1Z0-1111-26 Oracle Cloud Infrastructure Observability Professional Practice Questions
Prepare for 1Z0-1111-26 with more than an answer.
- Time limit
- 90 minutes
- Questions on the exam
- 50
- Passing score
- 68%
- Level
- Professional
- Valid for
- 24 months
Domains covered on the exam 7
- Define the pillars of Observability7%
- Monitor cloud environments with metrics and alarms18%
- Respond to cloud resource changes in real-time10%
- Centrally manage and visualize log data16%
- Identify log data patterns and create visualizations for advanced analytics22%
- Monitor applications with deep visibility into end-user experience20%
- Monitor distributed components of an application stack7%
- 1
An operations architect is configuring an OCI Events rule in the
Security-Opscompartment to fan out matching resource state-change events to multiple downstream OCI services located in different compartments, as shown in the diagram below. Which statement accurately describes the action limits, resource placement rules, and supported action targets for an OCI Events rule?flowchart LR Resource[OCI Resource State Change] --> Event[CloudEvents Message] Event --> Rule{Events Rule in Security-Ops Compartment} Rule -->|Action 1| Topic[OCI Notifications Topic in Shared-Ops] Rule -->|Action 2| Stream[OCI Streaming Stream in Audit-Archive] Rule -->|Action 3| Fn[OCI Functions in Sec-Automation]Show answer details
Correct answer: D
In OCI Events, a rule must specify at least one action and can have a maximum of 10 actions. The only supported action targets for an Events rule are OCI Notifications (topics), OCI Streaming (streams), and OCI Functions (functions). Target resources must be created before configuring the rule, can reside in compartments different from the rule's compartment, and require IAM policies authorizing both the rule creator/manager and the Events service to deliver messages to the targets.
- 2
During a tenancy reorganization, a cloud administrator needs to manage access control and compartment placement for OCI Audit logs, native OCI Service logs, and Custom logs within OCI Logging. Which statement accurately describes how these log categories and log groups operate?
Show answer details
Correct answer: A
In OCI Logging, Audit logs are read-only logs automatically generated by the OCI Audit service to record API calls made to public endpoints across the tenancy; they do not need to be manually enabled per resource. Service logs are emitted by supported native OCI services (such as API Gateway, Events, Functions, Load Balancer, Object Storage, and VCN Flow Logs) and are enabled or disabled per resource using service-defined log categories (for example,
readandwriteaccess events for Object Storage buckets). Every log is a first-class resource with an OCID inside a log group, and moving a log group to a new compartment automatically moves all logs contained within that log group. - 3
A DevSecOps team is onboarding legacy C++ applications running on a mix of OCI bare metal and virtual machine compute instances, along with workloads in an external cloud provider. They need to ingest custom diagnostic logs into OCI Logging and verify how those logs are protected. Which statement accurately describes custom log ingestion and encryption in OCI Logging?
Show answer details
Correct answer: B
OCI Logging supports ingesting custom logs from custom applications, other cloud providers, or on-premises hosts either through direct API calls or via the
fluentd-based Unified Monitoring Agent governed by an Agent Configuration. The Unified Monitoring Agent is supported on both virtual machine and bare metal compute instances. For security compliance, OCI Logging encrypts log data in-flight during ingestion, with disk-level encryption while in the system, and while archived in storage. - 4
While designing a telemetry strategy for a cloud-native retail platform on Oracle Cloud Infrastructure (OCI), a principal site reliability engineer distinguishes between traditional resource monitoring and full-stack observability. Which statement accurately characterizes how OCI Observability and Management services align with the core pillars of observability?
Show answer details
Correct answer: B
Traditional monitoring focuses on watching predefined system states and sending notifications when known thresholds are breached. Full observability extends this by correlating three primary telemetry signals: metrics (collected via OCI Monitoring), logs (centralized in OCI Logging and analyzed in OCI Logging Analytics), and traces (captured via OpenTracing/OpenMetrics-compatible OCI Application Performance Monitoring). Using these three pillars together allows teams to actively debug novel issues in distributed microservices and optimize end-to-end performance. The other options misstate service roles: OCI Events tracks control-plane resource state changes rather than distributed traces, OCI Connector Hub is a message bus rather than a metric storage engine, and OCI Stack Monitoring requires the Management Agent rather than replacing APM browser tracing.
mindmap root((OCI Observability Pillars)) Metrics OCI Monitoring Metrics Explorer Alarms & Notifications Logs OCI Logging OCI Logging Analytics Log Explorer & Cluster Traces OCI APM Trace Explorer RUM & Availability Monitoring - 5
A global financial clearinghouse is migrating its core settlement workload into a multi-compartment Oracle Cloud Infrastructure (OCI) tenancy. The enterprise architecture board mandates strict operational governance across three distinct functional requirements.
First, whenever an administrator or automation script modifies or deletes an Object Storage bucket in the settlement compartment, the platform must immediately invoke a serverless remediation routine without polling API logs. Second, diagnostic logs generated by VCN Flow Logs and Load Balancers must be centrally collected and continuously routed both to an Object Storage archive bucket for compliance and to an advanced analytics engine capable of semantic clustering and transaction linking. Third, the operations team requires proactive discovery and health monitoring of Oracle WebLogic domains and Oracle Database instances running on compute hosts using local agents.
Which combination of OCI Observability and Management services should the lead cloud architect select to fulfill all three requirements?
Show answer details
Correct answer: A
OCI Events emits structured CloudEvents messages in real time when resources change state (such as
com.oraclecloud.objectstorage.deletebucket) and can directly trigger an OCI Function for automated remediation. OCI Logging centralizes native service logs (including VCN Flow Logs and Load Balancer logs), while OCI Connector Hub acts as a cloud message bus to continuously move those logs to Object Storage for archival and to OCI Logging Analytics for advanced pattern clustering (Cluster) and transaction analysis (Link). Finally, OCI Stack Monitoring uses the Management Agent installed on hosts to discover and monitor application stack components including WebLogic domains and Oracle Databases. - 6
An infrastructure engineer executes the following Monitoring Query Language (MQL) expression via the
SummarizeMetricsDataAPI operation to inspect compute utilization:CpuUtilization[5m]{availabilityDomain = "VeBZ:PHX-AD-1"}.groupBy(poolId).percentile(0.9)How does OCI Monitoring handle the aggregation window timestamps and the resolution when this expression is evaluated as a standard metric query versus when it is used inside an alarm definition?
Show answer details
Correct answer: B
In OCI Monitoring, the interval defines the time window over which raw data points are aggregated, and the timestamp of each aggregated data point corresponds to the end of the time window (for example,
2:05represents data points from2:00:nto2:05:00). For standard metric queries (SummarizeMetricsData), the interval drives the default resolution (so a5minterval defaults to a5mresolution). For alarm queries, the interval has no effect on resolution because alarms are evaluated every minute and the only valid resolution for an alarm query is1m.
