which Resource Manager job type should be executed?

Accepted Answer

Plan Job. A Plan Job in OCI Resource Manager runs 'terraform plan' against the configuration and current state, producing an execution plan that shows what resources will be added, changed, or destroyed — without making any changes. This is exactly the preview capability the developer needs before applying.

Answer

Apply Job

Answer

Import Job

Answer

Destroy Job

Question 9

You have configured an Oracle Data Guard association between a primary Autonomous Database and a standby Autonomous Database. What happens to the standby database if the primary database experiences an unplanned regional outage?

Accepted Answer

You can perform a failover operation in the OCI Console to promote the standby database to primary.. When the primary Autonomous Database experiences an unplanned regional outage, you can perform a failover operation in the OCI Console to promote the standby Autonomous Database to primary. This is the documented Data Guard failover workflow for Autonomous Database, allowing business continuity across regions. The standby does not automatically promote itself; an explicit failover action is required.

Answer

The standby database remains permanently read-only and cannot accept write transactions.

Answer

The standby database automatically destroys itself and reprovisions in the primary region.

Answer

Data Guard automatically switches back to the primary database via split-brain prevention algorithms.

Question 10

You are configuring an Oracle Autonomous Database on dedicated Exadata infrastructure. The database must be isolated at the network level so that application clients reach it only through a private endpoint inside a VCN, with no public internet exposure at all. Which configuration should you choose when provisioning the Autonomous Database?

Accepted Answer

Configure a private endpoint access type and select the VCN, subnet, and optionally a network security group for the endpoint.. Network isolation with zero public exposure on Autonomous Database is achieved by choosing the private endpoint access type, which places the database endpoint inside a VCN subnet and keeps all client traffic on the OCI network. Security lists or network security groups on that subnet then control which internal clients may connect, meeting the isolation requirement without exposing any public listener.

Answer

Configure a public endpoint access type and enable mutual TLS with a client certificate requirement.

Answer

Configure a private endpoint access type and disable the service gateway in the VCN to block all external traffic.

Answer

Configure a public endpoint access type and then add an access control list that restricts allowed client IP ranges.

Question 11

A network engineer is configuring a site-to-site IPSec VPN between an on-premises CPE and an OCI DRG. The engineer wants to ensure that the VPN connection is highly available and can survive a single CPE or tunnel failure. Which three components or configurations are required to achieve this? (Choose three.)

Accepted Answer

A redundant CPE on-premises with its own set of two IPSec tunnels to the DRG.. High availability for OCI site-to-site VPN requires two tunnels per CPE terminating on different DRG IP addresses, a redundant CPE with its own two tunnels, and BGP to dynamically route and fail over between them. Together these elements ensure that a single tunnel or CPE failure does not interrupt connectivity between on-premises and OCI.

Answer

A single IPSec tunnel with a higher bandwidth setting to handle all traffic.

Answer

An Internet Gateway attached to the DRG to provide a backup path for VPN traffic.

Question 12

You are managing an Oracle Base Database Service DB system on OCI. The DB system hosts a production database, and you must configure Oracle Data Guard so the standby database can take over automatically with no data loss. The primary and standby must be in different availability domains of the same region, and you want to minimize manual intervention during a switchover. Which TWO configuration choices should you make? (Choose two.)

Accepted Answer

Configure a Data Guard association using the OCI Console or CLI, which creates the standby and broker configuration automatically.. Automatic, zero-data-loss takeover in a single region is achieved by pairing Maximum Availability protection with SYNC transport and by letting OCI create and manage the Data Guard association. The managed association provisions the standby in the required availability domain and configures the broker, while Maximum Availability with SYNC ensures every committed transaction exists on the standby before the primary acknowledges it, so a switchover or failover loses nothing.

Answer

Manually build the standby with RMAN duplicate and register it in the broker without an OCI Data Guard association.

Answer

Set the Data Guard protection mode to Maximum Performance with ASYNC transport.

Answer

Place the standby in a different region and rely on cross-region redo transport for the no-data-loss guarantee.

Question 13

An operations team wants a single OCI alarm to notify them when average CPU utilization across a compartment's web tier exceeds 80 percent for a sustained period, and to stop notifying once the condition clears. The team also wants to avoid duplicate pages during short spikes. Which two configurations satisfy these requirements? (Choose two.)

Accepted Answer

Configure the alarm to evaluate the mean statistic aggregated over the compartment's web tier resources. A compartment-scoped metric query with the mean statistic defines the tier-wide average the team cares about, and a trigger rule requiring several consecutive breaching evaluation periods enforces the sustained condition while ignoring brief spikes. Per-instance alarms, forced repeat notifications, and the COUNT statistic all increase noise or measure the wrong quantity.

Answer

Configure the alarm to use the COUNT statistic so any single instance crossing the threshold fires the tier alarm

Answer

Create a separate alarm for each instance OCID and rely on the Notifications service to deduplicate the resulting messages

Answer

Set the alarm's notification frequency to repeat every minute regardless of state so operators always see current values

Question 14

You need to create a compute instance in OCI that requires a specific custom image. You have already imported the custom image into OCI. Which compute instance launch option allows you to select this custom image?

Accepted Answer

Image. When launching a compute instance, the Image source option is where you select the operating system image, including custom images. The other options configure different aspects of the instance, such as networking or hardware, but not the image.

Answer

Shape

Answer

Boot volume

Answer

Virtual cloud network

Question 15

A platform team runs a compute cluster in a single OCI region. They need a dashboard that charts CPU utilization for every instance in a specific compartment and automatically includes new instances launched into that compartment next week, without anyone editing the widget later. Which OCI Monitoring feature should they use for the metric widget?

Accepted Answer

A metric query scoped to the compartment with the resource dimension aggregated using the mean statistic. A dashboard metric widget that queries by compartment and aggregates on the resource dimension is evaluated dynamically, so instances added to the compartment later appear automatically with one line each. Hard-coding OCIDs, using Audit records, or relying on an alarm all fail to produce an auto-updating utilization chart.

Answer

A saved search against the Audit service filtered by the compute instance resource type

Answer

Individual metric charts pinned to each instance OCID, grouped into a dashboard

Answer

An alarm definition on the CpuUtilization metric with a threshold and a notification topic