1Z0-1072-26 Practice Questions 2 — 50 Questions

Question 1

Which TWO methods can be used to authenticate human users to the OCI Console? (Choose two.)

Accepted Answer

Username and password with optional Multi-Factor Authentication (MFA). Console login requires username/password and supports optional or mandatory MFA, as well as federation via external IdPs.

Answer

SSH private keys (.ppk)

Answer

Pre-authenticated request URLs

Answer

API signing key PEM files uploaded via web browser

Question 2

Which TWO pieces of information are required when configuring an OCI IAM Identity Provider for SAML federation? (Choose two.)

Accepted Answer

The SAML 2.0 metadata XML file provided by the external Identity Provider. Configuring a SAML 2.0 IdP requires the IdP metadata XML file (or metadata URL) and a name for the IdP in OCI.

Answer

The physical rack serial number in the data center

Answer

The root compartment database sysadmin password

Answer

The local VCN CIDR block

Question 3

You are configuring backups for an Oracle Base Database System on OCI. You want to store automated full backups and incremental backups to OCI Object Storage. What is the default retention period you can select for automated backups when using the console?

Accepted Answer

Configurable retention periods such as 7, 15, 30, 45, or 60 days. OCI automated database backups support configurable retention periods, commonly 7, 15, 30, 45, or up to 60 days.

Answer

Up to 7 days only

Answer

Real-time streaming backups with no retention limits

Answer

Exactly 365 days fixed

Question 4

You are configuring an Exadata Cloud Service (ExaCS) instance and need to ensure maximum isolation and security for your database infrastructure. Which architectural layer provides tenant isolation at the hypervisor level in ExaCS?

Accepted Answer

Oracle VM or KVM guest virtualization (domU). In Exadata Cloud Service, Oracle manages the underlying hardware, and tenant isolation is achieved using Oracle VM (OVM) or KVM-based virtualization to isolate dom0 and guest domU virtual machines.

Answer

Virtual Cloud Network (VCN) security lists and network security groups

Answer

Storage Server Cell software zones

Answer

Exadata Database Vault compartment boundaries

Question 5

An OCI administrator needs to be notified via email whenever CPU utilization on a critical production compute instance exceeds 90% for a sustained period of 5 minutes. Which combination of services should the administrator configure to achieve this?

Accepted Answer

OCI Monitoring service (to create an alarm on the CpuUtilization metric) and OCI Notifications service (to send the email).. OCI Monitoring service is used to collect metrics, create alarms based on thresholds, and integrate with the OCI Notifications service to dispatch emails.

Answer

OCI Logging Analytics and OCI Notifications service.

Answer

OCI Resource Manager and OCI Monitoring service.

Answer

OCI Events service (to listen for CPU threshold events) and OCI Email Delivery service (to dispatch the email).

Question 6

You need to deploy a traditional Oracle Database on OCI where you have complete administrative root access to the underlying operating system and database server. Which Oracle Database service should you choose?

Accepted Answer

Oracle Base Database Service. Oracle Base Database Service allows you full administrative control, including SYSDBA access and root access to the underlying virtual machine compute instances.

Answer

OCI NoSQL Database

Answer

Exadata Cloud Service with Autonomous Container Databases

Answer

Oracle Autonomous Database

Question 7

You need to back up an Oracle Base Database System to an external target or move database files manually using RMAN. Which OCI storage service is typically used as a staging area for manual RMAN backups?

Accepted Answer

OCI Object Storage. OCI Object Storage is used for storing RMAN backup sets when performing manual backups or database migrations.

Answer

OCI File Storage Service (FSS) NFS mount

Answer

OCI Block Volume service attached via iSCSI

Answer

Local NVMe scratch disks

Question 8

Which TWO actions can be performed using OCI Resource Manager stacks? (Choose two.)

Accepted Answer

Provision and configure cloud infrastructure resources using Terraform configuration files.. OCI Resource Manager uses Terraform to provision, update, import, and destroy infrastructure stacks.

Answer

Send email notifications when an object storage bucket size exceeds a threshold.

Answer

Create custom time-series metric alarms to monitor CPU and memory utilization.

Answer

Automatically ingest and parse custom application log files from compute instances.

Question 9

An administrator wants to allow a group of developers to create and manage Kubernetes clusters (OKE - Oracle Container Engine for Kubernetes) in a specific compartment named 'K8sCompartment'. Which policy statement is correct?

Accepted Answer

Allow group Developers to manage cluster-family in compartment K8sCompartment. Container Engine for Kubernetes resources are managed using the 'cluster-family' resource type in OCI IAM policies.

Answer

Allow group Developers to manage containers in tenancy

Answer

Allow group Developers to use kubernetes in compartment K8sCompartment

Answer

Allow group Developers to read k8s-clusters in compartment K8sCompartment

Question 10

You are designing an IAM policy hierarchy for a multi-tenant OCI environment. You write the following statement in the root compartment: 'Define tenancy TenantA as ocid1.tenancy.oc1..aaaaaaa...; Define group NetworkAdmins as ocid1.group.oc1..aaaaaaa...; Allow group NetworkAdmins to manage virtual-network-family in tenancy TenantA'. What type of policy cross-tenancy grant does this represent?

Accepted Answer

A cross-tenancy policy where the remote group is granted permissions within the defining tenancy.. This represents a remote policy (or cross-tenancy access) where the administrator of TenantA trusts a principal (NetworkAdmins) from another tenancy by defining the remote tenancy and group, and allowing them access.

Answer

A cross-tenancy policy where TenantA is the granting tenancy and the principal belongs to an external identity provider.

Answer

A local policy granting compartment-level administration.

Answer

An invalid policy because cross-tenancy policies cannot span virtual network families.

Question 11

You are troubleshooting a deployment failure in Resource Manager. Where can you see the detailed Terraform output logs?

Accepted Answer

Job logs. The Job details page in Resource Manager shows the full output of the terraform apply/plan operations.

Answer

Events logs

Answer

Audit logs

Answer

Cloud Shell logs

Question 12

Which OCI service is responsible for managing users, groups, compartments, and policies?

Accepted Answer

Identity and Access Management (IAM). Identity and Access Management (IAM) is the foundational OCI service responsible for authentication and authorization.

Answer

OCI Audit

Answer

Resource Manager

Answer

Security Advisor

Question 13

You are configuring a custom log in OCI Logging. You want to parse and extract specific fields from unstructured application log lines using search queries. Which log feature allows you to query, analyze, and create visualizations from these ingested logs?

Accepted Answer

OCI Logging Analytics Log Explorer. OCI Logging Search allows users to query ingested log data using a powerful query language, and Log Analytics offers advanced log analysis features.

Answer

OCI Monitoring Metrics Explorer

Answer

OCI Events Rule Builder

Answer

OCI Resource Manager Jobs

Question 14

You are configuring a Data Guard association for an Autonomous Database on Dedicated Infrastructure. How is the Data Guard standby database provisioned and managed?

Accepted Answer

You enable Data Guard through the OCI Console, and OCI automatically provisions and manages the standby database.. On Dedicated Exadata Infrastructure, Autonomous Data Guard is enabled via the OCI Console or API by selecting the peer region, and OCI automates the provisioning and synchronization of the standby.

Answer

You must manually configure Oracle Net listener files and run 'DGMGRL' commands from the OS command line.

Answer

You must back up the database to Object Storage and restore it manually as a standby in the target region.

Answer

Data Guard is not supported on Autonomous Database Dedicated; you must use GoldenGate instead.

Question 15

Which TWO actions can be performed on an Oracle Autonomous Transaction Processing database using the OCI Console? (Choose two.)

Accepted Answer

Scale up or down the number of OCPUs and storage capacity.. Through the OCI Console, administrators can manage database users, scale CPU and storage resources, restart the database, and configure backups.

Answer

Manually configure custom standby redo log files using SQL*Plus.

Answer

Directly access the database server via SSH using root privileges.

Answer

Modify the underlying Linux operating system kernel parameters.

Question 16

You need to ingest custom application logs from multiple compute instances into OCI Logging. What is the correct sequence of components you must configure within OCI?

Accepted Answer

Create a Log Group, install and configure the OCI Logging Unified Agent on the instances, and create a custom Log pointing to the agent configuration.. To ship custom logs from compute instances, you install the Unified Agent, configure a log group, and create a log resource associated with a unified agent configuration.

Answer

Create a Notification Topic, add HTTP endpoints, and enable Audit logs.

Answer

Create a Resource Manager stack, deploy a Terraform template, and configure an email subscription.

Answer

Create a Monitoring Alarm, configure OCI Events, and link them to an Object Storage bucket.

Question 17

You are managing an Autonomous Database instance on shared infrastructure and need to restrict database access so that only clients connecting from a specific Corporate CIDR block (e.g., 192.168.10.0/24) can connect. How should you implement this?

Accepted Answer

Configure an Access Control List (ACL) specifying the allowed IP CIDR block in the OCI Console.. Autonomous Database allows you to configure Access Control Lists (ACLs) using IP notations or Virtual Cloud Networks to restrict network access.

Answer

Modify the SQL*Net configuration file (sqlnet.ora) stored in the database home.

Answer

Deploy an OCI Web Application Firewall (WAF) policy in front of the database port.

Answer

Attach a VCN Security List directly to the Autonomous Database service endpoint IP.

Question 18

Which feature of Autonomous Database allows you to create a point-in-time read-only or read-write copy of your database instantly without duplicating all the underlying physical data blocks?

Accepted Answer

Database Cloning. Autonomous Database cloning allows you to create quick metadata-based clones (full or metadata clones) without duplicating all storage blocks initially.

Answer

Database backup and restore

Answer

Manual RMAN duplicate command

Answer

Data Pump Export and Import

Question 19

Which THREE features are provided natively by Exadata Cloud Service to deliver high performance and high availability for Oracle databases? (Choose three.)

Accepted Answer

Oracle Real Application Clusters (RAC) support for database high availability.. Exadata Cloud Service leverages Smart Scan (offloading SQL processing to storage cells), Exadata RDMA over Converged Ethernet (RoCE) for ultra-low latency cluster communication, and built-in database high availability through RAC.

Answer

Automatic translation of PL/SQL code into native AWS Redshift SQL syntax.

Answer

Client-managed hypervisor patching via direct SSH access to Dom0 dom0 hypervisor nodes.

Question 20

Your company uses Compute instances deployed across various departments to access OCI Object Storage buckets. Instead of storing API keys on the instances, you decide to use Instance Principals. Which of the following components is NOT required to configure Instance Principals for this workflow?

Accepted Answer

An individual IAM user account created for each compute instance to authenticate API calls.. Instance Principals use dynamic groups to match instances based on tags or compartment OCIDs, and policies to grant permissions. Individual IAM users are never required or created for instance principals.

Answer

Compute instances launched within OCI that support instance metadata services.

Answer

An IAM Policy that grants the Dynamic Group permission to access the Object Storage bucket.

Answer

A Dynamic Group that includes the target Compute instances based on matching rules.