Oracle · Free Practice Questions · Last reviewed May 2026
24real exam-style questions organised by domain, each with the correct answer highlighted and a plain-English explanation of why it's right — and why the others are wrong.
An application administrator is configuring a high-availability database cluster across three Fault Domains in a single Availability Domain. During a scheduled infrastructure maintenance event affecting Fault Domain 1, the administrator notices that one of the database nodes becomes unreachable. What is the expected behavior of OCI Fault Domains in this scenario?
The database cluster automatically fails over its primary role to an instance in a different Availability Domain.
Only instances in Fault Domain 1 are impacted by the maintenance, while instances in Fault Domains 2 and 3 continue to run normally without disruption.
Fault Domains provide anti-affinity and fault isolation so that infrastructure failures or maintenance in one FD do not affect others.
The entire Availability Domain is taken offline to synchronize the maintenance state across all Fault Domains.
Instances in Fault Domain 1 are automatically migrated to Fault Domain 2, causing a brief network partition.
You are deploying a mission-critical web application that must remain available even if an entire Oracle Cloud Infrastructure availability domain experiences a major outage. The application architecture requires two compute instances. How should you provision these instances to achieve high availability?
Deploy both instances in the same Availability Domain but assign them to different Fault Domains.
Deploy both instances in separate OCI Regions using an explicit cross-region pairing gateway.
Deploy one instance in Availability Domain 1 and the other instance in Availability Domain 2.
Placing instances across different Availability Domains ensures that an outage affecting one AD will not take down both instances.
Deploy both instances in the same Availability Domain and configure autonomous cross-AD scaling.
Your development team needs to test an application's resilience against infrastructure hardware failures within a specific OCI region that contains only a single Availability Domain. Which OCI feature should you utilize to distribute your compute instances for fault tolerance?
Dynamic Routing Gateways
Cross-Region Replication
Fault Domains
Fault Domains allow you to distribute instances across physical hardware within a single availability domain to protect against unexpected hardware failures or maintenance.
Secondary Regions
A multinational corporation requires low-latency access for users in Frankfurt and London, with strict data isolation ensuring European data does not leave designated jurisdictions. Which OCI architectural construct should you use to organize their resources?
OCI Regions
OCI Regions are independent, localized geographic areas containing one or more availability domains, allowing compliance with data residency and user latency requirements.
Compartments
Availability Domains
Fault Domains
An organization is planning a disaster recovery strategy for a Tier-1 financial application. They need a Recovery Point Objective (RPO) of near-zero and a Recovery Time Objective (RTO) of seconds. Which OCI deployment pattern best fulfills these stringent requirements?
Deploy instances across three Fault Domains in a single Availability Domain with automated compute health checks.
Backup daily block volumes to Object Storage and restore them in a secondary region upon disaster declaration.
Deploy an active-passive architecture across two OCI regions using asynchronous database replication and manual DNS failover.
Deploy an active-active architecture across two low-latency interconnected OCI regions using synchronous replication and automated traffic management failover.
Active-active deployment with synchronous replication and automated routing achieves near-zero RPO and instantaneous RTO.
You are designing a web application hosted in OCI. You want to ensure that if a top-of-rack switch fails inside a data center, your application remains online. How are OCI Fault Domains engineered to address this specific risk?
Fault domains provide automatic geographic failover across different countries.
Fault domains automatically replicate virtual machine memory across different availability domains.
Each Fault Domain has its own dedicated external internet gateway to route traffic around broken switches.
Fault domains are isolated racks with their own power, cooling, and network hardware, ensuring anti-affinity for instance placement.
Fault domains ensure that virtual instances do not share the same physical hardware, power source, or top-of-rack switch.
Want more Getting Started With Oci practice?
Practice this domainAn administrator wants to restrict inbound SSH access to a specific group of database compute instances without modifying subnet-level security rules. Which OCI feature should be used to define these fine-grained VNIC rules?
Route Tables
Security Lists
Network Security Groups
NSGs apply to specific sets of VNICs chosen by the administrator.
Dynamic Routing Gateway
A company needs to store petabytes of data that is rarely accessed but must be retained for compliance for 7 years. Retrievals can take up to several hours. Which storage tier should they use?
Standard Storage
Infrequent Access Storage
Archive Storage
Archive Storage is ideal for long-term compliance retention with multi-hour retrieval times.
Block Volume Backups
A cloud architect needs to deploy a cloud-native application using Docker containers without managing any underlying infrastructure, servers, or Kubernetes worker nodes. Which OCI service should they select?
OCI Functions
Oracle Container Engine for Kubernetes (OKE)
OCI Container Instances
Container Instances is designed for serverless container deployment without infrastructure management.
Compute Instances with Custom Images
An application running on OCI Compute instances requires shared file storage that can be mounted concurrently across hundreds of Linux instances via the standard NFS protocol. Which OCI storage service is best suited?
Object Storage
File Storage Service
File Storage Service supports standard NFSv3 protocol and concurrent multi-instance mounting.
Block Volume
Local NVMe Temporary Storage
Your development team needs to deploy microservices orchestrated via Kubernetes with automated worker node scaling and managed control plane upgrades. Which OCI service should you provision?
OCI Functions
OCI Container Instances
OCI Compute Instances with Docker
Oracle Container Engine for Kubernetes (OKE)
OKE is the managed Kubernetes service in OCI.
You are configuring an Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN) and need to ensure that compute instances in a private subnet can initiate outbound internet connections to download software patches without allowing unsolicited inbound traffic from the internet. Which gateway must you attach to the VCN?
Service Gateway
Internet Gateway
NAT Gateway
A NAT Gateway allows outbound traffic to the internet while preventing inbound sessions.
Dynamic Routing Gateway
Want more Core Oci Services practice?
Practice this domainYour company has deployed resources across multiple compartments in Oracle Cloud Infrastructure (OCI). You need to track operational costs and allocate cloud spend back to specific business units using metadata key-value pairs attached to resources. Which OCI feature should you use?
Cost-tracking tags
Defined tags enabled for cost-tracking allow you to aggregate and analyze spending by specific tag keys and values in OCI Cost Analysis.
IAM policies
Budgets
Compartment quotas
You need to write an IAM policy that allows a group named 'NetworkAdmins' to manage all VCN components, but you want to ensure that this policy is only applicable when evaluated from the home region of the tenancy. How can you accomplish this using policy conditions?
Use the condition 'where request.region = <home-region>'
The 'request.region' variable checks the region where the API request is being executed.
IAM policies cannot be restricted by region; they always apply globally.
Use the condition 'where target.region.home = true'
Use the condition 'where principal.region = home'
An auditor needs to verify who deleted a critical production virtual cloud network (VCN) yesterday. Which OCI service should the auditor query to find this exact API event history?
OCI Notifications
OCI Audit
OCI Audit logs every API call and user action, making it the definitive tool for tracking who did what and when.
OCI Events
OCI Monitoring
Your organization wants to receive an email alert whenever monthly cloud spending reaches 80% of a specified $5,000 threshold. Which OCI tool should you configure?
OCI Tag Defaults
OCI Cloud Guard
OCI Budgets
Budgets allow you to set financial limits and configure automated alerts when forecasted or actual spend crosses set percentages.
OCI Cost Analysis
Which OCI service provides security diagnostic and compliance evaluation tools by continuously monitoring resources against security best practices and industry benchmarks?
OCI Cloud Guard
Cloud Guard detects security misconfigurations and insecure operational states across your OCI tenancy.
OCI Audit
OCI Logging Analytics
OCI Cost Analysis
An administrator needs to grant a group of database administrators the ability to manage Autonomous Databases only within a specific compartment named DevCompartment, without giving them access to any other resources in that compartment. Which IAM policy statement achieves this requirement?
Allow group DBA-Group to manage all-resources in compartment DevCompartment
Allow compartment DevCompartment to manage autonomous-databases for group DBA-Group
Allow group DBA-Group to manage autonomous-databases in compartment DevCompartment
This statement correctly scopes the 'manage' verb to autonomous-databases specifically within DevCompartment for DBA-Group.
Allow group DBA-Group to manage autonomous-databases in tenancy
Want more Governance And Administration practice?
Practice this domainA security officer wants to monitor security risks across multiple OCI tenancies and compartments from a single consolidated dashboard. Which OCI service should they configure?
OCI Cloud Guard
Cloud Guard aggregates security findings across compartments and tenancies into a single dashboard.
OCI Bastion
OCI Web Application Firewall
OCI Vault
According to the OCI shared-responsibility model, who is responsible for managing user accounts, password policies, and multi-factor authentication (MFA) configurations?
Oracle
Both Oracle and the customer jointly via shared IAM consoles
The customer
Identity management, role assignments, and authentication policies are part of security IN the cloud managed by the customer.
Third-party identity auditor
Your organization has strict compliance requirements and needs to ensure that no compute instance in a specific production compartment can ever have a public IP address attached. Which OCI service should you use to enforce this rule automatically?
Security Zones
Security Zones use pre-built security recipes to enforce preventive guardrails that block non-compliant resource creation.
Cloud Guard
Web Application Firewall
Vault Service
An administrator needs to understand where the boundary of customer responsibility lies when deploying compute instances in Oracle Cloud Infrastructure. According to the OCI shared-responsibility model, which responsibility falls solely on the customer?
Guest operating system patching and configuration on the compute instances
The customer owns the operating system configuration, updates, and application security.
Hypervisor patching and firmware updates on the physical host
Redundancy and cooling of the physical networking hardware
Physical security of the data center hosting the compute instances
A developer needs to store database connection strings and API tokens securely so that applications can retrieve them dynamically without hardcoding credentials. Which OCI service is designed specifically for this purpose?
Object Storage with customer-managed keys
Key Management Service Master Keys
Vault Secrets
Vault Secrets allows secure storage and dynamic retrieval of sensitive application configuration data.
Identity and Access Management Dynamic Groups
An enterprise application deployed on OCI is experiencing frequent Layer 7 HTTP flood attacks and SQL injection attempts. Which OCI service provides comprehensive protection against these web vulnerabilities?
Cloud Guard
Virtual Cloud Network Security Lists
Network Security Groups
OCI Web Application Firewall
WAF inspects HTTP/S traffic to protect web applications against Layer 7 application exploits.
Want more Security Services practice?
Practice this domainThe 1Z0-1085-26 exam has 200 questions and must be completed in 120 minutes. The passing score is 700/1000.
Scenario-based questions covering exam objectives with detailed answer explanations.
The exam covers 4 domains: Getting Started With Oci, Core Oci Services, Governance And Administration, Security Services. Questions are weighted by domain — higher-weight domains appear more on your actual exam.
No. These are original exam-style practice questions written against the official Oracle 1Z0-1085-26 exam objectives. They are not copied from the real exam. Courseiva focuses on genuine understanding, not memorisation of braindumps.
Courseiva tracks your accuracy per domain and routes you toward weak areas automatically. Free, no account required.