Be able to choose the right OCI networking and security component for a given scenario, and configure routing correctly. The single most important thing: know which gateway or security construct applies, since most questions hinge on that distinction.
Start practicing
Core Oci Services — choose a session length
Free · No account required
Domain overview
This domain covers the core Oracle Cloud Infrastructure services you must configure and reason about: networking (VCNs, subnets, gateways, peering, FastConnect), compute instances, block and object storage, and identity-based access control. Questions are scenario-driven, asking you to pick the correct service, gateway type, or security construct for a stated requirement.
Exam objectives
Selecting Network Security Groups versus security lists to scope rules to specific VNICs or instances
Identifying attachable VCN gateways: Internet, NAT, Service, Dynamic Routing, Local Peering, Remote Peering
Designing FastConnect Partner/Provider connectivity to reach multiple VCNs across regions
Diagnosing LPG misconfigurations such as missing route table entries or asymmetric security rules
Assuming security lists can target a single instance; they apply at the subnet level, so Network Security Groups are needed for per-instance control.
Confusing NAT Gateway (outbound-only) with Internet Gateway, or forgetting Service Gateway for OCI services without public traffic.
Overlooking that Local Peering Gateway connections require matching route rules on both VCNs and non-overlapping CIDRs.
Click any question to see the full explanation and answer options, or start a focused practice session above.
An administrator wants to restrict inbound SSH access to a specific group of database compute instances without modifying subnet-level security rules. Which OCI feature should be used to define these fine-grained VNIC rules?
2A company needs to store petabytes of data that is rarely accessed but must be retained for compliance for 7 years. Retrievals can take up to several hours. Which storage tier should they use?
3A cloud architect needs to deploy a cloud-native application using Docker containers without managing any underlying infrastructure, servers, or Kubernetes worker nodes. Which OCI service should they select?
4An application running on OCI Compute instances requires shared file storage that can be mounted concurrently across hundreds of Linux instances via the standard NFS protocol. Which OCI storage service is best suited?
5Your development team needs to deploy microservices orchestrated via Kubernetes with automated worker node scaling and managed control plane upgrades. Which OCI service should you provision?
6You are configuring an Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN) and need to ensure that compute instances in a private subnet can initiate outbound internet connections to download software patches without allowing unsolicited inbound traffic from the internet. Which gateway must you attach to the VCN?
7You need to connect an on-premises data center to an OCI Virtual Cloud Network with dedicated, high-bandwidth, and predictable network performance that bypasses the public internet entirely. Which OCI networking service should you implement?
8You need to route traffic privately from your VCN to Oracle Cloud Infrastructure Object Storage in the same region without traversing the public internet. Which components must be configured?
9A web application experiencing fluctuating traffic needs a compute solution that automatically scales out the number of virtual machine instances based on CPU utilization. Which combination of OCI services should be configured?
10You are designing an architecture requiring a resilient, fault-tolerant entry point that distributes incoming HTTP/HTTPS traffic across multiple backend compute instances across different availability domains. Which load balancing service should you deploy?
11An administrator must configure DNS resolution so that instances within a VCN can resolve custom internal domain names managed by an on-premises DNS server connected via FastConnect. Which OCI DNS feature should be used?
12You want to automate object lifecycle management in an OCI Object Storage bucket so that files older than 90 days are automatically transitioned to Archive storage. What should you configure?
13Which OCI compute shape type provides dedicated physical server hardware with no hypervisor overhead, ensuring maximum performance and isolation?
14An organization requires a highly available IPsec VPN connection from their on-premises data center to an OCI VCN. To ensure high availability, what is the recommended architecture for the Dynamic Routing Gateway (DRG) and customer premise equipment (CPE)?
15You need to run a stateless containerized background processing job that executes periodically and terminates immediately upon completion without managing servers. Which OCI serverless service is ideal?
16You are troubleshooting intermittent packet drops between two subnets in different VCNs connected via a Local Peering Gateway (LPG). Both VCNs have non-overlapping CIDR blocks. What is a common misconfiguration that could cause this issue?
17An administrator needs to create a flexible OCI compute virtual machine instance. Which parameters are required when selecting a flexible compute shape?
18Which OCI Object Storage feature allows you to grant temporary, time-bound read or write access to a specific bucket or object without sharing user credentials?
19A database administrator needs to take an instantaneous, point-in-time, space-efficient copy of a large block volume without waiting for full data copying to complete. Which Block Volume feature should they use?
20What is the primary purpose of an OCI Internet Gateway when attached to a Virtual Cloud Network (VCN)?
21You need to deploy a batch processing job that can tolerate sudden termination by OCI if compute capacity is reclaimed, significantly reducing your compute costs. Which instance type should you choose?
22An enterprise application deployed across multiple OCI subnets requires a Layer 4 load balancer that can handle millions of packets per second with ultra-low latency and preserve client source IP addresses. Which service should you deploy?
23Which OCI Object Storage tier is recommended for storing data that is accessed infrequently, but requires rapid access when needed with lower retrieval costs than Archive?
24You are configuring security rules for a multi-tier application. You want to allow web servers in a specific Network Security Group (NSG) to communicate with database servers in another NSG. How should you define the ingress rule in the database NSG?
25You need to ensure that database block volumes are automatically backed up every day with a retention policy of 30 days across multiple regions. What OCI feature should you use?
26What is the container image registry service provided natively by Oracle Cloud Infrastructure for storing and sharing OCI container images?
27An administrator needs to attach a block volume to a compute instance. Which two attachment methods are supported by OCI Block Volume service?
28Which TWO OCI storage services provide file or object storage capabilities rather than block storage? (Choose two.)
29Which TWO statements are true regarding OCI Flexible Compute shapes? (Choose two.)
30Which THREE storage performance tiers are available for OCI Block Volumes? (Choose three.)
31An administrator needs to create a private network inside a VCN that isolates database servers from the public internet. How should this be structured?
32Which TWO networking services or gateways in OCI can be used to route traffic from a VCN to the public internet? (Choose two.)
33Which TWO features are characteristic of OCI Network Load Balancers (NLB)? (Choose two.)
34You are configuring an OCI Load Balancer and want to ensure high availability by distributing traffic across backend servers in different availability domains within a region. Which type of load balancer should you deploy?
35Which OCI service enables you to run serverless functions triggered by events or HTTP requests without managing servers or runtimes?
36You have an application running in OCI that needs to query Oracle Autonomous Database privately. Traffic must not traverse the public internet and must use OCI's backbone network. Which service should you configure in your VCN?
37You need to back up an on-premises database directly to OCI Object Storage using a dedicated, high-speed connection that does not use the public internet. Which networking service should you use?
38An administrator needs to modify the route table of a private subnet so that all traffic destined for an on-premises data center is routed correctly. What should be the target in the route table rule?
39What is the default maximum size of a single Object Storage bucket in OCI?
40You are configuring security lists for a subnet hosting web servers. You want to allow incoming HTTP traffic on port 80 from any IP address on the internet. How should you configure the ingress rule?
41Which OCI compute feature allows you to run virtual machines on dedicated physical servers allocated exclusively to your organization?
42You need to copy an existing Block Volume backup from your home region to another OCI region for disaster recovery purposes. What feature should you use?
43An application deployed on OCI Compute instances requires custom DNS records that resolve only within a specific VCN and are not exposed to the public internet. Which OCI DNS feature should you configure?
44Which THREE types of gateways can be attached to an OCI Virtual Cloud Network (VCN)? (Choose three.)
45Which THREE features are provided by OCI Object Storage buckets? (Choose three.)
46Which TWO statements are true regarding OCI File Storage Service (FSS)? (Choose two.)
47Which TWO methods can be used to connect an on-premises data center to an OCI Virtual Cloud Network? (Choose two.)
48What is the primary function of a Dynamic Routing Gateway (DRG) in OCI?
49Which TWO metrics can be monitored using OCI Monitoring service for compute instances? (Choose two.)
50An administrator needs to configure autoscaling for a compute instance pool so that instances scale out when CPU usage exceeds 80% and scale in when CPU usage drops below 20%. Where is this autoscaling configuration applied?
51You need to create a container cluster in OCI where Oracle manages the Kubernetes control plane and you manage the worker nodes. Which service do you deploy?
52Which OCI Object Storage tier is optimized for storing active data that requires fast and frequent access with lowest latency?
53Which THREE actions can be performed using OCI Object Storage features? (Choose three.)
54You want to host a static HTML website with images and JavaScript files entirely on OCI without provisioning any virtual machine web servers. Where should you store and serve these website files?
55What is the term used in OCI to describe a software-defined version of a traditional physical network, including subnets, route tables, and gateways?
56Which TWO protocols or methods are supported when attaching an OCI Block Volume to a compute instance? (Choose two.)
57What is the primary benefit of using OCI Preemptible Instances?
58Which TWO OCI services are used to build and manage containerized applications? (Choose two.)
59You need to configure an OCI Load Balancer listener to handle secure HTTPS traffic with SSL certificate termination. Where do you configure the SSL certificate?
60An administrator needs to route internet-bound traffic from private compute instances through a NAT Gateway. What route table configuration is required in the private subnet?
61Which OCI storage service is best suited for sharing configuration files across multiple Linux virtual machine instances simultaneously?
62You are configuring an OCI Network Load Balancer (NLB) for a high-performance database cluster. Why would you choose NLB over a regional Layer 7 Load Balancer?
63An enterprise application requires private connectivity between two VCNs in different OCI regions. Which component must be used to connect them?
64What is the primary purpose of an OCI Service Gateway?
65You need to deploy a microservice application in OCI using serverless containers that start in seconds without provisioning Kubernetes clusters or virtual machines. Which OCI service should you use?
66Which TWO actions are supported when managing OCI Block Volume backups? (Choose two.)
67You are troubleshooting a connectivity issue where an on-premises server cannot reach an OCI compute instance over an IPsec VPN tunnel. The security list and NSG rules are verified as correct. What is another common OCI networking configuration that must be checked?
68Which TWO OCI compute shape categories offer flexible sizing where you can independently select the number of OCPUs and memory? (Choose two.)
69Which THREE configuration items are specified when creating an OCI Virtual Cloud Network (VCN)? (Choose three.)
70Which TWO mechanisms can be used to secure data in transit within OCI networking? (Choose two.)
71What is the primary function of an OCI NAT Gateway?
72You need to deploy a web application across multiple compute instances with automated scaling and load balancing. Which combination of OCI services provides this complete architecture?
73Which OCI storage service is best suited for storing database backups that require high durability and lowest cost without immediate file system mounting requirements?
74You are configuring security rules for an OCI Virtual Cloud Network. What is the key difference between a Security List and a Network Security Group (NSG)?
75Which TWO OCI features are associated with OCI Object Storage? (Choose two.)
76Which OCI compute shape is best suited for workloads requiring dedicated physical servers with no virtualization layer or hypervisor overhead?
77Which TWO statements are true regarding OCI Load Balancer features? (Choose two.)
78Which TWO core OCI services provide compute capabilities? (Choose two.)
79An administrator is configuring autoscaling on an OCI Instance Pool. They notice that the autoscaling configuration is not triggering scale-out actions despite high CPU utilization. What is a likely cause?
80Which THREE OCI networking components are required to connect an on-premises data center to a VCN via an IPsec VPN? (Choose three.)
81Which THREE storage tiers are available in OCI Object Storage? (Choose three.)
82What is the primary function of an OCI Internet Gateway?
83Which TWO configuration steps are necessary when setting up private access from a VCN to OCI Object Storage using a Service Gateway? (Choose two.)
84You need to deploy a scalable containerized web application where Oracle manages the Kubernetes control plane and you manage the underlying compute worker nodes. Which service should you choose?
85What is the primary purpose of an OCI Internet Gateway?
86An application requires a block volume with guaranteed high performance and low latency for heavy database operations. Which OCI Block Volume performance tier should you select?
87Which OCI service allows you to run serverless code in response to events without provisioning or managing virtual servers?
88You are configuring security rules for a multi-tier application. You want to allow web servers in a specific Network Security Group (NSG) to communicate with database servers in another NSG. How should you define the rule in the database NSG?
89You need to ensure that database block volumes are automatically backed up daily with a retention policy of 30 days and cross-region replication. What OCI feature should you use?
90A cloud architect needs to provision an Oracle Cloud Infrastructure (OCI) Compute instance with a custom number of OCPUs and memory for a memory-intensive application. Which shape type should the architect select?
91An enterprise application running on OCI requires high availability across two Availability Domains within a single region. The database backend needs to be securely isolated from public internet traffic while maintaining high-speed, low-latency communication with the application servers. How should the Virtual Cloud Network (VCN) be structured?
92An administrator has configured a Dynamic Routing Gateway (DRG) to connect an on-premises datacenter to an OCI VCN using an IPsec VPN. However, on-premises servers cannot communicate with instances in the VCN. Which VCN routing configuration is missing?
93A company needs to store unstructured data such as log files, images, and backups in OCI for long-term retention at the lowest possible cost, and data retrieval times of several hours are acceptable. Which OCI Object Storage tier should be chosen?
94An application team is deploying microservices on OCI Container Engine for Kubernetes (OKE). They want to expose multiple HTTP services using a single public IP address and route traffic based on URL path routing rules. Which OCI service should they integrate with their Kubernetes Ingress controller?
95A database administrator needs to share a multi-gigabyte Oracle Database backup file stored in an OCI Object Storage bucket with an external auditor who does not have an OCI account. How can this be achieved securely without granting IAM console access?
96An administrator wants to ensure that critical files stored in an OCI Object Storage bucket are automatically deleted after 90 days to comply with data retention policies. What feature should be used?
97An organization is setting up a hybrid network architecture using OCI FastConnect with a Partner/Provider model. They need to ensure that their on-premises network can communicate with multiple VCNs across different regions using private IP addresses without traversing the public internet. Which OCI component is mandatory to achieve this?
98An operations engineer needs to provision a Network File System (NFS) that can be simultaneously mounted across hundreds of OCI Compute instances for shared data processing. Which OCI storage service is best suited for this?
99A developer wants to run event-driven data processing tasks in OCI without provisioning or managing any underlying servers. The execution duration is short (under 5 minutes). Which OCI service should the developer use?
100An administrator needs to create a custom DNS domain name resolution for instances within an OCI VCN so they can resolve hostnames to internal IP addresses. Which OCI DNS feature should be configured?
101A web application deployed across multiple compute instances experiences fluctuating traffic loads throughout the day. The infrastructure needs to automatically add or remove compute instances based on CPU utilization metrics. Which OCI service combination provides this capability?
102An administrator wants to run Docker containers in OCI quickly without managing Kubernetes clusters, node pools, or servers. Which OCI service is most appropriate?
103An enterprise has two VCNs in the same OCI region. VCN-A needs to communicate with VCN-B. The VCN CIDR blocks do not overlap. The administrator configures a Local Peering Gateway (LPG) on VCN-A and another on VCN-B, and establishes the peer connection. However, instances in VCN-A still cannot reach instances in VCN-B. What additional step is required?
104A security administrator wants to implement stateful packet filtering at the individual instance level within a VCN subnet, allowing different rules to apply to different groups of instances in the same subnet. Which OCI feature should be used?
105An administrator needs to create a point-in-time, read-only copy of a Block Volume data disk for backup and disaster recovery purposes. What OCI feature should be created?
106An administrator is configuring a site-to-site VPN connection between an on-premises data center and an OCI VCN. During testing, packets are being dropped because the on-premises firewall expects a specific encryption algorithm and IPsec tunnel parameters that do not match OCI defaults. How can this be resolved?
107An OCI tenant requires a dedicated, high-speed, private network connection from their on-premises data center to OCI that bypasses the public internet entirely. Which OCI service should be provisioned?
108A developer has deployed a Node.js web application on an OCI Compute instance, but external users cannot access the application on port 3000. The instance's VCN has a security list allowing TCP traffic on port 3000. What additional OS-level configuration is likely blocking the traffic?
109An administrator wants to configure automated backup policies for OCI Block Volumes attached to production databases. They need a policy that takes daily backups and retains them for 30 days, as well as weekly backups retained for 1 year. How can this be accomplished?
110A company needs to register and manage public DNS records (such as A, CNAME, and TXT records) for their domain name hosted on OCI. Which OCI service should they use?
111An administrator wants to ensure that OCI Compute instances in an instance pool are automatically replaced if the underlying physical hardware experiences a catastrophic failure. Which OCI feature provides this capability?
112An administrator is setting up an OCI File Storage (FSS) mount target in a specific subnet. When attempting to mount the file system from a compute instance in a different subnet within the same VCN, the mount command hangs. What must be configured to allow this connection?
113An application running in an OCI VCN needs to access OCI Object Storage and Oracle Autonomous Database privately. Both services must be accessed without traffic leaving Oracle's network backbone and without using public IPs. Which combination of OCI gateway features accomplishes this?
114A company is running multiple web servers behind an OCI Public Load Balancer. They notice that client IP addresses are appearing in web server logs as the internal private IP address of the load balancer rather than the actual client's public IP address. How can this be resolved?
115An administrator needs to temporarily grant read access to a specific file in an OCI Object Storage bucket to a colleague without managing IAM user credentials. What feature should be used?
116An administrator is managing an Oracle Container Engine for Kubernetes (OKE) cluster. They want to ensure that worker nodes are distributed across multiple failure domains or Availability Domains to prevent downtime if a single hardware rack fails. How should this be configured?
117An administrator is troubleshooting a VCN where instances in a private subnet cannot reach the public internet via a NAT Gateway. The NAT Gateway is attached to the VCN, and the security list allows all outbound traffic. What is the most likely cause of the failure?
118An architect wants to distribute incoming client traffic evenly across a pool of backend OCI Compute web servers while terminating SSL/TLS connections at the load balancer layer. Which OCI service should be used?
119Which TWO of the following are valid OCI Object Storage storage tiers? (Choose two.)
120An organization has strict compliance requirements to ensure that all data stored in OCI Object Storage buckets is encrypted using a custom encryption key managed entirely by the customer, rather than Oracle-managed keys. How can this be achieved?
121Which THREE of the following statements are true regarding OCI Block Volume backups and performance? (Choose three.)
122Which THREE of the following features are supported by OCI Network Load Balancer (NLB)? (Choose three.)
123Which TWO of the following gateways can be attached to an OCI Virtual Cloud Network (VCN)? (Choose two.)
124Which THREE of the following actions can be performed using OCI File Storage Service (FSS)? (Choose three.)
125Which TWO of the following statements about OCI FastConnect are correct? (Choose two.)
126Which THREE of the following are characteristics of OCI Container Instances? (Choose three.)
127Which TWO of the following networking components are required to configure a working site-to-site IPsec VPN connection to an OCI VCN? (Choose two.)
128Which THREE of the following statements regarding OCI Virtual Cloud Network (VCN) Security Lists and Network Security Groups (NSGs) are correct? (Choose three.)
129Which TWO of the following features are provided by OCI DNS? (Choose two.)
130Which TWO of the following are valid methods for deploying applications on OCI without managing underlying operating systems or virtual machine hypervisors? (Choose two.)
131A database administrator must establish a high-throughput, highly reliable hybrid connection between an on-premises data center and OCI. The connection must bypass the public internet and guarantee steady throughput with SLA-backed performance. Which networking service combination meets these criteria?
132An administrator needs to store infrequently accessed backups in OCI Object Storage that require long-term retention and can tolerate a retrieval time of up to several hours. Which storage tier is most cost-effective?
133An application deployment requires traffic from an OCI Virtual Cloud Network (VCN) to securely access Oracle Autonomous Database instances in the region without traversing the public internet. Which gateway must be configured in the VCN?
134A security engineer is designing a zero-trust architecture for a microservices environment in OCI. Traffic between compute instances in different subnets must be restricted based on individual workload roles rather than entire subnet CIDR blocks. Which OCI networking feature should be implemented?
135An operations team wants to ensure that a critical web application automatically scales compute capacity up during high traffic spikes and scales down when traffic subsides. Which OCI service combination provides this capability?
136A company needs a shared file system accessible by multiple Linux compute instances simultaneously via the Network File System (NFSv3) protocol across different availability domains. Which OCI service should be deployed?
137An administrator needs to configure custom DNS resolution for instances within a VCN so they can resolve hostnames pointing to an internal on-premises corporate directory server over a FastConnect link. Which OCI DNS feature should be configured?
138An application developer needs to trigger a data-processing script immediately whenever a new object is uploaded to an OCI Object Storage bucket. Which OCI service should be used to execute the script in a serverless manner?
139An architect is provisioning a high-performance compute cluster that requires direct, unvirtualized access to physical hardware components, including raw local NVMe SSDs and high core counts, without hypervisor overhead. Which compute shape category must be chosen?
140A web application hosted on OCI requires layer-7 load balancing, SSL termination, and cookie-based session persistence across multiple backend compute instances. Which OCI Load Balancer type meets these requirements?
141A company is running a batch processing workload on OCI and wants to optimize compute costs by using spare capacity. The workload can tolerate sudden termination if OCI reclaims the capacity. Which compute instance type should be deployed?
142An administrator needs to ensure that data in an OCI Object Storage bucket is automatically transitioned from Standard storage to Infrequent Access storage after 30 days, and then deleted after 365 days. Which Object Storage feature should be used?
143A network engineer is configuring a Site-to-Site VPN between an on-premises data center and an OCI VCN. To ensure high availability, the setup requires multiple customer-premises equipment (CPE) public IP addresses communicating with distinct Oracle VPN tunnel endpoints on the DRG. How many default tunnels does each OCI VPN connection provision per DRG attachment?
144An enterprise application team needs to migrate an existing multi-tier application into Oracle Container Engine for Kubernetes (OKE). They need a managed Kubernetes control plane where OCI manages the master nodes while worker nodes run in their VCN. Which OKE cluster type should they create?
145A cloud architect needs to configure a regional subnet in a Virtual Cloud Network (VCN). Across how many availability domains can a regional subnet span?
146Which TWO OCI networking components are required to successfully enable private communication between two separate VCNs residing in the same OCI region? (Choose two.)
147An architect is designing a highly resilient web application on OCI. Which TWO components are essential for distributing incoming HTTP/HTTPS traffic across multiple backend compute instances across different availability domains? (Choose two.)
148Which THREE statements are accurate regarding OCI Object Storage capabilities and architecture? (Choose three.)
149An engineer needs to deploy flexible compute instances on OCI. Which TWO parameters can be independently adjusted when configuring a flexible compute shape? (Choose two.)
150Which THREE entities can be attached to an OCI Dynamic Routing Gateway (DRG) to facilitate network connectivity? (Choose three.)
151An auditor is reviewing security controls for OCI Virtual Cloud Networks. Which THREE characteristics differentiate Security Lists from Network Security Groups (NSGs)? (Choose three.)
152An application running on an Oracle Cloud Infrastructure (OCI) compute instance needs secure, private access to Object Storage in the same region without traversing the public internet. Which architecture should you implement?
153Your development team needs to deploy containerized applications rapidly on OCI without managing underlying compute servers or clusters. Which OCI container service fits this requirement best?
154You are managing a mission-critical database workload on an OCI Block Volume. The workload experiences extremely high and unpredictable I/O bursts, requiring the highest possible IOPS performance per volume. Which performance tier should you select?
155Your organization wants to store compliance audit logs for 7 years at the absolute lowest storage cost, acknowledging that data retrieval may take several hours. Which OCI Object Storage tier should you use?
156You are designing a high-throughput, fault-tolerant web application tier. You need to distribute incoming HTTP/HTTPS traffic across multiple compute instances across different availability domains within a region. Which service should you deploy?
157An enterprise customer requires a dedicated, private, high-speed connection between their on-premises datacenter and OCI, bypassing the public internet entirely while offering predictable network performance. Which OCI connectivity option meets this requirement?
158Your application running on OCI compute instances requires a shared POSIX-compliant file system that can be mounted simultaneously by hundreds of compute instances across multiple availability domains. Which OCI storage service should you select?
159Which TWO statements are true regarding Oracle Cloud Infrastructure (OCI) Compute Flexible Shapes?
160Which TWO statements accurately describe OCI Block Volume backups?
161You need to deploy a web application on OCI that requires a flexible compute shape to adjust CPU and memory independently. Which OCI compute feature should you select?
162Your application requires a high-performance, POSIX-compliant shared file system that can be accessed by multiple compute instances across different availability domains. Which service should you choose?
163You are configuring a VCN and need to ensure that instances in a private subnet can access the internet to download updates without exposing them to incoming traffic. Which component is required?
164You need to migrate a legacy application to OCI that requires a specific IP address to be retained for compliance. Which OCI networking feature allows you to attach a specific public IP to an instance?
165Which OCI service is best suited for running serverless code functions that trigger based on events or HTTP requests?
166You are deploying a microservices architecture on OKE. You need to ensure that the control plane is managed by OCI to reduce management overhead. Which OKE deployment model is best?
167Your application team needs to store millions of small files that are rarely accessed but must be available immediately when requested. Which storage tier is most cost-effective?
168You need to allow database instances in a private subnet to communicate with Object Storage over the private network. Which service is required?
169You are configuring an OCI Load Balancer and need to distribute traffic based on the URL path (e.g., /api vs /web). Which feature should you configure?
170A company requires a dedicated, private connection between their on-premises data center and OCI that provides consistent bandwidth. Which service is recommended?
171Which OCI storage option is recommended for storing high-performance boot volumes for virtual machines?
172You need to automatically increase the number of compute instances in your cluster when CPU utilization exceeds 80%. Which service should you use?
173What is the primary benefit of using OCI Container Instances?
174Which OCI service allows you to back up your on-premises data to the cloud for long-term storage?
175You have two VCNs in the same region that need to communicate privately. Which component must be configured?
176To ensure high availability for your web application, you should deploy your instances across:
177What is the default behavior of a Security List in OCI?
178Which OCI service provides a managed Domain Name System (DNS) to manage your domain records?
179You need to restrict access to a specific compute instance based on the application it is running, without affecting other instances in the same subnet. Which security feature should you use?
180When creating a block volume backup, where is the data stored?
181You need to ensure that Object Storage data is automatically moved to Archive Storage after 90 days to save costs. How can you achieve this?
182Which of the following is a benefit of OCI Bare Metal instances?
183Which OCI service is used to host containerized applications and manage clusters?
184You are configuring an OCI Load Balancer. Which component defines the backend servers that receive traffic?
185How do you improve the performance of a block volume attached to a compute instance?
186You need to allow traffic from an on-premises site to a VCN using a VPN. What component is required in the VCN to act as the endpoint?
187If an instance in a public subnet cannot reach the internet, what is the first thing you should check?
188Which OCI feature allows you to attach a single block volume to multiple instances simultaneously?
189What happens to an Ephemeral Public IP when you stop a compute instance?
190How does OCI ensure that high-availability requirements are met within a single region?
191Which OCI service is highly recommended for storing large amounts of unstructured data such as images and backups?
192When using an OCI Load Balancer, which protocol is recommended for securing traffic?
193What is the purpose of a Pre-Authenticated Request in Object Storage?
194Which of the following is a capability of the OCI Block Volume service?
195You need to allow your OKE cluster to access a private database. Where should the database be placed for the best security practice?
196Which THREE of the following are primary benefits of using Object Storage?
197Which THREE of the following are valid OCI File Storage Service (FSS) characteristics?
198Which THREE of the following are components of an OCI Load Balancer?
199Which TWO of the following are valid OCI compute shape types?
200Which TWO of the following are OCI storage services?
201Which TWO of the following are types of OCI VCN subnets?
202Which THREE of the following are features of OCI Load Balancer?
203Which TWO of the following are methods to protect data in Block Volume?
204Which THREE of the following are properties of a VCN?
205Which TWO of the following can be used to manage containerized workloads in OCI?
206A solutions architect needs to run a stateless web application on OCI. The application must automatically scale out when CPU utilization exceeds 70% and scale in when it drops below 30%, while minimizing operational overhead. Which OCI service should the architect use to achieve this?
207A company wants to store backup data in OCI Object Storage. The data is infrequently accessed but must be retrievable within milliseconds when needed. The company wants to minimize storage costs while meeting the retrieval requirement. Which Object Storage tier should they use?
208A research team runs a long-running simulation on an OCI Compute instance in the Frankfurt region. They need a shared, POSIX-compliant file system that can be mounted by multiple Linux instances simultaneously and that can automatically scale capacity up to 8 EB without provisioning. Which OCI service should they use?
209A database administrator needs to deploy a highly available Oracle Database on OCI. The database must automatically fail over to a standby database in another Availability Domain within the same region in case of a primary failure, with minimal data loss. Which OCI service should be used?
210A media company stores millions of video files in an OCI Object Storage bucket. The compliance team requires that all objects be encrypted with a customer-managed key stored in OCI Vault, and that the encryption key be rotated automatically every 90 days. Which OCI feature should the administrator configure to meet these requirements?
211A startup wants to run a containerized web application on OCI without managing any worker nodes or control plane infrastructure. They need automatic scaling and pay only for the compute resources their pods consume. Which OCI service should they use?
212A financial services company needs to run a high-performance computing (HPC) workload on OCI that requires extremely low latency and high bandwidth between compute instances. They want to minimize network overhead and jitter. Which OCI feature should they enable?
213A DevOps engineer needs to store application configuration files and secrets for a containerized application running on OCI. The secrets must be retrievable by the application at runtime without hardcoding them in the container image. The solution must support versioning and auditing of secret access. Which OCI service should the engineer use?
214A company is deploying a multi-tier application on OCI. The web tier runs on compute instances in a public subnet, and the database tier runs on compute instances in a private subnet. The security team requires that database instances be accessible only from the web tier on port 1521, and that the database instances have no direct internet access. Which TWO OCI features should be configured to meet these requirements? (Choose two.)
Be able to choose the right OCI networking and security component for a given scenario, and configure routing correctly. The single most important thing: know which gateway or security construct applies, since most questions hinge on that distinction.
The Courseiva 1Z0-1085-26 question bank contains 214 questions in the Core Oci Services domain. Click any question to see the full explanation and answer breakdown.
Start with a 10-question focused session to identify your baseline accuracy in this domain. Read every explanation — even for questions you answer correctly — to understand the reasoning. Once you score consistently above 80%, move to a 20–30 question session to confirm depth before moving to the next domain.
Yes — the session launcher on this page draws questions exclusively from the Core Oci Services domain. Choose 10, 20, 30, or 50 questions for a focused session, or click individual questions to review them one by one.
Save your results, see per-domain analytics, and get readiness scores — free, for every certification.
Sign Up FreeFree forever · Every certification included