Question 1

A financial firm is designing an application architecture for its online trading platform that should
have high availability and fault tolerance. What should the architect do to avoid any costly service
disruptions and ensure data durability?

Accepted Answer

B

Explanation: To achieve high availability, fault tolerance, and data durability for a critical financial application, the architect must plan for regional failures. OCI Object Storage replication provides an automated, asynchronous mechanism to copy objects to a bucket in another region. This ensures that a secondary, up-to-date copy of the data exists in a geographically separate location. In the event of a regional outage, the application can failover to the secondary region, minimizing service disruption and preventing data loss. This strategy directly addresses the core requirements of the online trading platform.

Question 2

What is the primary purpose of the Web Application Acceleration service offered by Oracle Cloud Infrastructure (OCI)?

Accepted Answer

D

Explanation: The Oracle Cloud Infrastructure (OCI) Web Application Acceleration (WAA) service is a feature integrated with OCI Load Balancing. Its primary function is to enhance the performance of web applications by reducing latency for end-users. It achieves this by employing various optimization techniques, most notably intelligent caching of static content and compression of responses. By serving cached content from the load balancer, it minimizes requests to the backend origin servers, thereby speeding up content delivery and improving the overall user experience.

Question 3

What would happen if you choose not to proactively reboot the instance before the scheduled maintenance due date?

Accepted Answer

C

Explanation: Oracle Cloud Infrastructure (OCI) notifies customers of scheduled maintenance that requires an instance reboot. Customers are given a time window to proactively reboot the instance at their convenience. If the customer takes no action by the maintenance due to date, OCI will automatically perform the necessary maintenance. This action involves either a reboot migration, where the instance is stopped, moved to a healthy physical host, and restarted, or a rebuild in place, where the instance is stopped, maintained on the same hardware, and restarted. In both scenarios, the instance is rebooted by Oracle to complete the maintenance.

Question 4

With OCI's pricing of $0.0085 USD per Gigabyte for Outbound Data Transfer in North America, how much will they spend per month for 7 Petabytes of Outbound Data Transfer?

Accepted Answer

A

Explanation: Oracle’s price list states that outbound data transfer from North America is billed at US $0.0085 per GB. 1 petabyte (PB) = 1,000 terabytes = 1,000,000 gigabytes (decimal units are explicitly used in OCI pricing documents). 7 PB = 7 × 1,000,000 GB = 7,000,000 GB. Cost = 7,000,000 GB × $0.0085 / GB = $59,500. Therefore, the monthly spend is $59,500.

Question 5

Which TWO statements are TRUE about Private IP addresses in Oracle Cloud Infrastructure (OCI)?

Accepted Answer

C, D

Explanation: When an Oracle Cloud Infrastructure (OCI) compute instance is launched, its primary Virtual Network Interface Card (VNIC) is automatically created and assigned a single primary private IP address from the chosen subnet's CIDR block. This is the default and fundamental behavior. Furthermore, for a private IP to be accessible from the internet, it can be mapped to a public IP address. This assignment is optional and is only possible if the VNIC resides in a public subnet, which is a subnet configured with a route table that has a route to an internet gateway.

Question 6

Which statement accurately describes the key features and benefits of OCI Confidential Computing?

Accepted Answer

C

Explanation: OCI Confidential Computing is a security feature designed to protect data while it is actively being processed in memory (data-in-use). It achieves this by creating a hardware-based, highly isolated Trusted Execution Environment (TEE). This environment encrypts the memory used by the virtual machine and isolates the code and data from the hypervisor, firmware, and cloud operator, ensuring that even the cloud provider cannot access the sensitive information being processed. This is the core value proposition of the service.

Question 7

Which Oracle Cloud Infrastructure (OCI) Identity and Access Management (IAM) policy is invalid?

Accepted Answer

C

Explanation: The Oracle Cloud Infrastructure (OCI) IAM policy Allow any-user to inspect users in tenancy is invalid. The special principal any-user is exclusively designated for granting unauthenticated access to public Object Storage buckets. The IAM service explicitly prohibits using any-user to grant permissions on any other type of OCI resource, especially sensitive resources like IAM users, groups, or policies. This restriction is a fundamental security measure to prevent unauthorized access to tenancy information. Therefore, this policy statement is semantically and functionally invalid.

Question 8

Why is the Network Visualizer tool valuable for managing virtual network infrastructure on OCI?

Accepted Answer

A

Explanation: The OCI Network Visualizer is a tool designed to provide a graphical representation of the virtual network topology. Its primary value lies in its ability to display all Virtual Cloud Networks (VCNs) and their components within a selected region and tenancy. This visualization helps administrators understand the relationships and routing paths between different network entities, such as VCNs, subnets, gateways, and security lists. This comprehensive view is essential for managing, auditing, and troubleshooting complex cloud network architectures.

Question 9

Which statement is TRUE about delegating an existing domain to the Oracle Cloud Infrastructure (OCI) DNS service?

Accepted Answer

B

Explanation: Delegating an existing domain to Oracle Cloud Infrastructure (OCI) DNS is a standard process that involves updating the domain's authoritative nameservers. After creating a DNS zone for the domain within the OCI console, OCI provides a set of nameservers. The domain owner must then log into their domain registrar's self-service portal (the company where the domain was purchased) and replace the existing nameserver (NS) records with the ones provided by OCI. This action effectively delegates the responsibility for resolving DNS queries for that domain to the OCI DNS service.

Question 10

How will moving a database instance to a different compartment impact user access?

Accepted Answer

B

Explanation: When a resource, such as a database instance, is moved from one compartment to another in Oracle Cloud Infrastructure (OCI), it becomes subject to the Identity and Access Management (IAM) policies of the new compartment. The policies that governed the resource in its original compartment no longer apply. Consequently, any user access that was granted through policies attached to the original compartment is effectively revoked. Access must be re-established through policies attached to the new compartment or a parent compartment in its hierarchy.

Question 11

How can an organization securely grant a third-party application access to specific OCI resources?

Accepted Answer

C

Explanation: The recommended, credential-free way for an application that will run on an OCI Compute instance to call OCI services is to enable Instance Principals. 1. The instance is placed in a Dynamic Group that represents the application. 2. IAM policies are written for that Dynamic Group granting only the required permissions. 3. At run time the SDK/CLI obtains a temporary security token from the Instance Metadata Service and signs API requests. Because no long-lived user credentials are stored or shared and access is limited by policy, this method meets the requirement to “securely grant … access to specific OCI resources.”

Question 12

Which components are required for establishing remote peering between two Virtual Cloud Networks (VCNs) in Oracle Cloud Infrastructure (OCI)?

Accepted Answer

D

Explanation: Remote VCN peering connects two Virtual Cloud Networks (VCNs) in different Oracle Cloud Infrastructure (OCI) regions. For this to be successful, several components are mandatory. First, there must be two VCNs, each in a different region, with IP address spaces (CIDR blocks) that do not overlap. Each VCN must have a Dynamic Routing Gateway (DRG) attached. On each DRG, a Remote Peering Connection (RPC) component must be created. Finally, a connection is established between the two RPCs, which enables private traffic flow between the VCNs across regions. This entire setup ensures secure, private communication without traversing the public internet.

Question 13

Which policy would you write to provide admin access to all three of your existing admin groups for a shared Test compartment?

Accepted Answer

C

Explanation: This policy correctly grants administrative permissions to users based on the tags applied to the groups they belong to. The subject any-user specifies that the policy applies to any user in the tenancy who initiates a request. The where clause then filters these requests, allowing only those from users who are members of a group with the defined free-form tag EmployeeGroup.Role = 'Admin'. This is a scalable method to manage access for multiple groups sharing a common role without listing each group individually in the policy.

Question 14

Which statement accurately describes ephemeral principals?

Accepted Answer

A

Explanation: Ephemeral principals refer to the temporary identity and credentials granted to OCI resources, such as compute instances, enabling them to securely access other OCI services. This is implemented through the "instance principals" feature. Instead of storing long-lived credentials on a resource, the resource is authorized as a principal and is issued short-lived, automatically rotated security tokens. This mechanism enhances security by eliminating the need to manage and protect static credentials on the instance itself.

Question 15

Which statement is TRUE about restoring a volume from a block volume backup in the Oracle Cloud Infrastructure (OCI) Block Volume service?

Accepted Answer

B

Explanation: When restoring a block volume from a backup in Oracle Cloud Infrastructure (OCI), you have the flexibility to create a new volume that is larger than the original source volume. During the restoration process in the OCI Console or via the API, you can specify a custom size for the new volume. This new size must be equal to or greater than the size of the volume from which the backup was taken. This feature is useful for scenarios where storage requirements have increased since the backup was created.

Free Oracle 1Z0-1072-25 Actual Exam Questions