1Z0-1072-26 Compute — Timed 10 Questions

Question 1

You need to run a dedicated compute instance where no other tenant's virtual instances can share the underlying physical hardware. Which OCI service or feature should you use?

Accepted Answer

Bare Metal Instances. Bare Metal Instances provide a physical server dedicated solely to your organization, meaning no other tenant's virtual instances can share the underlying physical hardware. Dedicated Virtual Machine Hosts also provide dedicated physical hardware, but they host virtual machines rather than being a bare metal instance itself. However, the exact phrasing 'run a dedicated compute instance where no other tenant's virtual instances can share the underlying physical hardware' aligns with Bare Metal, or if VM isolation is intended, Dedicated VM Hosts. Wait, actually, both Bare Metal and Dedicated Virtual Machine Hosts provide single tenancy, but Bare Metal is literally a compute instance on dedicated physical hardware.

Answer

Dedicated Virtual Machine Hosts

Answer

Instance Pools

Answer

Protected Compute Shapes

Question 2

You are deploying a Container Engine for Kubernetes (OKE) cluster and want to ensure that worker nodes are distributed across separate physical hardware infrastructures to maximize fault tolerance. Which feature should you configure during cluster creation?

Accepted Answer

Node Pool Fault Domains. While the concept is correct, OKE refers to this as 'Fault Domains' within the Node Pool configuration. The option 'Node Pool Fault Domains' is slightly imprecise but acceptable. However, the explanation should clarify that OKE automatically distributes nodes across fault domains if specified during node pool creation.

Answer

VCN Route Tables

Answer

Kubernetes Horizontal Pod Autoscaler

Answer

Pod Security Policies

Question 3

You need to migrate a Windows Server boot volume containing sensitive application data across regions in OCI. What is the recommended and most secure sequence of steps?

Accepted Answer

Create a block volume backup, copy the backup directly to the destination region using the native backup copy feature, and restore it as a boot volume.. In Oracle Cloud Infrastructure (OCI), the recommended and most secure way to migrate a boot volume (especially one containing sensitive data) across regions is to create a backup of the boot volume, copy the block volume backup directly to the destination region using the native cross-region backup copy feature, and then restore the backup as a boot volume in the target region. This avoids the overhead and security exposure of exporting images to Object Storage buckets.

Answer

Use the OCI Database Migration service to copy the operating system boot sectors.

Answer

Detach the boot volume, attach it to a secondary compute instance, and use rsync over a VCN remote peering connection.

Answer

Create a custom image from the instance, export the image to an Object Storage bucket, copy the bucket to the target region, and import the image in the target region.

Question 4

You need to grant an OCI Function permission to read objects from an OCI Object Storage bucket. How should you configure this securely?

Accepted Answer

Create a dynamic group for the functions and write an IAM policy granting the dynamic group read access to the bucket.. To allow OCI Functions to access other OCI resources securely, you must define a dynamic group based on the function's OCID or compartment, and then write an IAM policy that grants the dynamic group the necessary permissions (e.g., 'read objects in compartment <compartment_name>').

Answer

Make the Object Storage bucket completely public so any function can read from it without authentication.

Answer

Embed the tenancy administrator API signing key directly in the function's source code.

Answer

Attach a user credential to the function environment variables.

Question 5

You are managing an OKE cluster and need to inspect the logs of the cluster control plane components (such as `kube-apiserver` and `kube-controller-manager`). Where are these logs sent by default in OCI?

Accepted Answer

To the OCI Logging Service under the OKE cluster log categories.. OKE integrates with OCI Logging service. Control plane logs (audit, API server, controller manager, scheduler) can be enabled and streamed directly to log groups in the OCI Logging service.

Answer

To a local file directory `/var/log/kubernetes/` on the worker nodes.

Answer

Control plane logs are permanently discarded for security reasons.

Answer

Directly to an Object Storage bucket without enabling any service configuration.

Question 6

Which TWO of the following are valid trigger sources for OCI Functions? (Choose two.)

Accepted Answer

OCI Events service reacting to resource state changes. OCI Functions can be invoked via OCI Events (e.g. storage object creation), API Gateway HTTP requests, or directly via the OCI SDK/CLI.

Answer

Direct attachment to VCN Internet Gateways without any intermediate services

Answer

Scheduled cron jobs running inside block volume snapshots

Question 7

Which TWO of the following metrics are commonly used in OCI Autoscaling configurations for Instance Pools? (Choose two.)

Accepted Answer

CPU utilization percentage. OCI Autoscaling for Instance Pools currently supports CPU utilization and Memory utilization is not a standard metric available for native autoscaling policies without custom metrics or external monitoring integration. The correct metrics are CPU utilization and Memory utilization is incorrect; the second standard metric is typically based on custom metrics or specific service-defined metrics, but standard OCI Instance Pool autoscaling is primarily driven by CPU utilization.

Answer

VCN packet drop error rates

Answer

Memory utilization percentage

Answer

Object Storage bucket download count

Answer

Database transaction commit latency

Question 8

Which TWO of the following tasks can be performed using the Oracle Cloud Agent on compute instances? (Choose two.)

Accepted Answer

Executing remote script commands via Run Command service. Oracle Cloud Agent enables plugins for collecting monitoring metrics, executing run commands remotely, and managing OS compliance and patching.

Answer

Modifying DNS records in external third-party domain registrars

Answer

Configuring VCN security list packet filtering rules

Answer

Managing physical data center hardware maintenance and rack replacements

Question 9

Which THREE methods or features are available in OCI to migrate an existing on-premises virtual machine into an OCI Compute instance? (Choose three.)

Accepted Answer

Exporting the boot volume as a QCOW2 or RAW formatted virtual disk file. Option A is correct because OCI supports importing custom images in QCOW2 or RAW format, so exporting the on-premises VM's boot volume as a QCOW2 or RAW virtual disk file is a valid first step in migration. Option C is correct because the standard OCI workflow is to upload the exported disk image to an Object Storage bucket and then import it as a custom image, which can then be used to launch a Compute instance. Option E is correct because OCI provides migration services and supports third-party orchestration tools that use OCI APIs to automate and manage VM migrations into OCI. Option B is incorrect because scp cannot connect directly to the OCI hypervisor control plane; images must go through Object Storage or an import service. Option D is incorrect because OCI compute instances do not support physically plugging on-premises hard drives into USB ports for migration.

Answer

Running `scp` from the on-premises hypervisor directly into the OCI hypervisor control plane

Answer

Directly plugging physical hard drives into OCI compute bare metal server USB ports

Question 10

You are managing an OKE cluster and need to inspect application container logs that are written to stdout/stderr by pods running on worker nodes. What is the standard kubectl command to view these logs?

Accepted Answer

kubectl logs . The command 'kubectl logs ' is the correct standard Kubernetes command to view logs for pods running in an OKE cluster. The other options are incorrect as they serve different purposes (events, metadata, or OCI-specific infrastructure logs).

Answer

kubectl get events

Answer

kubectl describe pod

Answer

oci compute instance list-logs