1Z0-1072-26 Compute — Timed 20 Questions

Question 1

You need to run a dedicated compute instance where no other tenant's virtual instances can share the underlying physical hardware. Which OCI service or feature should you use?

Accepted Answer

Bare Metal Instances. Bare Metal Instances provide a physical server dedicated solely to your organization, meaning no other tenant's virtual instances can share the underlying physical hardware. Dedicated Virtual Machine Hosts also provide dedicated physical hardware, but they host virtual machines rather than being a bare metal instance itself. However, the exact phrasing 'run a dedicated compute instance where no other tenant's virtual instances can share the underlying physical hardware' aligns with Bare Metal, or if VM isolation is intended, Dedicated VM Hosts. Wait, actually, both Bare Metal and Dedicated Virtual Machine Hosts provide single tenancy, but Bare Metal is literally a compute instance on dedicated physical hardware.

Answer

Dedicated Virtual Machine Hosts

Answer

Instance Pools

Answer

Protected Compute Shapes

Question 2

You are deploying a Container Engine for Kubernetes (OKE) cluster and want to ensure that worker nodes are distributed across separate physical hardware infrastructures to maximize fault tolerance. Which feature should you configure during cluster creation?

Accepted Answer

Node Pool Fault Domains. While the concept is correct, OKE refers to this as 'Fault Domains' within the Node Pool configuration. The option 'Node Pool Fault Domains' is slightly imprecise but acceptable. However, the explanation should clarify that OKE automatically distributes nodes across fault domains if specified during node pool creation.

Answer

VCN Route Tables

Answer

Kubernetes Horizontal Pod Autoscaler

Answer

Pod Security Policies

Question 3

You need to migrate a Windows Server boot volume containing sensitive application data across regions in OCI. What is the recommended and most secure sequence of steps?

Accepted Answer

Create a block volume backup, copy the backup directly to the destination region using the native backup copy feature, and restore it as a boot volume.. In Oracle Cloud Infrastructure (OCI), the recommended and most secure way to migrate a boot volume (especially one containing sensitive data) across regions is to create a backup of the boot volume, copy the block volume backup directly to the destination region using the native cross-region backup copy feature, and then restore the backup as a boot volume in the target region. This avoids the overhead and security exposure of exporting images to Object Storage buckets.

Answer

Use the OCI Database Migration service to copy the operating system boot sectors.

Answer

Detach the boot volume, attach it to a secondary compute instance, and use rsync over a VCN remote peering connection.

Answer

Create a custom image from the instance, export the image to an Object Storage bucket, copy the bucket to the target region, and import the image in the target region.

Question 4

You need to grant an OCI Function permission to read objects from an OCI Object Storage bucket. How should you configure this securely?

Accepted Answer

Create a dynamic group for the functions and write an IAM policy granting the dynamic group read access to the bucket.. To allow OCI Functions to access other OCI resources securely, you must define a dynamic group based on the function's OCID or compartment, and then write an IAM policy that grants the dynamic group the necessary permissions (e.g., 'read objects in compartment <compartment_name>').

Answer

Make the Object Storage bucket completely public so any function can read from it without authentication.

Answer

Embed the tenancy administrator API signing key directly in the function's source code.

Answer

Attach a user credential to the function environment variables.

Question 5

You are managing an OKE cluster and need to inspect the logs of the cluster control plane components (such as `kube-apiserver` and `kube-controller-manager`). Where are these logs sent by default in OCI?

Accepted Answer

To the OCI Logging Service under the OKE cluster log categories.. OKE integrates with OCI Logging service. Control plane logs (audit, API server, controller manager, scheduler) can be enabled and streamed directly to log groups in the OCI Logging service.

Answer

To a local file directory `/var/log/kubernetes/` on the worker nodes.

Answer

Control plane logs are permanently discarded for security reasons.

Answer

Directly to an Object Storage bucket without enabling any service configuration.

Question 6

Which TWO of the following are valid trigger sources for OCI Functions? (Choose two.)

Accepted Answer

OCI Events service reacting to resource state changes. OCI Functions can be invoked via OCI Events (e.g. storage object creation), API Gateway HTTP requests, or directly via the OCI SDK/CLI.

Answer

Direct attachment to VCN Internet Gateways without any intermediate services

Answer

Scheduled cron jobs running inside block volume snapshots

Question 7

Which TWO of the following metrics are commonly used in OCI Autoscaling configurations for Instance Pools? (Choose two.)

Accepted Answer

CPU utilization percentage. OCI Autoscaling for Instance Pools currently supports CPU utilization and Memory utilization is not a standard metric available for native autoscaling policies without custom metrics or external monitoring integration. The correct metrics are CPU utilization and Memory utilization is incorrect; the second standard metric is typically based on custom metrics or specific service-defined metrics, but standard OCI Instance Pool autoscaling is primarily driven by CPU utilization.

Answer

VCN packet drop error rates

Answer

Memory utilization percentage

Answer

Object Storage bucket download count

Answer

Database transaction commit latency

Question 8

Which TWO of the following tasks can be performed using the Oracle Cloud Agent on compute instances? (Choose two.)

Accepted Answer

Executing remote script commands via Run Command service. Oracle Cloud Agent enables plugins for collecting monitoring metrics, executing run commands remotely, and managing OS compliance and patching.

Answer

Modifying DNS records in external third-party domain registrars

Answer

Configuring VCN security list packet filtering rules

Answer

Managing physical data center hardware maintenance and rack replacements

Question 9

Which THREE methods or features are available in OCI to migrate an existing on-premises virtual machine into an OCI Compute instance? (Choose three.)

Accepted Answer

Exporting the boot volume as a QCOW2 or RAW formatted virtual disk file. Option A is correct because OCI supports importing custom images in QCOW2 or RAW format, so exporting the on-premises VM's boot volume as a QCOW2 or RAW virtual disk file is a valid first step in migration. Option C is correct because the standard OCI workflow is to upload the exported disk image to an Object Storage bucket and then import it as a custom image, which can then be used to launch a Compute instance. Option E is correct because OCI provides migration services and supports third-party orchestration tools that use OCI APIs to automate and manage VM migrations into OCI. Option B is incorrect because scp cannot connect directly to the OCI hypervisor control plane; images must go through Object Storage or an import service. Option D is incorrect because OCI compute instances do not support physically plugging on-premises hard drives into USB ports for migration.

Answer

Running `scp` from the on-premises hypervisor directly into the OCI hypervisor control plane

Answer

Directly plugging physical hard drives into OCI compute bare metal server USB ports

Question 10

You are managing an OKE cluster and need to inspect application container logs that are written to stdout/stderr by pods running on worker nodes. What is the standard kubectl command to view these logs?

Accepted Answer

kubectl logs . The command 'kubectl logs ' is the correct standard Kubernetes command to view logs for pods running in an OKE cluster. The other options are incorrect as they serve different purposes (events, metadata, or OCI-specific infrastructure logs).

Answer

kubectl get events

Answer

kubectl describe pod

Answer

oci compute instance list-logs

Question 11

You are troubleshooting a function timeout in OCI Functions. You notice that the function takes 30 seconds to initialize database connections on every cold start. How can you optimize this initialization overhead?

Accepted Answer

Place the database connection initialization code outside the main function handler method so it executes during container warm start.. To avoid connection overhead on every cold start, database connection pools or initialization logic can be placed outside the function handler method so that container warm starts reuse existing connections.

Answer

Enable instance pool autoscaling on the function application.

Answer

Increase the function memory allocation to 32 GB.

Answer

Migrate the function container to an OKE cluster DaemonSet.

Question 12

A development team needs to deploy an application that requires exactly 6 OCPUs and 32 GB of memory. Which compute option best satisfies this requirement efficiently without wasting resources?

Accepted Answer

VM.Standard.E4.Flex configured with 6 OCPUs and 32 GB of RAM. Flexible shapes allow you to independently configure OCPUs and memory to match exact workload requirements.

Answer

VM.Standard1.16

Answer

BM.Standard.E3.128

Answer

VM.Standard2.8

Question 13

You are migrating a legacy application to OCI. The application requires a specific network interface card (NIC) virtualization mode and custom UEFI boot parameters that are not standard. Where should you configure these custom launch options?

Accepted Answer

In the Custom Image launch options settings. Custom Image launch options in OCI allow you to specify non-standard launch parameters such as NIC virtualization mode (paravirtualized vs. SR-IOV) and custom UEFI boot parameters at image creation time. These settings are baked into the custom image and applied whenever an instance is launched from it, which is exactly what a legacy application requiring specific NIC modes and UEFI parameters needs. This is the only option that operates at the image/launch layer where such hardware-level boot and NIC settings are defined.

Answer

Inside the VCN Security List configurations

Answer

Via the compute instance's operating system kernel parameters

Answer

In the Instance Configuration template parameters

Question 14

You manage an instance pool backed by an autoscaling configuration. The pool reaches its maximum limit of 10 instances due to a traffic spike. A hardware maintenance event triggers a retirement notification for one of the instances in the pool. How does OCI Instance Pools with Autoscaling handle this retired instance?

Accepted Answer

The instance is replaced automatically by the instance pool to maintain the operational state, managing lifecycle events independently of active autoscaling metrics.. Instance pools automatically replace unhealthy or retired instances to maintain the desired capacity. If an instance is retired, the pool provisions a new instance to replace it, even if autoscaling has reached its maximum size, because minimum/desired capacity rules take precedence over instance retirement recovery.

Answer

The instance is terminated, and a new instance is provisioned to replace it, temporarily exceeding the maximum limit if necessary until scaling rules scale it back down.

Answer

The instance is terminated and not replaced because the pool is already at its maximum limit.

Answer

The autoscaling configuration must be manually edited to increase the max limit before the instance can be replaced.

Question 15

Your serverless application built on OCI Functions needs to process events coming from OCI Object Storage when a new file is uploaded. What is the primary mechanism to trigger the function?

Accepted Answer

OCI Events Service. OCI Events Service is the native, event-driven mechanism that emits Object Storage events (e.g., ObjectCreated) and routes them to a Functions target via a rule. When a new object is uploaded, the Events rule matches the bucket and event type, then invokes the function with the event payload.

Answer

Direct polling of Object Storage buckets by the function container

Answer

Scheduled Cron Jobs in Compute

Answer

API Gateway direct integration

Question 16

You want to create a custom gold image of a Linux compute instance containing specific security configurations and pre-installed agents. Which OCI feature should you use?

Accepted Answer

Custom Image. A Custom Image in OCI is created by capturing the boot volume of an existing compute instance, which preserves the operating system, installed applications, security configurations, and agents. This image can then be used to launch new instances that are pre-configured with the desired state. Unlike backups or clones, a custom image is specifically designed for creating standardized templates for instance deployment.

Answer

Block Volume Backup

Answer

Boot Volume Clone

Answer

Instance Configuration

Question 17

You are deploying a high-performance database workload on OCI that requires raw, low-latency NVMe drives for transaction logging. Which compute shape should you select?

Accepted Answer

BM.DenseIO2.52. Bare Metal Dense I/O shapes include directly attached NVMe SSDs, providing extreme IOPS and low latency suitable for databases and transactional logs.

Answer

BM.Standard3.64

Answer

VM.Standard.E4.Flex

Answer

BM.GPU3.8

Question 18

You are managing a Kubernetes cluster on OCI (OKE) and need to upgrade the Kubernetes control plane version. What happens to the existing worker nodes when you perform a control plane upgrade?

Accepted Answer

Worker nodes continue to run workloads, but you must manually or via node pool upgrades bring them to the matching version.. When you upgrade the Kubernetes control plane on OKE, the existing worker nodes are not automatically upgraded. They continue running workloads, but you must upgrade them separately — either manually or by upgrading the node pool — to match the control plane version. This is the correct behavior for OKE control plane upgrades.

Answer

The cluster becomes completely inaccessible, and all pods are evicted permanently.

Answer

Control plane upgrades are blocked until all worker nodes are upgraded first.

Answer

All worker nodes are automatically terminated and recreated with the new version.

Question 19

Which type of compute shape provides the lowest cost per core for general-purpose workloads by utilizing ARM-based Ampere processors?

Accepted Answer

VM.Standard.A1.Flex. VM.Standard.A1.Flex is OCI's Arm-based Ampere Altra compute shape, offering the lowest cost per core for general-purpose workloads. It provides flexible OCPU and memory configurations and is significantly cheaper than x86 equivalents, making it the correct answer for cost-sensitive ARM workloads.

Answer

VM.Standard.E4.Flex

Answer

BM.DenseIO2.52

Answer

VM.Standard3.Flex

Question 20

Which tool or command-line utility is primarily used to build, test, and push OCI Functions container images to the Oracle Functions Registry?

Accepted Answer

fn CLI. The fn CLI (Fn Project command-line tool) is the primary utility for OCI Functions development. It handles the full lifecycle: 'fn init' scaffolds a function, 'fn build' creates the Docker container image, 'fn test' runs it locally, and 'fn deploy' pushes the image to the configured Docker registry (OCIR) and registers the function with the OCI Functions service. OCI's Fn service is built on the open-source Fn Project, so the fn CLI is the native tool.

Answer

terraform

Answer

oci-cli

Answer

kubectl