1Z0-1085-26 Practice Exam 2 — 20 Questions

Question 1

Your organization is launching a global e-commerce platform. Users will access the platform from North America, Europe, and Asia. To minimize latency for these users, what is the best practice approach for deploying resources on OCI?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Deploy regional instances in multiple OCI regions corresponding to your user geographic distribution and use OCI Traffic Management to route users to the closest region.. To minimize latency for a globally distributed user base, resources must be placed physically close to those users. Deploying regional instances in multiple OCI regions aligned with user geography, combined with OCI Traffic Management steering policies (such as geolocation or latency-based routing), ensures users are served from the nearest healthy region. This is the standard OCI multi-region architecture pattern for global applications.

Answer

Deploy all database instances in North America and application servers in Europe to balance workloads.

Answer

Deploy all resources in a single central region and use a Content Delivery Network (CDN) for static assets only.

Answer

Deploy instances across multiple Fault Domains in a single Availability Domain to handle global traffic.

Question 2

If an instance in a public subnet cannot reach the internet, what is the first thing you should check?

Accepted Answer

Route table rules. Route tables must have a rule directing traffic to the Internet Gateway.

Answer

Security List ingress rules

Answer

Instance CPU usage

Answer

Object Storage policy

Question 3

You need to allow database instances in a private subnet to communicate with Object Storage over the private network. Which service is required?

Accepted Answer

Service Gateway. A Service Gateway allows communication between VCN and OCI public services over the OCI private network.

Answer

NAT Gateway

Answer

Internet Gateway

Answer

VPN Connect

Question 4

You need to migrate a legacy application to OCI that requires a specific IP address to be retained for compliance. Which OCI networking feature allows you to attach a specific public IP to an instance?

Accepted Answer

Reserved Public IP. Reserved Public IPs are long-lived public IP addresses that can be assigned to resources and retained after the resource is deleted.

Answer

Ephemeral Public IP

Answer

Private IP

Answer

Service Gateway IP

Question 5

Your application requires a high-performance, POSIX-compliant shared file system that can be accessed by multiple compute instances across different availability domains. Which service should you choose?

Accepted Answer

File Storage Service. OCI File Storage (FSS) provides a distributed, NFS-based file system accessible from multiple instances.

Answer

Block Volume

Answer

Object Storage

Answer

Archive Storage

Question 6

An enterprise application deployed on OCI is experiencing frequent Layer 7 HTTP flood attacks and SQL injection attempts. Which OCI service provides comprehensive protection against these web vulnerabilities?

Accepted Answer

OCI Web Application Firewall. OCI Web Application Firewall (WAF) is a cloud-based, PCI-compliant security service that protects applications from malicious internet traffic, including cross-site scripting (XSS), SQL injection, and HTTP floods.

Answer

Cloud Guard

Answer

Virtual Cloud Network Security Lists

Answer

Network Security Groups

Question 7

What is an OCI Region?

Accepted Answer

A localized geographic area that contains one or more availability domains.. An OCI region is a localized geographic area containing one or more availability domains.

Answer

A security boundary used to manage user permissions and access control.

Answer

A virtual machine image template used to launch compute instances.

Answer

A physical server rack installed in a customer's private office.

Question 8

A company needs to register and manage public DNS records (such as A, CNAME, and TXT records) for their domain name hosted on OCI. Which OCI service should they use?

Accepted Answer

OCI DNS (Public Zones). OCI DNS provides scalable, highly available public and private Domain Name System services.

Answer

OCI Load Balancer DNS Manager

Answer

OCI Private DNS

Answer

OCI Compute Hostname service

Question 9

An administrator wants to restrict inbound SSH access to a specific group of database compute instances without modifying subnet-level security rules. Which OCI feature should be used to define these fine-grained VNIC rules?

Accepted Answer

Network Security Groups. Network Security Groups (NSGs) allow you to apply security rules to a specific set of VNICs of your choice, independent of subnets.

Answer

Route Tables

Answer

Security Lists

Answer

Dynamic Routing Gateway

Question 10

An architect is designing an application that requires data replication between two OCI regions. The primary region is Ashburn and the secondary region is Phoenix. What is the foundational nature of OCI's multi-region architecture regarding inter-region traffic?

Accepted Answer

OCI regions are independent geographic areas connected by Oracle's high-speed private network backbone, allowing secure cross-region replication.. OCI regions are completely independent and connected by secure, high-speed global network backbones, allowing safe cross-region data transfer.

Answer

All inter-region traffic must traverse the public internet via encrypted IPsec VPN tunnels.

Answer

OCI regions are isolated from each other; cross-region data transfer requires third-party WAN optimizers.

Answer

Inter-region communication is restricted to metadata only; user data cannot be moved between regions.

Question 11

Your organization wants to receive an email alert whenever monthly cloud spending reaches 80% of a specified $5,000 threshold. Which OCI tool should you configure?

Accepted Answer

OCI Budgets. OCI Budgets allow you orange spending limits and trigger alerts at specified percentage thresholds via email or notifications.

Answer

OCI Tag Defaults

Answer

OCI Cloud Guard

Answer

OCI Cost Analysis

Question 12

You are deploying a mission-critical web application that must remain available even if an entire Oracle Cloud Infrastructure availability domain experiences a major outage. The application architecture requires two compute instances. How should you provision these instances to achieve high availability?

Accepted Answer

Deploy one instance in Availability Domain 1 and the other instance in Availability Domain 2.. To survive the loss of an entire Availability Domain, the two instances must be placed in different Availability Domains, because each AD is an isolated fault domain with independent power, cooling, and network. Spreading instances across AD 1 and AD 2 ensures that an AD-level outage leaves at least one instance running. Fault domains only protect against failures within a single AD and cannot survive an AD outage.

Answer

Deploy both instances in the same Availability Domain but assign them to different Fault Domains.

Answer

Deploy both instances in separate OCI Regions using an explicit cross-region pairing gateway.

Answer

Deploy both instances in the same Availability Domain and configure autonomous cross-AD scaling.

Question 13

A database administrator needs to take an instantaneous, point-in-time, space-efficient copy of a large block volume without waiting for full data copying to complete. Which Block Volume feature should they use?

Accepted Answer

Block Volume Clone. Volume Clones provide an immediate, point-in-time copy of a block volume using metadata pointers, allowing immediate access without waiting for a full physical copy.

Answer

Boot volume attachment

Answer

Standard Block Volume Backup

Answer

Cross-region replication policy

Question 14

Which TWO of the following are OCI storage services?

Accepted Answer

Block Volume. Object Storage and Block Volume are primary OCI storage services.

Answer

DNS Service

Answer

Load Balancer

Answer

Functions

Question 15

An administrator wants to configure automated backup policies for OCI Block Volumes attached to production databases. They need a policy that takes daily backups and retains them for 30 days, as well as weekly backups retained for 1 year. How can this be accomplished?

Accepted Answer

Create a user-defined Volume Backup Policy specifying multiple schedules with distinct retention periods.. OCI Block Volume backups support user-defined backup policies that allow combining multiple schedules (e.g., daily and weekly) with custom retention periods.

Answer

Enable Object Storage lifecycle management rules on the attached volume.

Answer

Configure a Compute Autoscaling policy with custom volume snapshot triggers.

Answer

Manually run scripts using the OCI CLI every day and week.

Question 16

You want to host a static HTML website with images and JavaScript files entirely on OCI without provisioning any virtual machine web servers. Where should you store and serve these website files?

Accepted Answer

OCI Object Storage Public Bucket. OCI Object Storage supports hosting public static websites by configuring public buckets to serve web content directly via HTTP/HTTPS.

Answer

OCI File Storage Service

Answer

Block Volume Storage

Answer

OCI Container Instances

Question 17

You need to deploy a web application on OCI that requires a flexible compute shape to adjust CPU and memory independently. Which OCI compute feature should you select?

Accepted Answer

Flexible Shapes. Flexible shapes allow independent scaling of CPU and memory, optimizing costs for workload requirements.

Answer

Preemptible Instances

Answer

Dedicated Host

Answer

Bare Metal Instances

Question 18

You need to deploy a scalable containerized web application where Oracle manages the Kubernetes control plane and you manage the underlying compute worker nodes. Which service should you choose?

Accepted Answer

Oracle Container Engine for Kubernetes (OKE). Oracle Container Engine for Kubernetes (OKE) is OCI's managed Kubernetes service where Oracle operates the control plane (API server, etcd, scheduler) and the customer manages the worker nodes. This matches the requirement exactly: a scalable containerized web app with Oracle-managed control plane and self-managed compute worker nodes.

Answer

Compute VM instance pools without Docker

Answer

OCI Container Instances

Answer

OCI Functions

Question 19

Which OCI service provides native tools to monitor resource metrics (such as CPU utilization) and trigger alarms when thresholds are breached?

Accepted Answer

OCI Monitoring. OCI Monitoring collects metrics and enables alarms based on telemetry data.

Answer

OCI Identity Domains

Answer

OCI Vault

Answer

OCI Cost Analysis

Question 20

A security engineer is designing a zero-trust architecture for a microservices environment in OCI. Traffic between compute instances in different subnets must be restricted based on individual workload roles rather than entire subnet CIDR blocks. Which OCI networking feature should be implemented?

Accepted Answer

Network Security Groups (NSGs). Network Security Groups (NSGs) provide virtual firewall rules for a set of VNICs of your choice, allowing fine-grained security rules independent of subnet architecture.

Answer

Security Lists

Answer

Local Peering Gateways

Answer

Stateful Route Tables