1Z0-1085-26 Practice Exam 3 — 20 Questions

Question 1

A developer wants to run event-driven data processing tasks in OCI without provisioning or managing any underlying servers. The execution duration is short (under 5 minutes). Which OCI service should the developer use?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

OCI Functions. OCI Functions is a serverless, highly scalable platform based on the Fn Project open source engine that allows developers to run code without managing servers.

Answer

Container Instances

Answer

Compute Instances with Autoscaling

Answer

Oracle Container Engine for Kubernetes (OKE)

Question 2

Which THREE OCI networking components are required to connect an on-premises data center to a VCN via an IPsec VPN? (Choose three.)

Accepted Answer

IPsec Connection. The three required OCI components for an IPsec VPN connection to a VCN are the IPsec Connection (A), the Customer Premise Equipment (CPE) object (C), and the Dynamic Routing Gateway (DRG) (D). The IPsec Connection (A) is the actual tunnel resource that defines the shared secret, routing type (static or BGP), and links the CPE to the DRG. The CPE object (C) is a logical representation of the on-premises VPN device, holding its public IP address and identifying the remote endpoint of the tunnel. The DRG (D) is the virtual router attached to the VCN that terminates the IPsec tunnels and provides the path into the VCN's subnets. An Internet Gateway (B) is not required because IPsec VPN traffic traverses the public internet to reach the DRG's public IP; an IGW only enables inbound/outbound internet access for VCN resources. A Local Peering Gateway (E) is used to connect two VCNs within the same region and plays no role in on-premises connectivity.

Answer

Internet Gateway

Answer

Local Peering Gateway

Question 3

Which THREE components are required when writing an OCI IAM policy statement? (Choose three.)

Accepted Answer

Location (compartment name or tenancy). OCI IAM policy syntax requires a verb, a resource type (or all-resources), and a location (compartment or tenancy).

Answer

Availability domain identifier

Answer

Compute shape specification

Question 4

You need to grant an external auditing firm read-only access to view all resources across your entire OCI tenancy without allowing them to make any changes. What is the most efficient way to achieve this?

Accepted Answer

Create an IAM policy: 'Allow group Auditors to inspect all-resources in tenancy'. Using the 'inspect' or 'read' verb across 'all-resources' at the tenancy level grants read-only visibility to auditors.

Answer

Export all resource configurations to a CSV file and email them weekly.

Answer

Create an IAM policy: 'Allow group Auditors to manage all-resources in tenancy'

Answer

Manually add the auditor accounts as co-administrators of the root tenancy.

Question 5

An administrator needs to deploy a critical production database across multiple data centers in the same OCI region to protect against unexpected hardware failure while ensuring lowest possible network latency for synchronous replication. Which component should the administrator leverage?

Accepted Answer

Availability Domains. Availability Domains (ADs) are isolated, independent data centers within a region, connected with high-performance, low-latency networks, making them ideal for high availability within the same region.

Answer

OCI Dedicated Regions

Answer

OCI Regions

Answer

Fault Domains

Question 6

Which TWO OCI storage services provide file or object storage capabilities rather than block storage? (Choose two.)

Accepted Answer

OCI File Storage Service. OCI File Storage Service (A) is correct because it provides a managed, hierarchical NFSv3 file system that multiple compute instances can mount concurrently, making it a file storage service rather than block storage. OCI Object Storage (D) is correct because it stores data as objects in buckets accessed via REST APIs (Swift and S3-compatible), which is object storage, not block storage. The remaining options are block-level storage: Local NVMe Storage (B) is ephemeral disk physically attached to the compute instance, OCI Block Volume (C) is a network-attached iSCSI block device that can be attached to an instance, and Boot Volume (E) is simply a specialized block volume holding the OS image, so none of them provide file or object storage capabilities.

Answer

Local NVMe Storage

Answer

OCI Block Volume

Answer

Boot Volume

Question 7

Which OCI tool can you use to visualize your monthly cloud spend trends, filter costs by compartments, and examine expenses broken down by specific services?

Accepted Answer

Cost Analysis. OCI Cost Analysis is the built-in dashboard for analyzing cloud spending and cost breakdowns.

Answer

Audit

Answer

Cloud Guard

Answer

Resource Manager

Question 8

You need to create a container cluster in OCI where Oracle manages the Kubernetes control plane and you manage the worker nodes. Which service do you deploy?

Accepted Answer

Oracle Container Engine for Kubernetes (OKE). Oracle Container Engine for Kubernetes (OKE) is a managed service where Oracle manages the Kubernetes master control plane.

Answer

OCI Container Instances

Answer

OCI Functions

Answer

Compute Instances with Docker

Question 9

Which TWO options correctly describe features of OCI Regions? (Choose two.)

Accepted Answer

Regions are completely independent and do not share infrastructure with other regions.. Option B is correct because OCI regions are designed as isolated geographic areas with independent infrastructure, so they do not share physical infrastructure such as data centers, power, or networking with other regions. Option D is correct because an OCI region contains one or more availability domains, and the number can vary by region rather than being fixed. Option A is incorrect because not every OCI region has exactly three availability domains; some regions have one availability domain, while others may have three. Option C is incorrect because a region is a localized geographic area and does not span multiple continents simultaneously. Option E is incorrect because regions are physical/logical deployment boundaries for resources and services, not constructs used exclusively for billing.

Answer

Every OCI region is guaranteed to have exactly three availability domains.

Answer

Regions span across multiple continents simultaneously.

Answer

Regions are logical constructs used exclusively for billing purposes.

Question 10

Which OCI Console menu section should an administrator navigate to in order to create and manage user groups, compartments, and IAM policies?

Accepted Answer

Identity & Security. In the OCI Console, user groups, compartments, and IAM policies are all managed under the 'Identity & Security' section. This is where administrators create groups, define compartments, write policies, and manage federation and identity domains.

Answer

Analytics & AI

Answer

Storage

Answer

Networking

Question 11

What is the primary function of an OCI NAT Gateway?

Accepted Answer

To allow outbound internet access from private subnets without incoming internet access. A NAT Gateway enables instances in a private subnet to initiate outbound connections to the internet while preventing inbound connections from the internet.

Answer

To route private traffic to on-premises data centers

Answer

To provide private access to regional Oracle services

Answer

To allow bidirectional internet access for public instances

Question 12

How do you improve the performance of a block volume attached to a compute instance?

Accepted Answer

Change volume performance tier. Changing the performance tier of a block volume (e.g., to Higher Performance) increases IOPS and throughput.

Answer

Add more RAM to instance

Answer

Increase subnets

Answer

Switch to a different VCN

Question 13

A database administrator must establish a high-throughput, highly reliable hybrid connection between an on-premises data center and OCI. The connection must bypass the public internet and guarantee steady throughput with SLA-backed performance. Which networking service combination meets these criteria?

Accepted Answer

OCI FastConnect connected to a Dynamic Routing Gateway (DRG). OCI FastConnect provides a dedicated, private physical connection between on-premises and OCI, bypassing the public internet, and when paired with a Dynamic Routing Gateway (DRG), it enables dynamic routing and high-throughput, SLA-backed hybrid connectivity. This combination meets the requirements for reliability and steady throughput.

Answer

Service Gateway connected to an IPSec VPN

Answer

IPSec VPN connected to an Internet Gateway

Answer

Local Peering Gateway connected to a NAT Gateway

Question 14

You are configuring an OCI Load Balancer and need to distribute traffic based on the URL path (e.g., /api vs /web). Which feature should you configure?

Accepted Answer

Path-based Routing. Path-based routing in the Load Balancer allows traffic direction based on URL paths.

Answer

Round Robin Policy

Answer

SSL Termination

Answer

Health Checks

Question 15

Which OCI compute feature allows you to run virtual machines on dedicated physical servers allocated exclusively to your organization?

Accepted Answer

Dedicated Virtual Machine Hosts. Dedicated Virtual Machine Hosts in OCI allow you to run virtual machines on dedicated physical servers allocated exclusively to your organization, providing isolation and control over the host. This is ideal for compliance, licensing, or security requirements that mandate dedicated hardware. It is the OCI feature specifically designed for this purpose.

Answer

OCI Container Instances

Answer

Preemptible Instances

Answer

Standard Flexible VM Shapes

Question 16

Which OCI Object Storage tier is optimized for storing active data that requires fast and frequent access with lowest latency?

Accepted Answer

Standard Storage. Standard storage tier is the default tier for hot data that is accessed frequently.

Answer

Archive Storage

Answer

Infrequent Access Storage

Answer

Backup Storage Tier

Question 17

An administrator needs to create a custom DNS domain name resolution for instances within an OCI VCN so they can resolve hostnames to internal IP addresses. Which OCI DNS feature should be configured?

Accepted Answer

Private DNS Zones. Private DNS Zones in OCI are designed to provide name resolution for internal resources within a VCN, allowing instances to resolve custom hostnames to private IP addresses. They are scoped to one or more VCNs and are not publicly resolvable, ensuring internal DNS queries stay within the virtual cloud network. This is the correct service for custom internal DNS resolution, as opposed to public DNS zones which are for internet-facing domains.

Answer

Virtual Circuit DNS resolver

Answer

Internet Gateway DNS forwarding

Answer

Public DNS Zones

Question 18

A web application experiencing fluctuating traffic needs a compute solution that automatically scales out the number of virtual machine instances based on CPU utilization. Which combination of OCI services should be configured?

Accepted Answer

Instance Pools and Autoscaling Configurations. OCI Instance Pools combined with Autoscaling Configurations provide automatic horizontal scaling of VM instances based on metrics like CPU utilization. The Instance Pool manages a group of identical instances, and the autoscaling configuration defines policies (threshold-based or schedule-based) to scale the pool in or out.

Answer

Container Instances and OKE

Answer

Compute Instances and Load Balancer

Answer

Bare Metal Instances and NAT Gateway

Question 19

An administrator needs to create a flexible OCI compute virtual machine instance. Which parameters are required when selecting a flexible compute shape?

Accepted Answer

Number of OCPUs and amount of memory (RAM). Flexible compute shapes require specifying the number of OCPUs and the amount of memory (RAM) independently.

Answer

Physical socket count and hypervisor version

Answer

Only the fixed instance shape family name

Answer

Network bandwidth allocation and disk spindle speed

Question 20

You want to organize your OCI resources so that all networking components belong to one administrative boundary, security tools belong to another, and application workloads belong to a third. Which OCI entity is specifically designed to isolate resources for administrative and security delegation?

Accepted Answer

Compartments. Compartments are logical partitions within a tenancy used to organize and isolate OCI resources.

Answer

Virtual Cloud Networks

Answer

Identity Domains

Answer

Availability Domains