Question 1
A primary database in an OCI Data Guard association becomes unreachable after an unplanned outage in its region, and the operations team promotes the standby so the application can resume. Later, the original region is restored and the team wants to re-establish protection. Which characterization of the roles involved is correct?
A. A failover copies the standby's data files back onto the original primary, so the original database automatically resumes the primary role once its region returns.
Misunderstands failover as a data-restore operation onto the old primary. Failover is a role transition on the standby; the old primary is not automatically rebuilt or re-promoted when its region recovers.
B. A failover promotes the standby to the primary role, and the former primary must be reinstated as a standby before the association is protected again.Correct answer
Correct. Data Guard roles are transitional: failover makes the standby the new primary, leaving the configuration unprotected until the old primary is reinstated in the standby role and redo apply resumes.
C. A failover leaves both databases in the primary role simultaneously, and applications may write to either one until an administrator chooses a survivor.
Describes an unmanaged split-brain. Data Guard maintains exactly one primary; allowing writes to two databases would produce divergent data that redo apply could never reconcile.
D. A failover is only a routine maintenance operation, so an unreachable primary must instead be repaired in place before any role change is possible.
Confuses failover with switchover. Switchover is the planned, no-data-loss role reversal used for maintenance; failover is the operation intended precisely for an unplanned outage where the primary cannot be reached.
Explanation
Data Guard maintains exactly one primary and one or more standbys, and the operations that move databases between those roles are switchover (planned, coordinated, no data loss) and failover (unplanned, used when the primary is unavailable). After a failover the promoted standby is the new primary and the configuration runs unprotected until the former primary is reinstated as a standby and redo apply resumes. Failover does not push data files back to the old primary, it never leaves two writable primaries, and it is specifically the unplanned-outage operation rather than the routine maintenance one.