1Z0-1085-26 Practice Test 16 — 15 Questions

Question 1

What is the primary purpose of an OCI Internet Gateway?

Accepted Answer

To provide a communication path between the VCN and the public internet. An Internet Gateway provides a path for bidirectional network traffic between your VCN and the public internet.

Answer

To peer two VCNs within the same tenancy

Answer

To route traffic privately to Oracle services like Object Storage

Answer

To connect on-premises data centers via private circuits

Question 2

You are configuring security lists for a subnet hosting web servers. You want to allow incoming HTTP traffic on port 80 from any IP address on the internet. How should you configure the ingress rule?

Accepted Answer

Source: 0.0.0.0/0, Protocol: TCP, Destination Port: 80. An ingress security rule allowing TCP traffic on destination port 80 with source CIDR 0.0.0.0/0 permits public HTTP access.

Answer

Source: Internet Gateway, Protocol: ICMP

Answer

Source: 10.0.0.0/16, Protocol: UDP, Destination Port: 443

Answer

Source: 0.0.0.0/0, Protocol: UDP, Destination Port: 80

Question 3

What is the primary purpose of an OCI Service Gateway?

Accepted Answer

To provide private access to regional Oracle services without traversing the public internet. A Service Gateway allows your VCN to access regional Oracle services (like Object Storage) privately without using public internet or NAT.

Answer

To peer two VCNs in the same region

Answer

To connect to on-premises data centers

Answer

To route public internet traffic for virtual machines

Question 4

An architect is planning a multi-region disaster recovery deployment in OCI. Which THREE design considerations are essential for ensuring successful data synchronization and failover? (Choose three.)

Accepted Answer

Selecting secondary regions that offer the necessary service availability and capacity to run the production workload.. Option B is correct because a DR region must actually be able to host the production workload, so the architect must verify that the required OCI services (compute shapes, database, load balancer, storage, etc.) and sufficient capacity exist in the chosen secondary region before relying on it for failover. Option C is correct because the replication mode directly determines the RPO: synchronous replication can achieve near-zero data loss but adds latency and distance constraints, while asynchronous replication tolerates higher latency at the cost of some data loss, so the choice must be driven by the business's acceptable RPO. Option E is correct because seamless failover requires automated health checks (for example, OCI Health Checks or a load balancer's health check) combined with traffic management/DNS steering policies such as OCI Traffic Management failover policies to redirect clients to the standby region without manual intervention. Option A is not appropriate because routing database replication logs over the public internet exposes sensitive data and offers no guaranteed bandwidth, latency, or security compared with private connectivity such as OCI FastConnect or site-to-site VPN. Option D is incorrect because OCI regions do not have identical latency to all global ISPs; inter-region and ISP latencies vary significantly, so this assumption would undermine DR planning.

Answer

Routing all database replication logs through the public internet for maximum transparency.

Answer

Assuming that all OCI regions have identical network latency to all global internet service providers.

Question 5

Which THREE of the following are features of OCI Load Balancer?

Accepted Answer

SSL termination. SSL termination, path-based routing, and weighted round robin are key features.

Answer

Autoscaling of backends

Answer

DNS management

Question 6

Your development team needs to deploy containerized applications rapidly on OCI without managing underlying compute servers or clusters. Which OCI container service fits this requirement best?

Accepted Answer

OCI Container Instances. OCI Container Instances is a serverless compute service that lets you run containers quickly without having to manage any servers or Kubernetes clusters.

Answer

Oracle Container Engine for Kubernetes (OKE)

Answer

Compute Instances with Docker pre-installed

Answer

OCI Functions

Question 7

Your company operates workloads in an OCI region that suffers a rare regional-wide network partition. Your architecture remains online because you implemented a multi-region deployment. Which OCI feature enables this level of business continuity?

Accepted Answer

OCI Regions. OCI Regions are the geographic constructs that enable multi-region deployments — each region is a separate geographic area with independent infrastructure, and workloads can be replicated across regions for business continuity against regional failures. A regional-wide network partition is exactly the failure mode that multi-region architecture addresses, and Regions are the OCI feature that makes this possible. Fault domains and availability domains are sub-region constructs and cannot survive a regional outage; a DRG is a connectivity component, not a continuity feature.

Answer

Fault Domains

Answer

Availability Domains

Answer

Dynamic Routing Gateway

Question 8

An administrator wants to run Docker containers in OCI quickly without managing Kubernetes clusters, node pools, or servers. Which OCI service is most appropriate?

Accepted Answer

OCI Container Instances. OCI Container Instances is a serverless compute service that lets you run containers directly without provisioning or managing servers, clusters, or node pools. It is designed for quick, simple container execution, making it the most appropriate choice when the goal is to avoid Kubernetes complexity. It provides a fast path to running Docker containers in OCI.

Answer

Oracle Container Engine for Kubernetes (OKE)

Answer

Compute Instances running Docker manually

Answer

OCI Functions

Question 9

Which THREE of the following are valid OCI File Storage Service (FSS) characteristics?

Accepted Answer

Elastic capacity. FSS is NFS-based, multi-AD accessible, and highly scalable.

Answer

Requires manual OS mounting

Answer

Block-level access

Question 10

Your organization wants to ensure that a development team cannot provision compute instances with more than 4 OCPUs in the 'Staging' compartment, regardless of what their IAM policies allow. Which OCI governance feature should you implement?

Accepted Answer

Compartment Quotas. Compartment Quotas in OCI allow administrators to set hard limits on the quantity or capacity of resources that can be created within a compartment, independent of IAM policies. By setting a quota on the number of OCPUs for compute instances in the 'Staging' compartment, you enforce that no user, regardless of their IAM permissions, can exceed that limit. This directly addresses the requirement to prevent provisioning instances with more than 4 OCPUs.

Answer

OCI Budgets

Answer

Service Limits

Answer

IAM Policy Statements

Question 11

An architect needs to explain OCI's distributed cloud model to a board of directors. The board is confused about the difference between OCI Dedicated Region and OCI Cloud@Customer. Which distinction is accurate?

Accepted Answer

Dedicated Region provides the complete set of OCI public cloud services on-premises, while Cloud@Customer delivers specific OCI services (such as Exadata and Compute infrastructure) on-premises.. Dedicated Region brings the entire public cloud stack on-premises, while Cloud@Customer brings specific services (like databases and core infrastructure).

Answer

Dedicated Region is managed entirely by the customer, whereas Cloud@Customer is managed by Oracle administrators remotely.

Answer

Cloud@Customer requires internet access to function, whereas Dedicated Region operates entirely without power redundancy.

Answer

Dedicated Region is hosted by Oracle in a public facility, whereas Cloud@Customer is hosted in a partner data center.

Question 12

A financial institution is prohibited by regulation from storing data in any public data center, even if it is encrypted. They require a complete, physically isolated OCI deployment. What is the recommended deployment?

Accepted Answer

OCI Dedicated Region. The OCI Dedicated Region provides a fully integrated, physically isolated OCI footprint exclusively for a single customer.

Answer

OCI Cloud@Customer with public peering

Answer

OCI Public Cloud

Answer

OCI Hybrid Cloud with VPN

Question 13

Which THREE of the following are primary benefits of using Object Storage?

Accepted Answer

High durability. Durability, scalability, and lifecycle management are key features of OCI Object Storage.

Answer

Real-time relational queries

Answer

POSIX-compliant file system

Question 14

Which TWO of the following can be used to manage containerized workloads in OCI?

Accepted Answer

Container Instances. OKE and Container Instances are the primary ways to run containers.

Answer

Functions

Answer

FastConnect

Answer

Object Storage

Question 15

An operations engineer needs to provision a Network File System (NFS) that can be simultaneously mounted across hundreds of OCI Compute instances for shared data processing. Which OCI storage service is best suited for this?

Accepted Answer

File Storage Service (FSS). OCI File Storage Service (FSS) is a managed NFSv3 file system that can be mounted concurrently by many compute instances across multiple availability domains and VCNs via mount targets. It is purpose-built for shared, POSIX-compliant file access, which is exactly what hundreds of instances doing shared data processing require. Block Volume and Local NVMe are single-attach (or limited multi-attach) block devices, and Object Storage is HTTP/REST-based, not NFS-mountable.

Answer

Local NVMe

Answer

Object Storage

Answer

Block Volume