Unlock Your Oracle Future: Master Oracle Cloud Infrastructure 2025 Architect Associate 1Z0-1072-25

Correct : A, D, E

A Dynamic Routing Gateway (DRG) in Oracle Cloud Infrastructure (OCI) is a virtual router that provides a path for private traffic between your on-premises network and your VCN, or between your VCN and other VCNs. The resources that can be attached to a DRG include:

A . Virtual Circuits: Used to establish a private connection between your on-premises data center and your VCN via Oracle's FastConnect service.

D . Remote Peering Connections: Enables peering between VCNs located in different regions (Remote VCN Peering).

E . IPSec Tunnel: Facilitates secure VPN connections between your on-premises network and your OCI VCN.

Oracle Cloud Infrastructure Documentation: Dynamic Routing Gateway Overview

Correct : D

In Oracle Cloud Infrastructure (OCI), block volumes are designed to be highly flexible and can be used in various ways:

A . Restoring from a volume backup to a larger volume: This is supported and allows for resizing during the restoration process.

B . Cloning an existing volume to a new, larger volume: You can clone a block volume and specify a larger size for the new volume.

C . Expanding an existing volume in place with offline resizing: OCI allows you to increase the size of an existing block volume without needing to take it offline.

Option D is NOT valid because block volumes can only be attached to compute instances within the same availability domain. Cross-availability domain attachment of block volumes is not supported directly.

Oracle Cloud Infrastructure Documentation: Block Volume Overview

Correct : C

OCI Confidential Computing is a security feature designed to protect data in use. This is particularly important for sensitive workloads where data must be secured not only when at rest or in transit but also while being processed.

Encrypts and Isolates In-Use Data: OCI Confidential Computing ensures that data and the applications processing it are isolated from the underlying infrastructure. This means that even if the infrastructure is compromised, the in-use data remains secure. The technology typically leverages secure enclaves or other hardware-based isolation mechanisms to achieve this.

Other Options:

Optimizing Network Performance (A), Automatic Scalability and Load Balancing (B), and Secure Data Storage (D) are important features, but they are not related to the core capabilities of Confidential Computing, which focuses on in-use data protection.

Relevant OCI Documentation:

OCI Confidential Computing Overview

This documentation provides a detailed explanation of how OCI Confidential Computing works and its benefits for securing sensitive data during processing.

Correct : C

When Cross-Region Replication is enabled for a block volume in Oracle Cloud Infrastructure (OCI), the replication process automatically creates and maintains a synchronized copy of the block volume in the selected destination region (in this case, US West (San Jose)).

Replica Availability: The replicated volume is immediately available as a block volume in the destination region. You do not need to take any additional action to activate or trigger the replica.

Creating New Volumes: Since the replica is automatically available as a block volume, you can directly use it to create a new volume in the destination region without any manual intervention.

Relevant OCI Documentation:

Cross-Region Block Volume Replication

This documentation outlines how cross-region replication works and confirms that no additional steps are needed to create a new volume from a replica

Correct : B, D

Oracle Cloud Infrastructure (OCI) File Storage Service offers robust encryption capabilities to ensure data security.

B . Customer-Managed Encryption: Customers can choose to encrypt their data using their own keys stored in the OCI Vault service. This gives customers control over their encryption keys and enhances data security.

D . Oracle-Managed Encryption: By default, all data stored in OCI File Storage is encrypted using Oracle-managed keys. This ensures that data is encrypted at rest without requiring any action from the customer.

Incorrect Statements:

A . Communication is not encrypted via HTTPS when accessing file systems; instead, encryption in transit is typically managed via NFS over TLS.

C . Encryption of communication to a mount target is handled via network configurations, not through export options.

Oracle Cloud Infrastructure Documentation: File Storage Encryption