1Z0-1085-26 Practice Test 18 — 15 Questions

Question 1

You are configuring a VCN and need to ensure that instances in a private subnet can access the internet to download updates without exposing them to incoming traffic. Which component is required?

Accepted Answer

NAT Gateway. A NAT Gateway allows instances in a private subnet to initiate outbound connections to the internet while preventing inbound connections.

Answer

Dynamic Routing Gateway

Answer

Service Gateway

Answer

Internet Gateway

Question 2

You created a Defined Tag namespace called 'Department' and a key called 'CostCenter'. However, developers are forgetting to add these tags when creating compute instances. How can you ensure that every new compute instance created in a specific compartment automatically receives these tags without relying on manual user input?

Accepted Answer

Configure Tag Defaults for the compartment.. Tag defaults allow administrators to specify default values for defined tags that are automatically applied to all resources created within a compartment.

Answer

Write an IAM policy with a tag enforcement condition.

Answer

Use OCI Audit to retroactively tag unlabelled resources.

Answer

Set up a compartment quota for tagging.

Question 3

Which TWO characteristics apply to OCI Fault Domains? (Choose two.)

Accepted Answer

They provide protection against unexpected hardware failures and maintenance events within an Availability Domain.. Fault domains protect against hardware/rack failures and are selected automatically if not specified.

Answer

They are billing boundaries used to allocate cloud costs across different business units.

Answer

They require the user to manually configure top-of-rack network switches for each domain.

Answer

They span across multiple OCI regions to guarantee global high availability.

Question 4

What is the default maximum size of a single Object Storage bucket in OCI?

Accepted Answer

Unlimited (Practically boundless). OCI Object Storage buckets have no practical size limit and can store an unlimited amount of data.

Answer

50 Terabytes

Answer

10 Petabytes

Answer

100 Gigabytes

Question 5

A network engineer is configuring a Site-to-Site VPN between an on-premises data center and an OCI VCN. To ensure high availability, the setup requires multiple customer-premises equipment (CPE) public IP addresses communicating with distinct Oracle VPN tunnel endpoints on the DRG. How many default tunnels does each OCI VPN connection provision per DRG attachment?

Accepted Answer

Two tunnels. Each OCI Site-to-Site VPN connection automatically provisions two redundant tunnels terminating on distinct OCI gateway hardware endpoints for high availability.

Answer

Eight tunnels

Answer

One tunnel

Answer

Four tunnels

Question 6

When creating a block volume backup, where is the data stored?

Accepted Answer

Object Storage. Block volume backups are stored in OCI Object Storage.

Answer

File Storage

Answer

The same volume

Answer

Local SSD

Question 7

An administrator is designing a highly available application across three fault domains in an OCI availability domain. If an instance in Fault Domain 1 requires maintenance, how are resources in Fault Domain 2 and Fault Domain 3 affected?

Accepted Answer

Fault Domain 2 and 3 remain fully operational and unaffected.. Fault domains are completely isolated; maintenance or failure in one fault domain has no impact on instances in other fault domains.

Answer

Instances in Fault Domain 2 are migrated into Fault Domain 1.

Answer

All virtual network traffic across the availability domain is temporarily suspended.

Answer

Resources in Fault Domain 2 and 3 are automatically rebooted during Fault Domain 1 maintenance.

Question 8

An organization is building a hybrid cloud strategy and evaluates OCI's cloud models. They want to run Oracle Database workloads on Exadata infrastructure inside their own data center, managed through the OCI console, with infrastructure maintenance performed by Oracle. Which service matches this requirement?

Accepted Answer

OCI Exadata Cloud@Customer. Exadata Cloud@Customer provides Oracle Database on Exadata infrastructure installed on-premises and managed via the OCI console.

Answer

Oracle Database Appliance (ODA) on-premises with manual cloud sync.

Answer

Oracle Autonomous Database on Dedicated Exadata Infrastructure

Answer

OCI Dedicated Region

Question 9

You need to deploy a web application across multiple compute instances with automated scaling and load balancing. Which combination of OCI services provides this complete architecture?

Accepted Answer

Public Load Balancer, Instance Pools, and Autoscaling Configurations. A Public Load Balancer combined with an Instance Pool and Autoscaling Configuration provides incoming load balancing and dynamic compute scaling.

Answer

Dynamic Routing Gateway and OCI Functions

Answer

File Storage Service and Network Security Groups

Answer

Internet Gateway, Block Volume backups, and Object Storage

Question 10

You are deploying a microservices architecture on OKE. You need to ensure that the control plane is managed by OCI to reduce management overhead. Which OKE deployment model is best?

Accepted Answer

OCI Managed Kubernetes (OKE). OKE is a managed Kubernetes service where the control plane is managed by Oracle.

Answer

Custom Kubernetes on VM

Answer

Compute Instance Containerization

Answer

Kubernetes on Bare Metal

Question 11

A cloud architect needs to configure a regional subnet in a Virtual Cloud Network (VCN). Across how many availability domains can a regional subnet span?

Accepted Answer

All availability domains within the region. In OCI, regional subnets can span all availability domains within a region, simplifying IP address management and resource placement.

Answer

Only availability domain 1

Answer

Exactly one availability domain

Answer

Two availability domains maximum

Question 12

According to the OCI shared-responsibility model, who is responsible for managing user accounts, password policies, and multi-factor authentication (MFA) configurations?

Accepted Answer

The customer. Under the OCI shared-responsibility model, Oracle secures the cloud infrastructure (physical data centers, hardware, hypervisor, and the core IAM service itself), while the customer is responsible for everything they put in the cloud — including managing their own user accounts, password policies, and MFA configurations. Identity management of the customer's users is a customer-side responsibility.

Answer

Oracle

Answer

Both Oracle and the customer jointly via shared IAM consoles

Answer

Third-party identity auditor

Question 13

You are designing a web application hosted in OCI. You want to ensure that if a top-of-rack switch fails inside a data center, your application remains online. How are OCI Fault Domains engineered to address this specific risk?

Accepted Answer

Fault domains are isolated racks with their own power, cooling, and network hardware, ensuring anti-affinity for instance placement.. Fault domains are isolated racks (or groups of racks) within an availability domain, each with independent power, cooling, and network hardware — including top-of-rack switches. By placing instances across fault domains, you ensure that a single top-of-rack switch failure only affects instances in that fault domain, leaving the others online. This is exactly the anti-affinity placement behavior that OCI fault domains provide.

Answer

Fault domains provide automatic geographic failover across different countries.

Answer

Fault domains automatically replicate virtual machine memory across different availability domains.

Answer

Each Fault Domain has its own dedicated external internet gateway to route traffic around broken switches.

Question 14

An auditor needs to verify who deleted a critical production virtual cloud network (VCN) yesterday. Which OCI service should the auditor query to find this exact API event history?

Accepted Answer

OCI Audit. OCI Audit automatically records all API calls made against OCI resources, including who made the call, when, from where, and what the request/response was. To find who deleted a VCN, the auditor queries Audit for the DeleteVcn API event, which retains this history for the configured retention period. This is the only OCI service that provides the exact API event history needed for forensic verification.

Answer

OCI Notifications

Answer

OCI Events

Answer

OCI Monitoring

Question 15

Which TWO protocols or methods are supported when attaching an OCI Block Volume to a compute instance? (Choose two.)

Accepted Answer

Paravirtualized attachment. Option C (Paravirtualized attachment) is correct because OCI Block Volumes can be attached to compute instances using the paravirtualized attachment type, where the hypervisor presents the volume to the guest OS as a virtual block device without requiring the guest to handle iSCSI commands directly. Option E (iSCSI attachment) is correct because OCI also supports attaching Block Volumes over iSCSI, where the instance connects to the volume's iSCSI target using the provided IQN, IP address, and port, and then the volume appears as a local block device. Option A (NFSv3 attachment) is incorrect because NFSv3 is a file-level network protocol used by OCI File Storage, not a method for attaching Block Volumes. Option B (HTTP REST API attachment) is incorrect because HTTP REST APIs are used for OCI control-plane management operations, not as a data-plane attachment protocol for Block Volumes. Option D (SMB protocol attachment) is incorrect because SMB is a file-sharing protocol and is not supported for attaching OCI Block Volumes.

Answer

NFSv3 attachment

Answer

HTTP REST API attachment

Answer

SMB protocol attachment