1Z0 1072 Exam Dumps – OCI Architect Associate

Are you aiming to validate your expertise in designing and deploying scalable, secure solutions on Oracle Cloud Infrastructure (OCI)? The 1Z0 1072 Exam Dumps give an idea of the types of questions asked in the exam.

Why Pursue the 1Z0-1072-25 Certification?

The 1Z0 1072 Exam, officially known as the Oracle Cloud Infrastructure Architect Associate Certification, is a pivotal step for IT professionals aiming to validate their expertise in OCI.

Achieving the OCI Architect Associate certification demonstrates a comprehensive understanding of OCI services and architectural best practices. It not only enhances your professional credibility but also opens doors to advanced roles in cloud architecture and infrastructure management.

Exam Overview

• Exam Code: 1Z0-1072-25
• Title: Oracle Cloud Infrastructure 2025 Architect Associate
• Format: Multiple Choice
• Duration: 90 minutes
• Number of Questions: 50
• Passing Score: 68%
• Cost: Approximately $245 USD
• Delivery: Administered via Pearson VUE

Core Exam Topics

The exam assesses proficiency in the following areas:

• Identity and Access Management (20%): IAM domains, policies, dynamic groups, and access controls.
• Compute (20%): Instance configuration, autoscaling, and OS management.
• Networking (35%): VCN setup, routing, security lists, and connectivity solutions.
• Storage (25%): Block volumes, object storage, file systems, and data replication.

1Z0 1072 Exam Dumps – OCI Architect Associate Exam Questions

Q1. A company currently uses Microsoft Active Directory as its identity provider. The company recently purchased Oracle Cloud Infrastructure (OCI) to leverage the cloud platform for its test and development operations. As the administrator, you are now tasked with giving access only to developers so that they can start creating resources in their OCI accounts. Which step will you perform to achieve this requirement?

1. Create a group for developers on and map the group to a similar group in Microsoft Active Directory during the federation process✔️
2. Federate all Microsoft Active Directory groups with OCI to allow users to use their existing credentials
3. Create a new user account for each user. and then create policies to provide access to developers
4. Create a group for developers on OCI, export all the developers from Microsoft Active Directory, and then import them into the Identity and Access Management (IAM) group

Q2. You have five different company locations spread across the US. For a proof-of-concept (POC), you need to set up secure and encrypted connectivity to your workloads running in a single virtual cloud network (VCN) in the Oracle Cloud Infrastructure Ashburn region from all company locations. What would meet this requirement?

1. Create five internet gateways in your VCN and have a separate route table for each internet gateway.
2. Create five virtual circuits using FastConnect for each company location and terminate those connections on a single dynamic routing gateway (DRG). Attach that DRG to your VCN
3. Create five IPsec connections with each company location and terminate those connections on a single DRG. Attach that DRG to your VCN.✔️
4. Create five IPsec VPN connections with each company location and terminate those connections on five separate DRGs. Attach those DRGs to your VCN

Q3. You need to create a high-performance shared file system, and have been advised to use a file storage service (FSS). You have logged into the Oracle Cloud Infrastructure console, created a file system, and followed the steps to mount the shared file system on your Linux instance. However, you are still unable to access the shared file system from your Linux instance.

1. There are no security list rules for mount target traffic✔️
2. There is no internet gateway set up for the mount target traffic
3. There is no Identity and Access Management (IAM) policy set up to allow you to access the mount target
4. There is no route in your virtual cloud network’s (VCN) route table for mount target traffic

Q4. You deployed a compute instance (VM.Standard2.16) to run a SQL database. After a few weeks, you need to increase disk performance by using NVMe disks; the number of CPUs will not change. As a first step you terminate the instance and preserve the boot volume. What is the next step?

1. Create a new instance using a VM,Dense102.16 shape using the preserved boot volume and move the SQL Database data to block volume
2. Create a new instance using a VM.Dense102.8 shape using the preserved boot volume and move the SQL Database data to NVMe disks
3. Create a new instance using a VM.Standard1.16 shape using the preserved boot volume and move the SQL Database data to NVMe disks
4. Create a new instance using a VM.Dense102.16 shape using the preserved boot volume, move the SQL Database data to NVMe disks✔️

Q5. You have an application deployed in Oracle Cloud Infrastructure running only in the Phoenix region. You were asked to create a disaster recovery (DR) plan that will protect against the loss of critical data. The DR site must be at least 500 miles from your primary site and data transfer between the two sites must not traverse the public Internet. Which is the recommended disaster recovery plan?

1. Create a new virtual cloud network (VCN) in the Phoenix region and create a subnet in one availability domain (AD) that is not currently being used by your production systems. Establish VCN peering between the production and DR sites.
2. Create a DR environment in Ashburn. Associate a DRG with the VCN in each region and create a remote peering connection between the two VCNs.✔️
3. Create a DR environment in Ashburn and provision a FastConnect virtual circuit using DRG between the regions.
4. Create a DR environment in Ashburn. Associate a dynamic routing gateway (DRG) with the VCN in each region and configure an IPsec VPN connection between tt•æ two regions.

Q6. You are designing a lab exercise for your team that has a large number of graphics with large file sizes. The application becomes unresponsive if the graphics are embedded in the application. You have uploaded the graphics to Oracle Cloud Infrastructure and only added the URL in the application. You need to ensure these graphics are accessible without requiring any authentication for an extended period of time.

1. Create pre-authenticated requests (PAR) and specify the expiration time.
2. Make the object storage bucket private and all objects public, and use the URL found in the Object “Details”
3. Make the object storage bucket public and use the URL found in the Object “Details”✔️
4. Create PARs and do not specify an expiration date

Q7. Which two statements are true about restoring a block volume from a manual or policy-based block volume backup?

1. It can be restored as new volumes with different sizes from the backups✔️
2. It can be restored as a new volume to any AD across different regions
3. It must be restored as a new volume to the same availability domain (AD) on which the original block volume backup resides
4. It can be restored as a new volume to any AD in the same region✔️

Q8. What is the maximum CIDR range that can be assigned when configuring a virtual cloud network?

1. /24
2. /16✔️
3. /26
4. /8

Q9. When terminating a compute instance, which statement is true?

1. The instance needs to be stopped first, and then terminated
2. The boot volume is always deleted
3. All block volumes attached to the instance are terminated
4. Users can preserve the boot volume associated with the instance✔️

Q10. Your organization has deployed a large, complex application across multiple compute instances in Oracle Cloud Infrastructure (OCI). These compute instances also have block volume storage attached to them. You want to create a time-consistent backup of this block volume storage. Which implementation strategy should be used?

1. Create a manual backup of each volume
2. Use scripts available in OCI to back up block volume storage
3. Group volumes in a volume group first, and then use the available scripts in OCI
4. Group volumes in a volume group and create a manual backup of the volume group✔️

Q11. Where do you find the tnsnames.ora for your Autonomous Data Warehouse (ADW) database?

1. You can download tnsnames.ora from the Oracle Cloud Infrastructure web console under the ADW details page
2. The tnsnames.ora file is included in the credentials-zip file that you download from the service console of ADW✔️
3. The ADW database will place the tnsnames.ora file in an object storage bucket
4. You are automatically prompted to download the tnsnames.ora file upon creation of the ADW database

Q12. Your application front end consists of several Oracle Cloud Infrastructure compute instances behind a load balancer. You have configured the load balancer to perform health checks on these instances. If an instance fails to pass the configured health checks, what will happen?

1. The instance is replaced automatically by the load balancer
2. The instance is terminated automatically by the load balancer
3. The instance is taken out of the back-end set by the load balancer
4. The load balancer stops sending traffic to that instance✔️

Q13. You are managing a tier-1 OLTP application on an Autonomous Transaction Processing (ATP) database. Your business needs to run hourly batch processes on this ATP database that may consume more CPUs than what is available on the server. How can you limit these batch processes not to interfere with the OLTP transactions?

1. Copy OLTP data into new tables in a new table space and run batch processes against these new tables
2. ATP is designed for OLTP workload only, you should not run batch processes on ATP
3. Disable automated backup during the batch process operations
4. Configure ATP resource management rules to manage runtime and IO consumption for the consumer group of batch processes✔️

Q14. Which two choices are true for Autonomous Data Warehouse (ADW)?

1. Billing stops only when the ADW is terminated
2. Billing stops for both CPU usage and storage usage when ADW is stopped
3. Billing for compute stops when ADW is stopped✔️
4. Billing for storage continues when ADW is stopped✔️

Q15. Which two statements are true about an Oracle Cloud Infrastructure (OCI) virtual cloud network (VCN)?

1. VCN creates the dynamic routing gateway by default
2. VCN can reside In multiple OCI regions and availability domains
3. VCN covers a single, contiguous IPv4 CIDR block of your choice✔️
4. The allowable VCN size range is:/16 to /30✔️

Q16. Which two options are available when setting up DNS for your bare metal and virtual machine DB Systems?

1. Internet and custom resolver
2. Google DNS servers
3. custom resolver✔️
4. Internet and virtual cloud network (VCN) resolver✔️

Q17. Which two options are true for Autonomous Transaction Processing (ATP) database?

1. You can add/remove Diskgroup in ATP
2. You can scale storage up or down in ATP✔️
3. You can scale CPU up or down in ATP✔️
4. You can add more Pluggable Databases for consolidating multiple databases in ATP
5. You can add new ORACLE_HOME for bringing older versions of on-premises databases to ATP

Q18. You have created a public subnet in a VCN, and your public subnet has a Route Table, a Security List, and an Internet Gateway. However, none of the compute instances can connect to the Internet. Which two are possible reasons for the connectivity issue?

1. There is no Dynamic Routing Gateway (DRG) associated with the VCN.
2. The Route Table has no default route for routing traffic to the Internet Gateway✔️
3. There is no stateful ingress rule in the Security List associated with the public subnet
4. There is no stateful egress rule in the Security List associated with the public subnet✔️

Q19. You have an application running on Oracle Cloud Infrastructure. You identified that the read and write operations are slowing your application down enough to impair user access. The application is currently using a VM.Standard1.2 compute without any block storage attached to it. Which two options allow you to increase disk IOPS performance?

1. Terminate the compute instance preserving the boot volume. Create a new compute instance using a VM Dense 10 shape using the boot volume preserved✔️
2. Terminate the compute instance preserving the boot volume. Create a new compute instance using a VM Standard shape and attach a new block volume to host your application.✔️
3. Create a backup of the boot volume. Create a new compute instance using a VM Dense IO shape and restore the backup
4. Terminate the compute instance and create a backup of the boot volume. Create a new compute instance using a VM Dense 10 shape and restore the backup

Q20. You have been tasked with creating one virtual cloud network (VCN) each for two line of business (LOB) applications. LOB A and LOB B will need to communicate with each other. To ensure that you can utilize VCN peering, which network CIDR ranges should be used?

1. VCN A (10.0.0.0/16) and VCN B (10.1.0.0/16)✔️
2. VCN A (10.0.2.0/16) and VCN B (10.0.2.0/25)
3. VCN A (10.0.0.0/16) and VCN B (10.0.16.0/24)
4. VCN A (172.16.0.0/24) and VCN B (172.16.0.0/28)

Q21. Which statement is true regarding Autonomous Transaction Processing (ATP)?

1. A database name cannot be used concurrently for both an Autonomous Data Warehouse (ADW) and an ATP database✔️
2. After terminating a database, the database name is available for immediate reuse
3. A maximum of 8 cores can be enabled for an ATP database
4. A maximum of 2 TB of storage can be enabled for an ATP database

Q22. You have been notified of an application failure indicating that one or more of the Oracle Cloud Infrastructure (0C1) resources have become unavailable. After scanning the Compute and Database consoles, you notice that one of the DD Systems is missing. What would you do to identify the reason for this missing resource?

1. Navigate to the Audit console and search the previous 24 hours for all Delete actions to get a list of any resource that was deleted in the past 24 hours✔️
2. Create a serial console connection to the DB System that does not appear in the management console. Connect to the serial console connection, and then review the system logs under /var/log/messages
3. View the service limits associated with your account to ensure that you have not exceeded the allowable number of DB Systems in your tenancy
4. Navigate to the Audit console and search the previous 24 hours for all List actions to get a list of every event that occurred in the past 24 hours.

Q23. You are a network architect and have designed the network infrastructure of a three-tier application on Oracle Cloud Infrastructure (OCI). In the architecture, back-end DB servers are in a private subnet. One of your DB administrators Requests to have access to OCI object storage service. How can you meet this requirement?

1. Create a service gateway, add a new route rule to the private subnet route table that uses storage as your service gateway target type✔️
2. Create a dynamic routing gateway (DRG) and attach it your virtual cloud network (VCN). Add a default route rule to the private subnets route table and set the target as DRG
3. Attach a public IP address to the instances in the private subnet, and then add a new route rule to the private subnet route table to route default traffic to the internet gateway
4. Add a new route rule to the private subnet route table to route default traffic to the internet gateway

Q24. You are an administrator with an application running on OCI. The company has a fleet of OCI compute virtual instances behind an OCI Load Balancer. The OCI Load Balancer Backend Set health check API is providing a ‘Critical’ level warning. You have confirmed that your application is running healthy on the backend servers. What is the possible reason for this ‘Critical’ warning?

1. A user does not have correct IAM credentials on the Backend Servers
2. The Backend Server VCN’s Route Table does not include the route for OCI LB
3. OCI Load Balancer Listener is not configured correctly
4. The Backend Server VCN’s Security List does not include the IP range for the source of the health check requests✔️

Q25. You are deploying a highly available web application in Oracle Cloud Infrastructure and have decided to use a public load balancer. The back-end web servers will be distributed across all three availability domains (ADS). How many subnets should you create to deliver a secure, highly available application?

1. two subnets in total; one regional private subnet to host your back-end web servers and one regional public subnet to host your public load balancer✔️
2. three subnets in total; one regional public subnet to host your back-end web servers and two AD-specific private subnets to host your private load balancer
3. one subnet In total, one regional private subnet to host your back-end web servers and your public load balancer.
4. two subnets in total; one regional public subnet to host your back-end web servers and one regional private subnet to host your public load balancer

Q29. What is true about Data Guard set up with fast-start failover (FSFO) in Oracle Cloud Infrastructure (OCI)?

1. The best practice for high availability and durability is to run the primary, standby, and observer in separate availability domains (ADs).✔️
2. When you configure data guard using OCI console, the default mode is set to maxprotection.
3. You cannot create the standby DB system in a different AD from the primary DB system.
4. You cannot use the database command line interface (CLI) to set up Data Guard with FSFO.

Q30. Which three load-balancing policies can be used with a backend set?

1. throughput
2. IP hash✔️
3. weighted round robin✔️
4. CPU utilization
5. least connections✔️

Q31. Which two statements are true about DB Systems in Oracle Cloud Infrastructure?

1. Customers can consolidate multiple database homes on a single virtual machine database host
2. Customers have no control over database patching
3. Customers can manage the TDE Wallet after DB Systems are provisioned✔️
4. The database and backups are encrypted by default✔️

Q32. Your company has been running several small applications in Oracle Cloud Infrastructure and is planning a proof of concept (POC) to deploy PeopleSoft. If your existing resources are being maintained In the root compartment, what is the recommended approach for defining security for the upcoming POC ?

1. Create a new tenancy tor the PC)C. Provision all new resources Into the root compartment. Grant appropriate permissions to create and manage resources within the root compartment
2. Provision all new resources Into the root compartment. Grant permissions that only allow for creation and management of resources specific to the POC-
3. Create a new compartment for the POC and grant appropriate permissions to create and manage resources within the compartment.✔️
4. Provision all new resources into the root compartment. Use defined tags to separate resources that belong to different applications.

Q33. You are about to upload a large log file (5 TiB size) to Oracle Cloud Infrastructure object storage and have decided to use multipart upload capability for a more efficient and resilient upload. Which two statements are true about multipart upload?

1. Individual object parts can be as small as 10 MiB or as large as 50 GiB✔️
2. While a multipart upload is still active, you cannot add parts even if the total number of parts is less than 10,000
3. The maximum size for an uploaded object is 10 TiB✔️
4. You do not have to commit the upload after you have uploaded all the object parts

Q34. In what two ways does Oracle Cloud Infrastructure (OCI) file storage service differ from OCI object storage and block volume services?

1. File storage mount target does not provide a private IP address, while the object storage bucket provides one
2. File Storage uses the network file system (NFS) protocol, whereas block volume uses ISCSI✔️
3. Block volume service is NVMe based, while file storage service is not.
4. You can move object storage buckets, block volumes and file storage mount targets between compartments✔️

Q35. As the Cloud Architect for your company, you have been tasked with designing a high performance (HPC) cluster in Oracle Cloud Infrastructure (OCI). The following requirements have been defined.

• The cluster must be a minimum of three nodes, but may increase to six nodes when demand requires.
• The cluster must be resilient to any potential infrastructure failures.
• To minimize latency, all nodes must be deployed within the same availability domain (AD).
• Adding or replacing nodes within the cluster should take no more than 30 minutes.

Which two steps should be performed to satisfy these requirements in OCI?

1. Deploy the cluster in a single AD with a shared file system that leverages the file storage service (FSS). Deploy a standby cluster in another AD and configure it to use the same shared file system
2. Deploy the cluster in a single AD. Place each of the nodes in one of the three different fault domains in that AD.✔️
3. Create a backup of your HPC node compute instance boot volume. Launch new compute instances directly from the backup reduce provisioning time
4. Create a custom image of your HPC node compute instance. Launch new compute instances using this image to reduce provisioning time✔️
5. Deploy the cluster in a single AD. Place each of the nodes in a different virtual cloud network (VCN) subnet.

Q36. Which statement is true about Oracle Cloud Infrastructure (OCI) object storage support for serverside encryption?

1. You must manually enable server-side encryption for each object as you upload to OCI object storage
2. Objects are automatically encrypted as they are uploaded to object storage and decrypted upon retrieval✔️
3. You must manually decrypt the data when retrieving from OCI object storage
4. Only the object data is encrypted and the user-defined metadata that is associated with the object is not encrypted

Q37. You have created a virtual cloud network (VCN) with three private subnets. Two of the subnets contain application servers and the third subnet contains a DB System. The application requires a shared file system so you have provisioned one using the file storage service (FSS). You also created the corresponding mount target in one of the application subnets. The VCN security lists are properly configured so that both application servers and the DB System can access the file system. The security team determines that the DB System should have read-only access to the file system. What change would you make to satisfy this requirement?

1. Create an NFS export option that allows READ_ONLY access where the source is the CIDR range of the DB System subnet✔️
2. A Connect via SSH to one of the application servers where the file system has been mounted. Use the Unix command chmod to change permissions on the file system directory, allowing the database user read-only access
3. Modify the security list associated with the subnet where the mount target resides. Change the ingress rules corresponding to the DB System subnet to be stateless.
4. Create an instance principal for the DB System. Write an Identity and Access Management (IAM) policy that allows the instance principal read-only access to the file storage service

Q38. How can you provide users access to an existing compartment?

1. by granting users access to a compartment when the compartment is created
2. by adding users to a group and defining a policy to provide the group access to the compartment✔️
3. by adding users to a compartment; all users in the compartment will have access to the objects in the compartment.
4. by granting access directly to the user when the user is created

Q39. You are designing a networking infrastructure in multiple Oracle Cloud Infrastructure regions and require connectivity between workloads in each region. You have created a dynamic routing gateway (DRG) and a remote peering connection. However, your workloads are unable to communicate with each other. What are two reasons for this?

1. The security lists associated with subnets in each virtual cloud network (VCN) do not have the appropriate ingress rules✔️
2. Identity and Access Management (IAM) policies have not been defined to allow connectivity across the two VCNs in different regions
3. A local peering gateway needs to be created in each VCN with a default route rule added in the route table fomarding the traffic to the local peering gateway
4. An Internet gateway needs to be created in each VCN with a default route rule added in the route table fomarding the traffic to the Internet Gateway
5. The route table associated with subnets in each VCN do not have a route rule defined to fomard the traffic to their respective DRGs✔️

Q40. Which statement is true about Data Guard Implementation in DB systems?

1. Both DB systems must be in the same compartment, and they must be the same shape✔️
2. You cannot manage Oracle database Initialization parameters at a global level
3. You can define the backup window and set custom backup retention period for the automatic database backup schedule
4. You cannot manage the database as ays/sysdba

Q41. You must implement a backup solution for your Autonomous Data Warehouse (ADW) that will enable you to restore data as old as one year with a recovery point objective (RPO) of 10 days. Which database backup strategy would you select?

1. Take weekly manual backups to supplement the automated backups and preserve them for 12 months.
2. Use the automated backups✔️
3. Take monthly manual backups to supplement the automated backups and preserve them for 12 months
4. Take quarterly manual backups to supplement the automated backups and preserve them for 12 months

Q42. Which statements are true regarding cloning a volume?

1. You can change the block volume performance when creating a clone✔️
2. You can clone block volumes across regions
3. You can change the block volume size when creating a clone✔️
4. You can skip block volume encryption when creating a clone

Q43. You are designing a shared storage solution for your company in Oracle Cloud Infrastructure. The proposed storage solution should allow users to create a hierarchical structure (similar to the directory structure in Linux or Windows based systems). The solution should provide data encryption and a large amount of storage space. Which would be the best implementation strategy?

1. Use block storage. Create and attach a large block storage volume to one compute instance. Assign a public IP to the compute instance. Store data on the block storage and access it by connecting to the compute instance.
2. Use object storage. Create a single namespace and multiple buckets to create the hierarchical directory structure.
3. use object storage. Create multiple namespaces with one bucket each. Make the buckets publicly accessible.
4. use file storage service. Create a file system and a mount +rget. Share the private IP of the mount target.✔️

Q44. You are designing a shared storage solution for your company in Oracle Cloud Infrastructure. The proposed storage solution should allow users to create a hierarchical structure (similar to the directory structure in Linux or Windows based systems). The solution should provide data encryption and a large amount of storage space. Which would be the best implementation strategy?

1. Use block storage. Create and attach a large block storage volume to one compute instance. Assign a public IP to the compute instance. Store data on the block storage and access it by connecting to the compute instance.
2. Use object storage. Create a single namespace and multiple buckets to create the hierarchical directory structure.
3. use object storage. Create multiple namespaces with one bucket each. Make the buckets publicly accessible.
4. use file storage service. Create a file system and a mount +rget. Share the private IP of the mount target.✔️

Q45. You have successfully configured identity federation between Oracle Cloud Infrastructure (OCI) and Oracle Identity Cloud Services (IDCS). A new project manager wants access to OCI for her team and provides the name of an existing group within IDCS to use when granting access. How do you configure federation to allow the project team access to OCI resources?

1. Create a new IAM group in OCI and map it to the existing IDCS group. Create a new policy in IDCS and reference the name of the IAM group.
2. Create a new Identity and Access Management (IAM) policy in OCI and reference the name of the IDCS group in each policy statement.
3. Create a new compartment in OCI with the same name as the existing IDCS group. Create an IAM policy that references the new compartment and the name of the IDCS group
4. Create a new IAM group in OCI and map it to the existing IDCS group. Create a new IAM policy and reference the name of the IAM group in each policy statement✔️

Q46. Which two actions will occur when a back-end server that is registered with a backend set is marked to drain connections?

1. It disallows new connections to that backend server✔️
2. It keeps the connections to that instance open and attempts to complete any in-flight requests✔️
3. It redirects the requests to a user-defined error page.
4. It immediately closes all existing connections to that instance
5. It forcibly closes all connections to that instance after a timeout period

Q47. You have multiple applications installed on a compute Instance, and these applications generate a large amount of log files. These log files must reside on the boot volume for a minimum of 15 days. Any files over 15 days do not have to reside on the boot volume but still must be retained for at least 60 days. The 60-day retention requirement is causing an Issue with available disk space. What are the two recommended methods to provide additional boot volume space for this compute instance?

1. Terminate the instance while preserving the boot volume. Create a new instance from the boot volume and select a DenseIO shape to take advantage of local NVMe storage.
2. Create an object storage bucket and use a script that runs daily to move log files older than 15 days to the bucket✔️
3. Create and attach a block volume to the compute instance and copy the log files
4. Create a custom image and launch a new compute instance with a larger boot volume size✔️
5. Write a custom script to remove the log files on a daily basis and free up space on the boot volume

Q48. Which two resources reside exclusively in a single availability domain?

1. compute instance✔️
2. Object storage
3. groups
4. block volume✔️
5. Web Application Firewall Policy

Q49. Which two options are necessary for achieving high availability on Oracle Cloud Infrastructure?

1. Store your database across multiple regions so that half of the data resides in one region and the other half resides in another region
2. Attach your block volume form Availability Domain 1 to a compute instance in Availability Domain 2 (and vice versa) so that they are highly available.
3. Configure your database to have Data Guard in another Availability Domain in Sync mode within a region✔️
4. Store your database files on Object Storage so that they are available in all Availability Domains in all regions
5. Distribute your application servers across all Availability Domains within a region✔️

Q50. You are running a mission-critical database application in Oracle Cloud Infrastructure (OCI). You take regular backups of your DB system to OCI object storage. Recently, you noticed a failed database backup status in the console. What two steps can you take to determine the cause of the backup failure?

1. Ensure the database archiving mode is set to NOARCHIVELOG
2. Ensure that your database host can connect to the OCI object storage✔️
3. Restart the dcsagent program if it has a status of stop or waiting✔️
4. Make sure that the database is not active and running while the backup is in progress

Q51. Which two statements are true about encryption on Oracle Cloud Infrastructure (OCI)?

1. By default, object storage and block storage are ercrypted at rest✔️
2. A customer is responsible for data encryption in all services of
3. By default. DB Systems offers an encrypted database.✔️
4. By default NVMe drives are encrypted but the block volume service is not

Q52. Which two Oracle Cloud Infrastructure database services allow you to dynamically scale CPU and storage?

1. bare metal DB system
2. Virtual machine DB system
3. Autonomous Data Warehouse (ADW)✔️
4. Autonomous Transaction Processing (ATP)✔️

Q53. You are designing a two-tier web application in Oracle Cloud Infrastructure (OCI). Your clients want to access the web servers from anywhere, but want to prevent access to the database servers from the Internet. Which is the recommended way to design the network architecture?

1. Create public subnets for web servers and private subnets for database servers in your virtual cloud network (VCN), and associate separate internet gateways for each subnet
2. Create a public subnet for web servers and associate a dynamic routing gateway with that subnet. and a private subnet for database servers with no association to the dynamic routing gateway
3. Create public subnets for web servers and private subnets for database servers in your VCN, and associate separate security lists and route tables for each subnet✔️
4. Create a single public subnet for your web servers and database servers, and associate only your web servers with the internet gateway

Q54. You have hired a new employee to run reports from the Autonomous Data Warehouse (ADW) and are not confident in their SQL writing ability. Into which consumer group will you assign this Individual to minimize the impact of their code?

1. Low✔️
2. Lowest
3. Medium
4. High
5. Highest

Q55. Your on-premises hosted application uses Oracle database server. Your database administrator must have access to the database server for managing the application. Your database server is sized for seasonal peak workloads, which results in high licensing costs. You want to move your application to Oracle CloudInfrastructure (OCI) to take advantage of CPU scaling options. Which database offering on OCI would you select?

1. bare metal DB systems✔️
2. VM DB systems
3. Autonomous Transactions Processing (ATP)
4. Autonomous Data Warehouse (ADW)

Q56. Your company has decided to move a few applications to Oracle Cloud Infrastructure (OCI) and you have been asked to design a cloud-based disaster recovery (DR) solution. One of the requirements is to deploy the DR resources at least 300 miles from the home OCI region and minimize the network latency. What will be the recommended deployment?

1. Deploy production and DR applications in the same VCN. Create production subnets in one AD, and DR subnets in another AD,
2. Deploy production and DR applications in two separate VCNs in different availability domains (ADS) within your home region, and then use a VCN remote peering connection for connectivity
3. Deploy production and DR applications in two separate VCNs, each in different regions. Connect them using a VCN remote peering connection✔️
4. Deploy production and DR applications in two separate virtual cloud networks (VCNs), each in different regions, and then use VCN local peering gateways for connectivity

Q57. Which two statements about file storage service (FSS) are accurate?

1. FSS leverages UNIX user group and permission checking for file access security✔️
2. Encryption of file system in FSS is optional
3. Identity and Access Management (IAM) controls which file systems are mountable by which instances
4. Security lists can be used as a virtual firewall to prevent an instance from mounting an FSS mount target within the same subr,et
5. Data in transit to an FSS mount target is encrypted✔️

Q58. Which two use Oracle dynamic routing gateway (DRG) for connectivity?

1. Remote virtual cloud network (VCN) peering across region✔️
2. Oracle IPsec VPN✔️
3. Local VCN peering
4. Oracle Cloud Infrastructure FastConnect public peering

Q59. You want an Oracle Cloud Infrastructure (OCI) compute instance in your compartment to make API calls to other services within OCI without storing credentials in a configuration file. What do you need to do?

1. Create a dynamic group with appropriate matching rules to include the instance, and reference this group in your IAM policy statement✔️
2. Instances cannot access services outside their compartment
3. VM instances are treated as users. Create a user, assign the user to that VM instance, and reference the instance in your Identity and Access Management (AM) policy statement
4. By default, all VM instances are created with an instance principal. Reference this instance principal in your IAM policy statement

Q60. Which statement is true about Oracle Cloud Infrastructure FastConnect?

1. For private peering, FastConnect extends your existing infrastructure to allow you to consume object storage from your on-premises data center
2. For private peering, FastConnect extends your existing infrastructure to a virtual cloud network✔️
3. For public peering, FastConnect extends your existing infrastructure to a virtual cloud network
4. For public peering, a dynamic routing gateway must be configured and attached to the virtual cloud network (VCN)

Q61. You have one database style application that frequently makes many random reads and writes across the dataset Which storage offering supports this application?

1. block volume service✔️
2. file storage service
3. object storage service
4. archive storage service

Q62. You have an Oracle Cloud Infrastructure (OCI) load balancer distributing traffic via an evenly-weighted round robin policy to your backend web servers. You notice that one of your web servers is receiving more traffic than other web servers.How can you resolve this imbalance?

1. Check security lists and route tables of your virtual cloud network (VCN) and fix any issues associated with the rules
2. Create separate listeners for each backend web server
3. Delete and re-create your OCI load balancer
4. Disable session persistence on your backend set✔️

Q63. Which service would you use if your big data workload required shared access and NFS-based connectivity?

1. block volume
2. archive storage
3. object storage
4. file storage✔️

Q64. A customer has launched a compute instance In the Virtual Cloud Network (VCN), which has an internet gateway, a service gateway, a default security lists and a default route table. Customer has opened up Port 22 In the security lists attached to the compute Instance subnet, however is still unable to connect to compute Instances using ssh. Which option would remedy this situation?

1. Modify the route table associated with the VCN subnet in which the instance Add a following route to the route table. Destination CIDB: 0,0.0.0/0 Target: Internet Gateway <“GM)✔️
2. Modify the route table associated with the VCN subnet in which the instance resides. Add a following route to the route table. Destination CIDP: 0.0.0.0/0 Target: Dynamic Routing Gateway (ORG)
3. Modify the security list associated with the VCN subnet In which the Instance resides. Add a stateful egress rule to allow ichp traffic in addition to the port 22
4. Modify the route table associated with the VCN subnet In which the Instance resides. Add a following route to the route table. Destination CIDR: 0.0.0.0/0 Target: Service Gateway (SGW)

Q65. You have provisioned an Autonomous Transaction Processing (ATP) database and logged into the ATP service console. What are three abilities that can be performed from this service console?

1. scale up/down the CPUs
2. create ATP database users
3. reset the admin password✔️
4. set resource management rules✔️
5. monitor database activity and SQL queries✔️

Q66. Which two statements are true about adding secondary VNICs to an existing compute instance?

1. The primary and secondary VNIC association must be in the same availability domain✔️
2. You can assign an Ephemeral Public IP to a secondary VNIC
3. You can remove the primary VNIC after the secondary VNlCs attachment is complete
4. The primary and secondary VNIC association can be in different virtual cloud networks (VCNs)✔️

Q67. You are designing a high bandwidth, redundant connection between your data center and Oracle Cloud Infrastructure (OCI). While researching for OCI FastConnect locations, you notice that you are co-located with Oracle at one of the Oracle FastConnect locations in the Ashburn region. What is the recommended design in this scenario?

1. Create a cross-connect group and have two or more cross-connects in that group. Create an IPsec VPN connection on this group.
2. Setup two IPsec connections between your data center and OCI Ashburn region. Create an OCI load balancer to distribute the traffic across the two connections
3. Create a cross-connect group and have at least two or more cross- connects in that group. Create at least two or more virtual circuits in the group.✔️
4. Create a cross-connect group and have at least one cross-connect in that group. Create at least one virtual circuit in the group

Q67. Which two statements about fault domains are true?

1. A fault domain is a grouping of hardware and infrastructure within an availability domain✔️
2. Each availability domain contains three fault domain✔️
3. A failed instance in a fault domain is automatically relaunched
4. A fault domain is selected automatically based on usage data

Q68. You have an application server that needs to copy data on Oracle Cloud Infrastrucutre (OCI) object storage in the same region. You have created a service gateway for OCI object storage in your virtual cloud network (VCN) and modified security lists associated with the subnet to allow traffic to the service gateway. You are able to connect to the OCI object storage, however, you notice that the connectivity is over the Internet instead of the service gateway. What is the reason for this behavior?

1. The route table associated with the subnet has no route rule where the destination is object storage service✔️
2. The service gateway created in the VCN resides in a different availability domain
3. The security list associated with the subnet has an egress rule that allows all traffic to be forwarded to a destination CIDR 0.0.0,0/0
4. Identity and Access Management (IAM) policies restrict the access to the object storage bucket

Q69. You have an Oracle Cloud Infrastructure (OCI) load balancer distributing traffic via an evenly-weighted round robin policy to your backend web servers. You notice that one of your web servers is receiving more traffic than other web servers. How can you resolve this imbalance?

1. Check security lists and route tables of your virtual cloud network (VCN) and fix any issues associated with the rules
2. Create separate listeners for each backend web server
3. Delete and re-create your OCI load balancer
4. Disable session persistence on your backend set✔️

Q70. As the Cloud Architect for your company, you have been tasked with designing a high performance (HPC) cluster in Oracle Cloud Infrastructure (OCI). The following requirements have been defined .

• The cluster must be a minimum of three nodes, but may increase to six nodes when demand requires.
• The cluster must be resilient to any potential infrastructure failures.
• To minimize latency, all nodes must be deployed within the same availability domain (AD).
• Adding or replacing nodes within the cluster should take no more than 30 minutes.

Which two steps should be performed to satisfy these requirements in OCI?

1. Deploy the cluster in a single AD with a shared file system that leverages the file storage service (FSS). Deploy a standby cluster in another AD and configure it to use the same shared file system
2. Deploy the cluster in a single AD. Place each of the nodes in one of the three different fault domains in that AD.✔️
3. Create a backup of your HPC node compute instance boot volume. Launch new compute instances directly from the backup reduce provisioning time
4. Create a custom image of your HPC node compute instance, Launch new compute instances using this image to reduce provisioning time✔️
5. Deploy the cluster in a single AD. Place each of the nodes in a different virtual cloud network (VCN) subnet.

Q71. Your application front end consists of several Oracle Cloud Infrastructure compute instances behind a load balancer. You have configured the load balancer to perform health checks on these instances. If an instance fails to pass the configured health checks, what will happen?

1. The instance is replaced automatically by the load balancer
2. The instance is terminated automatically by the load balancer
3. The instance is taken out of the back end set by the load balancer
4. The load balancer stops sending traffic to that instance✔️

Q72. The Oracle Cloud Infrastructure Block Volume service lets you expand the size of block and boot volumes. Which three options below can you use to increase the size of your block volumes?

1. Clone an existing volume to a new, larger volume✔️
2. You can only expand block volumes and not boot volumes
3. Expand an existing volume in place with offline resizing✔️
4. Take a backup of your existing volume and restore from the volume backup to a larger volume✔️
5. Expand an existing volume in place with online resizing

Q73. Which two statements are true regarding cloning a block volume?

1. You can change the block volume performance when creating a clone✔️
2. You can clone block volumes across regions
3. You can change the block volume size when creating a clone✔️
4. You can skip block volume encryption when creating a clone

Q74. You have deployed a compute instance (VM.Standard2.24) to run an Oracle database. With this set up, you run into some performance issues and want to leverage an OCI Dense IO shape (VM.DenseIO2.24), with which you get 25.6 TB local NVMe SSD. You do not want to lose the configuration changes you made to the instance. Which of the following TWO steps ARE NOT required to make this transition?

1. Terminate the VM.Standard2.24 instance and do not preserve the boot volume✔️
2. Create a new instance using the VM.Dense102.24 shape using the preserved boot volume and move the Oracle Database data to NVMe disks
3. Terminate the VM.Standard2.24 instance and preserve the boot volume
4. Create a new instance using a VM.Dense102.24 shape using the preserved boot volume and move the Oracle Database data to block volumes✔️

Q75. You are running several Linux-based operating systems in your on premises environment that you want to import to OCI as custom images. You can launch your imported images as OCI compute Virtual machines. Which two modes below can be used to launch these imported Linux VMs?

1. Native
2. Mixed
3. Paravirtualized✔️
4. Emulated✔️

Q76. You have an application deployed in Oracle Cloud Infrastructure running in the US East region. You have been asked to create a disaster recovery plan that will protect against the loss of critical data. The DR site must be at least a few hundred miles from your primary site and data transfer between the two sites must not traverse the public Internet. Which is the lowest latency and lowest cost recommended disaster recovery plan?

1. Create a DR environment in the US West region and provision a FastConnect virtual circuit using Dynamic Routing Gateways between the regions
2. Create a DR environment in the US West region. Associate a Dynamic Routing Gateway (DRG) with the VCN in each region and configure an IPsec VPN connection between the two regions
3. Create a DR environment in the US West region. Associate a Dynamic Routing Gateway (DRG) with the VCN in each region and create a remote peering connection between the two VCNs✔️
4. Create a DR environment in the US West region. Associate a Local Peering Gateway with the VCN in each region and create a local peering connection between the two VCNs

Q77. Which two statements are true about Oracle Cloud Infrastructure IPSec VPN Connect?

1. Each OCI IPSec VPN consists of multiple redundant IPSec tunnels✔️
2. OCI IPSec VPN tunnel supports only static routes to route traffic
3. OCI IPSec VPN can be configured in tunnel mode only✔️
4. OCI IPSec VPN can be configured in trans port mode only

Q78. Which two Oracle Cloud Infrastructure services use a Dynamic Routing Gateway?

1. OCI FastConnect Public Peering
2. Local Peering
3. OCI FastConnect Private Peering✔️
4. Internet Gateway
5. OCI IPSec VPN Connect✔️

Q80. You have the following compartment structure in your tenancy. Root compartment->Training->Training-subl ->Training-sub2. You create a policy in the root compartment to allow the default admin for the account (Administrators) to manage block volumes in the compartment Training-sub2. What policy would you write to meet this requirement?

1. Allow group Administrators to manage volume-family in root compartment
2. Allow group Administrators to manage volume-family in compartment Training- subl :Training-sub2
3. Allow group Administrators to manage volume-family in compartment Training: Training-sub 1 :Training-sub2✔️
4. Allow group Administrators to manage volume-family in compartment Training- sub2

Q81. You have created a new compartment called Production to host some production apps. You have also created users in your tenancy and added them to a Group called “production group”. Your users are still unable to access the Production compartment. How can you resolve this situation?

1. Every compartment you create comes with a predefined set of policies, so no further action is needed
2. Your users get automatic access to all compartments, so no further action is needed
3. Write an IAM Policy for each specific user granting them access to the production compartment
4. Write an IAM Policy for “production_group” granting it access to the production compartment✔️

Q82. You have two line of business operations (LOB1, LOB2) leveraging Oracle Cloud Infrastructure. LOB1 is deployed in VCN1 in the OCI US East region, while LOB2 is deployed in VCN2 in the US West region. You need to peer VCN1 and VCN2 for disaster recovery and data backup purposes. To ensure you can utilize the OCI Virtual Cloud Network remote peering feature, which CIDR ranges should be used?

1. VCN1 (10.0.0.0/16) and VCN2 (10.0.1.0/24)
2. VCN1 (10.0.0.0/16) and VCN2 (172.16.0.0/16)✔️
3. VCN1 (172.16.1.0/24) and VCN2 (172.16.1.0/27)
4. VCN1 (192.168.0.0/16) and VCN2 (192.168.1.0/27)

Q83. You deployed a web server in Oracle Cloud Infrastructure using an Ephemeral Public IP address. While making configuration changes, an admin inadvertently deleted your web seNer. You redeploy your web server, but many of your LOB apps depend on this web server’s public IP address and would need an update. What can you do to prevent this from happening again?

1. Create a reserved public IP and associate it with the security list for the subnet being used by your compute instance
2. Create a reserved public I P and associate it with the hosts file of your web server
3. Create a reserved public IP and associate it with the subnet of your compute instance
4. Create a reserved public IP and associate it with the virtual NIC of your compute instance✔️

Q84. You have launched a compute instance running Oracle database in a private subnet in the Oracle Cloud Infrastructure US East region. You have also created a Service Gateway to back up the data files to OCI Object Storage in the same region. You have modified the security list associated with the private subnet to allow traffic to the Service Gateway, but your instance still cannot access OCI Object Storage. How can you resolve this issue?

1. Add a stateful rule that enables ingress HTTPS (TOP port 443) traffic to 001 Object Storage in the security list associated with the private subnet
2. Add a stateful rule that enables egress HTTPS (TCP port 443) traffic to OCI Object Storage in the security list associated with the private subnet
3. Add a rule in the Route Table associated with the private subnet with Target type as “Service Gateway” and destination service as all IAD services in the Oracle Service Network’✔️
4. Use the default Security List, which has ports open for OCI Object Storage

Q85. You are a network architect of an application running on Oracle Cloud Infrastructure (OCI). Your security team has informed you about a security patch that needs to be applied immediately to one of the backend web servers. What should you do to ensure that the OCI load balancer does not forward traffic to this backend server during maintenance?

1. Drain all existing connections to this backend server and mark the backend web server offline✔️
2. Create another OCI load balancer for the backend web servers, which are active and handling traffic
3. Edit the security list associated with the subnet to avoid traffic connectivity to this backend serve
4. Stop the load balancer for maintenance and restart the load balancer after the maintenance is finished

Q86. Your application consists of three Oracle Cloud Infrastructure compute instances running behind a public load balancer. You have configured the load balancer to perform health checks on these instances, but one of the three instances fails to pass the configured health check. Which of the following action will the load balancer perform?

1. Stop sending traffic to the instance that failed health check✔️
2. Terminate the instance that failed health check
3. Stop the instances that failed health check
4. Remove the instance that failed the health check from the backend set

Q87. Which three items must be configured for a load balancer to accept incoming traffic?

1. A route table entry pointing to the listener IP address
2. A security list that is open on the listener port✔️
3. A backend set with at least one backend server✔️
4. SSL certificate
5. A listener✔️

Q88. Your IT department wants to cut down storage costs, but also meet compliance requirements as set up by the central audit group. You have a legacy bucket with both Word does (.docx) and Excel files (.xlsx). Your auditors want to retain only Excel files for compliance purposes. Your IT departments wants to keep all other files for 365 days only. What two steps can you take to meet this requirement?

1. Create Object Storage Lifecycle rules to archive objects from the legacy bucket after 365 days without any pattern matching
2. Create Object Storage lifecycle rules to delete objects from the legacy bucket after 365 days With a filter type – include by pattern: “.docx✔️
3. It is not possible to meet this requirement
4. Create Object Storage Lifecycle rules to delete objects from the legacy bucket after 365 days with a filter type • exclude by pattern: “xlsx”✔️
5. Create Object Storage Lifecycle rules to delete objects from the legacy bucket after 365 days without any pattern matching

Q89. You have a working application in the US East region. The app is a 3-tier app with a database backend – you take regular backups of the database into OCI Object Storage in the US East region. For Business continuity; you are leveraging OCI Object Storage cross-region copy feature to copy database backups to the US West region. Which of the following three steps do you need to execute to meet your requirement?

1. Write an IAM policy and authorize the Object Storage service to manage objects on your behalf✔️
2. Specify an existing destination bucket✔️
3. Specify the bucket visibility for both the source and destination buckets
4. Provide a destination object name
5. Provide an option to choose bulk copying of objects
6. Choose an overwrite rule✔️

Q90. Which of the following statement is true regarding Oracle Cloud Infrastructure Object Storage PreAuthenticated Requests?

1. It Is not possible to create pre-authenticated requests for “archive” storage tier
2. Changing the bucket visibility does not change existing pre- authenticated requests✔️
3. It is not possible to create pre-authenticated requests for the buckets, but only for the objects
4. Pre-authenticated requests don’t have an expiration

Q91. You have two NFS clients running in two different subnets within the same Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN). You have created a shared file system for the two NFS clients who want to connect to the same file system, but you want to restrict one of the clients to have READ access while the other has READ/Write access. Which OCr feature would you leverage to meet this requirement?

1. Use VCN security rules to control access for the NFS clients
2. Use OCI Identity Access Management to control access for the NFS clients
3. Use File Storage NFS Export Options to control access for the NFS clients✔️
4. Use NFS security to control access for the NES clients

Q92. Which statement is true about the Oracle Cloud Infrastructure File Storage Service Mount Target?

1. You can access multiple file systems through a single mount target✔️
2. Mount target has a public IP address and DNS name
3. Mount target lives in a single subnet of your choice, but is not highly available
4. Each mount target requires six internal IP addresses in the subnet to function

Q93. Which statement is true about the Oracle Cloud Infrastructure File Storage Service Snapshots?

1. Snapshots are created under the root folder of file system, in a hidden directory named .snapshot✔️
2. Snapshots are not incremental
3. You can restore the whole snapshot, but not the individual files
4. It Is not possible to create snapshots from OCI console, but just the CLI

Q94. Which two statements are true about Oracle Cloud Infrastructure (OCI) DB Systems Data Guard service?

1. Both DB systems must use the same VCN, and port 1521 must be open✔️
2. Data guard configuration on the OCI is limited to a virtual machine only
3. Data guard implementation for Bare Metal shapes requires two DB Systems, one containing the primary database and one containing the standby database.✔️
4. Data guard implementation requires two DB Systems, one running the primary database on a virtual machine and the standby database running on bare metal.

Q95. Which two characteristics do you need to consider when choosing a method to migrate a database to Oracle Cloud Infrastructure (OCI)?

1. On-premises connectivity using remote and local virtual cloud network (VCN) peering
2. On-premises database character set and application version
3. On-premises host operating system platform and network bandwidth✔️
4. On-premises database version and quantity of data, including indexes✔️

Q96. Which is a customer’s responsibility on an Oracle Cloud Infrastructure DB System?

1. Applying patches to the database and OS✔️
2. Installing the operating syste
3. Creating the first database on the DB System
4. Creating an ASM diskgroup for data file or temp file storage

Q97. Which two options are available within the service console of Autonomous Transaction Processing?

1. Monitor the health of the database server including CPU, memory and query performance✔️
2. Configure resource management rules and reset the admin password✔️
3. Perform a manual backup of the ATP database
4. Fine tune a long running query using optimizer hints

Q98. Which of the following two tasks can be performed in the Oracle Cloud Infrastructure Console for Autonomous Data Warehouse?

1. Adjust Network Bandwidth
2. Scale up/down Memory
3. Increase Storage allocated for Database✔️
4. Scale up/down CPU✔️

Q99. Which two statements are true about Autonomous Data Warehouse (ADW) backup?

1. You can perform manual backups to OCI object storage in addition to automated backups available on ADW✔️
2. You can backup the ADW database only to a standard bucket type in OCI object storage✔️
3. Oracle Cloud Infrastructure (OCI) recommends backing up ADW databases manually to on-premises storage devices
4. You must back up the ADW database to the object storage bucket named ADW_backup

Q100. You are tasked with creating a highly available clustered application on Oracle Cloud Infrastructure consisting of three nodes. The round-trip latency between nodes must be less than 500 μs (microseconds), and your cluster should be resilient to hardware failure. What is the recommended deployment strategy?

1. Deploy the cluster nodes in a single region and deploy each node into a different AD. Select the same fault domain in each AD to ensure consistency.
2. Deploy the cluster nodes in two separate regions and take advantage of multiple availability domains (ADS) in each region.
3. Deploy the cluster nodes in a Single region and deploy each node into a different AD.
4. Deploy the cluster nodes in a single region and deploy each node in different fault domains within a Single AD.✔️