Oracle Cloud Infrastructure 2026 Architect Associate (1Z0-1072-26) (1Z0-1072-26) (1Z0-1072-26) — Questions 226–300

Which THREE administrative tasks require membership in the tenancy Administrators group or equivalent high-level IAM privileges? (Choose three.)

Which THREE configuration options are available when creating a new OCI Object Storage bucket? (Choose three.)

You are migrating a database that requires a consistent point-in-time snapshot of multiple volumes. What should you use?

A Block Volume backup failed. Which is the most likely reason?

An administrator created a custom policy in the root compartment. However, a user complains that they cannot access resources in a child compartment. Upon inspection, you notice the policy syntax reads: Allow group DevGroup to manage instances in compartment ChildComp. What is the error in this policy?

How do you provide access to an object to an external user without creating an IAM account?

An OCI customer has a VCN with CIDR 10.0.0.0/16 and wants to peer it with another VCN having CIDR 10.1.0.0/16. However, they also have an on-premises network connected via FastConnect using the CIDR 10.0.0.0/14. What routing challenge does this create?

You need to configure custom DNS resolution for instances within your OCI VCN so they can resolve hostnames of your on-premises datacenter servers. What should you configure in OCI?

You need to run a dedicated compute instance where no other tenant's virtual instances can share the underlying physical hardware. Which OCI service or feature should you use?

An OCI customer has a primary database in Ashburn and a standby database in Phoenix. They need to replicate database traffic over a dedicated, highly secure private connection between the two regions. Which OCI networking architecture best achieves this requirement?

What is the maximum number of compartments you can nest within a single parent compartment in OCI?

What is the maximum number of Internet Gateways allowed per Virtual Cloud Network (VCN) in OCI?

Which TWO types of tags are available in OCI?

You are using Storage Gateway to connect on-premises applications to OCI. How are file systems mapped?

Which OCI shape family is optimized for High-Performance Computing (HPC) workloads requiring high core counts and low-latency clustering?

A development team needs to deploy an application that requires exactly 6 OCPUs and 32 GB of memory. Which compute option best satisfies this requirement efficiently without wasting resources?

You are configuring a Data Guard association between a primary Oracle Base Database Service DB system and a standby DB system in a different availability domain. The primary database encounters a catastrophic failure. Which action must you perform to promote the standby database to primary using the OCI Console?

Which THREE options are available for creating a Resource Manager stack?

An administrator needs to grant a group of database administrators the ability to manage Autonomous Databases in a specific compartment named DevComp. Which policy syntax is the most secure and adheres to the principle of least privilege?

Which TWO protocols are supported for health checks by OCI Load Balancer backend sets?

Which THREE security features are enabled by default or configurable on an Oracle Autonomous Database? (Choose three.)

You need to be alerted only when the average CPU utilization of a cluster of instances exceeds 80% for 5 consecutive minutes. Which alarm feature achieves this?

You want to move data from a local server to OCI Object Storage. Which tool is recommended for large-scale data migration over the internet?

You are configuring backups for an Oracle Base Database System on OCI. You want to store automated full backups and incremental backups to OCI Object Storage. What is the default retention period you can select for automated backups when using the console?

You are using Resource Manager and need to import existing infrastructure into a new stack. What is the correct approach?

You are designing a secure database architecture on OCI. Instances in a private subnet require outbound internet access to download operating system updates, but malicious actors must not be able to initiate inbound connections to these instances from the internet. Which component fulfills this requirement?

Which TWO statements regarding OCI VCN Local Peering are correct?

Which TWO statements are true about OCI IAM compartments? (Choose two.)

Which TWO of the following capabilities are provided by OCI Container Instances? (Choose two.)

You are configuring a site-to-site VPN connection in OCI. During the tunnel setup, your on-premises firewall administrator asks for the pre-shared key (PSK). Where is the PSK defined or generated in OCI?

Which THREE statements are true regarding OCI IAM policy syntax structure? (Choose three.)

When designing network security in OCI, you can use Security Lists and Network Security Groups (NSGs). Which TWO statements accurately compare or contrast them?

Your company requires a dedicated, highly reliable, encrypted connection from your on-premises datacenter to your OCI Virtual Cloud Network, bypassing the public internet entirely. The link must support speeds up to 10 Gbps and provide failover redundancy. Which OCI service meets this requirement?

A database application requires high-performance block storage with low latency. Which Block Volume performance tier should you select?

Which TWO OCI resources are automatically tracked by the Audit service?

You are designing a secure web application architecture in OCI. You want to terminate TLS connections at the load balancer and inspect HTTP headers before routing traffic to backend web servers. Which OCI Load Balancer listener type should you configure?

You need to run an OCI Function that connects to an Oracle Autonomous Database secured within a private subnet. How should you configure the function to access the database securely without exposing it to the public internet?

Which service allows you to view the audit logs of all API calls made in your tenancy?

What happens if you delete a versioned object in Object Storage?

Which OCI service is responsible for managing users, groups, compartments, and policies?

Which TWO are common use cases for Archive Storage?

You are setting up an autoscaling configuration for an instance pool. You want the pool to scale out when CPU utilization exceeds 80% and scale in when CPU utilization drops below 20%. What type of autoscaling policy should you create?

Your company has merged with another organization. You need to configure cross-tenancy access so that Tenancy B can read Object Storage buckets in Tenancy A. You have created an endorsement policy in Tenancy A. What exact syntax must be used for the commitment policy in Tenancy B?

Two VCNs (VCN-A and Vcn-B) reside in the same OCI region but in different compartments. You need to establish a low-latency, high-bandwidth connection between them using local VCN peering. Which component is NOT required for this setup?

An auditor needs to verify all IAM policies across your entire tenancy to ensure compliance. Which policy statement allows a user in the 'Auditors' group to read all policies in the tenancy root?

When writing an LQL query, which keyword is used to filter log records based on a specific field value?

Your OKE cluster has a node pool running in a private subnet. A developer needs to troubleshoot a running node via SSH, but direct external SSH access is disabled. What is the recommended secure way to access the node?

You are setting up an OCI Logging configuration for a custom application. Where are the log entries sent by default if no log group is specified?

Which database edition is required when provisioning an Oracle Base Database System if you want to use advanced features like Oracle Multitenant (up to 3 PDBs without extra cost), Data Guard, and In-Memory?

An OCI administrator needs to store large amounts of unstructured data that is accessed infrequently, but must be retained for compliance purposes for at least 5 years. Data retrieval times of up to 4 hours are acceptable. Which OCI Object Storage tier should be used?

An organization requires that all data uploaded to an Object Storage bucket must be automatically encrypted using a master encryption key managed by them in OCI Key Management (KMS), rather than Oracle-managed keys. How can this be enforced?

You are implementing automated disaster recovery for your OCI compute instances. You configure automated backups for boot volumes and block volumes using volume groups. What is the primary advantage of using Volume Groups for backups?

An administrator needs to create a new root compartment under the tenancy to separate billing and administrative resources for a newly acquired subsidiary. Where must the administrator perform this action in the Oracle Cloud Infrastructure Console?

Which TWO are true about cloning a block volume?

Your organization requires that all IAM policies created in the tenancy must be reviewed and approved. To facilitate auditing, you need to write a policy allowing the 'ComplianceTeam' group to read IAM policies and read tenancy metadata. Which policy statement correctly implements this?

What is the primary function of an OCI dynamic group?

An administrator wants to create a point-in-time, space-efficient replica of an existing Block Volume within the same availability domain. Which feature should be used to achieve this instantly?

What is the primary purpose of an OCI Local Peering Gateway (LPG)?

You are migrating an on-premises virtual machine image in QCOW2 format to OCI. Before you can launch compute instances from this image in OCI, what must you do with the file?

You are using Service Connector Hub to move data from Logging to Object Storage. What is the primary benefit of this approach?

Which THREE tools or methods can be used to write and apply OCI IAM policies? (Choose three.)

Which TWO methods can be used to authenticate human users to the OCI Console? (Choose two.)

Which TWO actions can be performed on an OCI Autonomous Database to manage or alter its compute and storage configurations after initial provisioning? (Choose two.)

You are troubleshooting a container image pull failure in your OKE cluster. The error message indicates an authentication failure when trying to pull from the Oracle Container Registry (OCIR). What Kubernetes resource must be configured in your cluster namespace to allow pulling images from a private OCIR repository?

When designing an OCI Block Volume backup strategy, which THREE statements are correct regarding backup types and management? (Choose three.)

You are managing an Autonomous Database instance on shared infrastructure and need to restrict database access so that only clients connecting from a specific Corporate CIDR block (e.g., 192.168.10.0/24) can connect. How should you implement this?

Which TWO methods can be used to assign public IP addresses to OCI compute instances?

An architect is configuring an OCI Public Load Balancer to handle high volumes of incoming client traffic. Which THREE features or capabilities are supported by OCI Public Load Balancers?

Which TWO items are components of an OCI Alarm?

Which THREE of these are OCI storage services?

Your application logs contain sensitive PII. You need to ensure logs are encrypted at rest using a customer-managed key. What should you configure?

You need to perform a backup of a production Block Volume. What is the recommended strategy to ensure data consistency?

Which THREE actions occur during a Data Guard switchover operation for an Oracle Base Database System?

You are managing an Oracle Base Database System and need to patch the database home and operating system. Which utility is provided by Oracle in OCI to automate and orchestrate database patching safely?

You are deploying a high-performance database workload on OCI that requires raw, low-latency NVMe drives for transaction logging. Which compute shape should you select?