1Z0-1072-26 Compute Practice Test 5 — 15 Questions

Question 1

Which THREE factors should you consider when selecting an OCI Compute shape for an enterprise application? (Choose three.)

Accepted Answer

Specific workload requirements such as local NVMe storage, GPUs, or high-performance networking. Option A is correct because OCI Compute shapes differ in hardware capabilities, and workloads that need local NVMe storage (dense I/O shapes), GPUs (GPU shapes), or high-performance networking (cluster networks/RDMA) must select a shape that provides those features. Option D is correct because OCI flexible shapes let you independently choose OCPUs and memory within supported ranges, so you can right-size an enterprise application instead of over- or under-provisioning with fixed shapes. Option E is correct because OCI offers Intel Xeon, AMD EPYC, and ARM Ampere A1 processors, and the chosen architecture affects performance, cost, and application compatibility. Option B is not a shape-selection factor because public IP assignment is a networking choice (VCN/subnet and public IP settings), not a property of the compute shape. Option C is not relevant because Autonomous Database is a separate managed database service and a compute instance cannot be converted into one.

Answer

The requirement that all compute instances must use public IP addresses by default

Answer

Whether the compute instance can be converted into an Autonomous Database instance

Question 2

Which THREE actions occur when you terminate an OCI compute instance? (Choose three.)

Accepted Answer

The compute instance virtual machine is permanently destroyed.. Option A is correct because terminating an OCI compute instance permanently destroys the virtual machine instance itself; the instance cannot be recovered after termination. Option B is correct because during termination OCI presents a choice to either preserve or permanently delete the boot volume, allowing you to keep the boot volume for later use. Option C is correct because the instance's primary VNIC is deleted along with its assigned private IP addresses when the instance is terminated. Option D is incorrect because attached data block volumes are not deleted by default; they are preserved unless you explicitly select the option to delete them. Option E is incorrect because custom images created from the instance are independent resources and are not automatically deleted when the instance is terminated.

Answer

All attached data block volumes are automatically deleted by default.

Answer

All custom images created from the instance are automatically deleted.

Question 3

Which TWO methods can be used to securely connect to a private OCI compute instance that does not have a public IP address? (Choose two.)

Accepted Answer

OCI Bastion Service. Option B (OCI Bastion Service) is correct because it is a managed, time-limited, IAM-controlled service that creates a secure SSH session to a private compute instance without requiring a public IP, using the Bastion plugin and a session created via the OCI Console, CLI, or API. Option C (a bastion host/jump server in a public subnet with SSH tunneling) is correct because the jump server has a public IP while the private instance does not, and SSH port forwarding (ssh -J or ProxyCommand) tunnels traffic through the jump host over the private subnet, keeping the target instance unreachable from the internet. Option A is wrong because Object Storage pre-authenticated requests (PARs) only grant temporary access to buckets/objects, not interactive shell or RDP access to a compute instance. Option D is wrong because moving the instance to a public subnet exposes it to the internet and is not a secure method, plus it may require reconfiguring route tables and security lists. Option E is wrong because direct SSH/RDP over an Internet Gateway requires a public IP and exposes the instance to the internet without any intermediate host, which is exactly what the scenario forbids.

Answer

Accessing the instance via Object Storage pre-authenticated requests

Answer

Changing the instance subnet to public temporarily while debugging

Answer

Direct RDP or SSH over the Internet Gateway without any intermediate host

Question 4

Which TWO of the following statements regarding OCI Instance Configurations and Instance Pools are correct? (Choose two.)

Accepted Answer

An instance configuration defines the blueprint (shape, image, metadata) used to provision instances in an instance pool.. Instance configurations act as templates for creating instance pools, and instance pools can be scaled manually or automatically via autoscaling configurations.

Answer

Instance configurations can only be created from scratch using JSON templates, never from an existing running instance.

Answer

Instance pools can only contain instances of different shapes and operating systems.

Answer

Autoscaling policies cannot be attached to instance pools.

Question 5

Which TWO of the following capabilities are provided by OCI Container Instances? (Choose two.)

Accepted Answer

Serverless container execution without managing underlying virtual machines. OCI Container Instances provides serverless container execution, meaning you can run containers directly without provisioning or managing the underlying virtual machines or hosts, which is exactly what option C describes. Option E is also correct because Container Instances supports attaching OCI Block Volume storage to a container instance, allowing persistent data to survive beyond the container's lifecycle. Options A and B are incorrect because multi-master control plane HA clustering and Kubernetes DaemonSet/StatefulSet controllers are features of Kubernetes (e.g., OKE), not of the Container Instances service. Option D is incorrect because Container Instances abstracts the underlying infrastructure and does not grant administrative SSH access to the hypervisor host.

Answer

Automatic multi-master control plane high availability clustering

Answer

Advanced Kubernetes DaemonSet and StatefulSet orchestration controllers

Answer

Full administrative SSH access to the underlying hypervisor host

Question 6

Which THREE options are available when configuring health checks for an OCI Instance Pool to monitor instance health? (Choose three.)

Accepted Answer

Instance Health (monitoring infrastructure status and Oracle Cloud Agent). Instance pools support multiple health check types, including Instance Health (checking hypervisor and agent status), Custom HTTP/HTTPS health checks, and Custom VNIC-based TCP health checks.

Answer

Object Storage bucket upload speed health checks

Answer

Automatic database transaction replication health checks

Question 7

Which THREE security best practices should be implemented when deploying and managing OCI Functions? (Choose three.)

Accepted Answer

Using dynamic groups and IAM policies to grant functions least-privilege access to other OCI resources. Security best practices for functions include using dynamic groups and IAM policies for least-privilege resource access, storing sensitive strings in OCI Vault, and deploying functions in private subnets with VCN integration.

Answer

Hardcoding tenancy administrator credentials in environment variables for easy access

Answer

Disabling authentication on API Gateways triggering functions to allow open public access

Question 8

Which TWO actions should you take to troubleshoot an OCI compute instance that has become completely unresponsive and unreachable over SSH? (Choose two.)

Accepted Answer

Access the instance via the Serial Console connection to inspect system logs and kernel messages.. Option D is correct because the OCI Serial Console provides out-of-band access to the instance's console even when SSH and networking are unresponsive, allowing you to inspect boot messages, kernel panics, and system logs to diagnose the hang. Option E is correct because OCI Monitoring metrics (CPU utilization, memory, network traffic) can reveal resource exhaustion or a bottleneck that caused the instance to become unresponsive, guiding further troubleshooting. Option A is wrong because deleting the VCN and recreating subnets is a destructive networking change that would not fix a compute-level hang and would disrupt other resources. Option B is wrong because OCI compute instances are cloud-hosted; customers have no physical access to the data center or server racks. Option C is wrong because reinstalling IAM security policies addresses authorization issues, not an unresponsive instance, and would not restore SSH or console access.

Answer

Delete the VCN and recreate all networking subnets.

Answer

Log into the physical data center and connect a physical keyboard to the server rack.

Answer

Reinstall the OCI tenancy IAM security policies.

Question 9

Which THREE features are associated with OCI Dedicated Virtual Machine Hosts? (Choose three.)

Accepted Answer

Visibility into host-level resource capacity and placement control. Option A is correct because OCI Dedicated Virtual Machine Hosts give you visibility into the host's total and available CPU/memory capacity and let you control instance placement on that specific host. Option B is correct because a dedicated host provides exclusive physical hardware tenancy isolation, meaning no other OCI tenants share the underlying physical server. Option C is correct because you can launch and place multiple VM instances on the same dedicated physical host, subject to its capacity. Option D is incorrect because OCI Dedicated Virtual Machine Hosts do not provide automatic multi-cloud replication across AWS and Azure datacenters. Option E is incorrect because a dedicated host cannot be converted directly into a Kubernetes master node without OS reinstallation.

Answer

Automatic multi-cloud replication across AWS and Azure physical datacenters

Answer

The ability to convert the dedicated host directly into a Kubernetes master node without OS reinstallation

Question 10

What is the primary purpose of OCI Compute Instance Launch Options?

Accepted Answer

To configure instance network virtualization, firmware type, and boot parameters.. OCI Compute Instance Launch Options control low-level platform settings applied at launch, including network virtualization type (paravirtualized vs. SR-IOV), firmware type (BIOS vs. UEFI), boot parameters, and secure boot/measured boot settings. These options affect how the hypervisor presents hardware to the guest and how the instance boots.

Answer

To set up automatic IAM user credential rotation.

Answer

To schedule automated block volume backup retention policies.

Answer

To define DNS domain suffix forwarding rules for VCN resolvers.

Question 11

You are designing a disaster recovery strategy for an OCI compute instance. You need to replicate boot volume backups to a secondary region. How should you accomplish this?

Accepted Answer

Use the OCI Console or CLI to copy the boot volume backup to the destination region.. Boot volume backups can be copied across regions using the cross-region copy feature in the OCI Console or CLI, allowing you to restore them as boot volumes in another region.

Answer

Configure a local peering gateway between the two regions' boot storage endpoints.

Answer

Boot volume backups cannot be copied across regions; you must recreate the instance manually.

Answer

Attach the boot volume backup as an Object Storage bucket and sync via FTP.

Question 12

Which OCI service feature enables you to run software containers without provisioning virtual machines or managing Kubernetes clusters, offering simple container execution?

Accepted Answer

Container Instances. OCI Container Instances is a serverless compute service that runs containers directly without requiring you to provision VMs or manage a Kubernetes control plane. You supply a container image and OCI handles the underlying infrastructure, making it the simplest container execution option. This matches the question's requirement exactly.

Answer

Bare Metal Compute

Answer

Dedicated VM Hosts

Answer

Instance Pools

Question 13

You have deployed an OCI Function and invoked it, but it returns a timeout error. What is the maximum execution timeout limit supported by OCI Functions?

Accepted Answer

900 seconds (15 minutes). OCI Functions enforces a maximum execution timeout of 900 seconds (15 minutes) per function invocation. This limit is set at the function configuration level and cannot be exceeded, regardless of the function's runtime or resource allocation. When a function runs longer than the configured timeout, the invocation is terminated and returns a timeout error, which is exactly what occurred in the scenario.

Answer

Infinite

Answer

60 seconds

Answer

3600 seconds (1 hour)

Question 14

You are managing an OKE cluster and need to restrict network traffic so that pods in Namespace A cannot communicate with pods in Namespace B. What Kubernetes object should you configure?

Accepted Answer

Kubernetes Network Policies. Kubernetes Network Policies are the native object for controlling pod-to-pod traffic within a cluster. By creating a NetworkPolicy in Namespace A that selects pods and defines ingress/egress rules, you can deny traffic to pods in Namespace B. This is enforced by the CNI plugin (e.g., OCI VCN-Native CNI on OKE), making Network Policies the correct answer.

Answer

Kubernetes Horizontal Pod Autoscalers

Answer

OCI VCN Security Lists

Answer

OCI API Gateway Access Rules

Question 15

Which OCI shape family is optimized for High-Performance Computing (HPC) workloads requiring high core counts and low-latency clustering?

Accepted Answer

HPC Shapes. OCI HPC shapes are purpose-built for High-Performance Computing, offering high core counts, large memory, and support for low-latency cluster networking (RDMA). They are the correct family for tightly-coupled HPC workloads.

Answer

Standard Micro Shapes

Answer

Burstable Instances

Answer

General Purpose Standard Shapes