1Z0-1085-26 Practice Test 25 — 15 Questions

Question 1

Your development team needs to deploy microservices orchestrated via Kubernetes with automated worker node scaling and managed control plane upgrades. Which OCI service should you provision?

Accepted Answer

Oracle Container Engine for Kubernetes (OKE). Oracle Container Engine for Kubernetes (OKE) is a fully managed, scalable, and highly available service where you can deploy your containerized applications.

Answer

OCI Functions

Answer

OCI Container Instances

Answer

OCI Compute Instances with Docker

Question 2

Which OCI storage service is best suited for sharing configuration files across multiple Linux virtual machine instances simultaneously?

Accepted Answer

OCI File Storage Service. OCI File Storage Service (FSS) provides a shared network file system that can be mounted simultaneously by multiple instances.

Answer

OCI Block Volume

Answer

Local NVMe Storage

Answer

OCI Object Storage

Question 3

Which TWO of the following are valid OCI Object Storage storage tiers? (Choose two.)

Accepted Answer

Archive Storage Tier. Option B (Archive Storage Tier) is correct because OCI Object Storage offers an Archive tier designed for long-term retention of rarely accessed data, with the lowest storage cost and a restore/retrieval latency measured in hours. Option C (Standard Tier) is correct because the Standard tier is OCI Object Storage's default hot tier for frequently accessed data, providing immediate, millisecond-latency access with high durability. The other options are not OCI Object Storage tiers: Ephemeral SSD (A) and High-Performance Flash (D) are not Object Storage classes, and Magnetic Tape (E) is a physical archival medium, not an OCI Object Storage tier.

Answer

Ephemeral SSD Tier

Answer

High-Performance Flash Tier

Answer

Magnetic Tape Tier

Question 4

Which THREE of the following are components of an OCI Load Balancer?

Accepted Answer

Listeners. In OCI, a Load Balancer is built from listeners, backend sets, and load balancing policies: Listeners (B) define the protocol/port (e.g., HTTP/HTTPS/TCP) on which the load balancer accepts incoming traffic and attach to backend sets, making them a core component. Backend sets (D) are the logical groupings of backend servers (compute instances or IPs) with health-check configuration that receive the balanced traffic. Load balancing policies (E) determine how traffic is distributed across the backends in a backend set (e.g., weighted round robin, least connections, IP hash), so they are also a required component. Security Lists (A) and Route Tables (C) are VCN networking constructs used for subnet-level firewall rules and routing respectively; they are not components of the Load Balancer itself, even though a load balancer's subnet may reference them.

Answer

Security Lists

Answer

Route Tables

Question 5

What is the container image registry service provided natively by Oracle Cloud Infrastructure for storing and sharing OCI container images?

Accepted Answer

Oracle Cloud Infrastructure Registry (OCIR). Oracle Cloud Infrastructure Registry (OCIR) is an Oracle-managed registry that enables you to store and manage your development container images.

Answer

File Storage Service

Answer

OCI Functions repository

Answer

OCI Object Storage

Question 6

You need to run a stateless containerized background processing job that executes periodically and terminates immediately upon completion without managing servers. Which OCI serverless service is ideal?

Accepted Answer

OCI Functions. OCI Functions is a fully managed, serverless Functions-as-a-Service platform that runs stateless, event-driven code and terminates automatically when the function completes, with no server management. It is ideal for periodic background processing jobs that run and exit. This matches the requirement for stateless, periodic, terminating, serverless execution.

Answer

Oracle Container Engine for Kubernetes

Answer

Block Storage Volumes

Answer

Bare Metal Compute Instances

Question 7

Which TWO features are characteristic of OCI Network Load Balancers (NLB)? (Choose two.)

Accepted Answer

Preserves client source IP addresses to backend servers. Option A is correct because OCI Network Load Balancers operate at Layer 4 and are designed to preserve the original client source IP address when forwarding traffic to backend servers, which is essential for logging, access control, and backend applications that need the real client IP. Option C is correct because NLBs function at Layer 4 of the OSI model, load-balancing TCP, UDP, and ICMP traffic rather than inspecting application-layer protocols. Option B is incorrect because HTTP and HTTPS support is characteristic of Layer 7 load balancers (such as OCI Flexible Load Balancer), not the NLB. Option D is incorrect because SSL/TLS termination and URL path-based routing are Layer 7 capabilities, which the NLB does not provide. Option E is incorrect because OCI NLBs are elastic and scale automatically based on traffic, without requiring manual configuration up to a fixed 100 Gbps limit.

Answer

Only supports HTTP and HTTPS protocols

Answer

Terminates SSL/TLS connections and performs URL path-based routing

Answer

Requires manual scaling configuration up to 100 Gbps

Question 8

You need to route traffic privately from your VCN to Oracle Cloud Infrastructure Object Storage in the same region without traversing the public internet. Which components must be configured?

Accepted Answer

Service Gateway and a route table rule with service destination. A Service Gateway combined with a route table entry pointing to the service destination allows private traffic routing to regional Oracle services.

Answer

NAT Gateway and an inbound firewall rule

Answer

Dynamic Routing Gateway and IPsec VPN

Answer

Internet Gateway and a matching security list rule

Question 9

An organization is planning a disaster recovery strategy for a Tier-1 financial application. They need a Recovery Point Objective (RPO) of near-zero and a Recovery Time Objective (RTO) of seconds. Which OCI deployment pattern best fulfills these stringent requirements?

Accepted Answer

Deploy an active-active architecture across two low-latency interconnected OCI regions using synchronous replication and automated traffic management failover.. Near-zero RPO requires that no committed data be lost, which only synchronous replication can guarantee because the write is acknowledged only after it is persisted in both sites. An RTO of seconds demands automated failover with no manual intervention, which an active-active multi-region design with automated traffic management provides. OCI's low-latency interconnected regions (e.g., within a region pair) make synchronous cross-region replication feasible.

Answer

Deploy instances across three Fault Domains in a single Availability Domain with automated compute health checks.

Answer

Backup daily block volumes to Object Storage and restore them in a secondary region upon disaster declaration.

Answer

Deploy an active-passive architecture across two OCI regions using asynchronous database replication and manual DNS failover.

Question 10

Which TWO of the following statements about OCI FastConnect are correct? (Choose two.)

Accepted Answer

FastConnect supports multiple connectivity models, including FastConnect via Provider and FastConnect Colocation.. Option A is correct because OCI FastConnect offers multiple connectivity models, including FastConnect via a third-party Provider (where the provider handles the cross-connect) and FastConnect Colocation (where the customer's equipment connects directly to Oracle at a colocation facility). Option D is correct because FastConnect is a dedicated, private physical connection between an on-premises datacenter and OCI, bypassing the public internet entirely. Option B is incorrect because FastConnect does not route traffic over the public internet; IPsec VPN over the internet is a separate OCI connectivity option. Option C is incorrect because FastConnect supports far higher bandwidths (e.g., 1 Gbps, 10 Gbps, and up to 100 Gbps per connection), not a 10 Mbps global cap. Option E is incorrect because FastConnect is attached to a VCN via a Dynamic Routing Gateway (DRG), not an Internet Gateway.

Answer

FastConnect routes all traffic over the public internet using encrypted IPsec tunnels.

Answer

FastConnect has a maximum bandwidth limit of 10 Mbps globally.

Answer

FastConnect is configured exclusively by attaching an Internet Gateway to the VCN.

Question 11

Your application requires high availability, and you want to ensure that your instances are not all updated or patched at the exact same time. Which OCI concept ensures that maintenance events are distributed?

Accepted Answer

Fault Domain distribution. Distributing instances across different Fault Domains ensures that Oracle maintenance tasks (like patching) occur at different times for each domain, maintaining application uptime.

Answer

Availability Domain isolation

Answer

Regional placement

Answer

Compartment policy

Question 12

A financial services company needs to store sensitive data in OCI with strict access controls and auditing. Which OCI service should they use to manage encryption keys and secrets?

Accepted Answer

Key Management. OCI Key Management is designed to securely store and manage encryption keys and secrets, with features like key rotation and integration with other OCI services. It provides the necessary controls and auditing for sensitive data. IAM, Cloud Guard, and Audit serve different security functions and do not manage keys.

Answer

Identity and Access Management (IAM)

Answer

Audit

Answer

Cloud Guard

Question 13

A solutions architect needs to run a stateless web application on OCI. The application must automatically scale out when CPU utilization exceeds 70% and scale in when it drops below 30%, while minimizing operational overhead. Which OCI service should the architect use to achieve this?

Accepted Answer

OCI Autoscaling with an instance pool. OCI Autoscaling works with instance pools to automatically adjust the number of compute instances based on metrics such as CPU utilization. It supports threshold-based policies for scale-out and scale-in, and integrates with load balancers to distribute traffic. This provides a managed, low-overhead solution for dynamic scaling of stateless applications.

Answer

OCI Load Balancer with health checks

Answer

OCI Monitoring with alarms

Answer

OCI Container Engine for Kubernetes (OKE) with cluster autoscaler

Question 14

A company wants to store backup data in OCI Object Storage. The data is infrequently accessed but must be retrievable within milliseconds when needed. The company wants to minimize storage costs while meeting the retrieval requirement. Which Object Storage tier should they use?

Accepted Answer

Infrequent Access tier. The Infrequent Access tier in OCI Object Storage is optimized for data that is not accessed frequently but must be available with millisecond latency. It costs less than the Standard tier for storage while providing the same low-latency access, making it ideal for backup data that is rarely retrieved but must be quickly accessible when needed.

Answer

Archive tier

Answer

Auto-Tiering tier

Answer

Standard tier

Question 15

An administrator is organizing a new OCI tenancy. The finance team's resources must be isolated for cost tracking and access control, and the team lead needs full control over everything inside that boundary without being able to affect other teams. Which OCI construct should the administrator use to create this isolated boundary for the finance team's resources?

Accepted Answer

A compartment dedicated to the finance team, with policies scoped to it. Compartments provide the logical isolation boundary that OCI uses for both authorization and cost management. By creating a finance compartment and attaching policies scoped to it, the administrator gives the team lead control confined to that boundary while keeping other teams' resources untouched. Availability domains are physical, tags are metadata, and networks address connectivity rather than tenancy organization.

Answer

A tag namespace named after the finance department

Answer

A virtual cloud network with a private subnet for the finance team

Answer

A separate availability domain reserved for the finance team