1Z0-1072-26 Practice Test 6 — 10 Questions

Question 1

You are deploying a microservices application on OKE and want to implement zero-downtime rolling deployments for your pods. Which Kubernetes deployment strategy and configuration parameter should you utilize?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

RollingUpdate strategy with maxSurge and maxUnavailable configured. The RollingUpdate strategy is Kubernetes' native mechanism for replacing pods incrementally so that some old replicas remain available while new ones come up, enabling zero-downtime deployments. The maxSurge parameter controls how many extra pods above the desired count can be created during the rollout, and maxUnavailable controls how many pods below the desired count can be temporarily unavailable. Tuning both ensures capacity is maintained throughout the update.

Answer

Horizontal Pod Autoscaler with metric-based CPU triggers

Answer

Static Pod assignment via node selectors

Answer

Recreate strategy with immediate termination of all old pods

Question 2

Your organization requires that all database traffic originating from OCI subnets to Oracle Autonomous Database bypass the public internet and use private IP paths. You have configured a Service Gateway. What additional configuration is mandatory in the subnet route table?

Accepted Answer

Add a route rule with destination service cidr (e.g. All Services in Oracle Services Network) and target as the Service Gateway.. To direct traffic to the Service Gateway, the subnet route table must have a route rule where the destination is the Oracle Services Network (or a specific service region prefix) and the target is the Service Gateway.

Answer

No route table changes are required once the Service Gateway is attached to the VCN.

Answer

Add a route rule pointing to the Dynamic Routing Gateway.

Answer

Add a route rule with destination 0.0.0.0/0 and target as the Service Gateway.

Question 3

Which TWO components are involved when routing traffic from an OCI private subnet to an on-premises datacenter via FastConnect?

Accepted Answer

Dynamic Routing Gateway (DRG). Traffic from a private subnet to on-premises via FastConnect requires a route table rule pointing to the Dynamic Routing Gateway (DRG), and the FastConnect virtual circuit terminating on that DRG.

Answer

Internet Gateway

Answer

Local Peering Gateway

Answer

NAT Gateway

Question 4

Which TWO default resource types are available in every new OCI tenancy? (Choose two.)

Accepted Answer

The tenancy root compartment. Option C is correct because every new OCI tenancy is created with a single root compartment that serves as the top-level container for all resources and cannot be deleted. Option D is correct because OCI automatically provisions a default group named Administrators and an initial tenancy administrator user during tenancy creation, and this user is the first identity that can manage the tenancy. Option A is incorrect because Autonomous Data Warehouse instances are not created by default and must be provisioned by the customer. Option B is incorrect because Object Storage buckets, including archive-tier buckets, are not pre-created in a new tenancy. Option E is incorrect because Kubernetes clusters, including production clusters, are not pre-configured and must be created by the user.

Answer

A fully configured Autonomous Data Warehouse

Answer

A 10TB Object Storage archive bucket

Answer

A pre-configured Kubernetes production cluster

Question 5

You are configuring a Site-to-Site VPN connection in OCI. Your on-premises firewall requires you to specify the Oracle VPN IP address and configure IPSec tunnel parameters. Where do you find the Oracle VPN public IP addresses in the OCI Console?

Accepted Answer

In the IPSec Connection details page under the DRG. When you create an IPSec connection under the DRG details, OCI automatically provisions two redundant VPN tunnels, displaying their respective public IP addresses in the IPSec Connection details page.

Answer

In the NAT Gateway configuration settings

Answer

In the FastConnect Virtual Circuit overview

Answer

In the VCN Details page under Internet Gateway

Question 6

An OCI administrator needs to store large amounts of unstructured data that is accessed infrequently, but must be retained for compliance purposes for at least 5 years. Data retrieval times of up to 4 hours are acceptable. Which OCI Object Storage tier should be used?

Accepted Answer

Archive Storage Tier. OCI Archive Storage is designed for data that is infrequently accessed and requires long retention periods, offering the lowest storage cost with a time-to-first-byte retrieval time of up to 4 hours.

Answer

Object Storage Standard Tier

Answer

Object Storage Infrequent Access Tier

Answer

File Storage Service

Question 7

Which OCI Object Storage feature enables users without an OCI account to securely download or upload a specific object via a generated URL with a defined expiration time?

Accepted Answer

Pre-Authenticated Requests (PAR). Pre-authenticated requests (PAR) provide a way to let users securely access or upload a specific object or bucket without requiring credentials, using a unique URL with an expiration time.

Answer

OCI IAM Federation

Answer

API Signing Keys

Answer

Object Storage Public Access Buckets

Question 8

Which TWO of the following are valid Object Storage tiers in OCI?

Accepted Answer

Archive. Standard and Archive are the primary tiers in OCI Object Storage.

Answer

Fast Storage

Answer

Temporary Storage

Answer

Cold Storage

Question 9

You have an existing compute instance with a standard boot volume size of 47 GB. Your application requires 200 GB. You successfully increase the boot volume size to 200 GB in the OCI Console. However, when you run `df -h` inside the guest OS, it still shows 47 GB. What is the cause?

Accepted Answer

The guest OS partition and file system have not yet been resized to claim the expanded storage.. While OCI resizes the physical storage block device at the hypervisor level, the guest operating system partition and file system must be manually or automatically extended to utilize the new space.

Answer

OCI does not support expanding boot volumes online; you must reboot the instance.

Answer

You must detach the boot volume and reattach it for the OS to notice the change.

Answer

Boot volumes have a hard cap of 50 GB unless converted to Block Volumes.

Question 10

Which TWO resource types can be managed using OCI IAM policies? (Choose two.)

Accepted Answer

object-family. OCI IAM policies govern access to virtually all OCI resources, including compute and object storage.

Answer

employee-badge-readers

Answer

corporate-laptop-hardware

Answer

office-wifi-routers