1Z0-1072-26 Practice Test 2 — 30 Questions

Question 1

Which OCI service feature enables you to run software containers without provisioning virtual machines or managing Kubernetes clusters, offering simple container execution?

Accepted Answer

Container Instances. OCI Container Instances provide serverless execution for containers without requiring VMs or Kubernetes clusters.

Answer

Bare Metal Compute

Answer

Dedicated VM Hosts

Answer

Instance Pools

Question 2

You are planning to deploy a high-performance computing (HPC) cluster on OCI requiring extremely high packet per second (PPS) and ultra-low latency between compute nodes. Which feature must you utilize?

Accepted Answer

Cluster Networks with RDMA (Remote Direct Memory Access). OCI HPC and bare metal clusters support Cluster Networks with RDMA (Remote Direct Memory Access) over RoCE (RDMA over Converged Ethernet) for ultra-low latency and high throughput.

Answer

NAT Gateway with bandwidth throttling disabled

Answer

Public IP addresses on all compute nodes

Answer

OCI Local Peering Gateway

Question 3

You need to be alerted only when the average CPU utilization of a cluster of instances exceeds 80% for 5 consecutive minutes. Which alarm feature achieves this?

Accepted Answer

Alarm duration and aggregation window. An alarm with a 'statistical' function (average) and a 'duration' setting of 5 minutes satisfies this requirement.

Answer

Event rule

Answer

Notification frequency

Answer

Threshold delay

Question 4

When provisioning an Oracle Base Database Service DB system, which storage management software is used underneath to provide high performance and reliable storage volumes?

Accepted Answer

Oracle Automatic Storage Management (ASM). Oracle Base Database Service utilizes Oracle Automatic Storage Management (ASM) for managing database storage volumes.

Answer

ZFS Storage Appliance software

Answer

EXT4 journaling file system

Answer

Linux Logical Volume Manager (LVM)

Question 5

You need to grant an OCI Function permission to read objects from an OCI Object Storage bucket. How should you configure this securely?

Accepted Answer

Create a dynamic group for the functions and write an IAM policy granting the dynamic group read access to the bucket.. To allow OCI Functions or other services to access other OCI resources securely, you create a dynamic group containing the function(s) and write an IAM policy granting that dynamic group permissions to access the target resource.

Answer

Make the Object Storage bucket completely public so any function can read from it without authentication.

Answer

Embed the tenancy administrator API signing key directly in the function's source code.

Answer

Attach a user credential to the function environment variables.

Question 6

You need to run an OCI Function that connects to an Oracle Autonomous Database secured within a private subnet. How should you configure the function to access the database securely without exposing it to the public internet?

Accepted Answer

Attach the function application to a private subnet within your VCN using VCN configuration.. OCI Functions support VCN configuration, allowing you to attach a function application to a specific subnet within a VCN so that functions can access private resources like databases via private IP addresses.

Answer

Use an API Gateway with a public endpoint and route database queries through HTTP headers.

Answer

Configure a public IP address on the function execution environment.

Answer

Functions cannot access private subnets; you must use an internet gateway.

Question 7

You are designing a disaster recovery strategy for an OCI compute instance. You need to replicate boot volume backups to a secondary region. How should you accomplish this?

Accepted Answer

Use the OCI Console or CLI to copy the boot volume backup to the destination region.. Boot volume backups can be copied across regions using the cross-region copy feature in the OCI Console or CLI, allowing you to restore them as boot volumes in another region.

Answer

Configure a local peering gateway between the two regions' boot storage endpoints.

Answer

Boot volume backups cannot be copied across regions; you must recreate the instance manually.

Answer

Attach the boot volume backup as an Object Storage bucket and sync via FTP.

Question 8

Which THREE features are associated with OCI Dedicated Virtual Machine Hosts? (Choose three.)

Accepted Answer

Visibility into host-level resource capacity and placement control. Dedicated VM hosts provide physical hardware isolation, allow you to run multiple virtual machine instances on a single dedicated server, and give you visibility into host resource capacity.

Answer

Automatic multi-cloud replication across AWS and Azure physical datacenters

Answer

The ability to convert the dedicated host directly into a Kubernetes master node without OS reinstallation

Question 9

What is the primary benefit of using OCI Container Instances compared to managing containers on OCI Container Engine for Kubernetes (OKE)?

Accepted Answer

Container Instances allow you to run containers directly without managing servers, clusters, or orchestrators.. OCI Container Instances are serverless container execution environments that allow you to run containers instantly without having to provision, manage, or scale underlying virtual machines or Kubernetes control planes.

Answer

Container Instances offer lower pricing for long-running enterprise microservices than OKE.

Answer

Container Instances allow direct access to bare metal hypervisors.

Answer

Container Instances support multi-cluster service meshes and advanced ingress controllers.

Question 10

Which OCI shape family is optimized for High-Performance Computing (HPC) workloads requiring high core counts and low-latency clustering?

Accepted Answer

HPC Shapes. HPC shapes are engineered specifically for demanding computational workloads that require massive parallel processing and ultra-low latency.

Answer

Standard Micro Shapes

Answer

Burstable Instances

Answer

General Purpose Standard Shapes

Question 11

An enterprise workload requires a fully managed Oracle Autonomous Data Warehouse with dedicated infrastructure to guarantee isolation from other tenants. Which deployment architecture should you select when provisioning this database?

Accepted Answer

Autonomous Data Warehouse on Dedicated Exadata Infrastructure. Autonomous Database on Dedicated Exadata Infrastructure provides a dedicated database environment that gives you an isolated Exadata infrastructure exclusively for your organization.

Answer

Autonomous Data Warehouse on Shared Exadata Infrastructure

Answer

Exadata Cloud@Customer without Autonomous operations

Answer

Oracle Base Database Service on Dedicated Exadata

Question 12

Your team needs to allow a group of developers to read logs in the Logging service across all compartments, but you want to ensure they cannot modify or delete any logging resources. Which of the following IAM policy verbs should you use?

Accepted Answer

Read. OCI verbs include inspect, read, use, and manage. 'Inspect' lets you list resources, 'read' includes inspect plus getting resource content (like log data), 'use' includes read plus updating/patching, and 'manage' includes all actions. To read logs without modifying, 'read' is appropriate.

Answer

Manage

Answer

Use

Answer

Inspect

Question 13

You are troubleshooting a custom OCI compute image that fails to boot properly after launching an instance. The instance gets stuck in a pre-boot state. Where can you view serial console logs to diagnose the low-level boot sequence and kernel panic messages?

Accepted Answer

OCI Compute Instance Serial Console connection. OCI provides access to the serial console for compute instances, allowing administrators to view low-level kernel boot messages, GRUB menus, and interactive login prompts even if network access is down.

Answer

Object Storage boot bucket logs

Answer

OCI Logging service via custom log agents

Answer

OCI Monitoring service under instance metrics

Question 14

Your development team wants to automatically trigger a serverless function whenever a new object is uploaded to an OCI Object Storage bucket. Which OCI service acts as the foundational router to capture this object upload event and invoke the function?

Accepted Answer

OCI Events Service. The OCI Events service enables you to create automation based on the lifecycle changes of resources in OCI, such as Object Storage creations.

Answer

OCI Monitoring Service

Answer

OCI Logging Service

Answer

OCI Resource Manager

Question 15

You are writing a dynamic group matching rule for compute instances that need access to Object Storage. The instances must be members of the dynamic group if their OCID matches a specific value or if they are tagged with a specific freeform tag. Which syntax is valid for matching either condition using any/all operators?

Accepted Answer

ANY {instance.id = 'ocid1.instance...', tag.Project.Value = 'Alpha'}. Dynamic group matching rules support matching conditions using ALL or ANY operators with parameters such as instance.id and tag.namespace.tagkey.

Answer

MATCH {instance.id == 'ocid1.instance...' OR tag.Project == 'Alpha'}

Answer

DYNAMIC {instance.id IN ('ocid1.instance...'))}

Answer

ALL {instance.id = 'ocid1.instance...', tag.Project.name = 'Alpha'}

Question 16

You are creating an instance configuration from an existing compute instance that has two secondary data block volumes attached in addition to its boot volume. What happens to the data block volumes when you use this instance configuration to create an instance pool?

Accepted Answer

Secondary block volumes are excluded from the instance pool configuration template; instance pools manage compute instances and boot volumes.. Instance configurations capture the instance metadata, shape, image, and boot volume settings. However, secondary block volume attachments are typically not cloned or automatically attached as independent writable block volumes for every new instance in the pool unless explicitly defined or managed via shared storage like File Storage.

Answer

The instance pool creation fails because secondary block volumes are prohibited in instance pools.

Answer

The block volumes become shared network file systems across all pool members simultaneously in read-write mode.

Answer

Identical copies of the block volumes are automatically created and attached to every new instance in the pool.

Question 17

You are configuring a Data Guard association between a primary Oracle Base Database Service DB system and a standby DB system in a different availability domain. The primary database encounters a catastrophic failure. Which action must you perform to promote the standby database to primary using the OCI Console?

Accepted Answer

Perform a Failover operation from the standby database details page.. In OCI Base Database Service, you perform a 'Switchover' for planned maintenance or a 'Failover' for unplanned primary outages.

Answer

Perform a Switchover operation from the standby database details page.

Answer

Delete the Data Guard association and create a new primary database from a backup.

Answer

Run RMAN restore commands directly on the standby host operating system.

Question 18

You are configuring identity federation with an enterprise SAML 2.0 Identity Provider. After mapping the external IdP groups to OCI IAM groups, users successfully log in via SSO but receive an authorization error (404/Not Authorized) when trying to view any resources. What is the most likely cause?

Accepted Answer

No IAM policies have been created granting permissions to the mapped OCI IAM groups.. Successful authentication via federation only proves who the user is; authorization requires IAM policies to be written that grant the mapped OCI IAM groups permissions to resources.

Answer

The SAML assertion signature certificate has expired in the external IdP.

Answer

Federated users cannot access OCI without first creating local user accounts.

Answer

The user's browser blocked the OCI redirection cookies.

Question 19

You are troubleshooting a function timeout in OCI Functions. You notice that the function takes 30 seconds to initialize database connections on every cold start. How can you optimize this initialization overhead?

Accepted Answer

Place the database connection initialization code outside the main function handler method so it executes during container warm start.. To avoid connection overhead on every cold start, database connection pools or initialization logic can be placed outside the function handler method so that container warm starts reuse existing connections.

Answer

Enable instance pool autoscaling on the function application.

Answer

Increase the function memory allocation to 32 GB.

Answer

Migrate the function container to an OKE cluster DaemonSet.

Question 20

You are using the Events service to trigger a Function. What is a required step before this can work?

Accepted Answer

Grant 'use' permissions on the function to the Events service. You must have a policy that allows the Events service to invoke the function.

Answer

Attach a load balancer

Answer

Enable HTTP access on the function

Answer

Create a Service Connector