1Z0-1072-25 Practice Questions

To achieve high availability, fault tolerance, and data durability for a critical financial application, the architect must plan for regional failures. OCI Object Storage replication provides an automated, asynchronous mechanism to copy objects to a bucket in another region. This ensures that a secondary, up-to-date copy of the data exists in a geographically separate location. In the event of a regional outage, the application can failover to the secondary region, minimizing service disruption and preventing data loss. This strategy directly addresses the core requirements of the online trading platform.

A. A "recycle policy" is not a standard OCI feature for data replication. Furthermore, moving data, rather than replicating it, would remove it from the primary region, decreasing availability.

C. A lifecycle policy is used for cost optimization by transitioning data to cheaper, slower storage tiers like Archive Storage. This would negatively impact the performance and availability of an active online platform.

D. Copying an Object Storage bucket to a block volume is not a standard or logical operation. They are fundamentally different storage types designed for different use cases (unstructured vs. structured data).

1. Oracle Cloud Infrastructure Documentation, Object Storage, Replication: "Replication provides you with a data-driven, asynchronous mechanism for copying objects to another bucket in the same region or in another region... Replication helps you meet your data redundancy and compliance requirements, and provides you with disaster recovery protection from a regional outage."

Source: Oracle Cloud Infrastructure Documentation, "Object Storage Replication," Section: Overview of Replication.

2. Oracle Cloud Infrastructure Documentation, Object Storage, Object Lifecycle Management: "Use object lifecycle management to create a set of rules for a bucket that automatically archives or deletes objects after a specified number of days... This feature helps you manage your storage costs."

Source: Oracle Cloud Infrastructure Documentation, "Object Lifecycle Management," Section: Overview of Object Lifecycle Management.

3. Oracle Cloud Infrastructure Documentation, Best practices for your cloud topology, Disaster Recovery: "A disaster is a sudden event that causes great damage or loss. A disaster can be natural or man-made. A regional disaster can be a major flood, an earthquake, a hurricane, a large-scale power outage, or a network outage... To protect your business from the effects of a regional disaster, you can deploy your applications in multiple regions."

Source: Oracle Cloud Infrastructure Documentation, "Disaster Recovery," Section: Regional Disaster.

The Oracle Cloud Infrastructure (OCI) Web Application Acceleration (WAA) service is a feature integrated with OCI Load Balancing. Its primary function is to enhance the performance of web applications by reducing latency for end-users. It achieves this by employing various optimization techniques, most notably intelligent caching of static content and compression of responses. By serving cached content from the load balancer, it minimizes requests to the backend origin servers, thereby speeding up content delivery and improving the overall user experience.

A. Monitoring and analyzing HTTP traffic patterns is a primary function of OCI Logging, Monitoring, and Web Application Firewall (WAF) services, not Web Application Acceleration.

B. Improving reliability is primarily addressed through load balancer health checks, backend set configurations, and high-availability architecture, not through performance acceleration features like WAA.

C. Encrypting HTTP traffic is managed through SSL/TLS termination on the load balancer, which is a security function separate from the performance-oriented purpose of WAA.

1. Oracle Cloud Infrastructure Documentation, "Overview of Web Application Acceleration." This document explicitly states, "Web Application Acceleration (WAA) is a feature of flexible load balancers and network load balancers that applies various acceleration techniques to improve the performance of web applications." It further details caching and compression as key methods.

2. Oracle Cloud Infrastructure Documentation, "Web Application Acceleration Policies." This section details the configuration of WAA, focusing on caching rules. It states, "A WAA policy tells the load balancer how to cache content from your origin servers," directly supporting the purpose of speeding up traffic through caching.

Oracle Cloud Infrastructure (OCI) notifies customers of scheduled maintenance that requires an instance reboot. Customers are given a time window to proactively reboot the instance at their convenience. If the customer takes no action by the maintenance due to date, OCI will automatically perform the necessary maintenance. This action involves either a reboot migration, where the instance is stopped, moved to a healthy physical host, and restarted, or a rebuild in place, where the instance is stopped, maintained on the same hardware, and restarted. In both scenarios, the instance is rebooted by Oracle to complete the maintenance.

A. Simply sending another notification does not complete the required physical hardware maintenance; the due date is a firm deadline for the action.

B. Termination is a destructive action that deletes the instance. OCI does not terminate instances for routine, planned infrastructure maintenance.

D. Similar to option A, another notification is not the final action. The maintenance will be performed automatically after the deadline passes.

1. Oracle Cloud Infrastructure Documentation. (2024). Infrastructure Maintenance. Section: "Reboot Migration". "If you don't proactively reboot the instance by the specified maintenance due date, Oracle will reboot migrate the instance for you."

2. Oracle Cloud Infrastructure Documentation. (2024). Infrastructure Maintenance. Section: "Rebuild in Place". "If you don't proactively reboot the instance by the specified maintenance due date, Oracle will rebuild the instance in place for you."

3. Oracle Cloud Infrastructure Documentation. (2024). Overview of Compute Instance Maintenance. "For maintenance events that require a reboot, such as reboot migration, Oracle Cloud Infrastructure schedules the maintenance and notifies you of the upcoming due date. If you do not proactively reboot the instance before the due date, Oracle Cloud Infrastructure reboots the instance for you."

Oracle’s price list states that outbound data transfer from North America is billed at US $0.0085 per GB.

1 petabyte (PB) = 1,000 terabytes = 1,000,000 gigabytes (decimal units are explicitly used in OCI pricing documents).

7 PB = 7 × 1,000,000 GB = 7,000,000 GB.

Cost = 7,000,000 GB × $0.0085 / GB = $59,500. Therefore, the monthly spend is $59,500.

B. $59,415.00 Uses binary (1 PB ≈ 1,048,576 GB); OCI pricing uses decimal GB, so result is off by $85.

C. $0.00 Only inbound data transfer is free; outbound is chargeable at the stated rate.

D. $150,000.00 Assumes a much higher per-GB rate (~$0.0214); exceeds OCI’s published price.

1. Oracle Cloud Infrastructure Price List, rev. 6.6 (Mar 2023), p. 4 “Data Transfer – Outbound (per GB) North America $0.0085”.

2. Oracle Cloud Networking Pricing Page, section “Outbound Data Transfer – North America”, Oracle.com (accessed 25 Nov 2025).

3. Oracle Cloud Infrastructure Documentation, “Understanding Metering and Pricing for Object Storage & Data Transfer”, §“Decimal (1000-based) units used for GB and TB measurements”, Oracle Docs Library.

When an Oracle Cloud Infrastructure (OCI) compute instance is launched, its primary Virtual Network Interface Card (VNIC) is automatically created and assigned a single primary private IP address from the chosen subnet's CIDR block. This is the default and fundamental behavior.

Furthermore, for a private IP to be accessible from the internet, it can be mapped to a public IP address. This assignment is optional and is only possible if the VNIC resides in a public subnet, which is a subnet configured with a route table that has a route to an internet gateway.

A. By default, only a primary private IP is assigned. Secondary private IPs must be explicitly added after the instance is created; they are not assigned by default.

B. A VNIC can have multiple private IP addresses. It always has one primary private IP and can be assigned multiple secondary private IPs, with the limit depending on the instance shape.

1. Oracle Cloud Infrastructure Documentation, "Overview of Private IP Addresses". This document states, "Every VNIC has a primary private IP address, and you can add secondary private IP addresses." This confirms that a VNIC can have more than one private IP (invalidating option B) and that secondary IPs are added, not assigned by default (invalidating option A).

2. Oracle Cloud Infrastructure Documentation, "Virtual Network Interface Cards (VNICs)", Section: "How VNICs Work". This section details, "When you launch an instance, a primary VNIC is created for the instance... The instance gets a primary private IP address from the CIDR block of that subnet." This directly supports the correctness of option C.

3. Oracle Cloud Infrastructure Documentation, "Public IP Addresses", Section: "Overview of Public IP Addresses". This source explains, "You can optionally assign a public IP address to an instance... The instance must be in a public subnet." This confirms that assigning a public IP to a private IP is an optional action contingent on being in a public subnet, supporting option D.

OCI Confidential Computing is a security feature designed to protect data while it is actively being processed in memory (data-in-use). It achieves this by creating a hardware-based, highly isolated Trusted Execution Environment (TEE). This environment encrypts the memory used by the virtual machine and isolates the code and data from the hypervisor, firmware, and cloud operator, ensuring that even the cloud provider cannot access the sensitive information being processed. This is the core value proposition of the service.

A. This describes networking services. OCI Confidential Computing is a security feature for compute instances and does not manage or optimize network routing.

B. This describes features of OCI Compute like Instance Pools and Autoscaling configurations, or the Load Balancing service, not Confidential Computing's primary function.

D. This describes storage services like OCI File Storage or Object Storage. These services protect data-at-rest, whereas Confidential Computing specifically protects data-in-use.

1. Oracle Cloud Infrastructure Documentation, "Confidential Computing."

Reference: In the overview section, the documentation states, "Oracle Cloud Infrastructure (OCI) Confidential Computing protects data-in-use. Confidential computing encrypts and isolates data while it's being processed." This directly supports the correct answer (C) by defining the service's primary function as encrypting and isolating in-use data.

2. Oracle Cloud Infrastructure Blog, "Announcing Oracle Cloud Infrastructure Confidential Computing."

Reference: The announcement blog post explains, "Confidential computing is the protection of data in use... OCI Confidential Computing is a flexible and easy-to-use solution that encrypts and isolates customer data and applications that are in use, protecting them from threats and untrusted parties." This reinforces that the key feature is the encryption and isolation of data during processing.

3. Oracle Cloud Infrastructure Documentation, "Overview of Compute."

Reference: This document describes various compute features. The sections on "Autoscaling" and "Instance Pools" detail the capabilities mentioned in option (B), confirming they are separate features from Confidential Computing. Similarly, documentation for "Networking" and "Storage" services covers options (A) and (D), distinguishing them from the security-focused Confidential Computing service.

The Oracle Cloud Infrastructure (OCI) IAM policy Allow any-user to inspect users in tenancy is invalid. The special principal any-user is exclusively designated for granting unauthenticated access to public Object Storage buckets. The IAM service explicitly prohibits using any-user to grant permissions on any other type of OCI resource, especially sensitive resources like IAM users, groups, or policies. This restriction is a fundamental security measure to prevent unauthorized access to tenancy information. Therefore, this policy statement is semantically and functionally invalid.

A. This is a valid policy. It uses a dynamic group, which allows an instance principal to manage other instances (via the instance-family resource type) within a specified compartment.

B. This is a common and valid administrative policy. It grants a specific group (A-Admins) full management permissions over all resources within a designated compartment (Project-A).

D. While the verb create is not a standard IAM aggregate verb (inspect, read, use, manage), making the policy syntactically questionable, the policy in option C is fundamentally invalid due to a core security rule violation.

1. Oracle Cloud Infrastructure Documentation - Policy Syntax: Under the "Subject" section, the documentation states: "any-user: A user from the internet without authentication. This user can only access public Object Storage buckets." This directly invalidates option C.

Source: Oracle Cloud Infrastructure Documentation, "Identity and Access Management," Section: "Policies," Subsection: "Policy Syntax."

2. Oracle Cloud Infrastructure Documentation - Common Policies: This document provides numerous examples of valid policies, including patterns similar to options A and B, which grant permissions to groups and dynamic groups to manage resources within a compartment. For instance, the policy "Let a group manage a compartment" follows the exact structure of option B.

Source: Oracle Cloud Infrastructure Documentation, "Identity and Access Management," Section: "Policies," Subsection: "Common Policies."

3. Oracle Cloud Infrastructure Documentation - Verbs: The documentation lists the four primary aggregate verbs: inspect, read, use, and manage. While it notes that some services have additional verbs, create is not a standard verb, which makes option D syntactically incorrect, but option C violates a more fundamental principal-resource binding rule.

Source: Oracle Cloud Infrastructure Documentation, "Identity and Access Management," Section: "Policies," Subsection: "Verbs."

The OCI Network Visualizer is a tool designed to provide a graphical representation of the virtual network topology. Its primary value lies in its ability to display all Virtual Cloud Networks (VCNs) and their components within a selected region and tenancy. This visualization helps administrators understand the relationships and routing paths between different network entities, such as VCNs, subnets, gateways, and security lists. This comprehensive view is essential for managing, auditing, and troubleshooting complex cloud network architectures.

B. Real-time traffic monitoring is a function of other OCI services like VCN Flow Logs and the Monitoring service, not the Network Visualizer.

C. The Network Visualizer operates at the virtual layer, showing VCNs and their components. It does not provide information about the underlying physical OCI hardware.

D. Automated performance reporting and metrics are capabilities of the OCI Monitoring and Logging Analytics services, not the Network Visualizer's primary function.

1. Oracle Cloud Infrastructure Documentation, "Network Visualizer."

Section: Overview of Network Visualizer

Content: "The Network Visualizer provides a diagram of the implemented topology of all VCNs in a selected region and tenancy. The tool can display two types of views: A regional network topology view [and] A virtual cloud network topology view... This tool can be used to understand your network design and for troubleshooting." This directly supports the function described in option A.

2. Oracle Cloud Infrastructure Blog, "Visualize your network topology with OCI Network Visualizer." (November 18, 2020)

Paragraph 2: "Network Visualizer provides a graphical view of your VCNs, subnets, routing, and security list configuration. This view helps you understand your network topology, troubleshoot configuration issues, and audit your network configuration." This confirms the tool's purpose is visualization of the virtual topology, not real-time monitoring or physical component details.

Delegating an existing domain to Oracle Cloud Infrastructure (OCI) DNS is a standard process that involves updating the domain's authoritative nameservers. After creating a DNS zone for the domain within the OCI console, OCI provides a set of nameservers. The domain owner must then log into their domain registrar's self-service portal (the company where the domain was purchased) and replace the existing nameserver (NS) records with the ones provided by OCI. This action effectively delegates the responsibility for resolving DNS queries for that domain to the OCI DNS service.

A. While Oracle acquired Dyn, "retrieving" a domain via DYN is not the correct terminology or procedure for delegation. Delegation is an explicit update of NS records at the registrar.

C. FastConnect is an OCI service for establishing a dedicated, private network connection between a data center and OCI. It is unrelated to the public DNS delegation process.

D. A domain cannot be "self-delegated" from the DNS service it is being delegated to. The authority for delegation resides with the domain's registrar and the parent zone's nameservers.

1. Oracle Cloud Infrastructure Documentation, DNS, Zones: In the section "To add a zone," the documentation explicitly states the final step: "After you have created a zone and added records, you must delegate your domain to Oracle Cloud Infrastructure's nameservers. You can do this by logging into your domain registrar's web portal and replacing the current nameservers with the Oracle Cloud Infrastructure nameservers that were provided to you when you created the zone." (OCI Documentation, DNS, Managing Zones, Section: To add a zone).

2. Oracle Cloud Infrastructure Documentation, DNS, Overview: "To use Oracle Cloud Infrastructure DNS for a domain, you must delegate that domain to Oracle Cloud Infrastructure DNS nameservers. Delegation is the process of referring DNS queries for a domain to the nameservers that are authoritative for that domain. You delegate a domain from the domain's registrar." (OCI Documentation, DNS, Overview, Section: Delegation).

When a resource, such as a database instance, is moved from one compartment to another in Oracle Cloud Infrastructure (OCI), it becomes subject to the Identity and Access Management (IAM) policies of the new compartment. The policies that governed the resource in its original compartment no longer apply. Consequently, any user access that was granted through policies attached to the original compartment is effectively revoked. Access must be re-established through policies attached to the new compartment or a parent compartment in its hierarchy.

A. IAM policies are not tied to compartments.

This is incorrect. IAM policies are fundamentally tied to compartments; they define permissions for resources within a specific compartment or the entire tenancy (root compartment).

C. Compartments prevent resource movement.

This is incorrect. OCI is designed to allow the movement of most resources between compartments, providing organizational flexibility.

D. Compartments are not covered by IAM policies.

This is incorrect. Compartments are the primary mechanism for organizing resources and are the scope to which most IAM policies are applied.

1. Oracle Cloud Infrastructure Documentation, Managing Compartments, "Moving a Resource from One Compartment to Another":

"When you move a resource to a new compartment, the policies that govern the new compartment apply immediately and affect access to the resource. Be aware of the following consequences: ... Access is controlled by the policies written for the new compartment. If you move a resource to a compartment where the current users don't have access, then those users will no longer be able to access the resource."

Source: Oracle Cloud Infrastructure Documentation, Doc ID: E97345-19, Section: "Managing Compartments".

2. Oracle Cloud Infrastructure Documentation, Overview of Identity and Access Management, "How Policies Work":

"Policies are comprised of one or more statements that specify which groups can access what resources and at what level of access. The policies are attached to a compartment or the tenancy. The attachment point determines who can modify or delete the policy."

Source: Oracle Cloud Infrastructure Documentation, Doc ID: E97345-19, Section: "Overview of Identity and Access Management".