1Z0-1111-26 sample questions

Question 1

True or False: On the `Create alarm` page in the OCI Console under `Define alarm`, the metric chart dynamically plots the last six hours of emitted metrics for the selected metric and resource group.

Accepted Answer

True

Answer

False

Question 2

A security automation engineer is writing an OCI Function in Go to parse event messages delivered by the OCI Events service. While inspecting the standardized CloudEvents envelope, the engineer needs to validate the unique identifier of the event and determine the originating compartment OCID from the envelope metadata. Which statement accurately describes the structure of the OCI Event envelope?

Accepted Answer

The `eventID` field is a unique UUID (not an OCID), `cloudEventsVersion` is set to `0.1`, and the mandatory `extensions` element in OCI's CloudEvents implementation holds the originating compartment OCID (or tenancy OCID if emitted from the root compartment).

Answer

The `data` object forms the outer envelope containing `cloudEventsVersion: "2.0"`, while the inner `envelope` object contains the resource payload.

Answer

The `eventID` field contains a globally unique OCID formatted as `ocid1.event.oc1..`, and `extensions` is an optional field that is omitted unless free-form tags are attached.

Answer

The `source` field stores the originating compartment OCID, `eventTime` is formatted in Unix epoch milliseconds, and `eventType` follows the syntax `oci. . . `.

Question 3

A cloud governance team wants to trigger an automated workflow only when an Autonomous AI Database or Object Storage bucket in the production compartment undergoes a state change that matches specific payload attributes and carries a designated cost-center tag. How should the team configure the OCI Events rule condition?

Accepted Answer

Define rule conditions that match on `Event Type` (formatted as `com.oraclecloud. . `), and combine them with `Attribute` filters and `Filter Tag` conditions so only events satisfying all specified condition types trigger the rule actions.

Answer

Create separate Events rules for event types, attributes, and tags, and chain them sequentially because a single Events rule can only evaluate one condition type.

Answer

Write a Monitoring Query Language (MQL) predicate inside the Events rule condition block using curly-bracket dimension filters `{tag.costCenter = "prod"}`.

Answer

Attach a Logging Analytics ingest-time lookup and parser to the Events rule so that non-matching `com.oraclecloud. . ` events are dropped prior to evaluation.

Question 4

An operations architect is configuring an OCI Events rule in the `Security-Ops` compartment to fan out matching resource state-change events to multiple downstream OCI services located in different compartments, as shown in the diagram below. Which statement accurately describes the action limits, resource placement rules, and supported action targets for an OCI Events rule?

```mermaid
flowchart LR
Resource[OCI Resource State Change] --> Event[CloudEvents Message]
Event --> Rule{Events Rule in Security-Ops Compartment}
Rule -->|Action 1| Topic[OCI Notifications Topic in Shared-Ops]
Rule -->|Action 2| Stream[OCI Streaming Stream in Audit-Archive]
Rule -->|Action 3| Fn[OCI Functions in Sec-Automation]
```

Accepted Answer

An Events rule must define at least one action and supports a maximum of 10 actions; target resources are limited to Notifications, Streaming, and Functions, must be created beforehand, and do not need to reside in the same compartment as the rule.

Answer

An Events rule can define up to 50 actions, including direct delivery to Object Storage buckets and Logging Analytics log groups, provided all target resources reside in the same compartment as the rule.

Answer

An Events rule supports up to 10 actions across Queue, Object Storage, and Functions, but Streaming targets require an intermediary Connector Hub instance to receive Events messages.

Answer

An Events rule supports only 1 action per rule, automatically provisions missing Notifications topics or Functions at creation time, and bypasses IAM policy evaluation for cross-compartment targets.

Question 5

During a tenancy reorganization, a cloud administrator needs to manage access control and compartment placement for OCI Audit logs, native OCI Service logs, and Custom logs within OCI Logging. Which statement accurately describes how these log categories and log groups operate?

Accepted Answer

Audit logs are read-only logs automatically emitted by the OCI Audit service for public endpoint API calls, Service logs are enabled per resource using service-defined log categories, and moving a log group to another compartment moves all contained logs with it.

Answer

Audit logs must be manually enabled on each compartment using a service-defined log category, and moving a log group to a new compartment leaves its existing logs behind in the source compartment.

Answer

Service logs are automatically enabled by default for all Object Storage buckets and VCNs, whereas Audit logs require deploying the Unified Monitoring Agent on the root compartment.

Answer

Individual logs do not have OCIDs and IAM policies can only be attached to individual log entries rather than to log groups.

Question 6

A DevSecOps team is onboarding legacy C++ applications running on a mix of OCI bare metal and virtual machine compute instances, along with workloads in an external cloud provider. They need to ingest custom diagnostic logs into OCI Logging and verify how those logs are protected. Which statement accurately describes custom log ingestion and encryption in OCI Logging?

Accepted Answer

Custom logs can be ingested via the Logging API or the `fluentd`-based Unified Monitoring Agent (supported on both virtual machine and bare metal instances) using an Agent Configuration, and OCI Logging encrypts logs in-flight during ingestion, at the disk level while in the system, and while archived in storage.

Answer

Collecting custom logs into OCI Logging requires deploying the APM Java Agent on the host and authenticating with a Public Data Key.

Answer

The Unified Monitoring Agent is supported only on virtual machine shapes and cannot run on bare metal instances, requiring bare metal hosts to stream custom logs exclusively through an OCI Queue.

Answer

Custom logs from other cloud providers can only be ingested by uploading zip files manually in the Console, and logs remain unencrypted on disk until transferred to Object Storage.

Top vendors

Top exams

Free 1Z0-1111-26 sample questions

True or False: On the `Create alarm` page in the OCI Console under `Define alarm`, the metric chart dynamically plots the last six hours of emitted metrics for the selected metric and resource group.

During a tenancy reorganization, a cloud administrator needs to manage access control and compartment placement for OCI Audit logs, native OCI Service logs, and Custom logs within OCI Logging. Which statement accurately describes how these log categories and log groups operate?

6 more free samples are waiting