1Z0-1085-26 Practice Test 23 — 15 Questions

Question 1

An application running on OCI Compute instances requires shared file storage that can be mounted concurrently across hundreds of Linux instances via the standard NFS protocol. Which OCI storage service is best suited?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

File Storage Service. OCI File Storage Service provides a shared, POSIX-compliant NFS file system that can be mounted concurrently by many compute instances across subnets and availability domains. It is the only OCI storage service designed for concurrent multi-instance NFS access, making it the correct choice for hundreds of Linux instances needing shared file storage.

Answer

Object Storage

Answer

Block Volume

Answer

Local NVMe Temporary Storage

Question 2

An administrator wants to ensure that all Audit log events in the tenancy are archived to an Object Storage bucket for long-term retention and compliance. How should this be configured?

Accepted Answer

Configure Audit Log Configuration in the OCI Console to export logs to an Object Storage bucket.. OCI Audit provides an archival feature where you can configure a retention period and point Audit logs to an Object Storage bucket for long-term preservation.

Answer

Create a Cloud Guard detector recipe for log archiving.

Answer

Write a custom Python script that polls the OCI Monitoring API every minute.

Answer

Attach a compartment quota to the audit compartment.

Question 3

Which TWO characteristics accurately describe Oracle Cloud Infrastructure (OCI) Fault Domains?

Accepted Answer

They provide anti-affinity by ensuring instances placed in different fault domains do not run on the same physical hardware.. Option B is correct because fault domains provide anti-affinity: instances placed in different fault domains within an availability domain are guaranteed not to share the same physical hardware, so a single hardware failure cannot affect both. Option D is correct because fault domains are designed to protect against hardware failures and power supply outages within a single availability domain, allowing you to distribute resources for high availability. Option A is incorrect because each availability domain contains three fault domains, not exactly one. Option C is incorrect because fault domains are scoped within a single availability domain, not across multiple geographic regions. Option E is incorrect because that describes availability domains, which are isolated data centers connected by high-speed, low-latency cross-links, not fault domains.

Answer

Each availability domain contains exactly one fault domain.

Answer

They span across multiple geographic regions to provide disaster recovery.

Answer

They are isolated data centers connected by high-speed, low-latency cross-links.

Question 4

Which TWO actions are supported when managing OCI Block Volume backups? (Choose two.)

Accepted Answer

Copying block volume backups across regions for disaster recovery. Option A is correct because OCI Block Volume backups can be copied from one region to another, which is a standard mechanism for cross-region disaster recovery and migration. Option E is correct because OCI supports backup policies, both Oracle-predefined and user-defined, that automatically schedule and retain block volume backups based on the policy's schedule. Option B is incorrect because a block volume backup is not attachable; you must first create a block volume from the backup and then attach that volume to an instance. Option C is incorrect because backups are stored in the Block Volume service's backup storage and cannot be directly converted into an Object Storage bucket. Option D is incorrect because block volume backups are not NFS file systems; mounting requires restoring the backup to a block volume and attaching it to an instance.

Answer

Attaching a block volume backup directly to multiple running instances

Answer

Converting a block volume backup directly into an Object Storage bucket

Answer

Mounting a block volume backup directly as an NFS file system

Question 5

What is the name of the file format used by OCI Usage Reports that allows financial teams to ingest cloud spending data into spreadsheet and BI tools?

Accepted Answer

CSV. Usage Reports export data as CSV (Comma-Separated Values) files.

Answer

SQL

Answer

XML

Answer

PDF

Question 6

You need to deploy a microservice application in OCI using serverless containers that start in seconds without provisioning Kubernetes clusters or virtual machines. Which OCI service should you use?

Accepted Answer

OCI Container Instances. OCI Container Instances allows you to run containerized applications serverlessly without managing compute or Kubernetes.

Answer

Compute VM instance pools

Answer

Oracle Container Engine for Kubernetes (OKE)

Answer

OCI Functions

Question 7

You are configuring disaster recovery for an Oracle Database running in OCI. You choose to replicate your database to a standby instance in a different OCI region. How does OCI's distributed cloud architecture support this cross-region replication?

Accepted Answer

By leveraging OCI's high-speed private global network backbone to securely transfer data between regions without traversing the public internet.. OCI's private global network connects regions, facilitating secure and reliable cross-region replication.

Answer

By routing all replication traffic through the public internet using Oracle-managed VPNs.

Answer

By synchronizing block storage volumes directly across regions using shared physical disk arrays.

Answer

By requiring the database to be exported to Object Storage and downloaded manually in the target region.

Question 8

Your development team needs to test an application's resilience against infrastructure hardware failures within a specific OCI region that contains only a single Availability Domain. Which OCI feature should you utilize to distribute your compute instances for fault tolerance?

Accepted Answer

Fault Domains. Fault Domains are the OCI construct designed for high availability within a single Availability Domain. Each AD contains three fault domains, which are essentially independent groupings of hardware (racks, power, and network) so that a hardware failure in one fault domain does not affect instances in another. Distributing instances across fault domains in a single-AD region provides the required fault tolerance against hardware failures.

Answer

Dynamic Routing Gateways

Answer

Cross-Region Replication

Answer

Secondary Regions

Question 9

What is the purpose of a Pre-Authenticated Request in Object Storage?

Accepted Answer

Temporary access. PARs allow temporary, time-bound access to objects without requiring user credentials.

Answer

Administrative access

Answer

Permanent access

Answer

Encryption management

Question 10

Which OCI storage service is best suited for storing database backups that require high durability and lowest cost without immediate file system mounting requirements?

Accepted Answer

OCI Object Storage. OCI Object Storage is the correct choice because it is a highly durable, scalable, and low-cost object storage service designed for storing unstructured data such as database backups. It provides 99.999999999% (11 nines) durability by replicating data across multiple availability domains or within a region, and it does not require a file system mount to access data—objects are accessed via REST APIs or CLI/SDK. Its pay-for-what-you-use pricing and infrequent access tiers make it the most cost-effective option for backup storage compared to block or file storage services.

Answer

Local NVMe Storage

Answer

Boot Volume Storage

Answer

OCI File Storage Service

Question 11

Your organization has strict compliance requirements and needs to ensure that no compute instance in a specific production compartment can ever have a public IP address attached. Which OCI service should you use to enforce this rule automatically?

Accepted Answer

Security Zones. OCI Security Zones enforce maximum security policies (recipes) by automatically validating and preventing misconfigurations, such as blocking public IP addresses on compute instances or ensuring buckets are private.

Answer

Cloud Guard

Answer

Web Application Firewall

Answer

Vault Service

Question 12

An application team is deploying microservices on OCI Container Engine for Kubernetes (OKE). They want to expose multiple HTTP services using a single public IP address and route traffic based on URL path routing rules. Which OCI service should they integrate with their Kubernetes Ingress controller?

Accepted Answer

OCI Load Balancer. OCI Load Balancer supports path-based routing and integrates seamlessly with OKE through the OCI Load Balancer Ingress controller to manage external HTTP/HTTPS traffic.

Answer

OCI Network Load Balancer

Answer

OCI Service Gateway

Answer

OCI Internet Gateway

Question 13

A developer needs to store database connection strings and API tokens securely so that applications can retrieve them dynamically without hardcoding credentials. Which OCI service is designed specifically for this purpose?

Accepted Answer

Vault Secrets. OCI Vault Secrets is the service specifically designed to securely store and manage sensitive data such as database connection strings, API tokens, passwords, and certificates. It provides a centralized secrets management system with automatic rotation, versioning, and fine-grained access control via IAM policies. Applications can retrieve secrets dynamically through the OCI SDK, CLI, or REST API, eliminating hardcoded credentials. This directly addresses the developer's need for secure, dynamic retrieval of credentials.

Answer

Object Storage with customer-managed keys

Answer

Key Management Service Master Keys

Answer

Identity and Access Management Dynamic Groups

Question 14

You are deploying a distributed database cluster that requires three nodes to be isolated from one another regarding underlying infrastructure failures. The chosen OCI region has only one Availability Domain. How should you provision the database instances?

Accepted Answer

Deploy each node in a separate Fault Domain (FD-1, FD-2, and FD-3) within the single Availability Domain.. Fault Domains (FDs) within a single Availability Domain provide anti-affinity at the hardware/rack level — each FD has independent power, cooling, and network infrastructure. When only one AD is available, spreading nodes across FD-1, FD-2, and FD-3 is the only way to achieve infrastructure-failure isolation within that region. OCI guarantees that FDs within an AD do not share the same physical rack, so a single rack failure cannot take down more than one node.

Answer

Deploy the nodes in the same Fault Domain and configure OCI Compute Auto-Scaling.

Answer

Deploy the nodes across three different OCI regions using asynchronous database links.

Answer

Deploy all three nodes in the same Fault Domain to maximize internal rack-level network performance.

Question 15

An administrator needs to attach a block volume to a compute instance. Which two attachment methods are supported by OCI Block Volume service?

Accepted Answer

Paravirtualized and iSCSI. OCI Block Volume supports both Paravirtualized and iSCSI attachment methods for attaching block volumes to compute instances.

Answer

NVMe-oF and Fibre Channel

Answer

NFS and SMB

Answer

HTTP and FTP