Databases →mediumMultiple ChoiceObjective-mapped

1Z0-997-26 Databases Practice Question

Your development team wants to connect securely to an Autonomous Database (Serverless) instance using mutual TLS (mTLS) authentication. Where must the client application obtain the required credentials to establish this secure connection?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Download the database connection wallet zip file from the OCI Console or CLI and extract it on the client host

Clients connecting via mTLS to an Autonomous Database must download the wallet file (credentials zip) generated from the OCI Console or CLI.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✓
Download the database connection wallet zip file from the OCI Console or CLI and extract it on the client host
Why this is correct
Correct. The mTLS wallet contains the necessary keystores, truststores, and tnsnames.ora configuration files.
✗
Generate a Kerberos ticket granting service token via the IAM security console
Why it's wrong here
Incorrect. Kerberos is an alternative authentication mechanism, not the default mTLS wallet retrieval method.
✗
Retrieve the master encryption key directly from OCI Vault using an API key
Why it's wrong here
Incorrect. OCI Vault manages encryption keys, not database client connection wallets.
✗
Configure a public SSL certificate issued by Let's Encrypt in the database parameter settings
Why it's wrong here
Incorrect. Autonomous Database handles its internal server certificates via the managed wallet structure.

Quick reference

Cloud Service Model Comparison

Model	You Manage	Provider Manages	Examples
IaaS	OS, runtime, apps, data	Hardware, hypervisor, networking	EC2, Azure VMs, GCP Compute Engine
PaaS	Apps and data	OS, runtime, middleware, hardware	Elastic Beanstalk, Azure App Service
SaaS	Data and settings only	Everything else	Microsoft 365, Salesforce, Workday
FaaS / Serverless	Function code only	Infra, scaling, runtime	Lambda, Azure Functions, Cloud Run
CaaS	Containers and apps	Kubernetes, OS, hardware	EKS, AKS, GKE

About these practice questions

One of 348 original 1Z0-997-26 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

Written and reviewed by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

Last reviewed August 2026 · checked against the official Oracle exam blueprint

Ready to practise?

Put this into practice with a full scored session.

Start practice session

Timed practice sets

Scored 10-question sessions with instant feedback and explanations.

1Z0-997-26 Practice Test 2 — 25 Questions→1Z0-997-26 Practice Test 3 — 25 Questions→1Z0-997-26 Practice Test 4 — 25 Questions→

Domain-focused practice

Domains are weighted differently on the real exam — spend your time where you score lowest.

Databases Cloud Native Architecture Multicloud And Hybrid Workload Migration

Practice by question type

Filter questions by type — troubleshooting, exhibit, drag-and-drop, multi-select, and more.

Browse scenarios

Go deeper on a topic

Narrow in on a single topic rather than practising the whole bank at once.

Databases practice questions Cloud Native Architecture practice questions Multicloud And Hybrid practice questions

Keep going

All 1Z0-997-26 questions 1Z0-997-26 practice test Exam domains

This 1Z0-997-26 practice question is part of Courseiva's free Oracle certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 1Z0-997-26 exam.