oracle 1z0-1067-25 practice test

Oracle Cloud Infrastructure 2025 Cloud Ops Professional

Last exam update: Nov 18 ,2025
Page 1 out of 7. Viewing questions 1-15 out of 93

Question 1

You have created several block volumes in the us-phoenix-1 region in a specific compart-ment. The
compartment can be identified by the following Oracle Cloud Infrastructure (OCI) unique identifier,
or ocid1.compartment.oc1.phx..exampleuniquelD Your manager has asked you to leverage the OCI
monitoring service and write a metric query showing all read IOPS at a one-minute interval, filtered
to this compartment and aggregated for the maximum. Which metric query will you create?

  • A. IopsRead[lm]{compartmentId = 'odd1.compartment.ocl.phx..exampleuniquelD'}.grouping().mean()
  • B. IopsRead[lm]{compartmentId='ocldl.compartment.ocl.phx..exampleuniquelD'}.max()
  • C. Iop-sWrite[lm]{compartmentId=Hocidl.compartment.ocl.phx..exampleuniquelD'}.mean()
  • D. Iop-sRead[lm{compartmentId='ocidl.compartment.ocl.phx..exampleuniquelD'}.grouplng().max()
Mark Question:
Answer:

D

User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 2

The general syntax for an IAM policy is: Allow <identity_domain_name>/<subject> to <verb>
<resource-type> in <location> where <conditions> Which two are valid values for <lo-cation>?

  • A. tenancy
  • B. availability-domain aBCD:us-phoenix-1
  • C. compartment MyCompartment
  • D. security-zone MyZone
  • E. region us-phoenix-1
Mark Question:
Answer:

A, C

User Votes:
A
50%
B
50%
C
50%
D
50%
E
50%
Discussions
vote your answer:
A
B
C
D
E
0 / 1000

Question 3

All the developers in a DevOps team are using the same compartment called 'devops'. There are two
IAM groups: 'group-devs' and 'group-ops'. Which of the following IAM policy will give users in both
these groups access to manage all resources in the compartment?

  • A. Allow group group-dev, group-ops to manage all resources in compartment devops.
  • B. Allow group /group*/ to manage all resources in compartment devops.
  • C. Allow any-user to manage all resources in compartment devops where any {re- quest.group=group-dev,group-ops}.
  • D. Allow any-user to manage all resources in compartment devops where request.group= /group*/.
Mark Question:
Answer:

A

User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 4

You have a group of developers who launch multiple VM.Standard3.Flex compute in-stances every
day into the compartment Dev. As a result, your Oracle Cloud Infrastructure (OCI) tenancy quickly
hits the service limit for this shape, and other groups can no longer create new instances using the
VM.Standard3.Flex shape. Therefore, your company issues a new mandate that the Dev
compartment must include a quota that allows the use of only 20 VM.Standard3.Flex OCPUs per
availability domain, without affecting any other compartment in the tenancy. Which quota statement
would you use to implement this new requirement?

  • A. set compute-core quota standard3-core-count to 20 in compartment dev where re-quest.region = us-phoenix-1
  • B. zero compute-core quotas in tenancy set compute-core quota standard3-core-count to 20 in tenancy dev
  • C. zero compute-core quotas in tenancy set compute-core quota standard3-core-count to 20 in compartment dev
  • D. set compute-core quota standard3-core-count to 20 in compartment dev
Mark Question:
Answer:

D

User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 5

An insurance company has contracted you to help automate their application business continuity
plan. They have the application running in eu-frankfurt-1 as the primary site and uk-london-1 as a
disaster recovery site. Normally they have a DNS A record associated with the IP address of the
primary endpoint in eu- frankfurt-1. In the event of a disaster, they use OCI DNS Zone Management
to update the A record and replace it with the IP address of the end-point in uk- londond-1. How can
you automate the failover process? (Choose the best answer.)

  • A. Create a Health Check that evaluates both regional endpoints. Create a Traffic Management Steering policy with Failover type and associate it with the Health Check.
  • B. Provision a Load Balancer in Frankfurt and associate it with the A record in DNS. Create a backend set with backend servers from both eu-frankfurt-1 and uk- london-1 regions.
  • C. Create a Traffic Management Steering policy with Load Balancer type and add both eu-frankfurt-1 and uk-london-1 endpoints. Attach the Traffic Management Steering policy to the A record.
  • D. Create a Traffic Management Steering policy and attach it to a backend servers from both eu- frankfurt-1 and uk-london-1 regions.
Mark Question:
Answer:

A

User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 6

You have configured an Alarm Definition in the Oracle Cloud Infrastructure (OCI) Monitoring service
to send notifications through email. The alarm should resend notifications at specified intervals if the
alarm. continues to be in the firing state. A subscriber in the Notifications Topic complains about not
receiving multiple emails upon failures. Which of the following could be the possible cause of this
issue?

  • A. Trigger Condition was not configured while defining the Alarm
  • B. Repeat notification was not enabled while creating the Alarm.
  • C. OCI Monitoring service can send only one notification per Alarm Definition when the alarm condition is met.
  • D. Resending notifications depends on the total metric streams returned from the query.
Mark Question:
Answer:

B

User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 7

Which statement is incorrect regarding replication being turned ON for a bucket named my-bucket?

  • A. Objects deleted from my-bucket after policy creation are automatically deleted from the destination bucket.
  • B. Destination bucket becomes read-only after the replication policy is created, and undated only by replication from my-bucket.
  • C. Objects uploaded to my-bucket before policy creation are not replicated to the destination bucket
  • D. Replication policy creation also creates the destination bucket.
Mark Question:
Answer:

D

User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 8

You are working as a Cloud Operations Administrator for your company. They have different Oracle
Cloud Infrastructure (OCI) tenancies for development and production work-loads. Each tenancy has
resources in two regions uk-london-1 and eu-frankfurt-1. You are asked to manage all resources and
to automate all the tasks using OCI Command Line Inter-face (CLI). Which is the most efficient
method to manage multiple environments using OCI CLI? (Choose the best answer.)

  • A. Use different bash terminals for each environment.
  • B. Run oci setup config to create new credentials for each environment every time you want to access the environment.
  • C. Use OCI CLI profiles to create multiple sets of credentials in your config file, and refer-ence the appropriate profile at runtime.
  • D. Create environment variables for the sets of credentials that align to each combination of tenancy, region, and environment.
Mark Question:
Answer:

C

User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 9

You have been brought In to help secure an existing application that leverages Object Storage
buckets to distribute content. The data is currently being shared from public buckets and the security
team Is not satisfied with this approach. They have stated that all data must be stored In storage
buckets. Your application should be able to provide secure access to the dat
a. The URL that is provided for access to the data must be rotated every 30 days. Which design option
will meet these requirements?

  • A. Use Pre-Authenticated request, even though there will be multiple URLs this will pro-vide better security.
  • B. Create a private bucket only to share the data.
  • C. Create multiple bucket and classify them as Public and Private. Use public bucket for non-sensitive data and private bucket for sensitive data.
  • D. Create a new group and map users to this group, create a IAM policy providing access to Object Storage service only to this group. Users can then simply login to OCI console and retrieve needed flies.
Mark Question:
Answer:

A

User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 10

You set up a bastion host in your Virtual Cloud Network (VCN) to allow only your IP ad-dress
(140.19.2.140) to establish SSH connections with your compute instances that are deployed in a
private subnet. The compute instances have an attached Network Security Group (NSG) with a
Source Type: Network Security Group (NSG), Source NSG: NSG-050504. To secure the bastion host,
you add the following ingress rules to its NSG: Type: All TCP Proto-col: TCP Port Range: 22 Source:
140.19.2.140/32 Type: All TCP Protocol: TCP Port Range: 22 Source: NSG-050504 However, when you
check the bastion host logs, you discover that there are IP addresses other than your own that can
access your bastion host. What is the root cause of this issue?

  • A. The port 22 provides unrestricted access to 140.19.2.140 and to other IP addresses.
  • B. All compute instances associated with NSG-050504 are also able to connect to the bastion host.
  • C. The security list allows access to all IP addresses that override the NSG ingress rules.
  • D. A netmask of /32 allows all IP addresses in the140.19.2.0 network, other than your IP 140.19.2.140.
Mark Question:
Answer:

B

User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 11

Which of the following THREE statements are true about Versioning? (Choose three.)

  • A. You can enable the Versioning and Retention rule simultaneously on bucket.
  • B. If versioning enabled, even if you delete the file inside the bucket, you will be charged for the data shared as the meta data still resides inside the bucket.
  • C. If Versioning is enabled and you delete the files stored in a bucket, then a delete marker is created so that you can restore the deleted file.
  • D. If Versioning disabled, and you try uploading files with the same name, then a copy of the file in kept with a different name.
  • E. Versioning is applied at the bucket level.
Mark Question:
Answer:

B, C, E

User Votes:
A
50%
B
50%
C
50%
D
50%
E
50%
Discussions
vote your answer:
A
B
C
D
E
0 / 1000

Question 12

A company is developing a highly available web application, which will be hosted on Oracle Cloud
Infrastructure (OCI). For high reliability, the Load Balancer's health status is very important. Which of
the following may lead to an unhealthy Load Balancer?

  • A. Issue with 55 connections trying to access an instance
  • B. VCN Network Security Groups (NSG) or Security Lists lock traffic.
  • C. Misconfigured security rule.
  • D. Storage size assigned to one of the Block Storage services.
Mark Question:
Answer:

C

User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 13

Recently, your e-commerce web application has been receiving significantly more traffic than usual.
Users are reporting they often encounter a 503 Service Error when trying to access your site.
Sometimes the site is very slow. You check your instance pool configuration to con-firm that the
maximum number of instances is configured to allow 20 compute instances. Currently, 14 compute
instances have been provisioned by the instance pool. You also confirm that current CPU utilization
across all hosts exceeds the scale-out threshold you set in your auto-scaling policy. However, the
instance pool is not provisioning any new instances. What can you check to determine why the
application is NOT functioning properly? (Choose the best answer.)

  • A. Verify that the new offer feature code did not introduce any performance bugs.
  • B. Verify that the compute resource quota has not been exceeded.
  • C. Verify that the Quality Assurance team is not currently performing load-testing against production.
  • D. Verify that the database is accessible.
Mark Question:
Answer:

B

User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 14

A developer has created a file system in the Oracle Cloud Infrastructure (OCI) File Storage service.
She then launches an Oracle Linux compute instance and mounts the file system successfully on this
instance. The next day, she tries writing to the file system from the compute instance using the
following command: touch /mnt/yourmountpoint/helloworld.txt But receives an error message:
touch: cannot touch '/mnt/yourmountpoint/helloworld.txt': Permission denied What might be the
reason for this error?

  • A. Service limits or quota for file system writes have been breached.
  • B. User is connecting as the default Oracle Linux user opc instead of the root user.
  • C. User is not part of any OCI Identity and Access Management (IAM) group with write permissions to the File Storage service.
  • D. The touch command is not available in Oracle Linux, by default.
Mark Question:
Answer:

B

User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 15

Your team implemented a SaaS application that requires a whole system deployment for each new
customer. The infrastructure provisioning is already automated via Terraform, and now you have
been asked to develop an Ansible playbook to centralize configuration file management and
deployment. What is the most effective way to ensure your playbooks are utilizing up-to-date and
accurate inventory? (Choose the best answer.)

  • A. Implement a Command Line Interface script to list all the resources and run it within Ansible to generate a dynamic inventory list.
  • B. Export an inventory list using Terraform apply command.
  • C. Download the dynamic inventory script provided by Oracle Cloud Infrastructure and include it in the playbook invocation command.
  • D. Export an inventory list from the Oracle Cloud Infrastructure Web console.
Mark Question:
Answer:

C

User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
vote your answer:
A
B
C
D
0 / 1000
To page 2