49 questions · Observability And Management · All types, answers revealed
What is the purpose of the 'Tags' feature in OCI resource management?
Tags are essential for cost analysis and resource organization.
Why this answer
Tags allow you to organize and filter resources across compartments.
Which feature in the Monitoring service allows you to aggregate metrics from different compartments into a single dashboard?
MQL supports cross-compartment queries using the compartment ID.
Why this answer
Cross-compartment queries are supported by the Monitoring service to view resources globally or across specific compartments.
Which Terraform file extension does Resource Manager support?
Standard Terraform files use the .tf extension.
Why this answer
Resource Manager supports standard .tf files for configuration.
Which TWO services provide visibility into your infrastructure usage and health?
Provides metric and health data.
Why this answer
Monitoring and Logging are the primary tools for observability.
Which TWO actions can you perform in the Logging service?
Logs are indexed for fast searching.
Why this answer
Logging allows you to search logs and create alarms on logs.
You need to ensure that your Resource Manager stack uses a specific version of Terraform. Where is this configured?
The Terraform version is selected at the stack level.
Why this answer
You define the Terraform version during the creation of the stack settings.
Which THREE things must be configured to use Logging Analytics?
This defines the format and parsing.
Why this answer
Logging Analytics requires a log group, a log source, and an entity.
You want to notify an external HTTP endpoint whenever an alarm fires. What should you do?
The Notifications service natively supports HTTP/HTTPS endpoints.
Why this answer
Create a subscription for your notification topic using the HTTPS protocol.
Which service is best used to monitor a public-facing website endpoint for availability?
Health Checks are designed for external endpoint verification.
Why this answer
Health Checks monitor endpoints from various global locations.
You need to ensure that a resource's cost can be tracked. What must you do after defining a tag?
This action makes the tag available for billing reports.
Why this answer
You must navigate to the Cost Analysis page and enable the tag as a cost-tracking tag.
Which THREE aspects of a Terraform stack can you modify in a Resource Manager job?
You can set the verbosity of the job output.
Why this answer
You can change variables, the terraform version, and the logging level in a job.
Your development team wants to automatically trigger a serverless function whenever a new object is uploaded to an OCI Object Storage bucket. Which OCI service acts as the foundational router to capture this object upload event and invoke the function?
Correct. Events service detects changes to OCI resources and routes them to targets like OCI Functions.
Why this answer
The OCI Events service enables you to create automation based on the lifecycle changes of resources in OCI, such as Object Storage creations.
An OCI administrator needs to be notified via email whenever CPU utilization on a critical production compute instance exceeds 90% for a sustained period of 5 minutes. Which combination of services should the administrator configure to achieve this?
Correct. An alarm is configured in Monitoring for CpuUtilization, and it publishes messages to a topic in Notifications.
Why this answer
OCI Monitoring service is used to collect metrics, create alarms based on thresholds, and integrate with the OCI Notifications service to dispatch emails.
How can you prevent users from deleting a tag namespace?
Controlling access to the Tagging API via IAM prevents accidental deletion.
Why this answer
IAM policies are required to restrict deletion permissions on tag namespaces.
Which OCI service acts as a centralized dashboard to view health status of all OCI services in your region?
The dashboard provides the current status of OCI services.
Why this answer
The OCI Status page or Health dashboard provides a global view of service status.
Which THREE actions are required to successfully set up an Alarm?
The alarm needs to know what to track.
Why this answer
To set up an alarm, you must have a metric, a notification topic, and a subscription to that topic.
Which THREE features are core capabilities of the OCI Audit service? (Choose three.)
Correct. Audit automatically captures API activity across the tenancy.
Why this answer
OCI Audit automatically records calls to all supported OCI public API endpoints, supports querying via Log Explorer, and retains logs for a specified period.
Which OCI service is best suited for real-time monitoring of CPU and Memory utilization on a Compute instance?
Monitoring provides real-time metrics for OCI resources.
Why this answer
The Monitoring service automatically collects standard metrics for Compute instances.
You are using the Events service to trigger a Function. What is a required step before this can work?
The events service needs IAM permissions to execute the target function.
Why this answer
You must have a policy that allows the Events service to invoke the function.
You are troubleshooting a deployment failure in Resource Manager. Where can you see the detailed Terraform output logs?
The Job execution logs contain the complete Terraform output.
Why this answer
The Job details page in Resource Manager shows the full output of the terraform apply/plan operations.
Which component of the Notifications service is used to define the destination for alerts?
The subscription maps the topic to a specific endpoint.
Why this answer
A Subscription defines the delivery protocol (e.g., Email, PagerDuty, Slack) for a Topic.
When designing a comprehensive tagging strategy in OCI, which THREE practices or features should you implement for effective governance and cost management? (Choose three.)
Correct. IAM policies can govern who can apply or modify defined tags.
Why this answer
Effective OCI tagging relies on defined tags, tag defaults, and IAM policies to restrict tag value modifications.
Which THREE things can you do with Resource Manager?
This is the primary function of the service.
Why this answer
Resource Manager supports provisioning resources, managing state, and importing existing configurations.
Which TWO types of tags are available in OCI?
These are schema-based tags.
Why this answer
OCI supports Free-form and Defined tags.
Which THREE options are available for creating a Resource Manager stack?
You can upload your Terraform files directly.
Why this answer
You can create a stack from a ZIP file, a Git repository, or by using a template.
You need to be alerted only when the average CPU utilization of a cluster of instances exceeds 80% for 5 consecutive minutes. Which alarm feature achieves this?
These settings control the sensitivity and evaluation of the threshold.
Why this answer
An alarm with a 'statistical' function (average) and a 'duration' setting of 5 minutes satisfies this requirement.
You are using Resource Manager and need to import existing infrastructure into a new stack. What is the correct approach?
Cloud Shell or the Resource Manager Import wizard allows state integration.
Why this answer
You must create a stack and use the 'Import Terraform configuration' option to bring in existing resources.
Which TWO OCI resources are automatically tracked by the Audit service?
Network changes are logged.
Why this answer
Audit logs all API actions, regardless of the resource type.
Which service allows you to view the audit logs of all API calls made in your tenancy?
Audit logs track all API activity.
Why this answer
The Audit service (part of the Logging family) captures every API call made in the tenancy.
When writing an LQL query, which keyword is used to filter log records based on a specific field value?
The 'filter' command in LQL narrows down the log results.
Why this answer
The 'search' or 'where' clause in LQL is used to filter records.
You are setting up an OCI Logging configuration for a custom application. Where are the log entries sent by default if no log group is specified?
You must select or create a log group for every log configuration.
Why this answer
All logs must belong to a log group in OCI Logging.
You are using Service Connector Hub to move data from Logging to Object Storage. What is the primary benefit of this approach?
Service Connector Hub manages the transfer without needing custom code.
Why this answer
Service Connector Hub provides a managed way to move log data to durable storage for archiving.
Which TWO items are components of an OCI Alarm?
The alarm is based on a specific metric.
Why this answer
Alarms consist of a metric and a notification trigger.
Your application logs contain sensitive PII. You need to ensure logs are encrypted at rest using a customer-managed key. What should you configure?
You associate a Vault Key with the log group to encrypt logs.
Why this answer
Logging service allows you to specify a Vault Master Encryption Key for log buckets.
Which type of tag is used to track costs across different departments?
Cost-tracking tags are a specific type of defined tag.
Why this answer
Cost-tracking tags are explicitly enabled to allow cost analysis in the billing dashboard.
A company uses OCI Resource Manager to manage its cloud infrastructure using Terraform. A developer has modified a Terraform configuration file locally and needs to preview the changes that Resource Manager will make to the cloud environment before actually applying them. Which Resource Manager job type should be executed?
Correct. A Plan job creates a preview of the infrastructure changes without modifying actual resources.
Why this answer
A 'Plan' job in OCI Resource Manager generates an execution plan, showing what actions Terraform will take when applied against the current state.
You are using Resource Manager to deploy infrastructure. You need to ensure that the terraform state file is automatically locked to prevent concurrent modifications. How should you handle this?
Resource Manager manages state and locking automatically.
Why this answer
Resource Manager handles state locking automatically when you run jobs, ensuring consistency without manual intervention.
You need to ingest custom application logs from multiple compute instances into OCI Logging. What is the correct sequence of components you must configure within OCI?
Correct. Custom logs require a Log Group, a properly configured Unified Agent on the instances, and a Log resource.
Why this answer
To ship custom logs from compute instances, you install the Unified Agent, configure a log group, and create a log resource associated with a unified agent configuration.
You need to extract specific JSON fields from your logs to create custom metrics. Which tool should you use?
LQL allows parsing and extraction for custom metrics.
Why this answer
Log search uses the Logging query language, but saved searches or Logging Analytics can create metrics based on log content.
What is the default retention period for audit logs in OCI?
Audit logs are kept for one year.
Why this answer
Audit logs are retained for 365 days by default.
You have an OCI alarm that is stuck in the 'Firing' state. What is the most likely cause?
Alarms stay in firing state as long as the threshold condition is met.
Why this answer
If the metric evaluation remains above the threshold, the alarm will stay in the firing state.
Which THREE services can be used as a destination for the Events service?
Events can trigger serverless functions.
Why this answer
The Events service supports Functions, Notifications, and Streaming as targets.
When configuring an alarm, what does the 'suppression' feature do?
This is useful during scheduled maintenance.
Why this answer
Suppression allows you to temporarily disable notifications for an alarm without deleting or disabling the alarm itself.
An OCI administrator wants to implement a cost-allocation tagging strategy across multiple departments sharing the same tenancy. Which OCI feature should be used to enforce that specific tag keys and values are applied to resources during creation?
Correct. Defined tags are controlled by administrators and enable structured metadata, governance, and cost tracking.
Why this answer
Defined Tags with Tag Defaults or IAM policies enforcing tag values help standardize and govern tagging in OCI.
Which TWO actions can be performed using OCI Resource Manager stacks? (Choose two.)
Correct. Resource Manager manages infrastructure using Terraform configurations.
Why this answer
OCI Resource Manager uses Terraform to provision, update, import, and destroy infrastructure stacks.
You need to trigger a serverless function whenever an object is uploaded to an Object Storage bucket. Which service should you configure?
Events service triggers actions based on state changes.
Why this answer
The Events service allows you to create rules that respond to changes in resources, such as an Object-Create event in Object Storage.
In Resource Manager, what is a 'Stack'?
A stack manages the lifecycle of your Terraform infrastructure.
Why this answer
A stack is a collection of Terraform configurations and their associated state.
You are configuring a custom log in OCI Logging. You want to parse and extract specific fields from unstructured application log lines using search queries. Which log feature allows you to query, analyze, and create visualizations from these ingested logs?
Correct. Log Explorer allows you to search, parse, and visualize logs using structured queries.
Why this answer
OCI Logging Search allows users to query ingested log data using a powerful query language, and Log Analytics offers advanced log analysis features.
Which THREE protocols are supported for Notifications subscriptions?
Standard notification channel.
Why this answer
Notifications supports Email, PagerDuty, and HTTPS.
Ready to test yourself?
Try a timed practice session using only Observability And Management questions.