1Z0-1085-26 Practice Test 19 — 15 Questions

Question 1

An auditor is reviewing security controls for OCI Virtual Cloud Networks. Which THREE characteristics differentiate Security Lists from Network Security Groups (NSGs)? (Choose three.)

Accepted Answer

Security Lists have different resource limits per VCN compared to Network Security Groups.. Security lists are subnet-wide with stateful/stateless rules and have strict limits per VCN, whereas NSGs are VNIC-specific and have different service limits.

Answer

Security Lists require an Internet Gateway to function, while NSGs require a NAT Gateway.

Answer

Security Lists can contain both stateful and stateless rules, while NSGs only support stateless rules.

Question 2

A company requires a dedicated, private connection between their on-premises data center and OCI that provides consistent bandwidth. Which service is recommended?

Accepted Answer

FastConnect. FastConnect provides private, dedicated connectivity between on-premises and OCI.

Answer

NAT Gateway

Answer

Site-to-Site VPN

Answer

Local Peering Gateway

Question 3

What is the default behavior of a Security List in OCI?

Accepted Answer

Stateful. Security Lists are stateful by default, meaning return traffic for allowed requests is automatically permitted.

Answer

Always allow all

Answer

Stateless

Answer

Always deny all

Question 4

An administrator needs to restrict access to a specific OCI Object Storage bucket so that only traffic originating from compute instances within a specific subnet can read or write objects, bypassing the public internet entirely. Which OCI feature should be used?

Accepted Answer

A Service Gateway combined with a VCN route table rule targeting Oracle Services. A Service Gateway combined with IAM policies or bucket policies allows VCN instances to access Object Storage privately via Oracle's internal network backbone.

Answer

An Internet Gateway with a stateful security list blocking external ports

Answer

A NAT Gateway routing traffic through a public IP address

Answer

A Local Peering Gateway connected to the Object Storage tenancy

Question 5

An administrator needs to create a point-in-time, read-only copy of a Block Volume data disk for backup and disaster recovery purposes. What OCI feature should be created?

Accepted Answer

Block Volume Backup. Block Volume backups are point-in-time snapshots of a block volume that can be used to restore data or create new volumes.

Answer

File Storage clone

Answer

Compute instance custom image

Answer

Object Storage archive snapshot

Question 6

Which OCI storage option is recommended for storing high-performance boot volumes for virtual machines?

Accepted Answer

Block Volume. Block Volumes are the standard for high-performance boot and data volumes.

Answer

Object Storage

Answer

Archive Storage

Answer

File Storage

Question 7

An administrator needs to attach a Block Volume to a Compute instance using the paravirtualized attachment type. However, the application requires maximum possible IOPS and throughput performance. What is the recommended approach to resolve this requirement?

Accepted Answer

Switch the volume attachment method from paravirtualized to iSCSI and select the Higher Performance volume performance tier.. To achieve maximum performance (such as up to 75,000 IOPS and 800 MB/s per volume), the administrator should use an ISCSI attachment type instead of paravirtualized, alongside a Higher Performance volume performance unit.

Answer

Keep the paravirtualized attachment and increase the volume size to the maximum limit of 32 TB.

Answer

Enable Block Volume backups with incremental scheduling to reduce I/O contention.

Answer

Use a local NVMe scratch disk instead of a Block Volume for the database storage.

Question 8

An organization is setting up a hybrid network architecture using OCI FastConnect with a Partner/Provider model. They need to ensure that their on-premises network can communicate with multiple VCNs across different regions using private IP addresses without traversing the public internet. Which OCI component is mandatory to achieve this?

Accepted Answer

Dynamic Routing Gateway (DRG). A Dynamic Routing Gateway (DRG) version 2 supports attaching to FastConnect and can peer across regions or connect multiple VCNs to a single on-premises connection.

Answer

Internet Gateway

Answer

Local Peering Gateway

Answer

NAT Gateway

Question 9

A company is running a batch processing workload on OCI and wants to optimize compute costs by using spare capacity. The workload can tolerate sudden termination if OCI reclaims the capacity. Which compute instance type should be deployed?

Accepted Answer

Preemptible Instances. Preemptible instances allow customers to utilize spare OCI compute capacity at a significant discount, with the caveat that OCI can reclaim them when needed.

Answer

Reserved Capacity Instances

Answer

Standard Flexible Compute Instances

Answer

Dedicated Virtual Machine Hosts

Question 10

You need to migrate a legacy application to OCI that requires a specific IP address to be retained for compliance. Which OCI networking feature allows you to attach a specific public IP to an instance?

Accepted Answer

Reserved Public IP. Reserved Public IPs are long-lived public IP addresses that can be assigned to resources and retained after the resource is deleted.

Answer

Ephemeral Public IP

Answer

Private IP

Answer

Service Gateway IP

Question 11

You need to allow database instances in a private subnet to communicate with Object Storage over the private network. Which service is required?

Accepted Answer

Service Gateway. A Service Gateway allows communication between VCN and OCI public services over the OCI private network.

Answer

NAT Gateway

Answer

Internet Gateway

Answer

VPN Connect

Question 12

An administrator is managing an Oracle Container Engine for Kubernetes (OKE) cluster. They want to ensure that worker nodes are distributed across multiple failure domains or Availability Domains to prevent downtime if a single hardware rack fails. How should this be configured?

Accepted Answer

Configure the node pool to span multiple subnets across different Availability Domains or Fault Domains.. When creating a node pool in OKE, administrators can specify multiple subnets across different Availability Domains or Fault Domains to ensure high availability.

Answer

Use pre-emptible compute shapes for all worker nodes without subnets.

Answer

Deploy all worker nodes in a single subnet within one Fault Domain.

Answer

Attach a Local Peering Gateway to each Kubernetes worker node.

Question 13

An operations team wants to ensure that a critical web application automatically scales compute capacity up during high traffic spikes and scales down when traffic subsides. Which OCI service combination provides this capability?

Accepted Answer

Instance Pools with Autoscaling Configurations. Compute autoscaling configurations work alongside Load Balancers and Instance Pools to automatically adjust the number of compute instances based on metrics like CPU utilization.

Answer

Bare Metal instances with manual resizing

Answer

OCI Functions triggered by Object Storage events

Answer

Dedicated Virtual Host resource groups

Question 14

An architect is provisioning a high-performance compute cluster that requires direct, unvirtualized access to physical hardware components, including raw local NVMe SSDs and high core counts, without hypervisor overhead. Which compute shape category must be chosen?

Accepted Answer

Bare Metal shapes. Bare Metal shapes provide dedicated physical servers with direct hardware access and no virtualization overhead.

Answer

DenseIO VM shapes

Answer

Preemptible VM instances

Answer

Flexible Virtual Machine shapes

Question 15

Which TWO of the following statements are correct regarding OCI Compute flexible shapes? (Choose two.)

Accepted Answer

Flexible shapes are supported across multiple processor architectures, including AMD and Intel.. Flexible shapes allow independent customization of OCPUs and memory, and they are available across multiple modern compute families (such as AMD and Intel).

Answer

When using a flexible shape, increasing OCPUs automatically decreases available memory proportionally.

Answer

Flexible shapes are restricted to bare-metal instances only and cannot be used with virtual machines.

Answer

Flexible shapes do not support attaching Block Volumes via iSCSI.