1Z0-1085-26 Practice Test 13 — 15 Questions

Question 1

You need to back up an on-premises database directly to OCI Object Storage using a dedicated, high-speed connection that does not use the public internet. Which networking service should you use?

Accepted Answer

FastConnect. FastConnect provides dedicated private connectivity between on-premises data centers and OCI, bypassing the public internet.

Answer

Internet Gateway

Answer

Site-to-Site VPN

Answer

Local Peering Gateway

Question 2

Which TWO methods can be used to connect an on-premises data center to an OCI Virtual Cloud Network? (Choose two.)

Accepted Answer

OCI FastConnect. On-premises connectivity to OCI is established using OCI FastConnect or Site-to-Site VPN.

Answer

Internet Gateway with Public IP

Answer

Local Peering Gateway

Answer

Object Storage Gateway

Question 3

You need to configure an OCI Load Balancer listener to handle secure HTTPS traffic with SSL certificate termination. Where do you configure the SSL certificate?

Accepted Answer

In the Load Balancer Certificate configuration associated with the HTTPS listener. SSL certificates are added to the Load Balancer as a Certificate resource and associated with an HTTPS listener.

Answer

Inside the VCN Security List ingress rule

Answer

Inside the Dynamic Routing Gateway settings

Answer

On the backend compute instance OS firewall

Question 4

You want to automate object lifecycle management in an OCI Object Storage bucket so that files older than 90 days are automatically transitioned to Archive storage. What should you configure?

Accepted Answer

Object Storage Lifecycle Rules. Object Storage Lifecycle Rules allow you to define automated actions to transition objects to different storage tiers or delete them after a specified time period.

Answer

Pre-authenticated requests

Answer

A scheduled OCI Function with a custom script

Answer

Object Versioning policies

Question 5

You are configuring security rules for a multi-tier application. You want to allow web servers in a specific Network Security Group (NSG) to communicate with database servers in another NSG. How should you define the ingress rule in the database NSG?

Accepted Answer

Specify the web server Network Security Group as the source. OCI NSGs allow you to reference another NSG as the source in security rules, enabling tight access control between tiers without managing IP addresses.

Answer

Configure a Dynamic Routing Gateway rule

Answer

Use an Internet Gateway source identifier

Answer

Specify the CIDR block of the entire VCN as the source

Question 6

An application deployed on OCI Compute instances requires custom DNS records that resolve only within a specific VCN and are not exposed to the public internet. Which OCI DNS feature should you configure?

Accepted Answer

Private DNS Zone. Private DNS zones allow you to manage internal domain names that are resolved exclusively within your VCNs.

Answer

Internet Resolver Forwarding

Answer

Traffic Management Steering Policies

Answer

Public DNS Zone

Question 7

Your development team needs to deploy microservices orchestrated via Kubernetes with automated worker node scaling and managed control plane upgrades. Which OCI service should you provision?

Accepted Answer

Oracle Container Engine for Kubernetes (OKE). Oracle Container Engine for Kubernetes (OKE) is a fully managed, scalable, and highly available service where you can deploy your containerized applications.

Answer

OCI Functions

Answer

OCI Container Instances

Answer

OCI Compute Instances with Docker

Question 8

You need to ensure that database block volumes are automatically backed up every day with a retention policy of 30 days across multiple regions. What OCI feature should you use?

Accepted Answer

Block Volume Backup Policies. Volume Backup Policies allow you to assign predefined or custom backup schedules (daily, weekly, monthly) with automated cross-region replication and retention rules.

Answer

Manual OCI CLI snapshot scripts

Answer

Object Storage Lifecycle Management rules

Answer

Compute Instance Autoscaling configurations

Question 9

An administrator needs to create a private network inside a VCN that isolates database servers from the public internet. How should this be structured?

Accepted Answer

Create a private subnet with no route to an Internet Gateway. A private subnet with a route table that does not contain a route to an Internet Gateway ensures instances are isolated from inbound public internet traffic.

Answer

Create a public subnet and attach an Internet Gateway

Answer

Disable all security lists globally across the tenancy

Answer

Attach a NAT Gateway with an assigned public IP

Question 10

Which THREE features are provided by OCI Object Storage buckets? (Choose three.)

Accepted Answer

Object Versioning. OCI Object Storage supports versioning, pre-authenticated requests, and lifecycle management rules.

Answer

Direct NFSv3 file system mounting

Answer

Block-level iSCSI disk formatting

Question 11

What is the primary function of an OCI NAT Gateway?

Accepted Answer

To allow outbound internet access from private subnets without incoming internet access. A NAT Gateway enables instances in a private subnet to initiate outbound connections to the internet while preventing inbound connections from the internet.

Answer

To route private traffic to on-premises data centers

Answer

To provide private access to regional Oracle services

Answer

To allow bidirectional internet access for public instances

Question 12

An organization requires a highly available IPsec VPN connection from their on-premises data center to an OCI VCN. To ensure high availability, what is the recommended architecture for the Dynamic Routing Gateway (DRG) and customer premise equipment (CPE)?

Accepted Answer

Redundant VPN tunnels utilizing multiple CPE public IP addresses terminating on the DRG.. OCI supports redundant VPN tunnels across multiple CPE public IPs terminating on a DRG to ensure high availability and failover.

Answer

Using an Internet Gateway instead of a DRG with redundant static routes.

Answer

A single VPN tunnel connecting to a single CPE device.

Answer

Configuring active-passive peering across two separate VCNs.

Question 13

What is the primary purpose of an OCI Internet Gateway when attached to a Virtual Cloud Network (VCN)?

Accepted Answer

To provide a communication path between the VCN and the public internet. An Internet Gateway provides a path for bidirectional network traffic between your VCN and the public internet.

Answer

To peer two VCNs within the same tenancy

Answer

To connect on-premises data centers via private circuits

Answer

To route traffic privately to Oracle services like Object Storage

Question 14

Which TWO networking services or gateways in OCI can be used to route traffic from a VCN to the public internet? (Choose two.)

Accepted Answer

Internet Gateway. Internet Gateway and NAT Gateway both facilitate traffic flowing from a VCN out to the public internet.

Answer

Dynamic Routing Gateway

Answer

Service Gateway

Answer

Local Peering Gateway

Question 15

An administrator needs to modify the route table of a private subnet so that all traffic destined for an on-premises data center is routed correctly. What should be the target in the route table rule?

Accepted Answer

Dynamic Routing Gateway (DRG). To route traffic from a VCN to an on-premises network, the target in the route table must be the Dynamic Routing Gateway (DRG).

Answer

NAT Gateway

Answer

Service Gateway

Answer

Internet Gateway