1Z0-1072-26 Compute Practice Test 2 — 15 Questions

Question 1

You want to create a custom gold image of a Linux compute instance containing specific security configurations and pre-installed agents. Which OCI feature should you use?

Accepted Answer

Custom Image. A Custom Image in OCI is created by capturing the boot volume of an existing compute instance, which preserves the operating system, installed applications, security configurations, and agents. This image can then be used to launch new instances that are pre-configured with the desired state. Unlike backups or clones, a custom image is specifically designed for creating standardized templates for instance deployment.

Answer

Block Volume Backup

Answer

Boot Volume Clone

Answer

Instance Configuration

Question 2

You are deploying a high-performance database workload on OCI that requires raw, low-latency NVMe drives for transaction logging. Which compute shape should you select?

Accepted Answer

BM.DenseIO2.52. Bare Metal Dense I/O shapes include directly attached NVMe SSDs, providing extreme IOPS and low latency suitable for databases and transactional logs.

Answer

BM.Standard3.64

Answer

VM.Standard.E4.Flex

Answer

BM.GPU3.8

Question 3

You are managing a Kubernetes cluster on OCI (OKE) and need to upgrade the Kubernetes control plane version. What happens to the existing worker nodes when you perform a control plane upgrade?

Accepted Answer

Worker nodes continue to run workloads, but you must manually or via node pool upgrades bring them to the matching version.. When you upgrade the Kubernetes control plane on OKE, the existing worker nodes are not automatically upgraded. They continue running workloads, but you must upgrade them separately — either manually or by upgrading the node pool — to match the control plane version. This is the correct behavior for OKE control plane upgrades.

Answer

The cluster becomes completely inaccessible, and all pods are evicted permanently.

Answer

Control plane upgrades are blocked until all worker nodes are upgraded first.

Answer

All worker nodes are automatically terminated and recreated with the new version.

Question 4

Which type of compute shape provides the lowest cost per core for general-purpose workloads by utilizing ARM-based Ampere processors?

Accepted Answer

VM.Standard.A1.Flex. VM.Standard.A1.Flex is OCI's Arm-based Ampere Altra compute shape, offering the lowest cost per core for general-purpose workloads. It provides flexible OCPU and memory configurations and is significantly cheaper than x86 equivalents, making it the correct answer for cost-sensitive ARM workloads.

Answer

VM.Standard.E4.Flex

Answer

BM.DenseIO2.52

Answer

VM.Standard3.Flex

Question 5

Which tool or command-line utility is primarily used to build, test, and push OCI Functions container images to the Oracle Functions Registry?

Accepted Answer

fn CLI. The fn CLI (Fn Project command-line tool) is the primary utility for OCI Functions development. It handles the full lifecycle: 'fn init' scaffolds a function, 'fn build' creates the Docker container image, 'fn test' runs it locally, and 'fn deploy' pushes the image to the configured Docker registry (OCIR) and registers the function with the OCI Functions service. OCI's Fn service is built on the open-source Fn Project, so the fn CLI is the native tool.

Answer

terraform

Answer

oci-cli

Answer

kubectl

Question 6

An autoscaling configuration is attached to your instance pool. You notice that instances are scaling out correctly based on CPU utilization, but you want to ensure that scaling events do not happen too frequently in response to brief traffic spikes. Which setting should you adjust?

Accepted Answer

The Autoscaling Cooldown Period. The Autoscaling Cooldown Period is the exact setting that prevents rapid, repeated scaling actions by enforcing a wait time after each scale event before another can trigger. This smooths out reactions to brief CPU spikes so the pool does not thrash between scale-out and scale-in. Adjusting it directly addresses the requirement to avoid frequent scaling events.

Answer

The Instance Pool capacity limits

Answer

The VCN DHCP Options timeout value

Answer

The Monitoring service metric polling interval

Question 7

You are setting up an autoscaling configuration for an instance pool. You want the pool to scale out when CPU utilization exceeds 80% and scale in when CPU utilization drops below 20%. What type of autoscaling policy should you create?

Accepted Answer

Metric-based autoscaling policy. Metric-based autoscaling policies allow you to define rules based on metrics such as CPU or memory utilization to scale out or scale in instances automatically.

Answer

Event-driven autoscaling policy

Answer

Schedule-based autoscaling policy

Answer

Manual capacity override policy

Question 8

You need to run an OCI Function that connects to an Oracle Autonomous Database secured within a private subnet. How should you configure the function to access the database securely without exposing it to the public internet?

Accepted Answer

Attach the function application to a private subnet within your VCN using VCN configuration.. Attaching the function application to a private subnet in your VCN lets the function's execution environment get an IP in that subnet and reach the Autonomous Database privately via the VCN's routing and security rules. This is the supported OCI Functions pattern for private resource access without public exposure.

Answer

Use an API Gateway with a public endpoint and route database queries through HTTP headers.

Answer

Configure a public IP address on the function execution environment.

Answer

Functions cannot access private subnets; you must use an internet gateway.

Question 9

You have created an instance configuration from a running compute instance. You now want to use this instance configuration to create an instance pool. Which parameter must you specify during the creation of the instance pool?

Accepted Answer

The placement (subnets and availability domains/fault domains) and the number of instances. When creating an instance pool from an instance configuration, you must specify the target availability domains or fault domains and the subnet(s) where the instances will be deployed, along with the desired number of instances.

Answer

The custom OS username and SSH password

Answer

The external DNS provider settings

Answer

The new root password for the boot volumes

Question 10

Which OCI service allows you to deploy and manage managed Kubernetes clusters without having to administer the underlying control plane nodes?

Accepted Answer

Oracle Container Engine for Kubernetes (OKE). Oracle Container Engine for Kubernetes (OKE) is OCI's managed Kubernetes service. OKE provisions and manages the Kubernetes control plane (API server, etcd, scheduler, controller manager) across multiple availability domains, so customers do not administer control plane nodes. Customers manage only worker nodes (or use virtual nodes/serverless).

Answer

OCI Functions

Answer

Compute Instance Pools

Answer

Container Instances

Question 11

Your OKE cluster has a node pool running in a private subnet. A developer needs to troubleshoot a running node via SSH, but direct external SSH access is disabled. What is the recommended secure way to access the node?

Accepted Answer

Use the OCI Bastion service or a bastion host in a public subnet to tunnel SSH traffic to the private worker node.. The OCI Bastion service (or a self-managed bastion host in a public subnet) is the recommended secure method to reach a private worker node because it provides a controlled, auditable SSH tunnel without exposing the node to the internet. The Bastion service supports managed SSH sessions with time-limited, IAM-controlled access, satisfying least-privilege and zero-trust principles. This preserves the private subnet's isolation while still enabling developer troubleshooting.

Answer

Temporarily attach a public IP address to the worker node and connect via SSH.

Answer

Modify the VCN security list to allow inbound SSH from 0.0.0.0/0 to the private subnet.

Answer

Run `kubectl exec` with privileged mode to gain root access to the underlying node's operating system.

Question 12

You need to resize the boot volume of an existing OCI Linux compute instance to provide more disk space for application logs. What is the correct sequence of actions?

Accepted Answer

Modify the boot volume size in the OCI Console, then use OS-level commands (such as `resizepart` and `xfs_growfs`) to extend the file system.. To expand a boot volume, you first update the boot volume size in the OCI Console, and then you must log in to the instance and extend the operating system partition and file system to recognize the new capacity.

Answer

Terminate the instance, detach the boot volume, attach it to another instance, expand it, and reattach it.

Answer

Reboot the instance; OCI automatically detects the new size and extends the file system partitions automatically.

Answer

Create a new block volume, mount it as the root directory, and delete the old boot volume.

Question 13

What is the primary benefit of using OCI Container Instances compared to managing containers on OCI Container Engine for Kubernetes (OKE)?

Accepted Answer

Container Instances allow you to run containers directly without managing servers, clusters, or orchestrators.. OCI Container Instances is a serverless container runtime that lets you launch a container directly without provisioning or managing any compute host, cluster, or orchestrator. It is designed for simple, short-lived or bursty workloads where the overhead of running and patching an OKE cluster is not justified. This directly matches option D, which describes the core value proposition of the service.

Answer

Container Instances offer lower pricing for long-running enterprise microservices than OKE.

Answer

Container Instances allow direct access to bare metal hypervisors.

Answer

Container Instances support multi-cluster service meshes and advanced ingress controllers.

Question 14

You are deploying an application on OCI Functions. The function requires external Python packages that are not part of the standard library. How should you include these dependencies?

Accepted Answer

Include the dependencies in the requirements.txt file within the function directory before building and deploying.. OCI Functions builds a container image from your function code and installs dependencies listed in requirements.txt during the build phase. Placing external Python packages in requirements.txt ensures they are bundled into the deployment artifact and available at runtime. This is the standard, supported method for including non-standard libraries.

Answer

Install them manually via SSH on the function's underlying compute node after deployment.

Answer

Upload the packages as objects to Object Storage and configure the function to download them at runtime.

Answer

Store them in an OCI Vault and reference them as environment variables.

Question 15

You are troubleshooting a performance issue on an OCI compute instance. You suspect that the instance is experiencing CPU throttling due to credits being exhausted. Which compute shape type are you most likely using?

Accepted Answer

Standard AMD Flexible Shape with baseline OCPU performance enabled. Standard AMD Flexible Shapes with baseline OCPU performance enabled use a burstable model where the instance earns CPU credits and can burst above baseline, but throttles when credits are exhausted. This is the classic CPU-throttling scenario. HPC, Bare Metal, and GPU shapes are not credit-based and do not throttle in this manner.

Answer

HPC (High-Performance Computing) Shape

Answer

Bare Metal Standard Shape

Answer

GPU Shape