Free 1z0-1072-25: Oracle Cloud Infrastructure 2025 Architect Associate Exam Questions and Answers

A company runs Oracle Linux instances that are managed by OS Management Hub. Package updates must be validated on the Dev instances before the same package versions are made available to the Prod instances. What should an administrator configure?

• AA. Create a lifecycle environment with Dev and Prod stages and promote the tested software source versions to Prod
• BB. Create a custom image from a patched Dev instance and replace the Prod boot volumes each month
• CC. Place the Dev and Prod instances in one managed instance group and install updates on it in two phases
• DD. Attach the Prod instances to the Dev software source and schedule a weekly update job

Which two statements are true about custom images in OCI Compute? (Choose two.)

Select 2 answers.

• AA. A virtual disk image in a format such as VMDK or QCOW2 can be imported from Object Storage as a custom image.
• BB. A custom image can be created from the boot volume of an existing instance.
• CC. A custom image is available automatically in every region of the tenancy after it is created.
• DD. A custom image includes the data on every block volume attached to the source instance.

A dynamic group named BatchHosts has the following matching rule: ALL {instance.compartment.id = 'ocid1.compartment.oc1..aaaa1111', tag.Operations.Role.value = 'batch'} Which two statements are true? (Choose two.)

Select 2 answers.

• AA. Instances that match the rule automatically gain access to all resources in the named compartment.
• BB. Members of BatchHosts can call OCI APIs only after a policy statement grants permissions to the dynamic group.
• CC. An instance in any compartment of the tenancy that has the Operations.Role tag value batch is a member of BatchHosts.
• DD. An instance in the named compartment that has no Operations.Role tag is not a member of BatchHosts.

A company must replicate Object Storage data from us-ashburn-1 to a second region. Company policy requires that the data stay in the United States. The architect reviews the Inter-Region Latency dashboard. Exhibit: us-ashburn-1 to ca-toronto-1: 17 ms us-ashburn-1 to eu-frankfurt-1: 90 ms us-ashburn-1 to us-sanjose-1: 68 ms us-ashburn-1 to us-phoenix-1: 62 ms Which destination region should the architect choose to meet the policy with the lowest latency?

• AA. us-phoenix-1
• BB. us-sanjose-1
• CC. ca-toronto-1
• DD. eu-frankfurt-1

A web server instance in a public subnet must be replaced regularly by a new instance in the same region. Clients connect to a fixed public IP address that must not change when the old instance is terminated. Which should the administrator use?

• AA. A secondary private IP address that is moved to the VNIC of the new instance
• BB. The public IP address of a NAT gateway attached to the VCN
• CC. An ephemeral public IP that is assigned to the new instance at launch
• DD. A reserved public IP that is reassigned to the private IP of the new instance

A Site-to-Site VPN connection between a DRG and an on-premises CPE shows both IPSec tunnels as up. Instances in the 10.1.2.0/24 subnet cannot reach hosts in 192.168.0.0/16 on premises. The subnet uses a route table with no rules. What should the administrator do?

• AA. Add a route rule for 192.168.0.0/16 with the DRG as the target
• BB. Add a route rule for 192.168.0.0/16 with a service gateway as the target
• CC. Add a route rule for 192.168.0.0/16 with the CPE object as the target
• DD. Add a route rule for 10.1.2.0/24 with the DRG as the target

A company runs a Linux virtual machine in an on-premises VMware environment and wants to run the same operating system and installed software in Oracle Cloud Infrastructure (OCI) without reinstalling anything. The VM disk can be exported as a VMDK file. Which approach should the administrator use?

• AA. Upload the VMDK file to an Object Storage bucket and import it as a custom image
• BB. Publish the VMDK file to Oracle Cloud Marketplace and launch it as an Oracle-provided image
• CC. Create a platform image from the VMDK file and register it with the Compute service
• DD. Attach the VMDK file to a new instance as a block volume and convert it to a boot volume

A company has a data center colocated at an Oracle FastConnect location. The network team needs hosts in the data center to reach instances on private IP addresses in a VCN over FastConnect, without using the internet. Which combination of resources must be configured?

• AA. A service gateway in the VCN and a public virtual circuit to Oracle services
• BB. A DRG attached to the VCN and a private virtual circuit that targets the DRG
• CC. An internet gateway in the VCN and a public virtual circuit to the Oracle edge
• DD. A local peering gateway in the VCN and a private virtual circuit to the peer

An autoscaling configuration in OCI Compute targets which resource?

• AA. An instance pool
• BB. An instance configuration
• CC. A dedicated virtual machine host
• DD. A cluster network

What is the maximum number of network security groups (NSGs) that a single VNIC can belong to?

• AA. 1
• BB. 5
• CC. 10
• DD. 20