1Z0-1085-26 Practice Test 18 — 15 Questions

Question 1

A developer wants to run event-driven data processing tasks in OCI without provisioning or managing any underlying servers. The execution duration is short (under 5 minutes). Which OCI service should the developer use?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

OCI Functions. OCI Functions is a serverless, highly scalable platform based on the Fn Project open source engine that allows developers to run code without managing servers.

Answer

Container Instances

Answer

Compute Instances with Autoscaling

Answer

Oracle Container Engine for Kubernetes (OKE)

Question 2

An administrator needs to store infrequently accessed backups in OCI Object Storage that require long-term retention and can tolerate a retrieval time of up to several hours. Which storage tier is most cost-effective?

Accepted Answer

Archive Storage. Archive Storage is designed for data that is rarely accessed and has a multi-hour retrieval latency, offering the lowest cost.

Answer

Infrequent Access Storage

Answer

Standard Storage

Answer

Block Volume Backups tier

Question 3

A company needs a shared file system accessible by multiple Linux compute instances simultaneously via the Network File System (NFSv3) protocol across different availability domains. Which OCI service should be deployed?

Accepted Answer

File Storage Service (FSS). File Storage Service (FSS) provides a durable, scalable, enterprise-grade network file system that can be mounted by multiple compute instances across availability domains.

Answer

Local NVMe temporary storage

Answer

Object Storage service

Answer

Block Volume service

Question 4

An application running on an Oracle Cloud Infrastructure (OCI) compute instance needs secure, private access to Object Storage in the same region without traversing the public internet. Which architecture should you implement?

Accepted Answer

Configure a Service Gateway in your VCN and add a route rule with the destination set to the Object Storage service CIDR.. To securely access OCI Object Storage privately from a VCN without public internet, you should configure a Service Gateway and a corresponding route table rule targeting the Object Storage service.

Answer

Attach a NAT Gateway to your VCN and route traffic destined for Object Storage through it.

Answer

Deploy an Internet Gateway and use security lists to block all inbound traffic except Object Storage traffic.

Answer

Set up a Local Peering Gateway and peer your VCN directly to the Object Storage public namespace.

Question 5

You are configuring an OCI Load Balancer. Which component defines the backend servers that receive traffic?

Accepted Answer

Backend Sets. Backend sets define the group of backend servers and their load balancing policy.

Answer

Certificates

Answer

Route tables

Answer

Listeners

Question 6

What is the primary purpose of an OCI Internet Gateway?

Accepted Answer

To provide a communication path between the VCN and the public internet. An Internet Gateway provides a path for bidirectional network traffic between your VCN and the public internet.

Answer

To peer two VCNs within the same tenancy

Answer

To route traffic privately to Oracle services like Object Storage

Answer

To connect on-premises data centers via private circuits

Question 7

To secure a subnet, you need to define rules that restrict traffic based on the source and destination at the packet level. Which OCI resource provides this stateful security?

Accepted Answer

Security Lists. Security Lists provide stateful packet filtering for all VNICs in a subnet.

Answer

Network Security Groups (NSG)

Answer

Dynamic Routing Gateway

Answer

Route Tables

Question 8

Which TWO of the following gateways can be attached to an OCI Virtual Cloud Network (VCN)? (Choose two.)

Accepted Answer

Internet Gateway. Internet Gateways and NAT Gateways are standard gateways attached directly to VCNs for public internet connectivity.

Answer

Compute Scaling Gateway

Answer

Object Routing Gateway

Answer

Local Storage Gateway

Question 9

Which TWO of the following networking components are required to configure a working site-to-site IPsec VPN connection to an OCI VCN? (Choose two.)

Accepted Answer

Customer Premises Equipment (CPE) object. An IPsec VPN connection requires a Customer Premises Equipment (CPE) object representing the on-premises router and a Dynamic Routing Gateway (DRG) attached to the VCN.

Answer

Internet Gateway attached to the database subnet

Answer

Local Peering Gateway peered with another VCN

Answer

NAT Gateway for IP translation of VPN packets

Question 10

You are managing a mission-critical database workload on an OCI Block Volume. The workload experiences extremely high and unpredictable I/O bursts, requiring the highest possible IOPS performance per volume. Which performance tier should you select?

Accepted Answer

Ultra High Performance. Ultra High Performance is the highest performance tier available for OCI Block Volumes, designed for workloads with intensive I/O requirements and high IOPS demands.

Answer

Higher Performance

Answer

Lower Cost

Answer

Balanced

Question 11

When using an OCI Load Balancer, which protocol is recommended for securing traffic?

Accepted Answer

HTTPS. HTTPS (via SSL/TLS certificates) is the standard for securing traffic.

Answer

HTTP

Answer

Telnet

Answer

FTP

Question 12

Which TWO of the following are valid OCI compute shape types?

Accepted Answer

Flexible. Flexible and Bare Metal are valid shape categories in OCI.

Answer

Virtual Disk

Answer

Dynamic

Answer

Container-only

Question 13

A company is running multiple web servers behind an OCI Public Load Balancer. They notice that client IP addresses are appearing in web server logs as the internal private IP address of the load balancer rather than the actual client's public IP address. How can this be resolved?

Accepted Answer

Configure the web servers to read the X-Forwarded-For HTTP header inserted by the load balancer.. OCI Load Balancer adds standard HTTP headers such as 'X-Forwarded-For' to pass the original client IP address to backend web servers.

Answer

Switch the load balancer from TCP load balancing to a NAT Gateway.

Answer

Change the load balancer shape from Flexible to a fixed 100 Mbps shape.

Answer

Enable SSL client certificate forwarding in the VCN routing table.

Question 14

An administrator is troubleshooting a VCN where instances in a private subnet cannot reach the public internet via a NAT Gateway. The NAT Gateway is attached to the VCN, and the security list allows all outbound traffic. What is the most likely cause of the failure?

Accepted Answer

The subnet route table lacks a route rule with destination 0.0.0.0/0 pointing to the NAT Gateway.. Even with a NAT Gateway attached and security lists open, the private subnet's route table must have a route rule with destination 0.0.0.0/0 pointing to the NAT Gateway.

Answer

The NAT Gateway requires an incoming security list rule from 0.0.0.0/0.

Answer

The local OS firewall on the NAT Gateway is blocking packets.

Answer

The VCN lacks an Internet Gateway attached to the public subnets.

Question 15

Which THREE statements are accurate regarding OCI Object Storage capabilities and architecture? (Choose three.)

Accepted Answer

Object Versioning can be enabled to protect against accidental overwrites and deletions.. OCI Object Storage is regional, highly durable, provides standard and archive tiers, and allows data immutability via Object Versioning and Object Locking.

Answer

Object Storage buckets can be directly mounted to Linux file systems via NFSv3 protocol natively.

Answer

Archive Storage data can be retrieved instantly upon API call without prior restoration requests.