1Z0-1067-25 Sample Questions & Answers

OCI Block Volume service allows dynamic performance scaling. You can change the performance setting of an attached block volume without detaching it, meaning there is no downtime. Moving from 'Balanced' to 'Higher Performance' will increase the IOPS and throughput available to the volume, directly addressing the I/O bottleneck experienced by the database.

This statement is true. Compartment quotas are hard limits. If a quota policy is in effect for a compartment, any user action that would exceed a limit defined in that policy will be denied. This is a key governance feature to control resource consumption and costs within specific organizational units or projects.

The Autoscaling Configuration service is where you define the policies that govern how an instance pool scales. This includes creating metric-based scaling policies that monitor performance metrics like CPU or memory utilization, defining the thresholds (e.g., >70% or <30%), and specifying the cooldown periods and number of instances to add or remove.

Cross-region asynchronous replication for block volumes is the native OCI solution designed specifically for this DR scenario. It continuously replicates data to a destination region with a typical RPO of less than a minute, easily meeting the 1-hour requirement. In a DR event, the replica volume can be activated in the DR region, allowing for rapid recovery that meets the 4-hour RTO.

Object Storage Lifecycle Policies are designed for this exact purpose. You can define rules that automatically perform actions on objects based on their age. A policy can be created with two rules: one to move objects from the Standard tier to the Infrequent Access tier after 30 days, and a second rule to move them from Infrequent Access to the Archive tier after 365 days. A final rule can be set to delete objects after 7 years.

The correct and scalable way to manage exceptions in Cloud Guard is to use managed lists. You would create a managed list containing the OCID of the specific bucket that needs to be public. Then, you would clone the Oracle-managed detector recipe, modify the 'Publicly visible Object Storage bucket' rule to use this managed list as an exception, and attach the new custom recipe to your target. This ensures that only the intended resource is excluded from the check, maintaining security posture for all other resources.

OCI Vault is the designated service for securely storing secrets like API keys. Storing the key as a secret in a vault ensures it's encrypted at rest using a Master Encryption Key. To allow the application to retrieve it, you should use an Instance Principal for the compute instance and create a specific IAM policy that grants it permission to read that particular secret. This avoids storing credentials on the instance. The secret can then be managed and rotated within the Vault service.

This policy statement is correct because it follows the principle of least privilege. It specifies the actor (group DatabaseAdmins), the permission level (manage), the resource type (autonomous-databases), and correctly scopes the permission to a specific location (in compartment DB_Prod). The manage verb includes all necessary permissions (list, create, update, delete) for that resource type.

This MQL query is correctly structured. CpuUtilization is the metric. [15m] specifies the interval for the alarm evaluation. {compartmentId = '...'} is the dimension filter that scopes the query to the correct compartment. .mean() is the aggregation function to calculate the average across all instances in that compartment. Finally, > 80 sets the threshold for the alarm to trigger.

The OCI Notifications service uses a topic-and-subscription model. The correct approach is to create one Notification Topic to associate with the alarm. Then, you create three separate subscriptions on that topic: one of type 'Email' for the on-call team, one of type 'PagerDuty' for ticketing, and one of type 'Function' which triggers an OCI Function to send a formatted message to the Slack API. When the alarm fires, it publishes a message to the topic, which then fans out to all its subscriptions.