1Z0-1085-26 Practice Exam 3 — 20 Questions

Question 1

You have a dynamic group named 'AppInstances' configured with the matching rule `instance.compartment.id = 'ocid1.compartment...'`. An instance is moved from this compartment into a different compartment. How quickly does OCI update the dynamic group membership for this instance?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Near-real-time (typically within a few minutes). Dynamic group membership evaluations happen dynamically and near-real-time as instances change states or compartments.

Answer

Only when the instance is stopped and restarted.

Answer

Dynamic group membership is static and never updates after initial creation.

Answer

Exactly every 24 hours during the daily IAM sync cycle.

Question 2

An application administrator is configuring a high-availability database cluster across three Fault Domains in a single Availability Domain. During a scheduled infrastructure maintenance event affecting Fault Domain 1, the administrator notices that one of the database nodes becomes unreachable. What is the expected behavior of OCI Fault Domains in this scenario?

Accepted Answer

Only instances in Fault Domain 1 are impacted by the maintenance, while instances in Fault Domains 2 and 3 continue to run normally without disruption.. Fault domains are isolated hardware and power groupings. Maintenance events or hardware failures impact only the specific Fault Domain being maintained, leaving other Fault Domains unaffected.

Answer

The database cluster automatically fails over its primary role to an instance in a different Availability Domain.

Answer

The entire Availability Domain is taken offline to synchronize the maintenance state across all Fault Domains.

Answer

Instances in Fault Domain 1 are automatically migrated to Fault Domain 2, causing a brief network partition.

Question 3

You are deploying a distributed database cluster that requires three nodes to be isolated from one another regarding underlying infrastructure failures. The chosen OCI region has only one Availability Domain. How should you provision the database instances?

Accepted Answer

Deploy each node in a separate Fault Domain (FD-1, FD-2, and FD-3) within the single Availability Domain.. When an OCI region has only one Availability Domain, you achieve high availability by placing instances across three distinct Fault Domains within that AD.

Answer

Deploy the nodes in the same Fault Domain and configure OCI Compute Auto-Scaling.

Answer

Deploy the nodes across three different OCI regions using asynchronous database links.

Answer

Deploy all three nodes in the same Fault Domain to maximize internal rack-level network performance.

Question 4

An architect is planning a multi-region disaster recovery deployment in OCI. Which THREE design considerations are essential for ensuring successful data synchronization and failover? (Choose three.)

Accepted Answer

Selecting secondary regions that offer the necessary service availability and capacity to run the production workload.. DR planning requires considering replication RPO, inter-region latency limits, and failover automation.

Answer

Routing all database replication logs through the public internet for maximum transparency.

Answer

Assuming that all OCI regions have identical network latency to all global internet service providers.

Question 5

An enterprise customer is reviewing their high availability architecture in OCI. They want to ensure their database and application tiers are protected against both localized hardware failures and major facility disruptions. Which THREE architectural practices should they follow? (Choose three.)

Accepted Answer

Distribute database nodes across distinct Fault Domains within an Availability Domain to protect against rack-level failures.. High availability across hardware and facility levels requires multi-AD deployment, multi-FD placement, and regular failover testing.

Answer

Rely solely on manual administrator intervention for all failover scenarios without automated health checks.

Answer

Consolidate all application and database nodes onto a single physical server in Availability Domain 1.

Question 6

Which TWO configuration steps are necessary when setting up private access from a VCN to OCI Object Storage using a Service Gateway? (Choose two.)

Accepted Answer

Add a route table rule with the service destination pointing to the Service Gateway.. Setting up a Service Gateway requires creating the Service Gateway resource itself and adding a route table rule pointing traffic destined for the Object Storage service destination to the Service Gateway.

Answer

Assign a public IP address to every compute instance in the private subnet.

Answer

Attach an Internet Gateway to the VCN to route service traffic.

Answer

Configure a NAT Gateway as a next-hop in the subnet route table.

Question 7

Which OCI compute feature allows you to run virtual machines on dedicated physical servers allocated exclusively to your organization?

Accepted Answer

Dedicated Virtual Machine Hosts. Dedicated Virtual Machine Hosts provide physical servers dedicated solely to your tenancy for compliance and isolation requirements.

Answer

OCI Container Instances

Answer

Preemptible Instances

Answer

Standard Flexible VM Shapes

Question 8

Which TWO OCI compute shapes are available when provisioning virtual machines in OCI? (Choose two.)

Accepted Answer

Standard Shapes. OCI offers both Standard virtual machine shapes and Flexible virtual machine shapes where OCPUs and memory can be customized.

Answer

Object Storage Shapes

Answer

Database Shapes

Answer

Network Shapes

Question 9

You are designing an architecture requiring a resilient, fault-tolerant entry point that distributes incoming HTTP/HTTPS traffic across multiple backend compute instances across different availability domains. Which load balancing service should you deploy?

Accepted Answer

Public Load Balancer. A Public Load Balancer provides automated traffic distribution across multiple backend servers and availability domains with a public IP address.

Answer

Local Peering Gateway

Answer

Network Load Balancer

Answer

Dynamic Routing Gateway

Question 10

Which THREE OCI networking components are required to connect an on-premises data center to a VCN via an IPsec VPN? (Choose three.)

Accepted Answer

IPsec Connection. Site-to-Site VPN requires a Dynamic Routing Gateway (DRG), a Customer Premise Equipment (CPE) object, and an IPsec connection.

Answer

Internet Gateway

Answer

Local Peering Gateway

Question 11

Which OCI storage service is best suited for storing database backups that require high durability and lowest cost without immediate file system mounting requirements?

Accepted Answer

OCI Object Storage. OCI Object Storage provides highly durable, low-cost object storage ideal for backups.

Answer

Local NVMe Storage

Answer

Boot Volume Storage

Answer

OCI File Storage Service

Question 12

A web application experiencing fluctuating traffic needs a compute solution that automatically scales out the number of virtual machine instances based on CPU utilization. Which combination of OCI services should be configured?

Accepted Answer

Instance Pools and Autoscaling Configurations. Instance Pools and Autoscaling Configurations work together to automatically provision or terminate compute instances based on defined performance metrics.

Answer

Container Instances and OKE

Answer

Compute Instances and Load Balancer

Answer

Bare Metal Instances and NAT Gateway

Question 13

An application running on OCI Compute instances requires shared file storage that can be mounted concurrently across hundreds of Linux instances via the standard NFS protocol. Which OCI storage service is best suited?

Accepted Answer

File Storage Service. File Storage Service (FSS) provides a durable, scalable, enterprise-grade network file system that can be mounted by NFS protocol across multiple compute instances simultaneously.

Answer

Object Storage

Answer

Block Volume

Answer

Local NVMe Temporary Storage

Question 14

An administrator needs to create a custom DNS domain name resolution for instances within an OCI VCN so they can resolve hostnames to internal IP addresses. Which OCI DNS feature should be configured?

Accepted Answer

Private DNS Zones. Private DNS zones in OCI DNS allow administrators to manage custom DNS records for VCNs without exposing them to the public internet.

Answer

Virtual Circuit DNS resolver

Answer

Internet Gateway DNS forwarding

Answer

Public DNS Zones

Question 15

You are configuring security rules for an OCI Virtual Cloud Network. What is the key difference between a Security List and a Network Security Group (NSG)?

Accepted Answer

Security Lists apply to entire subnets, while NSGs apply to specific VNICs.. Security lists apply to all VNICs in a subnet, whereas NSGs apply to a specific set of VNICs chosen by the administrator.

Answer

Security Lists only support stateless rules, while NSGs only support stateful rules.

Answer

Security Lists apply to specific VNICs, while NSGs apply to entire subnets.

Answer

Security Lists are regional, while NSGs are availability domain-specific.

Question 16

Which TWO core OCI services provide compute capabilities? (Choose two.)

Accepted Answer

Oracle Container Engine for Kubernetes (OKE). Compute Instances and Oracle Container Engine for Kubernetes (or Container Instances) provide compute power in OCI.

Answer

OCI File Storage Service

Answer

OCI Object Storage

Answer

OCI Virtual Cloud Network

Question 17

You need to deploy a batch processing job that can tolerate sudden termination by OCI if compute capacity is reclaimed, significantly reducing your compute costs. Which instance type should you choose?

Accepted Answer

Preemptible Instance. Preemptible instances are spare compute capacity offered at a lower price that can be reclaimed by OCI when capacity is needed.

Answer

Standard Bare Metal Shape

Answer

Standard Flexible VM Shape

Answer

Dedicated Virtual Machine Host

Question 18

You have an application running in OCI that needs to query Oracle Autonomous Database privately. Traffic must not traverse the public internet and must use OCI's backbone network. Which service should you configure in your VCN?

Accepted Answer

Service Gateway. A Service Gateway allows private access to regional Oracle services like Autonomous Database and Object Storage without internet exposure.

Answer

IPsec VPN Tunnel

Answer

NAT Gateway

Answer

Internet Gateway

Question 19

You need to connect an on-premises data center to an OCI Virtual Cloud Network with dedicated, high-bandwidth, and predictable network performance that bypasses the public internet entirely. Which OCI networking service should you implement?

Accepted Answer

FastConnect. OCI FastConnect provides a dedicated, private connection between your on-premises data center and OCI with higher bandwidth and better reliability than the public internet.

Answer

Internet Gateway

Answer

Local Peering Gateway

Answer

Site-to-Site VPN

Question 20

You need to run a stateless containerized background processing job that executes periodically and terminates immediately upon completion without managing servers. Which OCI serverless service is ideal?

Accepted Answer

OCI Functions. OCI Functions is a serverless, pay-as-you-go platform built on Fn Project that runs code in response to events or schedules.

Answer

Oracle Container Engine for Kubernetes

Answer

Block Storage Volumes

Answer

Bare Metal Compute Instances