[Aug 28, 2025] 1Z0-1067-25 Exam Dumps – Oracle Practice Test Questions [Q17-Q38]

Rate this post

[Aug 28, 2025] 1Z0-1067-25 Exam Dumps – Oracle Practice Test Questions

New Real 1Z0-1067-25 Exam Dumps Questions

Oracle 1Z0-1067-25 Exam Syllabus Topics:

Topic	Details
Topic 1	Implementing Observability: This section of the exam focuses on monitoring and maintaining cloud infrastructure. It covers implementing Metric Query Language (MQL) for analyzing performance data, setting up alarms and notifications for system events, and performing health checks to ensure the stability of cloud services.
Topic 2	Implementing Reliability and Business Continuity: This section of the exam focuses on ensuring system reliability and continuity. It covers implementing scalability and elasticity for handling workload demands, automating failover mechanisms for high availability, and applying data retention strategies for long-term storage and recovery.
Topic 3	Utilizing Configuration Management Tools: This section of the exam measures the skills of the target audience] and focuses on configuring cloud resources efficiently. It covers the use of configuration management tools for automating resource setup and cloud-init for initializing compute instances, ensuring proper configuration from the start.

QUESTION 17
Which statement is incorrect regarding replication being turned ON for a bucket named my-bucket?

Objects deleted from my-bucket after policy creation are automatically deleted from the destination bucket.

Destination bucket becomes read-only after the replication policy is created, and undated only by replication from my-bucket.

Objects uploaded to my-bucket before policy creation are not replicated to the destination bucket

Replication policy creation also creates the destination bucket.

QUESTION 18
Which statement about the Oracle Cloud Infrastructure (OCI) instance console connection is TRUE?

It does not let you edit the configuration files needed to recover the instance

It does not let you execute the sized-limit script.

It does not let you use the boot menu during the reboot process

It does not let you reset the SSH key

QUESTION 19
As a solution architect of the Oracle Cloud Infrastructure tenancy, you have been asked to provide members of group CloudOps the ability to view and retrieve monitoring metrics, but only for all monitoring-enabled compute instances. Which policy statement will you define to grant this access?

Allow group CloudOps to read metrics in tenancy where tar-get.metrics.namespace=oci_computeagent

Allow group CloudOps to read compute-metrics in tenancy

Restricting monitoring access only to compute instances metrics is not possible.

Allow group CloudOps to read metrics in tenancy where tar-get.metrics.monitoring=’oci_computeagent’

QUESTION 20
You have a group pf developers who launch multiple VM.Standard2.2 compute instances every day into the compartment Dev. As a result, your OCI tenancy quickly hit the service limit for this shape. Other groups can no longer create new instances using VM.Standard2.2 shape. Because of this, your company has issued a new mandate that the Dev compartment must include a quota to allow for use of only 20 VM.Standard2.2 shapes per Availability Do-main. Your solution should not affect any other compartment in the tenancy. Which quota statement should be used to implement this new requirement? (Choose the best answer.)

set compute quota vm-standard2-count to 10 in compartment dev where request.region = us-phoenix-01

zero compute quotas in tenancy set compute quota vmג€”standard22–count to 20 in tenancy dev

zero compute quotas in tenancy set compute quota vmג€”standard22–count to 20 in compartment dev

set compute quota vm-standard22–count to 20 in compartment dev

QUESTION 21
You are an admin of an OCI tenancy. To save cost, you want to restrict the amount of OCPUs that can be provisioned in each compartment. Which will allow this?

Compartment quotas

Budgets

Service limits

Resource Manager

QUESTION 22
You have been asked to set up connectivity between a client on-premises network and Oracle Cloud Infrastructure (OCI). The requirements are:
* Low latency: The applications are financial and require low latency connectivity into OCI. * Consistency: The application is not tolerant of performance variation.
* Performance: The communications link needs to support up to 1.25 Gbps.
* Encryption: The communications link needs to encrypt any data in transit between the on-premises network and OCI Virtual Cloud Network (VCN). The client wants to implement the above with as low a cost as possible, while meeting all of the requirements. What should you suggest? (Choose the best answer.)

Provision FastConnect with a single public virtual circuit, and run an IPsec VPN tunnel over the top of this virtual circuit.

Provision FastConnect with a single private virtual circuit, and run an IPsec VPN tunnel over the top of this virtual circuit.

Provision FastConnect with a single private virtual circuit.

Provision FastConnect with a single public virtual circuit.

Provision a site-to-site IPsec VPN between your on-premises network and your virtual cloud network (VCN) using VPN Connect.

QUESTION 23
Your team implemented a SaaS application that requires a whole system deployment for each new customer. The infrastructure provisioning is already automated via Terraform, and now you have been asked to develop an Ansible playbook to centralize configuration file management and deployment. What is the most effective way to ensure your playbooks are utilizing up-to-date and accurate inventory? (Choose the best answer.)

Implement a Command Line Interface script to list all the resources and run it within Ansible to generate a dynamic inventory list.

Export an inventory list using Terraform apply command.

Download the dynamic inventory script provided by Oracle Cloud Infrastructure and include it in the playbook invocation command.

Export an inventory list from the Oracle Cloud Infrastructure Web console.

QUESTION 24
SIMULATION
Scenario: 3 (Use the OCI CLI to Work with Object Storage from a Compute Instance) Scenario Description: (Hands-On Performance Exam Certification) Your company runs a web application in OCI that generates log files. You want to upload these files to OCI Object Storage to meet data retention requirements. Some files need to be retained indefinitely, whereas others can be deleted after 30 days. Use the OCI CLI to create bucket and upload the log directory and create a lifecycle policy rule to delete temporary files after 30 days.
Pre-Configuration:
To fulfill this requirement, you are provided with the following:
Access to an OCI tenancy, an assigned compartment, and OCI credentials
A compute instance with OCI CLI installed and a set of files in ~/dir_to_upload to use Access to the OCI Console Required IAM policies Assumptions:
Perform the tasks by using the OCI CLI on the compute instance.
Use instance principal authentication for all CLI commands; the instance has been given the policies necessary.
Connect to the compute instance using Cloud Shell’s private networking and the provided SSH key.
An SSH key pair has been provided to you for the compute instance.
Private Key https://objectstorage.us-ashburn-1.oraclecloud.com/n/tenancyname/b/PBT_Storage/o/PKey.key Note: Throughout your exam, ensure to use assigned Compartment , User Name and Region.
Complete the following tasks in the provisioned OCI environment:
Task 1: Create a Bucket in Object Storage
Task 2: Upload a Directory’s Contents to Object Storage
Task 3: Add a Lifecycle Policy to the Bucket

See the solution below with Step by Step Explanation
Explanation:
Task 1: Create a Bucket in Object Storage
Create a bucket named CloudOpsBucket_<user id> with the following properties:
Storage tier: Standard
Auto-tiering: Disabled
Object versioning: Enabled
Emit events: Disabled
Keys: Oracle-managed
Visibility: Private
Task 2: Upload a Directory’s Contents to Object Storage
Upload the contents of the directory ~/dir_to_upload and its subdirectories to the bucket CloudOpsBucket Task 3: Add a Lifecycle Policy to the Bucket Create a lifecycle policy rule that deletes all files from ~/dir_to_upload/temp after 30 days Task 1: Create a bucket in Object Storage
1. Open Cloud Shell in the console. Under Network along the top, select Ephemeral Private Network Setup.
2. Select the subnet of the compute instance.
3. SSH into the compute instance using the provided SSH key:
ssh -i /path/to/key opc@<private_ip>
4. In the compute instance, create the bucket with the following command (note that it’s one long line):
oci os bucket create -c “<compartment_id>” –name “CloudOpsBucket” –auth instance_principal –versioning ‘Enabled’ Task 2: Upload a directory’s contents to Object Storage
1. Upload the contents of the specified directory and subdirectories with the following command (note that it’s one long line):
oci os object bulk-upload -bn “CloudOpsBucket” –src-dir “~/dir_to_upload” –auth instance_principal Task 3: Add a lifecycle policy to the bucket
1. Create a file named rule.json
2. Add the following content to rule.json:
{“items”: [{“action”: “DELETE”,”is-enabled”: true,”name”: “Delete-Rule”,”object-name-filter”: {“exclusion-patterns”: null,”inclusion-patterns”: null,”inclusion-prefixes”: [“temp/”]},”target”: “objects”,”time-amount”: 30,”time-unit”: “DAYS”}]}
3. Add the lifecycle policy rule with the following command:
oci os object-lifecycle-policy put -bn “CloudOpsBucket” –from-json file://rule.json –auth instance_principal Top of Form

QUESTION 25
You have received an email from your manager to provision new resources on Oracle Cloud Infrastructure (OCI). When researching OCI, you determined that you should use OCI Resource Manager. Since this is a task that will be done multiple times for development, test, and production. You will need to create a command that can be re-used. Which CLI command can be used in this situation? (Choose the best answer.)

oci resource-manager stack update –compartment-id <compartment_OCID> –config-source prod.zip –variables file://variables.json –display-name “Production stack build” –description Creating new Production environment

oci resource-manager stack create –tenancy-id <tenancy_OCID> –config-source prod.zip –variables file://variables.json –display-name Production stack build –description Creating new Production environment

oci resource-manager stack update –tenancy-id <tenancy_OCID> –config-source prod.zip –variables file://variables.json –display-name “Production stack build” –description Creating new Production environment

oci resource-manager stack create –compartment-id <compartment_OCID> –config-source prod.zip –variables file://variables.json –display-name “Production stack build” –description Creating new Production environment

QUESTION 26
You have been brought In to help secure an existing application that leverages Object Storage buckets to distribute content. The data is currently being shared from public buckets and the security team Is not satisfied with this approach. They have stated that all data must be stored In storage buckets. Your application should be able to provide secure access to the dat a. The URL that is provided for access to the data must be rotated every 30 days. Which design option will meet these requirements?

Use Pre-Authenticated request, even though there will be multiple URLs this will pro-vide better security.

Create a private bucket only to share the data.

Create multiple bucket and classify them as Public and Private. Use public bucket for non-sensitive data and private bucket for sensitive data.

Create a new group and map users to this group, create a IAM policy providing access to Object Storage service only to this group. Users can then simply login to OCI console and retrieve needed flies.

QUESTION 27
Which TWO statements are NOT true regarding Block Storage Volume Resize in Oracle Cloud Infrastructure (OCI)? (Choose two.)

Volume size can be either increased or decreased.

Volumes may not have attachments added or removed during resize.

Volumes may not be resized if there is a prior resize or an ongoing cloning operation

Volumes may only be resized if there is a backup pending.

QUESTION 28
Several development teams in your company have each been provided with a budget and a dedicated compartment to be used for testing purpose u are asked to help them to control the costs and avoid any overspending. What should you do?

Contact Oracle support and ask them to associate the monthly budget with the Service Limits In every region for which your tenancy is subscribed. The tenancy administrator will receive an alert email from Oracle when the limit Is reached.

Configure a Quota for each compartment to prevent provisioning of any bare metal in-stances.

Associate a Budget Tag to each resource with monthly budget amount and use that In-formation to prepare a weekly report to send to each team.

Associate a Budget Tag to each compartment with the monthly budget amount and set an alert rule to notify the developers’ teams when they reached a specific percentage of the budget.

QUESTION 29
All the developers in a DevOps team are using the same compartment called ‘devops’. There are two IAM groups: ‘group-devs’ and ‘group-ops’. Which of the following IAM policy will give users in both these groups access to manage all resources in the compartment?

Allow group group-dev, group-ops to manage all resources in compartment devops.

Allow group /group*/ to manage all resources in compartment devops.

Allow any-user to manage all resources in compartment devops where any {re-quest.group=group-dev,group-ops}.

Allow any-user to manage all resources in compartment devops where request.group= /group*/.

QUESTION 30
You use a bucket in Object Storage to store backups of a database. Versioning is enabled on these objects, so that every time you take a new backup, it creates a new version. You add the following life-cycle policy rule: { “action”: “DELETE”, “is-enabled”: true, “name”: “Delete-Rule”, “object-name-filter”: null, “target”: “objects”, “time-amount”: 60, “time-unit”: “DAYS” } Which option is true regarding this rule?

Once any specific version is 60 days old, it will be deleted. Deletion will physically delete the data.

If 60 days passes for an object without a new version being created, it will be deleted. Deletion marks the latest version as deleted but does not physically delete it.

60 days after the initial creation, any object will be deleted. Deletion will physically de-lete all versions of the object.

60 days after the initial creation, any object will be deleted. Deletion marks the latest version as deleted but does not physically delete it.

QUESTION 31
You set up a bastion host in your Virtual Cloud Network (VCN) to allow only your IP ad-dress (140.19.2.140) to establish SSH connections with your compute instances that are deployed in a private subnet. The compute instances have an attached Network Security Group (NSG) with a Source Type: Network Security Group (NSG), Source NSG: NSG-050504. To secure the bastion host, you add the following ingress rules to its NSG: Type: All TCP Proto-col: TCP Port Range: 22 Source: 140.19.2.140/32 Type: All TCP Protocol: TCP Port Range: 22 Source: NSG-050504 However, when you check the bastion host logs, you discover that there are IP addresses other than your own that can access your bastion host. What is the root cause of this issue?

The port 22 provides unrestricted access to 140.19.2.140 and to other IP addresses.

All compute instances associated with NSG-050504 are also able to connect to the bastion host.

The security list allows access to all IP addresses that override the NSG ingress rules.

A netmask of /32 allows all IP addresses in the140.19.2.0 network, other than your IP 140.19.2.140.

QUESTION 32
You have configured an Alarm Definition in the Oracle Cloud Infrastructure (OCI) Monitoring service to send notifications through email. The alarm should resend notifications at specified intervals if the alarm. continues to be in the firing state. A subscriber in the Notifications Topic complains about not receiving multiple emails upon failures. Which of the following could be the possible cause of this issue?

Trigger Condition was not configured while defining the Alarm

Repeat notification was not enabled while creating the Alarm.

OCI Monitoring service can send only one notification per Alarm Definition when the alarm condition is met.

Resending notifications depends on the total metric streams returned from the query.

QUESTION 33
You have set an alarm to be generated when the CPU usage of a specified instance is greater than 10%. In the alarm behavior view below you notice that the critical condition happened around 23:30. You were expecting a notification after 1 minute, however, the alarm firing state did not begin until 23:33.

What should you change to fix it? (Choose the best answer.)

Change the alarm condition to be grater than 3%.

Change the alarm trigger delay minutes value to 1.

Change the alarm metric interval to 1.

Change the notification topic that you previously associated with the alarm.

QUESTION 34
Which is the correct monitoring query that will monitor the CPU utilization threshold including an alarm?

(CpuUtilization[1m].max() > 80).grouping().sum()

CpuUtilization[1m].max()

CpuUtilization[1m]{shape = “VM.Standard.E4.Flex”}.max()

CpuUtilization[1m].max().grouping().sum()

QUESTION 35
SIMULATION
Scenario: 4 (Write Identity and Access Management Policies to Secure a Tenancy) Scenario Description: (Hands-On Performance Exam Certification) Your company has signed up for an OCI tenancy to migrate an e-commerce application, a supply chain management (SCM) system, and a customer relationship management (CRM) system. You have been tasked with setting up the requisite identity and access management (IAM) policies for your team to begin developing on OCI.
You start by setting up the following compartment hierarchy:
Tenancy (root)
Common-Infra
Network
Security
Applications
E-Comm
SCM
CRM
You create the following groups:
Network-Admins
Security-Admins
E-Comm-Admins
SCM-Admins
CRM-Admins
Write the IAM policies for the following use cases:
Assumptions:
Assume that all policies will be attached to the root compartment.
Write one policy per given text box.
Keep policies as simple as possible by using verbs instead of permissions (for example, “inspect orm-stacks” instead of “ORM_STACK_INSPECT”) and aggregate resource types instead of individual ones (for example, “file-family” instead of “file-systems” and “mount-targets”) Task 1 Write a policy statement to enable Network-Admins to create and destroy network-related resources, such as VCNs, subnets, gateways, and so on in the Network compartment.
Task 2
Write policy statements to enable E-Comm-Admins to provision and destroy compute instances in the E-Comm compartment by using networking resources in the Network compartment.[Write one policy per given text box] Task 3 Write a policy statement to enable SCM-Admins to provision, destroy, and back up block volumes in the SCM compartment-but only in Phoenix and London.

QUESTION 36
You have ordered two FastConnect connections that provide a high availability connection architecture between your on-premises data center and Oracle Cloud Infrastructure (OCI). You want to run these connections in an ACTIVE/PASSIVE architecture. How can you accomplish this? (Choose the best answer.)

Enable BGP on the FastConnect that you want as the ACTIVE connection.

Adjust one of the connections to have a higher ASN.

Use AS PATH prepending with your routes.

Decrease the prefix length of AS for the FastConnect you want to use as PASSIVE connection.

QUESTION 37
You have a group of developers who launch multiple VM.Standard3.Flex compute in-stances every day into the compartment Dev. As a result, your Oracle Cloud Infrastructure (OCI) tenancy quickly hits the service limit for this shape, and other groups can no longer create new instances using the VM.Standard3.Flex shape. Therefore, your company issues a new mandate that the Dev compartment must include a quota that allows the use of only 20 VM.Standard3.Flex OCPUs per availability domain, without affecting any other compartment in the tenancy. Which quota statement would you use to implement this new requirement?

set compute-core quota standard3-core-count to 20 in compartment dev where re-quest.region = us-phoenix-1

zero compute-core quotas in tenancy set compute-core quota standard3-core-count to 20 in tenancy dev

zero compute-core quotas in tenancy set compute-core quota standard3-core-count to 20 in compartment dev

set compute-core quota standard3-core-count to 20 in compartment dev

QUESTION 38
You are asked to deploy a new application that has been designed to scale horizontally. The business stakeholders have asked that the application be deployed in us-phoenix-1. Nor-mal usage requires 2 OCPUs. You expect to have few spikes during the week, that will require up to 4 OCPUs, and a major usage uptick at the end of each month that will require 8 OCPUs. What is the most cost-effective approach to implement a highly available and scalable solution? (Choose the best answer.)

Create an instance with 1 OCPU shape. Use the Resize Instance action to scale up to a larger shape when more resources are needed.

Create an instance with 1 OCPU shape. Use a CLI script to clone it when more re-sources are needed.

Create an instance pool with a VM.Standard2.2 shape instance configuration. Set up the autoscaling configuration to use 2 availability domains and have a minimum of 2 in-stances, to handle the weekly spikes, and a maximum of 4 instances.

Create an instance pool with a VM.Standard2.1 shape instance configuration. Set up the autoscaling configuration to use 2 availability domains and have a minimum of 2 in-stances and a maximum of 8 instances.