1Z0-1072-26 Compute — 15 Questions

Question 1

You need to run a dedicated compute instance where no other tenant's virtual instances can share the underlying physical hardware. Which OCI service or feature should you use?

Accepted Answer

Bare Metal Instances. Bare Metal Instances provide a physical server dedicated solely to your organization, meaning no other tenant's virtual instances can share the underlying physical hardware. Dedicated Virtual Machine Hosts also provide dedicated physical hardware, but they host virtual machines rather than being a bare metal instance itself. However, the exact phrasing 'run a dedicated compute instance where no other tenant's virtual instances can share the underlying physical hardware' aligns with Bare Metal, or if VM isolation is intended, Dedicated VM Hosts. Wait, actually, both Bare Metal and Dedicated Virtual Machine Hosts provide single tenancy, but Bare Metal is literally a compute instance on dedicated physical hardware.

Answer

Dedicated Virtual Machine Hosts

Answer

Instance Pools

Answer

Protected Compute Shapes

Question 2

You are deploying a Container Engine for Kubernetes (OKE) cluster and want to ensure that worker nodes are distributed across separate physical hardware infrastructures to maximize fault tolerance. Which feature should you configure during cluster creation?

Accepted Answer

Node Pool Fault Domains. While the concept is correct, OKE refers to this as 'Fault Domains' within the Node Pool configuration. The option 'Node Pool Fault Domains' is slightly imprecise but acceptable. However, the explanation should clarify that OKE automatically distributes nodes across fault domains if specified during node pool creation.

Answer

VCN Route Tables

Answer

Kubernetes Horizontal Pod Autoscaler

Answer

Pod Security Policies

Question 3

You need to migrate a Windows Server boot volume containing sensitive application data across regions in OCI. What is the recommended and most secure sequence of steps?

Accepted Answer

Create a block volume backup, copy the backup directly to the destination region using the native backup copy feature, and restore it as a boot volume.. In Oracle Cloud Infrastructure (OCI), the recommended and most secure way to migrate a boot volume (especially one containing sensitive data) across regions is to create a backup of the boot volume, copy the block volume backup directly to the destination region using the native cross-region backup copy feature, and then restore the backup as a boot volume in the target region. This avoids the overhead and security exposure of exporting images to Object Storage buckets.

Answer

Use the OCI Database Migration service to copy the operating system boot sectors.

Answer

Detach the boot volume, attach it to a secondary compute instance, and use rsync over a VCN remote peering connection.

Answer

Create a custom image from the instance, export the image to an Object Storage bucket, copy the bucket to the target region, and import the image in the target region.

Question 4

You need to grant an OCI Function permission to read objects from an OCI Object Storage bucket. How should you configure this securely?

Accepted Answer

Create a dynamic group for the functions and write an IAM policy granting the dynamic group read access to the bucket.. To allow OCI Functions to access other OCI resources securely, you must define a dynamic group based on the function's OCID or compartment, and then write an IAM policy that grants the dynamic group the necessary permissions (e.g., 'read objects in compartment <compartment_name>').

Answer

Make the Object Storage bucket completely public so any function can read from it without authentication.

Answer

Embed the tenancy administrator API signing key directly in the function's source code.

Answer

Attach a user credential to the function environment variables.

Question 5

You are managing an OKE cluster and need to inspect the logs of the cluster control plane components (such as `kube-apiserver` and `kube-controller-manager`). Where are these logs sent by default in OCI?

Accepted Answer

To the OCI Logging Service under the OKE cluster log categories.. OKE integrates with OCI Logging service. Control plane logs (audit, API server, controller manager, scheduler) can be enabled and streamed directly to log groups in the OCI Logging service.

Answer

To a local file directory `/var/log/kubernetes/` on the worker nodes.

Answer

Control plane logs are permanently discarded for security reasons.

Answer

Directly to an Object Storage bucket without enabling any service configuration.

Question 6

Which TWO of the following are valid trigger sources for OCI Functions? (Choose two.)

Accepted Answer

OCI Events service reacting to resource state changes. OCI Functions can be invoked via OCI Events (e.g. storage object creation), API Gateway HTTP requests, or directly via the OCI SDK/CLI.

Answer

Direct attachment to VCN Internet Gateways without any intermediate services

Answer

Scheduled cron jobs running inside block volume snapshots

Question 7

Which TWO of the following metrics are commonly used in OCI Autoscaling configurations for Instance Pools? (Choose two.)

Accepted Answer

CPU utilization percentage. OCI Autoscaling for Instance Pools currently supports CPU utilization and Memory utilization is not a standard metric available for native autoscaling policies without custom metrics or external monitoring integration. The correct metrics are CPU utilization and Memory utilization is incorrect; the second standard metric is typically based on custom metrics or specific service-defined metrics, but standard OCI Instance Pool autoscaling is primarily driven by CPU utilization.

Answer

VCN packet drop error rates

Answer

Memory utilization percentage

Answer

Object Storage bucket download count

Answer

Database transaction commit latency

Question 8

Which TWO of the following tasks can be performed using the Oracle Cloud Agent on compute instances? (Choose two.)

Accepted Answer

Executing remote script commands via Run Command service. Oracle Cloud Agent enables plugins for collecting monitoring metrics, executing run commands remotely, and managing OS compliance and patching.

Answer

Modifying DNS records in external third-party domain registrars

Answer

Configuring VCN security list packet filtering rules

Answer

Managing physical data center hardware maintenance and rack replacements

Question 9

Which THREE methods or features are available in OCI to migrate an existing on-premises virtual machine into an OCI Compute instance? (Choose three.)

Accepted Answer

Exporting the boot volume as a QCOW2 or RAW formatted virtual disk file. Option A is correct because OCI supports importing custom images in QCOW2 or RAW format, so exporting the on-premises VM's boot volume as a QCOW2 or RAW virtual disk file is a valid first step in migration. Option C is correct because the standard OCI workflow is to upload the exported disk image to an Object Storage bucket and then import it as a custom image, which can then be used to launch a Compute instance. Option E is correct because OCI provides migration services and supports third-party orchestration tools that use OCI APIs to automate and manage VM migrations into OCI. Option B is incorrect because scp cannot connect directly to the OCI hypervisor control plane; images must go through Object Storage or an import service. Option D is incorrect because OCI compute instances do not support physically plugging on-premises hard drives into USB ports for migration.

Answer

Running `scp` from the on-premises hypervisor directly into the OCI hypervisor control plane

Answer

Directly plugging physical hard drives into OCI compute bare metal server USB ports

Question 10

You are managing an OKE cluster and need to inspect application container logs that are written to stdout/stderr by pods running on worker nodes. What is the standard kubectl command to view these logs?

Accepted Answer

kubectl logs . The command 'kubectl logs ' is the correct standard Kubernetes command to view logs for pods running in an OKE cluster. The other options are incorrect as they serve different purposes (events, metadata, or OCI-specific infrastructure logs).

Answer

kubectl get events

Answer

kubectl describe pod

Answer

oci compute instance list-logs

Question 11

You are troubleshooting a function timeout in OCI Functions. You notice that the function takes 30 seconds to initialize database connections on every cold start. How can you optimize this initialization overhead?

Accepted Answer

Place the database connection initialization code outside the main function handler method so it executes during container warm start.. To avoid connection overhead on every cold start, database connection pools or initialization logic can be placed outside the function handler method so that container warm starts reuse existing connections.

Answer

Enable instance pool autoscaling on the function application.

Answer

Increase the function memory allocation to 32 GB.

Answer

Migrate the function container to an OKE cluster DaemonSet.

Question 12

A development team needs to deploy an application that requires exactly 6 OCPUs and 32 GB of memory. Which compute option best satisfies this requirement efficiently without wasting resources?

Accepted Answer

VM.Standard.E4.Flex configured with 6 OCPUs and 32 GB of RAM. Flexible shapes allow you to independently configure OCPUs and memory to match exact workload requirements.

Answer

VM.Standard1.16

Answer

BM.Standard.E3.128

Answer

VM.Standard2.8

Question 13

You are migrating a legacy application to OCI. The application requires a specific network interface card (NIC) virtualization mode and custom UEFI boot parameters that are not standard. Where should you configure these custom launch options?

Accepted Answer

In the Custom Image launch options settings. Custom Image launch options in OCI allow you to specify non-standard launch parameters such as NIC virtualization mode (paravirtualized vs. SR-IOV) and custom UEFI boot parameters at image creation time. These settings are baked into the custom image and applied whenever an instance is launched from it, which is exactly what a legacy application requiring specific NIC modes and UEFI parameters needs. This is the only option that operates at the image/launch layer where such hardware-level boot and NIC settings are defined.

Answer

Inside the VCN Security List configurations

Answer

Via the compute instance's operating system kernel parameters

Answer

In the Instance Configuration template parameters

Question 14

You manage an instance pool backed by an autoscaling configuration. The pool reaches its maximum limit of 10 instances due to a traffic spike. A hardware maintenance event triggers a retirement notification for one of the instances in the pool. How does OCI Instance Pools with Autoscaling handle this retired instance?

Accepted Answer

The instance is replaced automatically by the instance pool to maintain the operational state, managing lifecycle events independently of active autoscaling metrics.. Instance pools automatically replace unhealthy or retired instances to maintain the desired capacity. If an instance is retired, the pool provisions a new instance to replace it, even if autoscaling has reached its maximum size, because minimum/desired capacity rules take precedence over instance retirement recovery.

Answer

The instance is terminated, and a new instance is provisioned to replace it, temporarily exceeding the maximum limit if necessary until scaling rules scale it back down.

Answer

The instance is terminated and not replaced because the pool is already at its maximum limit.

Answer

The autoscaling configuration must be manually edited to increase the max limit before the instance can be replaced.

Question 15

Your serverless application built on OCI Functions needs to process events coming from OCI Object Storage when a new file is uploaded. What is the primary mechanism to trigger the function?

Accepted Answer

OCI Events Service. OCI Events Service is the native, event-driven mechanism that emits Object Storage events (e.g., ObjectCreated) and routes them to a Functions target via a rule. When a new object is uploaded, the Events rule matches the bucket and event type, then invokes the function with the event payload.

Answer

Direct polling of Object Storage buckets by the function container

Answer

Scheduled Cron Jobs in Compute

Answer

API Gateway direct integration