1Z0-1085-26 Practice Test 15 — 15 Questions

Question 1

When architecting a high-availability database cluster across multiple availability domains in an OCI region, what is the recommended approach for handling latency-sensitive synchronous replication?

Accepted Answer

Leverage the low-latency high-bandwidth inter-AD network for synchronous replication.. Since availability domains within an OCI region are connected by low-latency networks, synchronous replication is fully supported across them.

Answer

Use asynchronous replication because inter-availability domain latency is too high for synchronous replication.

Answer

Deploy all database nodes in the same fault domain to achieve synchronous replication.

Answer

Route replication traffic through the public internet to bypass regional limits.

Question 2

You are configuring security rules for a multi-tier application. You want to allow web servers in a specific Network Security Group (NSG) to communicate with database servers in another NSG. How should you define the rule in the database NSG?

Accepted Answer

Specify the web server Network Security Group as the source. OCI NSGs allow you to reference another NSG as the source in security rules for fine-grained access control.

Answer

Configure a Dynamic Routing Gateway rule

Answer

Use an Internet Gateway source identifier

Answer

Specify the entire VCN CIDR block as the source

Question 3

Your organization wants to store compliance audit logs for 7 years at the absolute lowest storage cost, acknowledging that data retrieval may take several hours. Which OCI Object Storage tier should you use?

Accepted Answer

Archive Storage. OCI Archive Storage is designed for data that is rarely accessed and must be retained for long periods, providing the lowest cost storage with a multi-hour retrieval time.

Answer

Infrequent Access Storage

Answer

Cold Storage

Answer

Standard Storage

Question 4

Which TWO types of tags are supported in Oracle Cloud Infrastructure? (Choose two.)

Accepted Answer

Defined tags. OCI supports Free-form tags and Defined tags.

Answer

Compartment-bound tags

Answer

Encrypted tags

Answer

System-enforced tags

Question 5

What happens to an Ephemeral Public IP when you stop a compute instance?

Accepted Answer

It is released. Ephemeral public IPs are released when the instance is stopped or terminated.

Answer

It is assigned to a new instance

Answer

It remains assigned

Answer

It changes to a private IP

Question 6

What is the default behavior of a Security List in OCI?

Accepted Answer

Stateful. Security Lists are stateful by default, meaning return traffic for allowed requests is automatically permitted.

Answer

Always allow all

Answer

Stateless

Answer

Always deny all

Question 7

An application running in an OCI VCN needs to access OCI Object Storage and Oracle Autonomous Database privately. Both services must be accessed without traffic leaving Oracle's network backbone and without using public IPs. Which combination of OCI gateway features accomplishes this?

Accepted Answer

Service Gateway with appropriate VCN route table rules and security policies. A Service Gateway in OCI provides private access from a VCN to supported Oracle services such as Object Storage and Autonomous Database without traversing the internet or using public IPs, keeping traffic on Oracle's backbone. Combined with appropriate route table rules and security policies, it satisfies both the private-access and no-public-IP requirements. This is exactly the combination option D describes.

Answer

Internet Gateway and NAT Gateway

Answer

Dynamic Routing Gateway paired with an external DNS resolver

Answer

Local Peering Gateway attached to the Object Storage tenancy

Question 8

To ensure high availability for your web application, you should deploy your instances across:

Accepted Answer

Different Availability Domains. Deploying across different availability domains (ADs) or fault domains (FDs) is best practice for HA.

Answer

A single VCN

Answer

The same subnet

Answer

A single Fault Domain

Question 9

An administrator needs to understand where the boundary of customer responsibility lies when deploying compute instances in Oracle Cloud Infrastructure. According to the OCI shared-responsibility model, which responsibility falls solely on the customer?

Accepted Answer

Guest operating system patching and configuration on the compute instances. In the OCI shared-responsibility model, the customer is responsible for the guest operating system, including patching and configuration, on compute instances. Oracle manages the physical infrastructure, hypervisor, and data center security, but the customer controls and secures the OS and applications running on the instances.

Answer

Hypervisor patching and firmware updates on the physical host

Answer

Redundancy and cooling of the physical networking hardware

Answer

Physical security of the data center hosting the compute instances

Question 10

You are deploying a critical application that must remain available even if a single hardware failure occurs within a specific data center. You have already chosen an Availability Domain. Which configuration provides the best protection against this failure?

Accepted Answer

Place instances in different Fault Domains. Fault domains allow for the distribution of instances across different hardware within an Availability Domain to protect against localized hardware or rack failure.

Answer

Use a single compute instance with high-performance storage

Answer

Place instances in different regions

Answer

Place instances in different compartments

Question 11

An enterprise application requires private connectivity between two VCNs in different OCI regions. Which component must be used to connect them?

Accepted Answer

Remote Peering Connection (RPC) via DRG. A Remote Peering Connection (RPC) via Dynamic Routing Gateways (DRGs) connects VCNs across different regions.

Answer

Local Peering Gateway (LPG)

Answer

Service Gateway

Answer

Internet Gateway with IPsec VPN

Question 12

An application requires a block volume with guaranteed high performance and low latency for heavy database operations. Which OCI Block Volume performance tier should you select?

Accepted Answer

Higher Performance. OCI Block Volume offers three performance tiers: Lower Cost, Balanced, and Higher Performance. The Higher Performance tier is designed for latency-sensitive, I/O-intensive workloads such as large databases, providing the highest VPUs/GB and lowest latency. For heavy database operations requiring guaranteed high performance and low latency, Higher Performance is the correct selection.

Answer

Archive Tier

Answer

Balanced

Answer

Lower Cost

Question 13

What is the term used in OCI to describe a software-defined version of a traditional physical network, including subnets, route tables, and gateways?

Accepted Answer

Virtual Cloud Network (VCN). A Virtual Cloud Network (VCN) is a customizable, software-defined private network that you set up in OCI.

Answer

Subnet Gateway

Answer

Local Peering Network

Answer

Virtual Private Network (VPN)

Question 14

Which OCI feature allows you to attach a single block volume to multiple instances simultaneously?

Accepted Answer

Multi-attach. Block Volume 'multi-attach' allows read/write access from multiple instances.

Answer

Dynamic Routing Gateway

Answer

Object Storage

Answer

File Storage

Question 15

You are configuring an OCI Load Balancer and want to ensure high availability by distributing traffic across backend servers in different availability domains within a region. Which type of load balancer should you deploy?

Accepted Answer

Regional Load Balancer. A Regional Load Balancer in OCI is a managed service that spans the entire region and can distribute traffic across backend servers in multiple availability domains (ADs) or fault domains. It provides high availability by automatically routing around failed ADs and supports both public and private IP addresses. This is the only load balancer type designed for cross-AD traffic distribution within a region.

Answer

Availability Domain-specific Load Balancer

Answer

Dynamic Routing Load Balancer

Answer

Local Peering Load Balancer