521 questions total · 7pages · All types, answers revealed
What is the minimum OCPU allocation required when configuring an OCI Ampere A1 Compute flexible shape (VM.Standard.A1.Flex)?
Ampere A1 flexible shapes support starting from 1 OCPU.
Why this answer
Ampere A1 flexible shapes allow provisioning starting at 1 OCPU up to maximum limits depending on tenancy quotas.
Which THREE features are supported by OCI Object Storage buckets?
Versioning protects data by maintaining previous versions when objects are overwritten or deleted.
Why this answer
OCI Object Storage supports customer-managed encryption keys via Vault, cross-region replication, and versioning to protect against accidental overwrites or deletions.
An administrator is planning an Object Storage data archiving strategy. Which THREE characteristics apply to OCI Archive Storage? (Choose three.)
Archive Storage enforces a minimum storage duration of 90 days.
Why this answer
Archive Storage is designed for long-term retention, offers the lowest storage cost, and requires data to be restored to the Infrequent Access or Standard tier before reading, with a restoration latency of up to 4 hours.
You are managing an instance pool and want to ensure that instances are distributed evenly across multiple Availability Domains (ADs) in a multi-AD region to maximize high availability. How should you configure the instance pool placement?
Specifying multiple ADs ensures the instance pool distributes instances across those ADs.
Why this answer
When creating an instance pool in a multi-AD region, you can specify multiple availability domains in the placement configuration, and OCI will distribute the instances across them.
Which THREE features are provided by File Storage Service?
NFS is the core protocol.
Why this answer
Snapshots, NFS compatibility, and export options are key features of FSS.
You need to configure an Object Storage lifecycle policy to automatically transition objects from the Standard tier to the Infrequent Access tier after 30 days, and then delete them after 365 days from creation. How should the rule be defined?
OCI Object Storage lifecycle rules support combining multiple actions like transition and deletion in a single rule using age-based offsets.
Why this answer
Lifecycle rules use offset values based on object creation time. Transition and deletion rules can be chained by specifying days relative to the object's age.
You are configuring an OCI Load Balancer and need to distribute incoming requests across backend servers based on the client's source IP address so that requests from the same client always go to the same backend server. Which load balancing policy should you choose?
IP Hash policy ensures sticky sessions based on client source IP.
Why this answer
The IP Hash load balancing policy hashes the client's source IP address to route requests from the same client to the same backend server, ensuring session persistence.
What is the default retention period for audit logs in OCI?
Audit logs are kept for one year.
Why this answer
Audit logs are retained for 365 days by default.
You are planning IP address allocation for a multi-tier application in OCI. You create a VCN with CIDR 172.16.0.0/16. You need three subnets: web (100 hosts), app (200 hosts), and database (50 hosts). Which combination of subnet CIDRs is valid and non-overlapping?
These CIDRs are non-overlapping, fit within 172.16.0.0/16, and provide enough hosts for each tier.
Why this answer
Subnet CIDRs must be non-overlapping and sized appropriately. For example, 172.16.1.0/24 (256 addresses), 172.16.2.0/24 (256 addresses), and 172.16.3.0/26 (64 addresses) fit within 172.16.0.0/16 without overlapping.
You need to share a file system between multiple OCI Compute instances across different availability domains. Which service should you use?
FSS allows concurrent access from multiple instances.
Why this answer
File Storage Service (FSS) is a shared file system that can be mounted across ADs in a region.
Which OCI service is most appropriate for storing static website content?
Object Storage is ideal for static web hosting.
Why this answer
Object Storage is frequently used to host static website assets.
When cloning a Block Volume, what must be true about the source and target volumes?
Clone operations are constrained by AD limits.
Why this answer
Clones are created within the same availability domain as the source volume.
An application running on OCI requires an Autonomous Transaction Processing (ATP) database with the ability to automatically scale compute resources up and down based on workload demand, without manual intervention. Which feature should you enable during or after database provisioning?
Auto Scaling automatically allows the system to use additional CPU and storage resources when workload increases.
Why this answer
Auto Scaling allows the database to use up to three times the base CPU and memory resources when demand requires it, billing only for the resources actually consumed.
What is the smallest IPv4 CIDR block size supported for an OCI Virtual Cloud Network (VCN)?
OCI supports VCN sizes ranging from /16 to /30.
Why this answer
The smallest VCN CIDR block supported by OCI is /30, and the largest is /16.
You are deploying a Public Load Balancer in OCI to distribute incoming web traffic across multiple backend compute instances in different availability domains. You notice that backend health checks are failing. Which component's configuration should you check first to ensure health check probes can reach the backend instances?
Backend instance firewall rules (Security Lists/NSGs) must permit ingress traffic coming from the Load Balancer.
Why this answer
Load Balancer backend health checks originate from the Load Balancer's subnet. Security Lists or NSGs attached to the backend instances must allow inbound traffic from the Load Balancer subnet on the backend application ports and health check ports.
You have a web application behind an OCI Public Load Balancer. You want to restrict access so that only clients coming from a specific corporate external IP address range can access your application. Where should you configure this restriction?
Access control rules in load balancer rule sets or security lists can restrict traffic by source IP CIDR.
Why this answer
To restrict incoming traffic based on client IP addresses at the load balancer level, you can configure Load Balancer Rule Sets (such as access control rules / IP filtering) or use Security Lists/NSGs on the load balancer subnet.
You are deploying an Exadata Cloud Service instance and need to configure separate Virtual Machine clusters on the same Exadata rack. Which architectural feature enables this separation?
Exadata VM clusters allow you to partition a single Exadata infrastructure rack into multiple isolated virtual machine environments.
Why this answer
Exadata Cloud Service allows multiple independent Grid Infrastructure homes and database homes by deploying multiple VM clusters on a single Exadata infrastructure rack.
You are designing a Disaster Recovery architecture where VCN-1 in the Ashburn region needs to peer with VCN-2 in the Phoenix region. Which OCI networking construct is required to achieve this cross-region peering?
DRG version 2 supports cross-region VCN peering and transit routing.
Why this answer
Cross-region VCN peering requires a Dynamic Routing Gateway (DRG) attached to each VCN, and a remote peering connection established between the two DRGs.
Which OCI compute feature allows you to group multiple compute instances together into a low-latency, high-bandwidth physical placement group?
Cluster placement groups ensure instances are placed physically close together for low latency.
Why this answer
Cluster Placement Groups allow you to place compute instances in close physical proximity to each other to achieve low network latency and high-performance interconnects.
You want to automate the installation of packages and configuration scripts on newly launched compute instances without manual intervention. What OCI feature should you use?
User data scripts are executed by cloud-init upon first boot to automate configuration.
Why this answer
Cloud-init (User Data) allows you to pass scripts or configuration directives when launching a compute instance to customize the OS upon first boot.
You have a large dataset in Object Storage that needs to be accessed by an on-premises server. What is the most efficient way to access this data via a local file interface?
Storage Gateway mounts buckets as local file systems.
Why this answer
Storage Gateway provides a file-system interface to Object Storage.
You are setting up OCI DNS and want to configure a zone transfer (AXFR) from your on-premises DNS server to OCI Private DNS. Which feature enables secondary DNS functionality in OCI?
Secondary DNS configuration allows zone transfers between on-premises and OCI DNS.
Why this answer
OCI DNS supports secondary DNS configurations where OCI acts as a primary or secondary DNS server for zones, supporting zone transfers.
You have an OCI alarm that is stuck in the 'Firing' state. What is the most likely cause?
Alarms stay in firing state as long as the threshold condition is met.
Why this answer
If the metric evaluation remains above the threshold, the alarm will stay in the firing state.
Which storage type offers the highest performance for random I/O operations?
Block volumes are optimized for random IOPS.
Why this answer
Block Volume with Ultra High Performance is built for random I/O.
Which TWO conditions must be met for a dynamic group matching rule to successfully include compute instances based on a defined tag? (Choose two.)
Defined tags must be defined in governance before they can be assigned and evaluated.
Why this answer
Tag-based dynamic group rules require the tag namespace and key to exist, and the compute instance must be tagged with that exact defined tag.
You are setting up Oracle Data Guard between a primary Base Database System in the us-ashburn-1 region and a standby database in the us-phoenix-1 region. Which networking configuration is mandatory to enable redo transport across regions?
Remote VCN peering via DRGs is necessary for secure, private cross-region IP connectivity.
Why this answer
Cross-region Data Guard requires Remote VCN Peering or DRG attachments with appropriate security list rules allowing traffic on listener ports (e.g., port 1521) between the primary and standby subnets.
Which OCI networking component is automatically created when you provision a Virtual Cloud Network using the VCN Wizard with 'Internet Connectivity'?
The VCN Wizard automatically provisions an Internet Gateway for public subnet traffic.
Which THREE components are required when configuring an OCI FastConnect direct peering connection?
Physical connectivity is required either via colocation cross-connect or a FastConnect partner.
Why this answer
A FastConnect direct peering connection requires a Dynamic Routing Gateway (DRG) attached to your VCN, a FastConnect virtual circuit, and a physical cross-connect or partner connection setup.
Which THREE services can be used as a destination for the Events service?
Events can trigger serverless functions.
Why this answer
The Events service supports Functions, Notifications, and Streaming as targets.
Which OCI service allows you to deploy and manage managed Kubernetes clusters without having to administer the underlying control plane nodes?
OKE provides managed Kubernetes clusters where Oracle manages the control plane.
Why this answer
OCI Container Engine for Kubernetes (OKE) is a fully managed, scalable, and highly available service that you can use to deploy your containerized applications to the cloud.
You are configuring cross-tenancy access where Tenancy A needs to allow a dynamic group from Tenancy B to access Object Storage buckets in Tenancy A. In addition to the endorsement and commitment policies, what other configuration is mandatory in Tenancy A for the dynamic group from Tenancy B to be recognized?
Once the endorsement policy is set in the resource tenancy and the commitment policy is set in the principal tenancy, the cross-tenancy trust is established for the dynamic group.
Why this answer
For cross-tenancy dynamic group access, the target tenancy must also trust the source tenancy as an identity provider or use resource principal federation mechanisms supported by OCI cross-tenancy architecture.
Which THREE factors should you consider when selecting an OCI Compute shape for an enterprise application? (Choose three.)
Specialized workloads require Dense I/O, GPU, or HPC shape types.
Why this answer
When choosing a compute shape, consider processor architecture (AMD, Intel, ARM), workload requirements (GPU, HPC, Dense I/O, general purpose), and whether flexible sizing is needed for exact OCPU/RAM requirements.
You are configuring Data Guard between two Exadata Cloud Service instances across different OCI regions. Which network component is mandatory to facilitate redo transport securely across regional boundaries?
Remote VCN Peering connects VCNs across different regions, allowing secure IP communication for Data Guard redo transport.
Why this answer
Cross-region Data Guard communication requires secure network connectivity, typically achieved using Remote VCN Peering or an Oracle Cloud Infrastructure FastConnect / VPN connection between virtual cloud networks.
Your organization uses Oracle Identity Cloud Service (IDCS) federated with OCI. You need to assign an existing IDCS group named 'NetworkAdmins' to manage Virtual Cloud Networks in OCI. What is the proper workflow to achieve this?
This describes the correct integration workflow: federated identity provider groups are mapped to local OCI groups, which are then used in IAM policies.
Why this answer
Federated groups from IDCS must be mapped to OCI IAM groups in the OCI Console, and then a policy must be written granting that OCI IAM group access.
What is the primary purpose of an OCI Service Gateway?
Service Gateways keep traffic within the Oracle network backbone when accessing regional Oracle services.
Why this answer
A Service Gateway enables private connectivity from a VCN to Oracle services in the Oracle Services Network without traversing the public internet.
What is the maximum size of a single Object in OCI Object Storage?
10 TiB is the supported limit.
Why this answer
The maximum object size supported is 10 TiB.
When configuring an alarm, what does the 'suppression' feature do?
This is useful during scheduled maintenance.
Why this answer
Suppression allows you to temporarily disable notifications for an alarm without deleting or disabling the alarm itself.
What is the maximum MTU (Maximum Transmission Unit) supported on standard OCI VCN virtual network interfaces (VNICs)?
OCI supports jumbo frames with up to 9000 bytes MTU for high-throughput workloads.
Why this answer
Standard OCI VNICs support an MTU of 9000 bytes (Jumbo Frames), as well as the standard 1500 bytes.
You are troubleshooting a web application where users intermittently experience 504 Gateway Timeout errors when connecting via the OCI Public Load Balancer. What is the most common cause related to the load balancer or backend configuration?
Slow backend responses exceeding the timeout cause the load balancer to return a 504 error.
Why this answer
A 504 Gateway Timeout occurs when the load balancer does not receive a timely response from the backend servers within the configured idle timeout period.
Your serverless application built on OCI Functions needs to process events coming from OCI Object Storage when a new file is uploaded. What is the primary mechanism to trigger the function?
OCI Events captures changes in Object Storage and invokes the target OCI Function.
Why this answer
OCI Events service listens to resource state changes and can trigger an OCI Function when an object is created in Object Storage.
An OCI administrator wants to implement a cost-allocation tagging strategy across multiple departments sharing the same tenancy. Which OCI feature should be used to enforce that specific tag keys and values are applied to resources during creation?
Correct. Defined tags are controlled by administrators and enable structured metadata, governance, and cost tracking.
Why this answer
Defined Tags with Tag Defaults or IAM policies enforcing tag values help standardize and govern tagging in OCI.
You are planning a Disaster Recovery strategy for an Oracle Base Database System using Oracle Data Guard on OCI. You need the standby database to be open in read-only mode for reporting queries while simultaneously applying redo data from the primary database. Which Data Guard mode should you configure?
Active Data Guard allows the physical standby database to be open in read-only mode for queries and reporting while receiving redo apply.
Why this answer
Active Data Guard enables physical standby databases to be open for read-only queries while performing real-time apply of redo from the primary database.
Which THREE of the following are valid lifecycle policy actions?
Valid action.
Why this answer
Delete, Archive, and aborting multipart uploads are valid.
What is the primary difference between a public subnet and a private subnet in an OCI Virtual Cloud Network?
This is the fundamental distinction defining public versus private subnets in OCI.
Why this answer
Public subnets have a route to an Internet Gateway, allowing instances within them to have public IP addresses and communicate with the public internet. Private subnets do not have routes to an Internet Gateway.
Which TWO features are supported by OCI File Storage Service (FSS)? (Choose two.)
FSS file systems can be encrypted using keys managed in OCI Key Management.
Why this answer
OCI File Storage Service supports snapshots for data protection and encryption using customer-managed keys via OCI KMS.
Which TWO methods can be used to connect your on-premises datacenter to an OCI Virtual Cloud Network?
FastConnect provides dedicated, high-bandwidth private connectivity to OCI.
You are running a stateful application inside an OKE cluster that requires persistent storage backed by OCI Block Volumes. When a pod is rescheduled to a different worker node due to a node failure, how does the Persistent Volume (PV) behave?
The CSI driver manages volume attachment lifecycle across nodes during pod rescheduling.
Why this answer
OCI Block Volume CSI (Container Storage Interface) driver dynamically detaches the block volume from the failed worker node and attaches it to the new worker node where the rescheduled pod is running, preserving data persistence.
You are planning to deploy a high-performance computing (HPC) cluster on OCI requiring extremely high packet per second (PPS) and ultra-low latency between compute nodes. Which feature must you utilize?
Cluster Networks provide RDMA networking for MPI-based HPC workloads requiring ultra-low latency.
Why this answer
OCI HPC and bare metal clusters support Cluster Networks with RDMA (Remote Direct Memory Access) over RoCE (RDMA over Converged Ethernet) for ultra-low latency and high throughput.
Your organization requires that all database traffic originating from OCI subnets to Oracle Autonomous Database bypass the public internet and use private IP paths. You have configured a Service Gateway. What additional configuration is mandatory in the subnet route table?
Route rules pointing to the Service Gateway are required to route Oracle Services traffic correctly.
Why this answer
To direct traffic to the Service Gateway, the subnet route table must have a route rule where the destination is the Oracle Services Network (or a specific service region prefix) and the target is the Service Gateway.
Which TWO storage options are available when provisioning an Oracle Base Database System?
Base DB systems use OCI block volumes organized into ASM disk groups.
Why this answer
Base Database Systems in OCI support Grid Infrastructure with ASM on OCI Block Volume storage, and Bare Metal systems also feature local NVMe drives.
Which TWO of the following metrics or conditions can trigger an OCI Autoscaling event for an Instance Pool? (Choose two.)
CPU threshold rules are standard metric-based scaling triggers.
Why this answer
Autoscaling configurations support metric-based triggers (CPU and memory) and schedule-based triggers (specific dates and times).
Which TWO of the following statements are true regarding OCI Compute Instance Maintenance and Events? (Choose two.)
Maintenance events generate notifications via OCI Events and Console alerts.
Why this answer
OCI notifies customers of scheduled infrastructure maintenance and provides options such as rebooting or migrating instances before maintenance windows.
What is the primary function of the OCI Compute Instance Oracle Cloud Agent?
Oracle Cloud Agent manages instance monitoring, OS management, and run commands.
Why this answer
Oracle Cloud Agent is a lightweight process that runs on instances to manage administrative tasks such as collecting monitoring metrics, executing run commands, and managing OS patches.
Which OCI service should you use if you want to store and manage custom VM disk images so that they can be deployed across multiple regions easily?
Custom Images store boot volume templates for cross-region compute deployments.
Why this answer
OCI Custom Images service allows you to store images and copy them across regions for compute deployments.
This is the correct configuration to route outbound traffic from the private subnet to the NAT Gateway.
Which TWO tasks can an administrator perform when managing database homes in Oracle Base Database Service? (Choose two.)
Patching is managed at the DB home level in Base Database Service.
Why this answer
Database homes in Base Database Service allow administrators to apply quarterly database patches (RU/RUR) and create multiple databases using the same software version.
You are troubleshooting a connectivity issue where an on-premises server is trying to reach an OCI compute instance via an IPsec VPN attached to a Dynamic Routing Gateway (DRG). The VPN tunnels are up, but traffic is dropped. Upon checking the VCN route table, you see a route pointing to the DRG, but the on-premises subnet CIDR is missing. What specific OCI construct must be updated to ensure return traffic from the VCN successfully routes back to the on-premises network?
Subnet route tables dictate how outbound and return traffic within the VCN is directed to gateways like the DRG.
Why this answer
The VCN route table associated with the compute instance's subnet must contain a route entry pointing the on-premises CIDR block to the DRG as the target.
An autoscaling configuration is attached to your instance pool. You notice that instances are scaling out correctly based on CPU utilization, but you want to ensure that scaling events do not happen too frequently in response to brief traffic spikes. Which setting should you adjust?
The cooldown period dictates how long the autoscaling mechanism waits before evaluating metrics for subsequent scaling actions.
Why this answer
Autoscaling configurations allow you to define a cooldown period (step delay) to prevent rapid scaling oscillations.
You are planning to restore an Oracle Base Database Service DB system from an object storage backup. Which backup types are supported by OCI for creating a new DB system?
You can launch a new DB system using either automated backups or manual full backups created via the console or RMAN.
Why this answer
OCI Base Database Service allows you to restore a database from either automated backups or manual full backups stored in Object Storage.
An administrator wants to delegate compartment creation to a group of team leads named 'TeamLeads' without granting them full tenancy administrator privileges. Which policy statement achieves this?
This policy allows the 'TeamLeads' group to create, update, and move compartments across the tenancy without granting access to other services.
Why this answer
Compartments are managed via the 'compartments' resource type in OCI IAM policies.
Which TWO mechanisms are used by OCI Database backup services to ensure data consistency and integrity during backups of Oracle Base Database Systems?
RMAN ensures database-level logical and physical block consistency.
Why this answer
Database backups use Oracle RMAN for physical block-level consistency and OCI Block Volume snapshots for disk-level consistency.
You are designing an architecture where instances in a private subnet need to send log data to an OCI Logging analytics endpoint, but must not have access to the general public internet. Which service should you leverage?
Service Gateways provide secure, private connectivity to regional OCI services.
Why this answer
A Service Gateway enables private access to regional OCI services (such as Object Storage, Logging, and Database) without requiring internet access.
Which TWO of the following can prevent a bucket from being deleted?
Non-empty buckets cannot be deleted.
Why this answer
Retention rules and non-empty status prevent bucket deletion.
What is the primary purpose of OCI Compute Instance Launch Options?
Launch options control hypervisor-level settings like firmware and network paravirtualization.
Why this answer
Launch options allow you to customize settings such as network virtualization type, boot volume firmware (BIOS/UEFI), and secure boot when configuring a custom image or instance.
A company requires an extremely low-cost storage solution for data archiving that is rarely accessed, with a retrieval time requirement of within an hour. Which OCI storage tier should be used?
Archive Storage is specifically designed for long-term backup and data archival at the lowest cost.
Why this answer
OCI Archive Storage provides the lowest cost per gigabyte for long-term data retention, with a standard time-to-first-byte retrieval SLA of within one hour.
What is the default replication method for Object Storage buckets?
Data is automatically replicated for durability.
Why this answer
Object Storage data is automatically replicated across three Fault Domains within an AD.
Which TWO actions can be performed using OCI Resource Manager stacks? (Choose two.)
Correct. Resource Manager manages infrastructure using Terraform configurations.
Why this answer
OCI Resource Manager uses Terraform to provision, update, import, and destroy infrastructure stacks.
Which THREE statements are true regarding OCI Object Storage architecture and data durability? (Choose three.)
OCI computes MD5 checksums to ensure data integrity during transit and storage.
Why this answer
OCI Object Storage is designed for high durability, stores data redundantly across availability domains or fault domains, and supports strong consistency for all operations.
Which THREE components are required when configuring OCI VCN Remote Peering between two regions?
An RPC establishes the peer connection between the two cross-region DRGs.
Why this answer
Remote VCN peering across regions requires a Dynamic Routing Gateway (DRG) attached to each VCN, a Remote Peering Connection (RPC) established between the two DRGs, and matching route table/security rules.
Which TWO of the following are valid characteristics of OCI Virtual Cloud Networks (VCNs)?
VCNs are regional constructs in OCI.
Why this answer
VCNs span all availability domains within a region and reside within a single OCI region.
What is the main advantage of the OCI Block Volume performance tier selection?
This allows fine-tuning for application needs.
Why this answer
Performance tiers allow users to balance cost and performance for specific workloads.
You are deploying a microservices application on OKE and want to implement zero-downtime rolling deployments for your pods. Which Kubernetes deployment strategy and configuration parameter should you utilize?
RollingUpdate strategy gradually replaces old pods with new ones while ensuring availability via maxSurge and maxUnavailable settings.
Why this answer
Kubernetes deployments support `RollingUpdate` strategy with parameters like `maxSurge` and `maxUnavailable` to control how pods are replaced during updates without downtime.
Which THREE actions occur when you terminate an OCI compute instance? (Choose three.)
Termination destroys the VM instance.
Why this answer
When terminating a compute instance, the virtual machine is destroyed, and the primary VNIC is deleted. You are prompted whether to retain or delete the boot volume, and data block volumes remain attached unless explicitly deleted.
What is the primary function of an OCI IAM policy statement?
IAM policies define authorization rules determining who (principals) can perform actions on resources within a scope.
Why this answer
An IAM policy statement grants a specific group permission to perform specific actions on specific resources within a specific scope.
Which TWO components are involved when routing traffic from an OCI private subnet to an on-premises datacenter via FastConnect?
The DRG acts as the router connecting the VCN to the FastConnect circuit.
Why this answer
Traffic from a private subnet to on-premises via FastConnect requires a route table rule pointing to the Dynamic Routing Gateway (DRG), and the FastConnect virtual circuit terminating on that DRG.
Practice 1Z0-1072-26 by domain
Target a specific domain to shore up weak areas.
See all domains with question counts →