1Z0-1072-26 Timed Practice Test 3 — 10 Questions

Question 1

You are configuring Data Guard between two Exadata Cloud Service instances across different OCI regions. Which network component is mandatory to facilitate redo transport securely across regional boundaries?

10 minute time limit — choose an answer to begin.

Accepted Answer

Remote VCN Peering. Remote VCN Peering connects VCNs in different OCI regions, providing the private network path needed for Data Guard redo transport between Exadata Cloud Service instances in separate regions. Without it, redo traffic would have to traverse the public internet, which is neither secure nor supported for this use case.

Answer

OCI API Gateway

Answer

An Internet Gateway with public IP addresses

Answer

Local VCN Peering gateway

Question 2

Your organization uses Oracle Identity Cloud Service (IDCS) federated with OCI. You need to assign an existing IDCS group named 'NetworkAdmins' to manage Virtual Cloud Networks in OCI. What is the proper workflow to achieve this?

Accepted Answer

Map the IDCS group 'NetworkAdmins' to an OCI IAM group, then write an OCI policy allowing that OCI IAM group to manage virtual-network-family in the desired compartment.. When OCI is federated with IDCS, IDCS groups must be mapped to OCI IAM groups before OCI policies can reference them. The correct workflow is to map the IDCS group 'NetworkAdmins' to an OCI IAM group, then write an OCI policy granting that OCI IAM group permission to manage virtual-network-family in the desired compartment. This ensures proper authorization and follows OCI's federation model.

Answer

Assign the NetworkAdmins group directly to the tenancy root compartment via the IDCS console.

Answer

Write a policy directly referencing the IDCS group name 'NetworkAdmins' with no OCI group mapping.

Answer

Create a local user in OCI IAM for every member of the IDCS 'NetworkAdmins' group and assign them roles.

Question 3

You need to run an OCI Function that connects to an Oracle Autonomous Database secured within a private subnet. How should you configure the function to access the database securely without exposing it to the public internet?

Accepted Answer

Attach the function application to a private subnet within your VCN using VCN configuration.. Attaching the function application to a private subnet in your VCN lets the function's execution environment get an IP in that subnet and reach the Autonomous Database privately via the VCN's routing and security rules. This is the supported OCI Functions pattern for private resource access without public exposure.

Answer

Use an API Gateway with a public endpoint and route database queries through HTTP headers.

Answer

Configure a public IP address on the function execution environment.

Answer

Functions cannot access private subnets; you must use an internet gateway.

Question 4

When configuring an alarm, what does the 'suppression' feature do?

Accepted Answer

Temporarily stops notifications for the alarm. Suppression allows you to temporarily disable notifications for an alarm without deleting or disabling the alarm itself.

Answer

Deletes all historical logs

Answer

Prevents the resource from scaling

Answer

Disables all metrics for the resource

Question 5

What is the primary function of an OCI NAT Gateway?

Accepted Answer

To allow private subnet instances to initiate outbound connections to the internet while blocking inbound connections.. A NAT Gateway enables instances in a private subnet to initiate outbound connections to the internet (e.g., for software patches) without accepting inbound connections from the internet.

Answer

To peer two VCNs in the same region.

Answer

To allow inbound internet traffic to reach private database instances securely.

Answer

To connect on-premises datacenters to OCI VCNs.

Question 6

Which service should you use to migrate physical data centers to OCI via physical hardware shipping?

Accepted Answer

Data Transfer Service. Data Transfer Service uses physical appliances to move data.

Answer

Storage Gateway

Answer

FastConnect

Answer

Object Storage replication

Question 7

You are troubleshooting a web application where users intermittently experience 504 Gateway Timeout errors when connecting via the OCI Public Load Balancer. What is the most common cause related to the load balancer or backend configuration?

Accepted Answer

Backend servers are taking longer to process requests than the load balancer idle timeout threshold.. A 504 Gateway Timeout from an OCI Public Load Balancer almost always means the backend did not respond within the listener's configured idle/response timeout window. When the LB's idle timeout (default 60 seconds for HTTP listeners) expires before the backend finishes processing, the LB closes the connection and returns 504 to the client. The fix is to raise the idle timeout or optimize backend response time.

Answer

The Internet Gateway has exceeded its bandwidth limit.

Answer

The NAT Gateway is blocking incoming HTTP traffic.

Answer

The VCN route table is missing a default route.

Question 8

You are planning a Disaster Recovery strategy for an Oracle Base Database System using Oracle Data Guard on OCI. You need the standby database to be open in read-only mode for reporting queries while simultaneously applying redo data from the primary database. Which Data Guard mode should you configure?

Accepted Answer

Active Data Guard. Active Data Guard enables physical standby databases to be open for read-only queries while performing real-time apply of redo from the primary database.

Answer

Snapshot Standby

Answer

Logical Standby in read-write mode

Answer

Traditional Physical Standby (Mount mode)

Question 9

Which THREE of the following are valid lifecycle policy actions?

Accepted Answer

Delete. Delete, Archive, and aborting multipart uploads are valid.

Answer

Compress

Answer

Encrypt

Question 10

You are running a stateful application inside an OKE cluster that requires persistent storage backed by OCI Block Volumes. When a pod is rescheduled to a different worker node due to a node failure, how does the Persistent Volume (PV) behave?

Accepted Answer

The OCI Block Volume CSI driver automatically detaches the volume from the old node and attaches it to the new worker node.. The OCI Block Volume CSI driver integrates with OKE to manage the lifecycle of PersistentVolumes backed by Block Volumes. When a pod is rescheduled to a new node, the CSI driver automatically detaches the volume from the failed node and attaches it to the new node, then mounts it to the pod. This is a core feature of the CSI driver and requires no manual intervention.

Answer

You must manually log into the OCI Console, detach the volume, and attach it to the new worker node.

Answer

The persistent volume is converted to Object Storage automatically.

Answer

The data is permanently lost because block volumes cannot move across worker nodes.