Oracle Cloud Infrastructure Architect Associate practice questions

1. Question 1 of 25

   You have a block volume created in the US West (Phoenix) region. You enabled Cross Region Replication for the volume and selected US West (San Jose) as the destination region. Now, you would like to create a new volume from the volume replica in the US West (San Jose) region. What should you do?

   • AInitiate the replica.
   • BActivate the replica.
   • CNo action required. By default, the replica is available as a block volume.
   • DTrigger the replica.

   Show answer

   Correct answer: B

   How others answered

   • B67%
   • C33%

   Only 67% agreed on this answer — treat it as contested rather than settled.

   Explanation

   In the console,under the core infrastructure service, go to Block storage and then click BlockVolume replicas.ensure you are the proper region that contains the block replica volume you intend to activate

   Adapted from community discussion by kaka321 · 2024-03-24 · 5 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   View community discussion4

   Candidate context

   Question 1 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1072 or CertExamHQ.

   1. K

      kaka321

      2024-03-24

      5 upvotes

      In the console,under the core infrastructure service, go to Block storage and then click BlockVolume replicas.ensure you are the proper region that contains the block replica volume you intend to activate

   2. A

      a31c737

      2024-12-07

      1 upvote

      B -there is a block volume replica option readily available in the console. However, when creating the block volume, you have the option to either turn on or off the replication. Therefore, enabling/activating replication is required for it to replicate https://blogs.oracle.com/cloud-infrastructure/post/cross-region-block-storage-volume-replication

   3. F

      fklm

      2024-03-28

      Selected B1 upvote

      B is correct, since activating the replica will initiate a clone to create the new volume.

   4. T

      Tene190

      2024-10-03

      Selected B1 upvote

      B. You need to click Activate, so Activate is a keyword here.

2. Question 2 of 25

   Select 3

   Which THREE capabilities are available with the Oracle Cloud Infrastructure (OCI) DNS service? (Choose three.)

   • ACreating and managing Web Application Firewall (WAF) rules
   • BCreating and managing Identity Access Management (IAM) polices
   • CViewing all zones
   • DCreating and managing records
   • ECreating and managing security lists
   • FCreating and managing zones

   Show answer

   Correct answer: C, D, F

   How others answered

   • CDF100%

   Explanation

   C. Viewing all zones: The OCI DNS service allows you to view all the existing zones within your tenancy. This capability enables you to have visibility and control over the DNS configurations in your environment. D. Creating and managing records: With OCI DNS, you can create and manage DNS records, such as A records, CNAME records, TXT records, etc. This capability allows you to define the mapping between domain names and IP addresses or other resources. F. Creating and managing zones: OCI DNS enables you to create and manage DNS zones. A DNS zone is a container for DNS records associated with a specific domain. This capability allows you to define and control the configuration of DNS for your domains within OCI.

   Adapted from community discussion by Mopo · 2024-09-18 · 4 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   View community discussion1

   Candidate context

   Question 2 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1072 or CertExamHQ.

   1. M

      Mopo

      2024-09-18

      Selected C, D, F4 upvotes

      C. Viewing all zones: The OCI DNS service allows you to view all the existing zones within your tenancy. This capability enables you to have visibility and control over the DNS configurations in your environment. D. Creating and managing records: With OCI DNS, you can create and manage DNS records, such as A records, CNAME records, TXT records, etc. This capability allows you to define the mapping between domain names and IP addresses or other resources. F. Creating and managing zones: OCI DNS enables you to create and manage DNS zones. A DNS zone is a container for DNS records associated with a specific domain. This capability allows you to define and control the configuration of DNS for your domains within OCI.

3. Question 3 of 25

   Which is NOT a valid statement regarding the Oracle Cloud Infrastructure (OCI) Audit service?

   • ARetention period for Audit logs is 365 days and it cannot be changed.
   • BAudit logs are displayed for Compartments.
   • CAudit service can record REST API calls executed by a custom client.
   • DChanges within the objects stored in an Object Storage bucket are collected as Audit logs.

   Show answer

   Correct answer: D

   How others answered

   • D63%
   • A38%

   Only 63% agreed on this answer — treat it as contested rather than settled.

   Explanation

   A. Retention period can't be changed - https://docs.oracle.com/en-us/iaas/Content/Audit/Tasks/settingretentionperiod.htm D. Logs from Object Storage bucket goes to Logging Analytics - https://docs.oracle.com/en-us/iaas/logging-analytics/doc/collect-logs-your-oci-object-storage-bucket.html

   Adapted from community discussion by dan_morales · 2024-06-13 · 3 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Oracle documentation
   • Oracle documentation
   • Oracle documentation

   View community discussion4

   Candidate context

   Question 3 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1072 or CertExamHQ.

   1. D

      dan_morales

      2024-06-13

      Selected D3 upvotes

      A. Retention period can't be changed - https://docs.oracle.com/en-us/iaas/Content/Audit/Tasks/settingretentionperiod.htm D. Logs from Object Storage bucket goes to Logging Analytics - https://docs.oracle.com/en-us/iaas/logging-analytics/doc/collect-logs-your-oci-object-storage-bucket.html

   2. S

      Shu6ham

      2024-04-24

      2 upvotes

      A. Retention period for Audit logs is 365 days and it cannot be changed. In Oracle Cloud Infrastructure (OCI), you can configure the retention period for Audit logs, and it is not fixed at 365 days. You can set a custom retention period for your audit logs, depending on your organization's requirements. So, statement A is not correct.

   3. O

      omarshaban

      2025-02-13

      Selected D1 upvote

      Object Storage service supports logging for bucket-related events, but not for object-related events https://docs.oracle.com/en-us/iaas/Content/Audit/Concepts/auditoverview.htm

   4. F

      fklm

      2024-03-28

      1 upvote

      D - By default, Audit logs are retained for 365 days. You can view the log retention period in the tenancy details page. https://docs.oracle.com/en-us/iaas/Content/Audit/Tasks/settingretentionperiod.htm#:~:text=By%20default%2C%20Audit%20logs%20are,domains%2C%20see%20Managing%20the%20Tenancy.

4. Question 4 of 25

   Which is NOT a valid action within the Oracle Cloud Infrastructure (OCI) Block Volume service?

   • AExpanding an existing volume in place with offline resizing.
   • BRestoring from a volume backup to a larger volume.
   • CCloning an existing volume to a new, larger volume.
   • DAttaching a block volume to an instance in a different availability domain.

   Show answer

   Correct answer: D

   How others answered

   • D100%

   Explanation

   In OCI, volumes are only accessible to instances in the same availability domain . You cannot move a volume between availability domains or regions, they are only accessible within the region or availability domain they were created in.

   Adapted from community discussion by RudolfBritto · 2024-06-03 · 5 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Oracle documentation
   • Oracle documentation

   View community discussion4

   Candidate context

   Question 4 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1072 or CertExamHQ.

   1. R

      RudolfBritto

      2024-06-03

      Selected D5 upvotes

      In OCI, volumes are only accessible to instances in the same availability domain . You cannot move a volume between availability domains or regions, they are only accessible within the region or availability domain they were created in.

   2. S

      Shu6ham

      2024-04-24

      2 upvotes

      C. Cloning an existing volume to a new, larger volume. In OCI, you can clone an existing volume to create a new volume, but the cloning process typically creates a volume of the same size as the source volume. It does not inherently allow you to clone an existing volume to a new, larger volume. You can, however, create a new larger volume separately and then copy data from the source volume to the new volume.

   3. L

      Learning4life

      2024-12-15

      Selected D1 upvote

      Volumes are only accessible to instances in the same availability domain. https://docs.oracle.com/en-us/iaas/Content/Block/Concepts/overview.htm

   4. A

      a31c737

      2024-12-07

      1 upvote

      D. cloning is only good with the same AD, Region and compartment. you can resize the clone when creating it. https://docs.oracle.com/en-us/iaas/Content/Block/Tasks/cloningavolume.htm

5. Question 5 of 25

   You are in the process of migrating several legacy applications from on-premises to Oracle Cloud Infrastructure (OCI). The current servers are already virtualized. However, you notice that the version of CentOS currently running does not align with any of the Oracle-provided compute images. How would you migrate your existing virtual server images to OCI?

   • AExport your current image in the VDI format and copy to an Object Storage bucket. Import it as a custom image. Select native mode to ensure the best possible performance.
   • BExport your current image in the VMDK format and copy to an Object Storage bucket. Import it as a custom image. Select native mode to ensure the best possible performance.
   • CExport your current image in the QED format and copy to an Object Storage bucket. Import it as a custom image. Select emulated mode to ensure compatibility with legacy drivers.
   • DExport your current image in the QCOW2 format and copy to an Object Storage bucket. Import it as a custom image. Select emulated mode to ensure compatibility with legacy drivers.

   Show answer

   Correct answer: B

   How others answered

   • B50%
   • D50%

   Only 50% agreed on this answer — treat it as contested rather than settled.

   Explanation

   Option D specifies the QCOW2 image format. QCOW2 is a virtual disk image format that is supported by OCI. However, if you select emulated mode when importing a QCOW2 image, the virtual machine will not be able to interact directly with the OCI hardware, which can result in performance degradation.

   Adapted from community discussion by fklm · 2023-09-28 · 3 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   View community discussion4

   Candidate context

   Question 5 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1072 or CertExamHQ.

   1. F

      fklm

      2023-09-28

      Selected B3 upvotes

      Option D specifies the QCOW2 image format. QCOW2 is a virtual disk image format that is supported by OCI. However, if you select emulated mode when importing a QCOW2 image, the virtual machine will not be able to interact directly with the OCI hardware, which can result in performance degradation.

   2. G

      gashforing

      2023-09-27

      4 upvotes

      D. Export your current image in the QCOW2 format and copy to an Object Storage bucket. Import it as a custom image. Select emulated mode to ensure compatibility with legacy drivers.

   3. N

      Nhat_Quang

      2025-02-24

      Selected B1 upvote

      B Incorec. B. Export your current image in the VMDK format and copy to an Object Storage bucket. Import it as a custom image. Select native mode to ensure the best possible performance

   4. O

      omarshaban

      2025-02-13

      Selected B1 upvote

      While QCOW2 is a supported format, emulated mode is not required unless you have specific legacy driver compatibility issues. Native mode is preferred for better performance.

6. Question 6 of 25

   You are a system administrator of your company and you are managing a complex environment consisting of compute instances running Oracle Linux on Oracle Cloud Infrastructure (OCI). It’s your task to apply all the latest kernel security updates to all instances. Which OCI service will allow you to complete this task?

   • AOCI Security Zones
   • BOS Management service
   • COCI Registry
   • DOCI Streaming service

   Show answer

   Correct answer: B

   How others answered

   • B100%

   Explanation

   The OS Management service in OCI provides capabilities for managing the lifecycle of operating system updates, including patching and updating Oracle Linux instances. With OS Management, you can automate the process of applying patches and updates across multiple instances, ensuring that they are all up-to-date with the latest kernel security updates.

   Adapted from community discussion by Mopo · 2024-09-18 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   View community discussion1

   Candidate context

   Question 6 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1072 or CertExamHQ.

   1. M

      Mopo

      2024-09-18

      Selected B2 upvotes

      The OS Management service in OCI provides capabilities for managing the lifecycle of operating system updates, including patching and updating Oracle Linux instances. With OS Management, you can automate the process of applying patches and updates across multiple instances, ensuring that they are all up-to-date with the latest kernel security updates.

7. Question 7 of 25

   You have three compartments: ProjectA, ProjectB, and ProjectC. For each compartment, there is an admin group set up: A-Admins, B-Admins, and C-Admins. Each admin group has full access over their respective compartments as shown in the graphic below. Your organization has set up a tag namespace, EmployeeGroup.Role and all your admin groups are tagged with a value of 'Admin'.

   

   You want to set up a Test compartment for members of the three projects to share. You also need to provide admin access to all three of your existing admin groups. Which policy would you write to accomplish this task?

   • AAllow all-group to manage all-resources in compartment Test where request.principal.group.tag.EmployeeGroup.Role='Admin'
   • BAllow dynamic-group to manage all-resources in compartment Test where request.principal.group.tag.EmployeeGroup.Role='Admin'
   • CAllow any-user to manage all-resources in compartment Test where request.principal.group.tag.EmployeeGroup.Role='Admin'
   • DAllow group any-group to manage all-resources in compartment Test where request.principal.group.tag.EmployeeGroup.Role='Admin'

   Show answer

   Correct answer: C

   How others answered

   • C80%
   • B20%

   Explanation

   There is NOTHING called all-group. Search the Oracle Training Guide and check for yourself C is the correct answer (any-user)

   Adapted from community discussion by Hotman1987 · 2023-10-06 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Oracle documentation
   • Oracle documentation

   View community discussion4

   Candidate context

   Question 7 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1072 or CertExamHQ.

   1. K

      kaka321

      2023-09-24

      4 upvotes

      A is wrong. D is correct. following the policy syntax. note all-group does not exist but any-group

   2. A

      alejodazam

      2023-09-29

      Selected C2 upvotes

      is in the documentation: https://docs.oracle.com/en-us/iaas/Content/Tagging/Tasks/managingaccesswithtags.htm#ariaid-title3#ariaid-title4#ariaid-title32

   3. G

      gsake

      2023-10-13

      Selected C2 upvotes

      https://docs.oracle.com/en-us/iaas/Content/Tagging/Tasks/managingaccesswithtags.htm#ariaid-title3#ariaid-title4#ariaid-title32

   4. I

      iggyboo

      2023-09-26

      1 upvote

      Unless I'm missing something, there is no "all-group" in the syntax reference (as poor as Oracle has it though I might have missed it). There are however all-resources/all- style selectors that can be found. This is concerning though because this isn't the first time that an "Actual" test question had the wrong answer so I suspect there are landmines all over the certification test OR the writers of said test are just as confused because the documentation is all over the place.

8. Question 8 of 25

   You need to set up instance principals so that an application running on an instance can call Oracle Cloud Infrastructure (OCI) public services, without the need to configure user credentials or a configuration file. A developer in your team has already configured the application built using an OCI SDK to authenticate using the instance principals provider. Which is NOT a necessary step to complete this set up?

   • ACreate a policy granting permissions to the dynamic group to access services in your compartment or tenancy.
   • BGenerate Auth Tokens to enable instances in the dynamic group to authenticate with APIs.
   • CCreate a dynamic group with matching rules to specify which instances can make API calls against services.
   • DDeploy the application and the SDK to all the instances that belong to the dynamic group.

   Show answer

   Correct answer: B

   How others answered

   • B100%

   Explanation

   Generating Auth Tokens is not necessary for instance principals authentication. Instance principals allow the instances themselves to authenticate with OCI services without requiring explicit authentication tokens. Instead, the instances use the built-in identity of the instance to authenticate and access OCI resources.

   Adapted from community discussion by Mopo · 2024-09-18 · 3 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   View community discussion1

   Candidate context

   Question 8 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1072 or CertExamHQ.

   1. M

      Mopo

      2024-09-18

      Selected B3 upvotes

      Generating Auth Tokens is not necessary for instance principals authentication. Instance principals allow the instances themselves to authenticate with OCI services without requiring explicit authentication tokens. Instead, the instances use the built-in identity of the instance to authenticate and access OCI resources.

9. Question 9 of 25

   You created a virtual cloud network (VCN) with three private subnets. Two of the subnets contain application servers and the third subnet contains a DB System. The application requires a shared file system, therefore you have provisioned one using the file storage service (FSS). You have also created the corresponding mount target in one of the application subnets. The VCN security lists are properly configured so that the application servers can access FSS. The security team changed the settings for the DB System to have read-only access to the file system. However, when they test it, they are unable to access FSS. How would you allow access to FSS?

   • ACreate an NFS export option that allows READ_ONLY access where the source is the CIDR range of the DB System subnet.
   • BModify the security list associated with the subnet where the mount target resides. Change the ingress rules corresponding to the DB System subnet to be stateless.
   • CCreate an instance principal for the DB System. Write an Identity and Access Management (IAM) policy that allows the instance principal read-only access to the file storage service.
   • DModify the security list associated with the subnet where the mount target resides. Change the ingress rules corresponding to the DB System subnet to be stateful.

   Show answer

   Correct answer: A

   How others answered

   • A75%
   • D25%

   Explanation

   NFS export options define access permissions for NFS clients accessing the file system. By creating an NFS export option with READ_ONLY access, you restrict the DB System to read-only access. You specify the source of access in the export option, which in this case would be the CIDR range of the DB System subnet. This ensures that only resources within the DB System subnet can access the file system. Configuring the NFS export option in this manner ensures that the DB System has the necessary permissions to access the file system for its read-only operations.

   Adapted from community discussion by Mopo · 2024-09-18 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   View community discussion2

   Candidate context

   Question 9 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1072 or CertExamHQ.

   1. M

      Mopo

      2024-09-18

      Selected A2 upvotes

      NFS export options define access permissions for NFS clients accessing the file system. By creating an NFS export option with READ_ONLY access, you restrict the DB System to read-only access. You specify the source of access in the export option, which in this case would be the CIDR range of the DB System subnet. This ensures that only resources within the DB System subnet can access the file system. Configuring the NFS export option in this manner ensures that the DB System has the necessary permissions to access the file system for its read-only operations.

   2. P

      partnerexams

      2024-11-30

      Selected A1 upvote

      NFS Export Options: These control access to the file system at the NFS protocol level. You can specify which subnets or IP ranges can access the file system and what level of access (read, write) they have. By creating an NFS export option that grants read-only access to the specific CIDR range of the DB System subnet, you explicitly allow the DB System to access the FSS with the necessary permissions.

10. Question 10 of 25

    Which statement is true about File System Replication in Oracle Cloud Infrastructure (OCI)?

    • AYou cannot specify a replication interval when you create the replication resource.
    • BOnly a file system that has been exported can be used as a target file system.
    • CYou can replicate the data in one file system to another file system in the same region or a different region.
    • DYou can replicate the data in one file system to another file system only in the same region.

    Show answer

    Correct answer: C

    How others answered

    • C100%

    Explanation

    File System Replication in OCI allows you to replicate data from one file system to another, providing redundancy and disaster recovery capabilities. You can replicate data within the same region or across different regions, allowing for cross-region redundancy and disaster recovery solutions. This feature enables you to maintain copies of your data in multiple locations, improving data availability and resilience to regional failures.

    Adapted from community discussion by Mopo · 2024-09-18 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    View community discussion1

    Candidate context

    Question 10 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1072 or CertExamHQ.

    1. M

       Mopo

       2024-09-18

       Selected C2 upvotes

       File System Replication in OCI allows you to replicate data from one file system to another, providing redundancy and disaster recovery capabilities. You can replicate data within the same region or across different regions, allowing for cross-region redundancy and disaster recovery solutions. This feature enables you to maintain copies of your data in multiple locations, improving data availability and resilience to regional failures.

11. Question 11 of 25

    Which of the following is a valid RFC 1918 CIDR prefix that can be used for creating an Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN)?

    • A192.168.0.0/16
    • B192.268.0.0/24
    • C10.0.0.0/8
    • D172.16.0.0/12
    • E189.215.154.89/32
    • F0.0.0.0/0

    Show answer

    Correct answer: A

    Explanation

    10.0.0.0/8 cannot be used as a VCN range, because "The allowable VCN size range is /16 to /30. Example: 10.0.0.0/16." Source: https://docs.oracle.com/en-us/iaas/Content/Network/Concepts/overview.htm

    Adapted from community discussion by FukYuu · 2023-09-29 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Oracle documentation

    View community discussion4

    Candidate context

    Question 11 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1072 or CertExamHQ.

    1. F

       FukYuu

       2023-09-29

       2 upvotes

       10.0.0.0/8 cannot be used as a VCN range, because "The allowable VCN size range is /16 to /30. Example: 10.0.0.0/16." Source: https://docs.oracle.com/en-us/iaas/Content/Network/Concepts/overview.htm

    2. A

       arescons

       2024-10-14

       2 upvotes

       VCN Size range must be between /30 and /16. Only A and B fulfill this. And in B there is an illegal 268 for a subnet...

    3. O

       otavioko

       2023-09-28

       2 upvotes

       Correct answer A,C,D The RFC 1918 prefixes are: 10.0.0.0/8 Class A 172.16.0.0/12 Class B 192.168.0.0/16 Class C

    4. A

       antoniosilvano

       2023-09-29

       1 upvote

       10.0.0.0/8 Class A this is correct, but in OCI is valid only when start with /16, example 10.0.0.0/16

12. Question 12 of 25

    You are responsible for deploying an application on Oracle Cloud Infrastructure (OCI). The application is memory intensive and performs poorly if enough memory is not available. You have created an instance pool of Linux compute instances in OCI to host the application and defined Autoscaling Configuration for the instance pool. What should you do to ensure that the instance pool autoscales to prevent poor application performance?

    • AInstall OCI SDK on all compute instances and create a script that triggers the autoscaling event if there is high memory usage.
    • BConfigure the autoscaling policy to monitor CPU usage and scale up the number of instances when it meets the threshold.
    • CInstall the monitoring agent on all compute instances, which triggers the autoscaling group.
    • DConfigure the autoscaling policy to monitor memory usage and scale up the number of instances when it meets the threshold.

    Show answer

    Correct answer: D

    How others answered

    • D100%

    Explanation

    D is correct. the question is about an application which is memory intensive. Auto scaling use CPU/Memory as performance metrics

    Adapted from community discussion by Marcynick · 2024-09-26 · 3 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    View community discussion1

    Candidate context

    Question 12 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1072 or CertExamHQ.

    1. M

       Marcynick

       2024-09-26

       3 upvotes

       D is correct. the question is about an application which is memory intensive. Auto scaling use CPU/Memory as performance metrics

13. Question 13 of 25

    You are backing up your on-premises data to the Oracle Cloud Infrastructure (OCI) Object Storage Service. Your requirements are: 1. Backups need to be retained for at least full 31 days. 2. Data should be accessible immediately if and when needed after the backup. Which OCI Object Storage tier is suitable for storing the backup to minimize cost?

    • AArchive tier
    • BInfrequent Access tier
    • CAuto-Tiering tier
    • DStandard tier

    Show answer

    Correct answer: B

    How others answered

    • B100%

    Explanation

    B. Infrequent Access tier: This tier is designed for data that is accessed less frequently but still requires quick access when needed. It offers a cost saving over the Standard tier while providing the ability to access data immediately. This would be a suitable option given your need for immediate access and a cost-effective solution.

    Adapted from community discussion by partnerexams · 2024-11-30 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    View community discussion1

    Candidate context

    Question 13 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1072 or CertExamHQ.

    1. P

       partnerexams

       2024-11-30

       Selected B2 upvotes

       B. Infrequent Access tier: This tier is designed for data that is accessed less frequently but still requires quick access when needed. It offers a cost saving over the Standard tier while providing the ability to access data immediately. This would be a suitable option given your need for immediate access and a cost-effective solution.

14. Question 14 of 25

    Select 2

    You plan to upload a large file (3 TiB) to Oracle Cloud Infrastructure (OCI) Object Storage. You would like to minimize the impact of network failures while uploading, and therefore you decide to use the multipart upload capability. Which TWO statements are true about performing a multipart upload using the Multipart Upload API? (Choose two.)

    • AYou do not have to commit the upload after you have uploaded all the object parts.
    • BYou do not need to split the object into parts. Object Storage splits the object into parts and uploads all of the parts automatically.
    • CWhile a multipart upload is still active, you can keep adding parts as long as the total number is less than 10,000.
    • DWhen you split the object into individual parts, each part can be as large as 50 GiB.

    Show answer

    Correct answer: C, D

    Explanation

    https://docs.oracle.com/en-us/iaas/Content/Object/Tasks/usingmultipartuploads.htm * While a multipart upload is still active, you can keep adding parts as long as the total number is less than 10,000. * With multipart upload, you split the object you want to upload into individual parts. Individual parts can be as large as 50 GiB

    Adapted from community discussion by daws08322 · 2024-08-10 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Oracle documentation

    View community discussion1

    Candidate context

    Question 14 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1072 or CertExamHQ.

    1. D

       daws08322

       2024-08-10

       2 upvotes

       https://docs.oracle.com/en-us/iaas/Content/Object/Tasks/usingmultipartuploads.htm * While a multipart upload is still active, you can keep adding parts as long as the total number is less than 10,000. * With multipart upload, you split the object you want to upload into individual parts. Individual parts can be as large as 50 GiB

15. Question 15 of 25

    When defining a query for metric data in Monitoring, which field provides the time window for aggregating metric data points plotted on the metric chart?

    • ANamespace
    • BInterval
    • CDimension
    • DStatistic

    Show answer

    Correct answer: B

    Explanation

    b Interval is the field that provides the time window for aggregating metric data points plotted on the metric chart. Interval is a parameter that specifies how often metric data points are collected and aggregated by the Monitoring service. For example, an interval of 5 minutes means that metric data points are aggregated every 5 minutes and displayed on the chart. The other options are not fields that provide the time window for aggregating metric data points, but rather other parameters that define the metric query. Reference: [Interval]

    Adapted from community discussion by daws08322 · 2024-06-24 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    View community discussion1

    Candidate context

    Question 15 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1072 or CertExamHQ.

    1. D

       daws08322

       2024-06-24

       2 upvotes

       b Interval is the field that provides the time window for aggregating metric data points plotted on the metric chart. Interval is a parameter that specifies how often metric data points are collected and aggregated by the Monitoring service. For example, an interval of 5 minutes means that metric data points are aggregated every 5 minutes and displayed on the chart. The other options are not fields that provide the time window for aggregating metric data points, but rather other parameters that define the metric query. Reference: [Interval]

16. Question 16 of 25

    You are using the Oracle Cloud Infrastructure (OCI) Vault service to create and manage Secrets. For your database password, you have created a secret and rotated the secret one time. The secret versions are as follows:

    

    You later realize that you have made a mistake in updating the secret content for version 2 and want to rollback to version 1. What should you do to rollback to version 1?

    • ADeprecate version 2 (latest). Create new Secret version 3. Create soft link from version 3 to version 1.
    • BFrom the version 1 menu on the OCI console, select "Promote to Current".
    • CFrom the version 2 (latest) menu, select "Rollback" and select version 1 when given the option.
    • DCreate a new secret version 3 and set to Pending. Copy the content of version 1 into version 3.

    Show answer

    Correct answer: B

    Explanation

    B when you've made a mistake in updating the secret contents or when you've restored a backup of an older resource and need to resume using older secret contents, secret versions can also be marked as 'previous.' A secret version marked as 'previous' was previously a secret version marked as 'current.' To roll back to a previous version, you update the secret to specify the secret version number you want. As long as a secret version hasn't been deleted, you can update the secret to use that past secret version. When you update the secret, the secret version number you choose gets marked as 'current.' This has the same effect as promoting a secret version to 'current.'

    Adapted from community discussion by daws08322 · 2024-06-24 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    View community discussion1

    Candidate context

    Question 16 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1072 or CertExamHQ.

    1. D

       daws08322

       2024-06-24

       2 upvotes

       B when you've made a mistake in updating the secret contents or when you've restored a backup of an older resource and need to resume using older secret contents, secret versions can also be marked as 'previous.' A secret version marked as 'previous' was previously a secret version marked as 'current.' To roll back to a previous version, you update the secret to specify the secret version number you want. As long as a secret version hasn't been deleted, you can update the secret to use that past secret version. When you update the secret, the secret version number you choose gets marked as 'current.' This has the same effect as promoting a secret version to 'current.'

17. Question 17 of 25

    You want to create a policy to allow the NetworkAdmins group to manage Virtual Cloud Network (VCN) in compartment C. You want to attach this policy to the tenancy. The compartment hierarchy is shown below.

    

    Which policy statement can be used to accomplish this task?

    • AAllow group NetworkAdmins to manage virtual-network-family in compartment C
    • BAllow group NetworkAdmins to manage virtual-network-family in compartment A:B:C
    • CAllow group NetworkAdmins to manage virtual-network-family in tenancy
    • DAllow group NetworkAdmins to manage virtual-network-family in compartment B:C

    Show answer

    Correct answer: B

    Explanation

    If you attach the policy further up the hierarchy, you must specify the path. The format of the path is each compartment name (or OCID) in the path, separated by a colon: : : . . . To attach this policy to the tenancy, write this policy statement that specifies the path from CompartmentA to CompartmentC: B Allow group NewtworkAdmins to manage virtual-network-family in compartment CompartmentA:CompartmentB:Compart

    Adapted from community discussion by daws08322 · 2024-06-24 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Oracle documentation

    View community discussion3

    Candidate context

    Question 17 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1072 or CertExamHQ.

    1. D

       daws08322

       2024-06-24

       2 upvotes

       If you attach the policy further up the hierarchy, you must specify the path. The format of the path is each compartment name (or OCID) in the path, separated by a colon: : : . . . To attach this policy to the tenancy, write this policy statement that specifies the path from CompartmentA to CompartmentC: B Allow group NewtworkAdmins to manage virtual-network-family in compartment CompartmentA:CompartmentB:Compart

    2. A

       a31c737

       2024-12-07

       1 upvote

       B is correct. you have to specify the path if the compartment is further down the hierarchy. If you are assigning the policy to root, you can just simply specify the name of the compartment. https://docs.oracle.com/en-us/iaas/Content/Identity/Concepts/policies.htm#Policy3

    3. K

       kaka321

       2024-03-25

       1 upvote

       I could not see the diagram but want to believe its a nested compartment scenario A-B-C so if the question only talked about managing compartment C then no need specifying a:b:c compartment

18. Question 18 of 25

    Which statement is NOT true about the Oracle Cloud Infrastructure (OCI) Object Storage service?

    • AImmutable option for data stored in Object Storage can be set via retention rules.
    • BObject lifecycle rules can be used to either archive or delete objects.
    • CObject Storage resources can be shared across tenancies.
    • DObject Versioning is enabled at the namespace level.

    Show answer

    Correct answer: D

    Explanation

    d About Object Versioning Object versioning is enabled at the bucket level. Versioning directs Object Storage to automatically create an object version each time a new object is uploaded, an existing object is overwritten, or when an object is deleted. You can enable object versioning at bucket creation time or later. From: https://docs.oracle.com/en-us/iaas/Content/Object/Tasks/usingversioning.htm

    Adapted from community discussion by daws08322 · 2024-06-24 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Oracle documentation

    View community discussion1

    Candidate context

    Question 18 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1072 or CertExamHQ.

    1. D

       daws08322

       2024-06-24

       2 upvotes

       d About Object Versioning Object versioning is enabled at the bucket level. Versioning directs Object Storage to automatically create an object version each time a new object is uploaded, an existing object is overwritten, or when an object is deleted. You can enable object versioning at bucket creation time or later. From: https://docs.oracle.com/en-us/iaas/Content/Object/Tasks/usingversioning.htm

19. Question 19 of 25

    Which of the following statements is true about cloning a volume in the Oracle Cloud Infrastructure (OCI) Block Volume service?

    • ACreating a clone takes longer than creating a backup of a volume.
    • BYou can clone a volume to another region.
    • CYou need to detach a volume before cloning it.
    • DYou can change the block volume size when cloning a volume.

    Show answer

    Correct answer: D

    Explanation

    D. https://docs.oracle.com/en-us/iaas/Content/Block/Tasks/cloningavolume.htm Because the clone is a copy of the source volume it is the same size as the source volume unless you specify a larger volume size when you create the clone.

    Adapted from community discussion by gsake · 2024-10-12 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Oracle documentation

    View community discussion1

    Candidate context

    Question 19 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1072 or CertExamHQ.

    1. G

       gsake

       2024-10-12

       2 upvotes

       D. https://docs.oracle.com/en-us/iaas/Content/Block/Tasks/cloningavolume.htm Because the clone is a copy of the source volume it is the same size as the source volume unless you specify a larger volume size when you create the clone.

20. Question 20 of 25

    You are responsible for creating and maintaining an enterprise application that consists of multiple storage volumes across multiple compute instances in Oracle Cloud Infrastructure (OCI). The storage volumes include boot volumes and block volumes for your data storage. You need to create a backup for the boot volumes that will be done daily and a backup for the block volumes that will be done every six hours. How can you meet this requirement?

    • AGroup both boot volumes and block volumes in a volume group and create volume group backups.
    • BCreate clones of all boot volumes and block volumes one at a time.
    • CCreate two volume groups for grouping boot volumes and block volumes separately. Create two custom backup policies as per requirement.
    • DCreate on-demand full backups of block volumes, and create custom images from the boot volumes. Use a function to run at a specific time to start the backup process.

    Show answer

    Correct answer: C

    How others answered

    • C100%

    Explanation

    In my understanding, when you create a volume group, you can add multiples boot and block volumes, and then associate it just one policy backup. I've implemented in my tenants option described in C option. Someone with a different experience?

    Adapted from community discussion by dan_morales · 2024-06-13 · 4 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Oracle documentation

    View community discussion2

    Candidate context

    Question 20 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1072 or CertExamHQ.

    1. D

       dan_morales

       2024-06-13

       4 upvotes

       In my understanding, when you create a volume group, you can add multiples boot and block volumes, and then associate it just one policy backup. I've implemented in my tenants option described in C option. Someone with a different experience?

    2. S

       Sharkman2123

       2024-07-29

       Selected C2 upvotes

       C. Per https://docs.oracle.com/en-us/iaas/compute-cloud-at-customer/topics/block/assinging-a-backup-policy-to-a-volume-or-volume-group.htm, a volume or volume group can have only one backup policy assigned

21. Question 21 of 25

    You have an instance running in Oracle Cloud Infrastructure (OCI) that cannot be live-migrated during an infrastructure maintenance event. OCI schedules a maintenance due date within 14 to 16 days and sends you a notification. What would happen if you choose not to proactively reboot the instance before the scheduled maintenance due date?

    • AYou will receive another notification to reboot within the next 14 days.
    • BThe instance will get terminated.
    • CThe instance is either reboot-migrated or rebuilt in place for you.
    • DYou will receive another notification to reboot within the next 7 days.

    Show answer

    Correct answer: C

    How others answered

    • C100%

    Explanation

    C is correct. If you do not proactively reboot the instance before the due date, the instance is reboot migrated for you. By default, Oracle Cloud Infrastructure live migrates the instance without sending any notification about the upcoming maintenance.

    Adapted from community discussion by Igor_B · 2023-10-07 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    View community discussion2

    Candidate context

    Question 21 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1072 or CertExamHQ.

    1. I

       Igor_B

       2023-10-07

       2 upvotes

       C is correct. If you do not proactively reboot the instance before the due date, the instance is reboot migrated for you. By default, Oracle Cloud Infrastructure live migrates the instance without sending any notification about the upcoming maintenance.

    2. S

       Sergioidiaz

       2024-04-21

       Selected C1 upvote

       The instance is either reboot-migrated or rebuilt in place for you.

22. Question 22 of 25

    Company XYZ is spending $300,000.00 USD per month in egress fees for 7 Petabytes (1 Petabyte = 1000 Terabytes) that they consume for Outbound Data Transfer in North America with their current cloud provider. The company is seeking to lower that expense considerably without reducing consumption. You propose migration to OCI because the Gigabyte Outbound Data Transfer in North America costs just $0.0085 USD per month. With OCI, how much will they spend per month for 7 Petabytes of Outbound Data Transfer? (1 Terabyte = 1000 Gigabytes)

    • A$59,415.00
    • B$150,000.00
    • C$0.00 (free with OCI)
    • D$59,500.00

    Show answer

    Correct answer: D

    How others answered

    • D67%
    • A33%

    Only 67% agreed on this answer — treat it as contested rather than settled.

    Explanation

    Not sure why the correct answer is marked as A. 0.00085 x 1000 = 8.5 (so the cost for 1TB is $8.5) 8.5 x 1000 = 8.500 (so the cost for 1PB is $8500) 8.5000 x 7 = 59.500 (so the cost for 7PT is 59,500) The correct answer should be D

    Adapted from community discussion by tripis · 2024-04-10 · 3 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    View community discussion3

    Candidate context

    Question 22 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1072 or CertExamHQ.

    1. T

       tripis

       2024-04-10

       3 upvotes

       Not sure why the correct answer is marked as A. 0.00085 x 1000 = 8.5 (so the cost for 1TB is $8.5) 8.5 x 1000 = 8.500 (so the cost for 1PB is $8500) 8.5000 x 7 = 59.500 (so the cost for 7PT is 59,500) The correct answer should be D

    2. Y

       yama_chan

       2024-09-17

       2 upvotes

       The correct answer is A. Outbound data transfer is free up to 10TB per month, so that amount must be subtracted from the total data transfer.

    3. A

       arescons

       2024-10-23

       1 upvote

       I would go for A also: They won't go for a simple math problem... You have to KNOW, that there is a free 10 TB in outbound data with OCI - and there is an Answer which includes this.

23. Question 23 of 25

    Which is NOT a valid Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN) design approach?

    • APrivate subnets should ideally have individual route tables to control the flow of traffic within and outside of VCN.
    • BEnsure not all IP addresses are allocated at once within a VCN or subnet; instead reserve some IP addresses for future use.
    • CUse OCI tags to tag VCN resources so that all resources follow organizational tagging/naming conventions.
    • DFor resources without public IP addresses that need to initiate connections to the internet you can use an Internet gateway.

    Show answer

    Correct answer: D

    How others answered

    • D100%

    Explanation

    I really do not understand how they got A but this is a straight forward calculation that gives D 1000* 1000* 7 *.0085=59500 USD for 7Petabyte

    Adapted from community discussion by kaka321 · 2024-09-28 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    View community discussion2

    Candidate context

    Question 23 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1072 or CertExamHQ.

    1. K

       kaka321

       2024-09-28

       2 upvotes

       I really do not understand how they got A but this is a straight forward calculation that gives D 1000* 1000* 7 *.0085=59500 USD for 7Petabyte

    2. A

       acpreddy

       2025-02-14

       Selected D1 upvote

       to allow resources without public IP addresses to initiate connections to the internet, you would use a Network Address Translation (NAT) gateway instead of an "Internet Gateway"

24. Question 24 of 25

    Select 2

    As a network architect you have been tasked with creating a fully redundant connection from your on-premises data center to your Virtual Cloud Network (VCN) in the us-ashburn-1 region. Which TWO options will accomplish this requirement? (Choose two.)

    • AConfigure two FastConnect virtual circuits to the us-ashburn-1 region and terminate them in diverse hardware on-premises.
    • BConfigure one FastConnect virtual circuit to the us-ashburn-1 region and the second FastConnect virtual circuit to the us-phoenix-1 region.
    • CConfigure a Site-to-Site VPN from a single on-premises CPE.
    • DConfigure one FastConnect virtual circuit to the us-ashburn-1 region and a Site-to-Site VPN to the us-ashburn-1 region.

    Show answer

    Correct answer: A, D

    How others answered

    • AD80%
    • AB20%

    Explanation

    Correct. Since, Option B (Configuring a FastConnect virtual circuit to the us-phoenix-1 region) is not necessary for creating redundancy to the us-ashburn-1 region. Option C (Configuring a Site-to-Site VPN from a single on-premises CPE) does not provide redundancy by itself, as it relies on a single connection. Therefore, options A and D are the most suitable for achieving a fully redundant connection to the us-ashburn-1 region.

    Adapted from community discussion by fklm · 2023-09-28 · 3 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    View community discussion3

    Candidate context

    Question 24 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1072 or CertExamHQ.

    1. F

       fklm

       2023-09-28

       3 upvotes

       Correct. Since, Option B (Configuring a FastConnect virtual circuit to the us-phoenix-1 region) is not necessary for creating redundancy to the us-ashburn-1 region. Option C (Configuring a Site-to-Site VPN from a single on-premises CPE) does not provide redundancy by itself, as it relies on a single connection. Therefore, options A and D are the most suitable for achieving a fully redundant connection to the us-ashburn-1 region.

    2. A

       adz07

       2024-09-08

       Selected A, D2 upvotes

       I go with AD B - connection to phoenix doesn't have anything to do with the connection in ashburn C - not redundant

    3. A

       a31c737

       2024-06-07

       1 upvote

       A and D. Replication through either 2 fast connect links or fast connect + site 2 site vpn

25. Question 25 of 25

    A recently hired network administrator has been given the task of removing SSH permissions from all compute instances in the company's tenancy. She finds all Virtual Cloud Networks (VCNs) in the tenancy using Tenancy Explorer. She removes port 22 from the Security Lists in all VCNs. After she completes the task, the very first compute instance that she tests SSH against, allows her to still SSH into it. Why is that?

    • AThe VCN where that compute instance resides still has an Internet Gateway.
    • BThe VCN where that compute instance resides still has a route rule that allows port 22.
    • CThe VNIC of that compute instance is attached to a Network Security Group (NSG) that has a stateful ingress rule for all protocols on source CIDR 0.0.0.0/0.
    • DThe VNIC of that compute instance is attached to a Cluster Network that has a stateful ingress rule for all protocols on source CIDR 0.0.0.0/0.

    Show answer

    Correct answer: C

    How others answered

    • C100%

    Explanation

    If the VNIC of the compute instance is attached to an NSG that has a stateful ingress rule allowing all protocols from the source CIDR 0.0.0.0/0, it means that all incoming traffic, including SSH traffic on port 22, is still permitted regardless of the Security Lists configured at the VCN level. NSG rules take precedence over Security Lists. To ensure that SSH access is completely disabled for the compute instance, the network administrator should review and modify the NSG associated with the compute instance's VNIC to remove the stateful ingress rule allowing SSH traffic.

    Adapted from community discussion by Mopo · 2024-09-18 · 3 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    View community discussion1

    Candidate context

    Question 25 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 1Z0-1072 or CertExamHQ.

    1. M

       Mopo

       2024-09-18

       Selected C3 upvotes

       If the VNIC of the compute instance is attached to an NSG that has a stateful ingress rule allowing all protocols from the source CIDR 0.0.0.0/0, it means that all incoming traffic, including SSH traffic on port 22, is still permitted regardless of the Security Lists configured at the VCN level. NSG rules take precedence over Security Lists. To ensure that SSH access is completely disabled for the compute instance, the network administrator should review and modify the NSG associated with the compute instance's VNIC to remove the stateful ingress rule allowing SSH traffic.

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

1Z0-1072 practice, question 1 of 25