Free 1Z0-1072-23 sample questions

Real questions from the OCI 2023 Architect Associate practice bank, with the correct answer and an explanation for each one. No junk, no filler.

Try them in the simulator Same questions, with study, timed and flashcard modes.

Showing 10 of 20 free sample questions.

Question 1Choose 2

You are designing an IAM policy to grant a group of junior administrators the ability to manage compute instances within a specific compartment named 'Staging'. However, you must prevent them from terminating any instance that has a defined tag `Protection: 'Critical'`. Which two IAM policy statements, when combined, would achieve this goal? (Select TWO)

Question 2Choose one

A startup is deploying a containerized application using OCI Container Engine for Kubernetes (OKE). For cost optimization, they plan to use a mix of VM instances and preemptible (spot) instances for their worker nodes. The application has some stateful components that require persistent storage. Which OCI storage service should be configured with the CSI (Container Storage Interface) plugin to provide reliable, high-performance, and network-attached block storage for the Kubernetes pods?

Question 3Choose one

A global e-commerce platform is hosted in the OCI Frankfurt region. To provide faster page loads for customers in North America and Asia, the architect decides to use the OCI Traffic Management service. They need to configure a steering policy that directs users to the geographically closest of three endpoints: one in Frankfurt, one in Ashburn, and one in Tokyo. If one endpoint fails its health check, traffic should automatically be redirected to the next closest healthy endpoint. Which Traffic Management steering policy should be implemented?

Question 4Choose one

During a routine audit, it was discovered that a developer inadvertently launched a large number of high-cost GPU compute instances in a development compartment, leading to a significant budget overrun. To prevent this from recurring, the cloud administrator needs to implement a control that automatically prevents the creation of resources that would exceed a predefined budget for that compartment. Which OCI feature should be used?

Question 5Choose one

True or False: When using an OCI NAT Gateway in a public subnet, you must also add a route rule to the private subnet's route table that directs traffic destined for the internet to the NAT Gateway.

Question 6Choose one

An architect is tasked with designing a highly available and fault-tolerant compute architecture. The application requires that if an entire Availability Domain (AD) fails, the application remains operational with minimal performance degradation. The application servers are stateless. What is the most cost-effective and resilient OCI compute configuration to achieve this?

Question 7Choose one

A media company stores large video files in an OCI Object Storage Standard tier bucket for processing. After 30 days, these files are accessed infrequently but must be available for retrieval within two hours. After 180 days, they are rarely accessed and can tolerate a retrieval time of up to four hours. To optimize storage costs, what is the correct lifecycle policy configuration?

Question 8Choose one

You are troubleshooting a connectivity issue between a compute instance in a private subnet and the OCI Object Storage service endpoint. The instance needs to upload backup files. You have confirmed that the instance has the correct IAM permissions. A Service Gateway is attached to the VCN, and the private subnet's security list allows all egress traffic. What is the most likely missing configuration piece?

Question 9Choose one

A new DevOps team has been created to manage a specific project. The team members need to be able to launch and manage compute instances, but only if the instances are tagged with the project's cost center tag `CostCenter: 'ProjectX'`. They should not be able to perform any action on instances without this specific tag. Which IAM feature is required to implement this level of granular control?

Question 10Choose one

An administrator needs to perform urgent maintenance on a production compute instance. They need to connect to the instance's serial console to troubleshoot a boot issue, but the instance has no public IP address and is in a private subnet. Which OCI feature provides secure, temporary access to the serial console without exposing the instance to the public internet?

10 more free samples are waiting

Create a free account to unlock the whole 1Z0-1072-23 sample bank, or get full access to all 207 practice questions in the simulator.

Create account