1Z0-1072-26 Multiple Select — 40 Questions

Question 1

Which TWO of the following statements are true regarding OCI Compute Instance Maintenance and Events? (Choose two.)

Accepted Answer

OCI sends notifications when underlying infrastructure maintenance is scheduled for a compute instance.. OCI notifies customers of scheduled infrastructure maintenance and provides options such as rebooting or migrating instances before maintenance windows.

Answer

Maintenance events cause permanent data loss on attached boot volumes.

Answer

Instance maintenance events can only be managed using Terraform scripts.

Answer

Customers have zero visibility into hardware retirement schedules and cannot take preemptive action.

Question 2

Which TWO of the following statements are true regarding OCI Compute Flexible Shapes? (Choose two.)

Accepted Answer

Flexible shapes support both AMD EPYC and Ampere ARM processor architectures.. Flexible shapes allow independent scaling of OCPUs and memory. They are available for both AMD and Ampere processor architectures across VM instances.

Answer

Flexible shapes are only available for Bare Metal instances and cannot be used with Virtual Machines.

Answer

Once a flexible compute instance is launched, its OCPU and memory allocations can never be modified.

Answer

Flexible shapes require a fixed ratio of 8 GB of RAM per 1 OCPU.

Question 3

Which THREE security best practices should be implemented when deploying and managing OCI Functions? (Choose three.)

Accepted Answer

Using dynamic groups and IAM policies to grant functions least-privilege access to other OCI resources. Security best practices for functions include using dynamic groups and IAM policies for least-privilege resource access, storing sensitive strings in OCI Vault, and deploying functions in private subnets with VCN integration.

Answer

Hardcoding tenancy administrator credentials in environment variables for easy access

Answer

Disabling authentication on API Gateways triggering functions to allow open public access

Question 4

Which TWO of the following metrics or conditions can trigger an OCI Autoscaling event for an Instance Pool? (Choose two.)

Accepted Answer

CPU utilization crossing a specified threshold percentage. Autoscaling configurations support metric-based triggers (CPU and memory) and schedule-based triggers (specific dates and times).

Answer

Object Storage bucket upload frequency

Answer

Database backup completion status

Answer

VCN route table modification events

Question 5

Which THREE options are available when configuring health checks for an OCI Instance Pool to monitor instance health? (Choose three.)

Accepted Answer

Instance Health (monitoring infrastructure status and Oracle Cloud Agent). Instance pools support multiple health check types, including Instance Health (checking hypervisor and agent status), Custom HTTP/HTTPS health checks, and Custom VNIC-based TCP health checks.

Answer

Object Storage bucket upload speed health checks

Answer

Automatic database transaction replication health checks

Question 6

Which TWO of the following metrics are commonly used in OCI Autoscaling configurations for Instance Pools? (Choose two.)

Accepted Answer

Memory utilization percentage. Autoscaling configurations for instance pools in OCI support CPU utilization and Memory utilization metrics.

Answer

VCN packet drop error rates

Answer

Object Storage bucket download count

Answer

Database transaction commit latency

Question 7

Which THREE features are associated with OCI Dedicated Virtual Machine Hosts? (Choose three.)

Accepted Answer

Visibility into host-level resource capacity and placement control. Dedicated VM hosts provide physical hardware isolation, allow you to run multiple virtual machine instances on a single dedicated server, and give you visibility into host resource capacity.

Answer

Automatic multi-cloud replication across AWS and Azure physical datacenters

Answer

The ability to convert the dedicated host directly into a Kubernetes master node without OS reinstallation

Question 8

Which TWO methods can be used to authenticate human users to the OCI Console? (Choose two.)

Accepted Answer

Username and password with optional Multi-Factor Authentication (MFA). Console login requires username/password and supports optional or mandatory MFA, as well as federation via external IdPs.

Answer

SSH private keys (.ppk)

Answer

Pre-authenticated request URLs

Answer

API signing key PEM files uploaded via web browser

Question 9

Which TWO pieces of information are required when configuring an OCI IAM Identity Provider for SAML federation? (Choose two.)

Accepted Answer

The SAML 2.0 metadata XML file provided by the external Identity Provider. Configuring a SAML 2.0 IdP requires the IdP metadata XML file (or metadata URL) and a name for the IdP in OCI.

Answer

The physical rack serial number in the data center

Answer

The root compartment database sysadmin password

Answer

The local VCN CIDR block

Question 10

Which TWO actions can be performed using OCI Resource Manager stacks? (Choose two.)

Accepted Answer

Provision and configure cloud infrastructure resources using Terraform configuration files.. OCI Resource Manager uses Terraform to provision, update, import, and destroy infrastructure stacks.

Answer

Send email notifications when an object storage bucket size exceeds a threshold.

Answer

Create custom time-series metric alarms to monitor CPU and memory utilization.

Answer

Automatically ingest and parse custom application log files from compute instances.

Question 11

Which TWO actions can be performed on an Oracle Autonomous Transaction Processing database using the OCI Console? (Choose two.)

Accepted Answer

Scale up or down the number of OCPUs and storage capacity.. Through the OCI Console, administrators can manage database users, scale CPU and storage resources, restart the database, and configure backups.

Answer

Manually configure custom standby redo log files using SQL*Plus.

Answer

Directly access the database server via SSH using root privileges.

Answer

Modify the underlying Linux operating system kernel parameters.

Question 12

Which THREE features are provided natively by Exadata Cloud Service to deliver high performance and high availability for Oracle databases? (Choose three.)

Accepted Answer

Oracle Real Application Clusters (RAC) support for database high availability.. Exadata Cloud Service leverages Smart Scan (offloading SQL processing to storage cells), Exadata RDMA over Converged Ethernet (RoCE) for ultra-low latency cluster communication, and built-in database high availability through RAC.

Answer

Automatic translation of PL/SQL code into native AWS Redshift SQL syntax.

Answer

Client-managed hypervisor patching via direct SSH access to Dom0 dom0 hypervisor nodes.

Question 13

Which THREE resource types are associated with networking and can be managed via OCI IAM policies? (Choose three.)

Accepted Answer

virtual-network-family. Networking resource types include virtual-network-family, subnets, route-tables, and security-lists.

Answer

autonomous-databases

Answer

object-storage-buckets

Question 14

Your organization is implementing dynamic groups to manage automated deployments from OCI Functions and Compute instances. Which THREE of the following matching rule criteria are valid for constructing OCI dynamic groups? (Choose three.)

Accepted Answer

Matching by compartment OCID (ALL {instance.compartment.id = 'ocid1...'}). Dynamic group matching rules can evaluate instance OCIDs, compartment OCIDs, resource tags (defined tags), and image OCIDs. They do not evaluate local Unix user accounts or static IAM user passwords.

Answer

Matching by local Linux operating system user accounts (e.g., /etc/passwd UID).

Answer

Matching by specific static IAM user password expiration dates.

Question 15

Which TWO actions can an OCI administrator perform on user accounts? (Choose two.)

Accepted Answer

Manage group memberships for the user. Administrators can deactivate user accounts, force password resets, and manage group memberships.

Answer

Modify the physical hardware serial number of the user's laptop

Answer

Configure the user's home Wi-Fi router security settings

Answer

Directly access the user's corporate email inbox

Question 16

Which THREE statements are true regarding OCI IAM groups? (Choose three.)

Accepted Answer

A user can belong to multiple groups.. Groups contain users, can be mapped from federated IdPs, and are used in IAM policies.

Answer

Groups can be nested inside other groups to form a hierarchy.

Answer

Groups can own compartments directly without human members.

Question 17

Which THREE factors should you consider when designing a compartment hierarchy for an enterprise OCI tenancy? (Choose three.)

Accepted Answer

Compartments can be used to set granular budget limits and cost tracking.. Compartment design should reflect organizational structure, policy inheritance, and quota management.

Answer

Compartments automatically replicate resources across OCI regions for high availability.

Answer

Compartments isolate network traffic between VCNs automatically without security lists.

Question 18

Which TWO components are required when defining an OCI dynamic group matching rule for compute instances? (Choose two.)

Accepted Answer

A logical wrapper operator (ALL or ANY). Dynamic group rules must start with a logical operator (ALL or ANY) followed by matching criteria enclosed in curly braces.

Answer

A user password hash

Answer

An API signing key fingerprint

Answer

A VCN security list ID

Question 19

Which TWO best practices should be followed when designing OCI IAM policies? (Choose two.)

Accepted Answer

Scope policies to specific compartments rather than the tenancy root whenever feasible.. IAM best practices include adhering to the principle of least privilege and scoping policies to compartments rather than tenancies when possible.

Answer

Hardcode API signing keys directly into public source code repositories.

Answer

Always assign the 'manage all-resources' role to every user to simplify troubleshooting.

Answer

Use tenancy-wide administrative policies for all standard developers.

Question 20

Which TWO components are required to configure an OCI Site-to-Site VPN with redundant tunnels?

Accepted Answer

Dynamic Routing Gateway (DRG) attached to the VCN. OCI automatically provisions two redundant VPN tunnels for every Site-to-Site VPN connection. To use them, you configure a CPE object, a DRG, and configure both tunnels on your on-premises router.

Answer

Service Gateway

Answer

Local Peering Gateway (LPG)

Answer

NAT Gateway