1Z0-1085-26 Practice Test 20 — 15 Questions

Question 1

When using an OCI Load Balancer, which protocol is recommended for securing traffic?

Accepted Answer

HTTPS. HTTPS (via SSL/TLS certificates) is the standard for securing traffic.

Answer

HTTP

Answer

Telnet

Answer

FTP

Question 2

Which TWO OCI compute shape categories offer flexible sizing where you can independently select the number of OCPUs and memory? (Choose two.)

Accepted Answer

Flexible Virtual Machine Shapes. Option A (Flexible Virtual Machine Shapes) is correct because OCI flexible VM shapes let you independently choose the number of OCPUs and the amount of memory per OCPU within defined limits, allowing custom sizing rather than a fixed bundle. Option B (Flexible Bare Metal Shapes) is also correct because flexible bare metal shapes provide the same independent OCPU and memory selection, letting you tailor the physical instance's resources to your workload. Option C (Preemptible Fixed VM Shapes) is incorrect because preemptible instances are a pricing/capacity model, not a flexible-sizing shape category, and they use fixed shape configurations. Option D (Standard Fixed Virtual Machine Shapes) is incorrect because standard shapes come in predefined OCPU/memory ratios that cannot be independently adjusted. Option E (Object Storage Compute Shapes) is incorrect because object storage is a storage service, not a compute shape category, so it has no OCPU or memory sizing.

Answer

Preemptible Fixed VM Shapes

Answer

Standard Fixed Virtual Machine Shapes

Answer

Object Storage Compute Shapes

Question 3

An administrator needs to configure custom DNS resolution for instances within a VCN so they can resolve hostnames pointing to an internal on-premises corporate directory server over a FastConnect link. Which OCI DNS feature should be configured?

Accepted Answer

VCN Private DNS Resolver forwarding rules. OCI's VCN Private DNS Resolver supports forwarding rules that direct DNS queries for specific domains to external nameservers — such as an on-premises corporate directory server reachable over FastConnect. By configuring a forwarding rule on the VCN's resolver, instances can resolve internal hostnames that live on-prem without exposing those zones publicly. This is the correct feature for hybrid DNS resolution across a private connection.

Answer

Default Internet Gateway DNS forwarding

Answer

Public DNS Zones

Answer

OCI Internet Domain Name Registration

Question 4

Which OCI Object Storage feature allows you to grant temporary, time-bound read or write access to a specific bucket or object without sharing user credentials?

Accepted Answer

Pre-authenticated Requests (PARs). Pre-authenticated requests (PARs) provide a way to securely let external users access or download specific objects or buckets without credentials for a defined duration.

Answer

API Signing Keys

Answer

Identity and Access Management (IAM) Policies

Answer

Security Lists

Question 5

Which THREE storage tiers are available in OCI Object Storage? (Choose three.)

Accepted Answer

Standard Storage. OCI Object Storage offers exactly three storage tiers: Standard Storage (B), Archive Storage (C), and Infrequent Access Storage (D). Standard Storage is the default, hot tier designed for frequently accessed data with low latency and high durability. Archive Storage is the lowest-cost tier intended for long-term retention of rarely accessed data, with retrieval times measured in hours. Infrequent Access Storage sits between them, suited for data accessed less often but still requiring rapid, millisecond access when needed. The remaining options, Higher Performance Storage (A) and Balanced Performance Storage (E), are not OCI Object Storage tiers — those names correspond to block volume performance levels, not object storage classes.

Answer

Higher Performance Storage

Answer

Balanced Performance Storage

Question 6

An administrator needs to create a point-in-time, read-only copy of a Block Volume data disk for backup and disaster recovery purposes. What OCI feature should be created?

Accepted Answer

Block Volume Backup. Block Volume backups are point-in-time snapshots of a block volume that can be used to restore data or create new volumes.

Answer

File Storage clone

Answer

Compute instance custom image

Answer

Object Storage archive snapshot

Question 7

Which THREE of the following features are supported by OCI Network Load Balancer (NLB)? (Choose three.)

Accepted Answer

Layer 4 (TCP, UDP, ICMP) traffic distribution. Option A is correct because OCI Network Load Balancer operates at Layer 4 of the OSI model, distributing TCP, UDP, and ICMP traffic based on connection-level information rather than inspecting application payloads. Option B is correct because the NLB is designed for extreme throughput, handling millions of requests per second, and it provides a static VIP that does not change as the service scales, which is essential for high-volume, latency-sensitive workloads. Option D is correct because the NLB preserves the original client source IP address when forwarding traffic to backend servers, allowing backends to see and log the true client address for security and auditing purposes. Option C is not correct because SSL/TLS termination and certificate management are features of the OCI Load Balancer (Layer 7), not the Network Load Balancer, which passes encrypted traffic through without terminating it. Option E is not correct because URL path-based routing requires Layer 7 inspection of HTTP/HTTPS requests, which is a capability of the OCI Load Balancer rather than the Layer 4 Network Load Balancer.

Answer

SSL/TLS termination and certificate management

Answer

URL path-based routing for HTTP/HTTPS requests

Question 8

Which TWO OCI services are used to build and manage containerized applications? (Choose two.)

Accepted Answer

Oracle Container Engine for Kubernetes (OKE). Oracle Container Engine for Kubernetes (OKE) is correct because it is OCI's managed Kubernetes service, purpose-built to deploy, orchestrate, and manage containerized applications across node pools and clusters. OCI Container Instances is also correct because it provides a serverless compute service that runs containers directly without requiring you to manage underlying hosts or Kubernetes, making it a core OCI service for building and managing containerized workloads. The OCI Internet Gateway is not correct because it is a networking component that provides internet connectivity for a VCN, not a container platform. OCI File Storage Service is not correct because it is a managed NFS file system for shared file data, not a container runtime or orchestrator. OCI Block Volume is not correct because it provides persistent block storage for compute instances, not a service for building or managing containers.

Answer

OCI Internet Gateway

Answer

OCI File Storage Service

Answer

OCI Block Volume

Question 9

You are designing a high-throughput, fault-tolerant web application tier. You need to distribute incoming HTTP/HTTPS traffic across multiple compute instances across different availability domains within a region. Which service should you deploy?

Accepted Answer

OCI Load Balancer. OCI Load Balancer is a regional service that distributes incoming traffic across backend servers across multiple availability domains, ensuring high availability.

Answer

Dynamic Routing Gateway (DRG)

Answer

OCI Traffic Director

Answer

OCI Network Load Balancer

Question 10

A company needs to store petabytes of data that is rarely accessed but must be retained for compliance for 7 years. Retrievals can take up to several hours. Which storage tier should they use?

Accepted Answer

Archive Storage. Archive Storage is the lowest-cost OCI Object Storage tier designed for long-term retention of infrequently accessed data with a multi-hour retrieval time.

Answer

Standard Storage

Answer

Infrequent Access Storage

Answer

Block Volume Backups

Question 11

Which THREE actions can be performed using OCI Audit log data? (Choose three.)

Accepted Answer

Trigger automated workflows and notifications via OCI Events based on audit log entries. Option C is correct because OCI Events service can consume Audit log entries as event types (e.g., com.oraclecloud.* resource actions) and route them to targets like OCI Functions, Notifications, or Streaming to trigger automated workflows and alerts. Option D is correct because Audit logs can be archived automatically by configuring a Service Connector Hub (or the Logging service's log archival) to move log data from the Audit log to an Object Storage bucket for long-term retention. Option E is correct because Audit log data is searchable and queryable through OCI Logging Search and the Audit service console, allowing historical API activity to be retrieved and analyzed. Option A is not correct because budget limits are managed by the Budgets service and are not adjusted by Audit log data. Option B is not correct because IAM policy syntax errors are not automatically corrected by Audit logs; IAM policies must be edited manually or via automation you build, not by the Audit service itself.

Answer

Adjust monthly budget limits dynamically

Answer

Automatically modify IAM policy syntax errors

Question 12

An enterprise has multiple child compartments under a root tenancy. A security administrator wants to ensure that a specific IAM policy written in the root tenancy cannot be overridden or weakened by child compartment policies. How does OCI handle policy evaluation across hierarchical boundaries?

Accepted Answer

Policies are additive across the hierarchy; higher-level grants cannot be blocked because OCI has no explicit deny statements.. OCI IAM policies are additive across the tenancy hierarchy. Policies written at the root or compartment level grant permissions, and there are no explicit deny statements in OCI. Therefore, a policy in a child compartment cannot override or weaken a grant from a parent compartment; it can only add more permissions. This means higher-level grants cannot be blocked by lower-level policies.

Answer

OCI evaluates policies alphabetically and applies the first matching statement.

Answer

Root tenancy policies are automatically disabled if any child compartment policy exists.

Answer

Child compartment policies take precedence and override parent compartment policies.

Question 13

Your organization requires a localized cloud environment that provides access to all OCI services, but data must remain strictly within a specific country due to regulatory mandates, and the infrastructure must be managed entirely on-premises. Which OCI offering is appropriate?

Accepted Answer

OCI Dedicated Region Cloud@Customer. OCI Dedicated Region Cloud@Customer provides a full OCI region deployed on-premises at the customer's data center, giving access to all OCI services while keeping data within the customer's premises. This meets the requirements of strict data residency and on-premises management.

Answer

OCI FastConnect

Answer

OCI VPN Connect

Answer

OCI Public Cloud Region

Question 14

Which THREE features are provided by OCI Object Storage buckets? (Choose three.)

Accepted Answer

Object Versioning. Object Versioning (B) is a native bucket feature that retains multiple variants of an object when overwritten or deleted, allowing recovery of prior versions. Lifecycle Management Rules (C) let you automatically transition objects between storage tiers (Standard, Infrequent Access, Archive) or delete them based on age or patterns, which is a core bucket capability. Pre-authenticated Requests (E) are bucket-scoped URLs that grant time-limited access to objects without requiring OCI credentials, enabling secure sharing. Options A and D are incorrect because Object Storage is an object-based service accessed via REST/S3-compatible APIs, not a file or block service; NFSv3 mounting belongs to File Storage, and iSCSI block formatting belongs to Block Volume.

Answer

Direct NFSv3 file system mounting

Answer

Block-level iSCSI disk formatting

Question 15

Which TWO statements are true regarding Oracle Cloud Infrastructure (OCI) Compute Flexible Shapes?

Accepted Answer

Flexible shapes allow you to independently customize the amount of memory and the number of OCPUs for a virtual machine instance.. Option D is correct because OCI flexible shapes let you independently select the number of OCPUs and the amount of memory (within the shape's allowed min/max and OCPU-to-memory ratio range) when provisioning or resizing a VM instance, rather than being locked to a fixed bundle. Option E is correct because flexible shapes are offered on AMD-based VM instances (e.g., VM.Standard.E4/E5.Flex) as well as Ampere Arm-based instances (VM.Standard.A1.Flex), so both processor families support them. Option A is wrong because flexible shapes do not force a single fixed OCPU-to-memory ratio; you can choose memory independently within a permitted range. Option B is wrong because flexible shapes are not limited to Intel Xeon families—they are available on AMD and Ampere as well. Option C is wrong because flexible-shape instances can be resized (OCPUs and memory changed) after provisioning, subject to shape limits and a reboot.

Answer

When you use a flexible shape, you must scale OCPUs and memory in a fixed, predefined ratio.

Answer

Flexible shapes are only supported with Intel Xeon processor families.

Answer

Flexible shapes cannot be resized once the compute instance has been provisioned.