[Q43-Q59] Updated Feb-2026 Test Engine to Practice Test for 1Z0-1067-25 Exam Questions and Answers!

Rate this post

Updated Feb-2026 Test Engine to Practice Test for 1Z0-1067-25 Exam Questions and Answers!

Oracle Cloud Infrastructure 2025 Cloud Ops Professional Certification Sample Questions and Practice Exam

Oracle 1Z0-1067-25 Exam Syllabus Topics:

Topic	Details
Topic 1	Implementing Reliability and Business Continuity: This section of the exam focuses on ensuring system reliability and continuity. It covers implementing scalability and elasticity for handling workload demands, automating failover mechanisms for high availability, and applying data retention strategies for long-term storage and recovery.
Topic 2	Optimizing Cost and Performance: This section of the exam covers strategies for optimizing cost and performance in OCI. It includes implementing cost-saving measures, improving resource efficiency, and setting budgets and compartment quotas to manage cloud expenditures effectively.
Topic 3	Deploying and Managing Resources: This section of the exam covers the deployment and management of core OCI services. It focuses on manual provisioning, using the OCI Command Line Interface (CLI) for managing resources, and utilizing infrastructure as code to create consistent and repeatable deployments.

NO.43 You set up a bastion host in your Virtual Cloud Network (VCN) to allow only your IP ad-dress (140.19.2.140) to establish SSH connections with your compute instances that are deployed in a private subnet. The compute instances have an attached Network Security Group (NSG) with a Source Type: Network Security Group (NSG), Source NSG: NSG-050504. To secure the bastion host, you add the following ingress rules to its NSG: Type: All TCP Proto-col: TCP Port Range: 22 Source: 140.19.2.140/32 Type: All TCP Protocol: TCP Port Range: 22 Source: NSG-050504 However, when you check the bastion host logs, you discover that there are IP addresses other than your own that can access your bastion host. What is the root cause of this issue?

The port 22 provides unrestricted access to 140.19.2.140 and to other IP addresses.

All compute instances associated with NSG-050504 are also able to connect to the bastion host.

The security list allows access to all IP addresses that override the NSG ingress rules.

A netmask of /32 allows all IP addresses in the140.19.2.0 network, other than your IP 140.19.2.140.

NO.44 Which two statements are TRUE about Object Storage data security and encryption in Oracle Cloud Infrastructure (OCI)? (Choose two.)

Data needs to be decrypted on the client side before retrieving it.

Client-side encryption is managed by the customer.

A VPN connection to OCI is required to ensure secure data transfer to an object storage bucket.

All traffic to and from Object Storage service is encrypted using TLS.

OCI Vault Management is used by default to provide data security.

NO.45 You are asked to deploy a new application that has been designed to scale horizontally. The business stakeholders have asked that the application be deployed in us-phoenix-1. Nor-mal usage requires 2 OCPUs. You expect to have few spikes during the week, that will require up to 4 OCPUs, and a major usage uptick at the end of each month that will require 8 OCPUs. What is the most cost-effective approach to implement a highly available and scalable solution? (Choose the best answer.)

Create an instance with 1 OCPU shape. Use the Resize Instance action to scale up to a larger shape when more resources are needed.

Create an instance with 1 OCPU shape. Use a CLI script to clone it when more re-sources are needed.

Create an instance pool with a VM.Standard2.2 shape instance configuration. Set up the autoscaling configuration to use 2 availability domains and have a minimum of 2 in-stances, to handle the weekly spikes, and a maximum of 4 instances.

Create an instance pool with a VM.Standard2.1 shape instance configuration. Set up the autoscaling configuration to use 2 availability domains and have a minimum of 2 in-stances and a maximum of 8 instances.

NO.46 An insurance company has contracted you to help automate their application business continuity plan. They have the application running in eu-frankfurt-1 as the primary site and uk-london-1 as a disaster recovery site. Normally they have a DNS A record associated with the IP address of the primary endpoint in eu- frankfurt-1. In the event of a disaster, they use OCI DNS Zone Management to update the A record and replace it with the IP address of the end-point in uk- londond-1. How can you automate the failover process? (Choose the best answer.)

Create a Health Check that evaluates both regional endpoints. Create a Traffic Management Steering policy with Failover type and associate it with the Health Check.

Provision a Load Balancer in Frankfurt and associate it with the A record in DNS. Create a backend set with backend servers from both eu-frankfurt-1 and uk- london-1 regions.

Create a Traffic Management Steering policy with Load Balancer type and add both eu-frankfurt-1 and uk-london-1 endpoints. Attach the Traffic Management Steering policy to the A record.

Create a Traffic Management Steering policy and attach it to a backend servers from both eu-frankfurt-1 and uk-london-1 regions.

NO.47 A company is developing a highly available web application, which will be hosted on Oracle Cloud Infrastructure (OCI). For high reliability, the Load Balancer’s health status is very important. Which of the following may lead to an unhealthy Load Balancer?

Issue with 55 connections trying to access an instance

VCN Network Security Groups (NSG) or Security Lists lock traffic.

Misconfigured security rule.

Storage size assigned to one of the Block Storage services.

NO.48 Your deployment platform within Oracle Cloud Infrastructure (OCI) leverages a compute instance with multiple block volumes attached. There are multiple teams that use the same compute instance and have access to these block volumes. You want to ensure that no one accidentally deletes any of these block volumes. You have started to construct the following IAM policy but need to determine which permissions should be used. allow group DeploymentUsers to manage volume-family where ANY { request.permission != <???>, request.permission != <???>, request.permission != <???> } Which permissions can you use in place of <???> in this policy? (Choose the best answer.)

DELETE_VOLUME, DELETE_VOLUME_ATTACHMENT, DE-LETE_VOLUME_BACKUP

ERASE_VOLUME, ERASE_VOLUME_ATTACHMENT, ERASE_VOLUME_BACKUP

VOLUME_DELETE, VOLUME_ATTACHMENT_DELETE, VOL-UME_BACKUP_DELETE

VOLUME_ERASE, VOLUME_ATTACHMENT_ERASE, VOL-UME_BACKUP_ERASE

NO.49 You have been asked to update the lifecycle policy for object storage using the Oracle Cloud Infrastructure (OCI) Command Line Interface (CLI). Which command can successful-ly update the policy? (Choose the best answer.)

oci os object-lifecycle-policy put –ns <object_storage_namespace> –bn <bucket_name>

oci os object-lifecycle-policy get –ns <object_storage_namespace> –bn <bucket_name>

oci os object-lifecycle-policy delete –ns <object_storage_namespace> –bn <buck-et_name>

oci os object-lifecycle-policy put –ns <object_storage_namespace> –bn <bucket_name> — –items <json_formatted_lifecycle_policy>

NO.50 Which two statements about the Oracle Cloud Infrastructure (OCI) Command Line Inter-face (CLI) are TRUE? (Choose two.)

The CLI allows you to use the Python language to interact with OCI APIs.

You can run CLI commands from inside OCI Regions only.

You can filter CLI output using the JMESPath query option for JSON.

The CLI provides the same core functionality as the Console, plus additional commands.

The CLI provides an automatic way to connect with instances provisioned on OCI.

NO.51 You have created the following JSON file to specify a lifecycle policy for one of your object storage buckets:

How will this policy affect the objects that are stored in the bucket? (Choose the best answer.)

The objects with prefix LOGS will be deleted 30 days after creation date.

Objects containing the name prefix LOGS will be automatically migrated from standard Storage to Archive storage 30 days after the creation date. The object will be deleted 120 days after creation.

Objects containing the name prefix LOGS will be automatically migrated from standard Storage to Archive storage 30 days after the creation date. The object will be mi-grated back to standard Storage 120 days after creation.

Objects with the prefix LOGS will be retained for 120 days and then deleted permanently.

NO.52 Which of the following THREE statements are true about Versioning? (Choose three.)

You can enable the Versioning and Retention rule simultaneously on bucket.

If versioning enabled, even if you delete the file inside the bucket, you will be charged for the data shared as the meta data still resides inside the bucket.

If Versioning is enabled and you delete the files stored in a bucket, then a delete marker is created so that you can restore the deleted file.

If Versioning disabled, and you try uploading files with the same name, then a copy of the file in kept with a different name.

Versioning is applied at the bucket level.

NO.53 SIMULATION
Scenario: 2 (Oracle Cloud-init and AutoScaling: Use cloud-init to Configure Apache on Instances in an Autoscaling Instance Pool) Scenario Description: (Hands-On Performance Exam Certification) You’re deploying an Apache-based web application on OCI that requires horizontal autoscaling.
To configure instances upon provisioning, write a cloud-init script for Oracle Linux 8 that installs and enables Apache (httpd), and opens the firewall for HTTP on TCP port 80. Create an instance configuration and include the cloud-init script in it. Use this instance configuration to create an instance pool and autoscaling configuration.
Pre-Configuration:
To fulfill this requirement, you are provided with the following:
Access to an OCI tenancy, an assigned compartment, and OCI credentials
A VCN Cloud-Init Challenge VCN with an Internet gateway and a public subnet. The security list for the subnet allows ingress via TCP ports 22 and 80 (SSH and HTTP). The route table forwards all egress to the Internet gateway.
Access to the OCI Console
Required IAM policies
An SSH key pair for the compute instance
Public Key https://objectstorage.us-ashburn-1.oraclecloud.com/n/tenancyname/b/PBT_Storage/o/PublicKey.pub Private Key https://objectstorage.us-ashburn-1.oraclecloud.com/n/tenancyname/b/PBT_Storage/o/PKey.key Note: Throughout your exam, ensure to use assigned Compartment , User Name , and Region.
Complete the following tasks in the provisioned OCI environment:
Task 1(a): Develop the cloud-init Script:
Task 1(b): Use cloud-init to Configure Apache on Instances in an Autoscaling Instance Pool:

NO.54 Your customer is running a set of compute instances inside a private subnet to manage their workloads on Oracle Cloud Infrastructure (OCI) tenancy. You have set up auto scaling feature to provide consistent performance to their end users during period of high demand. Which step should be met for auto scaling to work? (Choose the best answer.)

Audit logs for the instances should be enabled.

OS Management Service agent (osms) must be installed on the instances.

Monitoring for the instances should not be enabled.

Service gateway should be setup to allow instances to send metrics to monitoring ser-vice.

NO.55 You run a large global application with 90% of customers based in the US and Canad a. You want to be able to test a new feature and allow a small percentage of users to access the new version of your application. What Oracle Cloud Infrastructure Traffic Management steering policy should you utilize? (Choose the best answer.)

Geolocation steering

Load Balancer

IP Prefix steering

ASN steering

NO.56 Here is a partial code from a Terraform template written for Oracle Cloud Infrastructure (OCI):

What operation(s) does it perform? (Choose the best answer.)

Creates a pre-authenticated request for objects in an OCI Object Storage bucket.

Provides object read and write access for an OCI Object Storage bucket.

Creates a URL to provide access to an OCI Object Storage bucket for managing objects.

Creates a lifecycle policy for an OCI Object Storage bucket for moving data to Archival storage at a specified time.

NO.57 One of the compute instances that you have deployed on Oracle Cloud Infrastructure (OCI) is malfunctioning. You have created a console connection to remotely troubleshoot it. Which two statements about console connections are TRUE? (Choose two.)

If you do not disconnect from the session, your serial console connection will automatically be terminated after 24 hours.

It is not possible to connect to the serial console to an instance running Microsoft Windows, however VNC console connection can be used.

It is not possible to use VNC console connections to connect to Bare Metal Instances.

For security purpose, the console connection will not let you edit system configuration files.

VNC console connection uses SSH port forwarding to create a secure connection from your local system to the VNC server attached to your instance’s console.

NO.58 You have a Terraform configuration that includes a VCN and three compute instances in the VCN. The configuration also includes a cloud-init script for each compute instance. You upload the configuration to OCI Resource Manager and run an apply job. Which option correctly describes the order of execution, assuming the configuration does not model explicit dependencies?

Resource Manager provisions the VCN, then the compute instances one at a time. Terraform does not wait for the cloud-init script of each instance to complete before proceeding to the next instance.

Resource Manager provisions the VCN, then all compute instances in parallel.

Resource Manager provisions the VCN, then the compute instances one at a time. Terraform waits for the cloud-init script of each instance to complete before proceeding to the next instance.

Resource Manager provisions the resources from top to bottom in the configuration file.

NO.59 Which technique does NOT help you get the optimal performance out of the Oracle Cloud Infrastructure (OCI) File Storage service? (Choose the best answer.)

Increase concurrency by using multiple threads, multiple clients, and multiple mount targets.

Right size compute instances from where file system is accessed based on their network capacity.

Limit access to the same Availability Domain (AD) as the File Storage service where possible.

Serialize operations to the file system to access consecutive blocks as much as possible.