1Z0-1072-26 Practice Test 6 — 10 Questions

Question 1

Which TWO methods can be used to authenticate human users to the OCI Console? (Choose two.)

Accepted Answer

Username and password with optional Multi-Factor Authentication (MFA). Console login requires username/password and supports optional or mandatory MFA, as well as federation via external IdPs.

Answer

SSH private keys (.ppk)

Answer

Pre-authenticated request URLs

Answer

API signing key PEM files uploaded via web browser

Question 2

Which TWO pieces of information are required when configuring an OCI IAM Identity Provider for SAML federation? (Choose two.)

Accepted Answer

The SAML 2.0 metadata XML file provided by the external Identity Provider. Configuring a SAML 2.0 IdP requires the IdP metadata XML file (or metadata URL) and a name for the IdP in OCI.

Answer

The physical rack serial number in the data center

Answer

The root compartment database sysadmin password

Answer

The local VCN CIDR block

Question 3

You are configuring backups for an Oracle Base Database System on OCI. You want to store automated full backups and incremental backups to OCI Object Storage. What is the default retention period you can select for automated backups when using the console?

Accepted Answer

Configurable retention periods such as 7, 15, 30, 45, or 60 days. OCI automated database backups support configurable retention periods, commonly 7, 15, 30, 45, or up to 60 days.

Answer

Up to 7 days only

Answer

Real-time streaming backups with no retention limits

Answer

Exactly 365 days fixed

Question 4

You are configuring an Exadata Cloud Service (ExaCS) instance and need to ensure maximum isolation and security for your database infrastructure. Which architectural layer provides tenant isolation at the hypervisor level in ExaCS?

Accepted Answer

Oracle VM or KVM guest virtualization (domU). In Exadata Cloud Service, Oracle manages the underlying hardware, and tenant isolation is achieved using Oracle VM (OVM) or KVM-based virtualization to isolate dom0 and guest domU virtual machines.

Answer

Virtual Cloud Network (VCN) security lists and network security groups

Answer

Storage Server Cell software zones

Answer

Exadata Database Vault compartment boundaries

Question 5

An OCI administrator needs to be notified via email whenever CPU utilization on a critical production compute instance exceeds 90% for a sustained period of 5 minutes. Which combination of services should the administrator configure to achieve this?

Accepted Answer

OCI Monitoring service (to create an alarm on the CpuUtilization metric) and OCI Notifications service (to send the email).. OCI Monitoring service is used to collect metrics, create alarms based on thresholds, and integrate with the OCI Notifications service to dispatch emails.

Answer

OCI Logging Analytics and OCI Notifications service.

Answer

OCI Resource Manager and OCI Monitoring service.

Answer

OCI Events service (to listen for CPU threshold events) and OCI Email Delivery service (to dispatch the email).

Question 6

You need to deploy a traditional Oracle Database on OCI where you have complete administrative root access to the underlying operating system and database server. Which Oracle Database service should you choose?

Accepted Answer

Oracle Base Database Service. Oracle Base Database Service allows you full administrative control, including SYSDBA access and root access to the underlying virtual machine compute instances.

Answer

OCI NoSQL Database

Answer

Exadata Cloud Service with Autonomous Container Databases

Answer

Oracle Autonomous Database

Question 7

You need to back up an Oracle Base Database System to an external target or move database files manually using RMAN. Which OCI storage service is typically used as a staging area for manual RMAN backups?

Accepted Answer

OCI Object Storage. OCI Object Storage is used for storing RMAN backup sets when performing manual backups or database migrations.

Answer

OCI File Storage Service (FSS) NFS mount

Answer

OCI Block Volume service attached via iSCSI

Answer

Local NVMe scratch disks

Question 8

Which TWO actions can be performed using OCI Resource Manager stacks? (Choose two.)

Accepted Answer

Provision and configure cloud infrastructure resources using Terraform configuration files.. OCI Resource Manager uses Terraform to provision, update, import, and destroy infrastructure stacks.

Answer

Send email notifications when an object storage bucket size exceeds a threshold.

Answer

Create custom time-series metric alarms to monitor CPU and memory utilization.

Answer

Automatically ingest and parse custom application log files from compute instances.

Question 9

An administrator wants to allow a group of developers to create and manage Kubernetes clusters (OKE - Oracle Container Engine for Kubernetes) in a specific compartment named 'K8sCompartment'. Which policy statement is correct?

Accepted Answer

Allow group Developers to manage cluster-family in compartment K8sCompartment. Container Engine for Kubernetes resources are managed using the 'cluster-family' resource type in OCI IAM policies.

Answer

Allow group Developers to manage containers in tenancy

Answer

Allow group Developers to use kubernetes in compartment K8sCompartment

Answer

Allow group Developers to read k8s-clusters in compartment K8sCompartment

Question 10

You are designing an IAM policy hierarchy for a multi-tenant OCI environment. You write the following statement in the root compartment: 'Define tenancy TenantA as ocid1.tenancy.oc1..aaaaaaa...; Define group NetworkAdmins as ocid1.group.oc1..aaaaaaa...; Allow group NetworkAdmins to manage virtual-network-family in tenancy TenantA'. What type of policy cross-tenancy grant does this represent?

Accepted Answer

A cross-tenancy policy where the remote group is granted permissions within the defining tenancy.. This represents a remote policy (or cross-tenancy access) where the administrator of TenantA trusts a principal (NetworkAdmins) from another tenancy by defining the remote tenancy and group, and allowing them access.

Answer

A cross-tenancy policy where TenantA is the granting tenancy and the principal belongs to an external identity provider.

Answer

A local policy granting compartment-level administration.

Answer

An invalid policy because cross-tenancy policies cannot span virtual network families.