1Z0-1085-26 Practice Test 20 — 15 Questions

Question 1

An application deployment requires traffic from an OCI Virtual Cloud Network (VCN) to securely access Oracle Autonomous Database instances in the region without traversing the public internet. Which gateway must be configured in the VCN?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Service Gateway. A Service Gateway allows VCN resources to privately access supported OCI public services, such as Oracle Services Network, without using the public internet.

Answer

Internet Gateway

Answer

Dynamic Routing Gateway

Answer

NAT Gateway

Question 2

An application developer needs to trigger a data-processing script immediately whenever a new object is uploaded to an OCI Object Storage bucket. Which OCI service should be used to execute the script in a serverless manner?

Accepted Answer

OCI Functions triggered via OCI Events. OCI Events service captures changes to cloud resources and can automatically trigger OCI Functions in response to Object Storage uploads.

Answer

Autonomous Database scheduled jobs

Answer

Compute Instance Cron jobs

Answer

Oracle Container Engine for Kubernetes CronJobs

Question 3

You are designing a high-throughput, fault-tolerant web application tier. You need to distribute incoming HTTP/HTTPS traffic across multiple compute instances across different availability domains within a region. Which service should you deploy?

Accepted Answer

OCI Load Balancer. OCI Load Balancer is a regional service that distributes incoming traffic across backend servers across multiple availability domains, ensuring high availability.

Answer

Dynamic Routing Gateway (DRG)

Answer

OCI Traffic Director

Answer

OCI Network Load Balancer

Question 4

You need to deploy a web application on OCI that requires a flexible compute shape to adjust CPU and memory independently. Which OCI compute feature should you select?

Accepted Answer

Flexible Shapes. Flexible shapes allow independent scaling of CPU and memory, optimizing costs for workload requirements.

Answer

Preemptible Instances

Answer

Dedicated Host

Answer

Bare Metal Instances

Question 5

What is the primary benefit of using OCI Container Instances?

Accepted Answer

Serverless container execution. Container Instances allow running containers without managing the underlying VMs or clusters.

Answer

Persistent block storage access only

Answer

Full root access to the host

Answer

Manual cluster patching

Question 6

When creating a block volume backup, where is the data stored?

Accepted Answer

Object Storage. Block volume backups are stored in OCI Object Storage.

Answer

File Storage

Answer

The same volume

Answer

Local SSD

Question 7

An architect is designing an application that requires data replication between two OCI regions. The primary region is Ashburn and the secondary region is Phoenix. What is the foundational nature of OCI's multi-region architecture regarding inter-region traffic?

Accepted Answer

OCI regions are independent geographic areas connected by Oracle's high-speed private network backbone, allowing secure cross-region replication.. OCI regions are completely independent and connected by secure, high-speed global network backbones, allowing safe cross-region data transfer.

Answer

All inter-region traffic must traverse the public internet via encrypted IPsec VPN tunnels.

Answer

OCI regions are isolated from each other; cross-region data transfer requires third-party WAN optimizers.

Answer

Inter-region communication is restricted to metadata only; user data cannot be moved between regions.

Question 8

An administrator is setting up an OCI File Storage (FSS) mount target in a specific subnet. When attempting to mount the file system from a compute instance in a different subnet within the same VCN, the mount command hangs. What must be configured to allow this connection?

Accepted Answer

Configure security rules (Security Lists or NSGs) allowing NFS traffic (ports 111, 2048, 2049, 2050) to the mount target.. Access to File Storage requires security rules allowing TCP and UDP ports 111, 2048, 2049, and 2050 for NFS traffic between the compute instance and the FSS mount target.

Answer

Add a NAT Gateway to translate NFS packets across subnets.

Answer

Attach the File Storage volume directly to the compute instance via iSCSI.

Answer

Create a Local Peering Gateway between the two subnets.

Question 9

An architect is designing a highly resilient web application on OCI. Which TWO components are essential for distributing incoming HTTP/HTTPS traffic across multiple backend compute instances across different availability domains? (Choose two.)

Accepted Answer

OCI Load Balancer configured as regional. A regional OCI Load Balancer combined with a backend set containing instances across multiple Availability Domains ensures high availability and load distribution.

Answer

Internet Gateway attached to the backend compute instances directly

Answer

Service Gateway for internal telemetry

Answer

Dynamic Routing Gateway (DRG) attached to the subnet

Question 10

You are configuring an OCI Load Balancer and need to distribute traffic based on the URL path (e.g., /api vs /web). Which feature should you configure?

Accepted Answer

Path-based Routing. Path-based routing in the Load Balancer allows traffic direction based on URL paths.

Answer

Round Robin Policy

Answer

SSL Termination

Answer

Health Checks

Question 11

You have two VCNs in the same region that need to communicate privately. Which component must be configured?

Accepted Answer

Local Peering Gateway. Local Peering Gateways (LPG) are required for VCN peering within the same region.

Answer

DRG

Answer

Internet Gateway

Answer

NAT Gateway

Question 12

You need to allow your OKE cluster to access a private database. Where should the database be placed for the best security practice?

Accepted Answer

Private subnet. Placing the database in a private subnet and using NSGs to allow traffic from the OKE nodes is best practice.

Answer

The same public subnet as OKE

Answer

Management subnet

Answer

Public subnet

Question 13

Which TWO of the following are OCI storage services?

Accepted Answer

Block Volume. Object Storage and Block Volume are primary OCI storage services.

Answer

DNS Service

Answer

Load Balancer

Answer

Functions

Question 14

An organization with strict data residency requirements is evaluating OCI's hybrid and dedicated offerings. Which THREE options represent OCI deployment models designed to bring cloud services into customer-controlled environments? (Choose three.)

Accepted Answer

OCI Compute Cloud@Customer. Dedicated Region, Exadata Cloud@Customer, and Compute Cloud@Customer bring OCI capabilities to on-premises data centers.

Answer

OCI Local Peering Gateway

Answer

OCI Public Cloud Region

Question 15

You are provisioning a new compute instance and need to ensure it is isolated from hardware failures on a specific physical rack while residing in the same availability domain. Which OCI feature should you leverage?

Accepted Answer

Fault Domain. Fault domains provide anti-affinity within an availability domain by placing instances across physical hardware racks with independent power and networking.

Answer

Availability Domain

Answer

Compartment

Answer

Region