1Z0-1085-26 Practice Test 2 — 25 Questions

Question 1

Which OCI administrative feature allows you to organize and categorize cloud resources using user-defined key-value pairs for granular tracking and automation?

Accepted Answer

Tags. Tags provide key-value metadata attachment to OCI resources.

Answer

Compartments

Answer

Identity Domains

Answer

Service Limits

Question 2

Which THREE best practices should be followed when designing an OCI compartment hierarchy and IAM policy structure? (Choose three.)

Accepted Answer

Grant permissions to user groups rather than attaching policies directly to individual users.. Best practices include keeping compartment hierarchies shallow, using groups rather than individual users in policies, and following the principle of least privilege.

Answer

Share tenancy root administrative credentials among all team members.

Answer

Write all IAM policies at the root tenancy level to avoid managing multiple policies.

Question 3

An enterprise customer has a strict regulatory requirement that their database backups must be stored in a geographically distinct location at least 500 miles away from their primary data center, without utilizing the public internet. How can this be accomplished using OCI architecture?

Accepted Answer

Configure cross-region bucket replication from the primary OCI region to a secondary OCI region, utilizing Oracle's private network backbone.. Using OCI cross-region replication to a secondary region connected via Oracle's private backbone fulfills this requirement.

Answer

Store backups in multiple Fault Domains within the same Availability Domain.

Answer

Export backups via OCI CLI and transfer them manually using external hard drives shipped via courier.

Answer

Upload backups to a public cloud storage bucket over an encrypted IPsec VPN tunnel spanning the public internet.

Question 4

An administrator needs to organize OCI resources to manage billing and access control for different departments. Which OCI feature is designed for this purpose?

Accepted Answer

Compartment. Compartments are the primary tool for logically organizing and isolating resources, which simplifies policy management and cost tracking.

Answer

Tenancy

Answer

Fault Domain

Answer

Availability Domain

Question 5

Your organization is launching a global e-commerce platform. Users will access the platform from North America, Europe, and Asia. To minimize latency for these users, what is the best practice approach for deploying resources on OCI?

Accepted Answer

Deploy regional instances in multiple OCI regions corresponding to your user geographic distribution and use OCI Traffic Management to route users to the closest region.. Deploying workloads across multiple OCI regions close to the user base minimizes network latency.

Answer

Deploy all database instances in North America and application servers in Europe to balance workloads.

Answer

Deploy all resources in a single central region and use a Content Delivery Network (CDN) for static assets only.

Answer

Deploy instances across multiple Fault Domains in a single Availability Domain to handle global traffic.

Question 6

An administrator creates a new dynamic group with matching rules, but instances belonging to that group are not receiving the permissions granted by the policy referencing the dynamic group. What is the most likely cause?

Accepted Answer

No IAM policy has been created that grants permissions to the dynamic group.. For a dynamic group to receive permissions, an IAM policy must be written granting access to that specific dynamic group name (e.g., 'Allow dynamic-group <group-name> to...').

Answer

Dynamic group names are case-insensitive in rules but case-sensitive in IAM policies, causing a mismatch.

Answer

The instances must be terminated and relaunched for dynamic group membership to evaluate.

Answer

Dynamic groups cannot be used in IAM policies; only user groups can.

Question 7

A security administrator needs to ensure that users configure Multi-Factor Authentication (MFA) for their OCI accounts to enhance login security. Where is MFA managed in OCI?

Accepted Answer

Identity Domains. MFA and user authentication policies are managed within Identity Domains in OCI.

Answer

OCI Vault

Answer

Compartment Quotas

Answer

IAM Policies

Question 8

Your development team needs to test an application's resilience against infrastructure hardware failures within a specific OCI region that contains only a single Availability Domain. Which OCI feature should you utilize to distribute your compute instances for fault tolerance?

Accepted Answer

Fault Domains. In regions with a single Availability Domain, Fault Domains provide the necessary high availability by logically isolating instances onto separate underlying hardware.

Answer

Dynamic Routing Gateways

Answer

Cross-Region Replication

Answer

Secondary Regions

Question 9

Which THREE features are associated with OCI Defined Tags and Tagged-Based Access Control (TBAC)? (Choose three.)

Accepted Answer

Defined tags require a Tag Namespace to be created first.. Defined tags require tag namespaces, support tag defaults, and can be evaluated in IAM policies for TBAC.

Answer

Defined tags replace IAM policies entirely for access control.

Answer

Defined tags can only be created as free-form strings without any governance.

Question 10

An organization must comply with strict data sovereignty laws requiring that their cloud environment remain physically isolated from the public internet and operated independently, yet still receive continuous updates and feature parity with OCI public cloud. Which deployment model satisfies this requirement?

Accepted Answer

OCI Dedicated Region. OCI Dedicated Region provides a fully isolated region within the customer's data center, managed by Oracle, with identical APIs and services to the public cloud.

Answer

OCI Hybrid Cloud via VPN Connect.

Answer

OCI FastConnect with a dedicated private circuit.

Answer

OCI Public Cloud with a dedicated Virtual Cloud Network (VCN).

Question 11

Which THREE components or services are part of the OCI distributed cloud strategy, providing flexibility in where and how cloud services are consumed?

Accepted Answer

OCI Cloud@Customer. The OCI distributed cloud model includes Public Cloud, Dedicated Region, and Cloud@Customer as core offerings to meet various business needs.

Answer

OCI Resource Manager

Answer

OCI Data Catalog

Question 12

An architect is evaluating OCI's distributed cloud offerings. A client in the healthcare sector requires an on-premises deployment that includes the complete portfolio of OCI cloud services, autonomous database capabilities, and exact API parity with the public cloud, all managed locally. Which OCI solution should be proposed?

Accepted Answer

OCI Dedicated Region. OCI Dedicated Region brings the complete set of OCI public cloud services into the customer's data center.

Answer

Oracle Autonomous Database on Dedicated Exadata Infrastructure in the Public Cloud

Answer

OCI Exadata Cloud@Customer

Answer

OCI Compute Cloud@Customer

Question 13

An enterprise customer wants to leverage OCI Compute Cloud@Customer to run containerized microservices on-premises while integrating seamlessly with OCI public cloud management tools. How does Compute Cloud@Customer achieve this integration?

Accepted Answer

By running an autonomous Kubernetes control plane locally that synchronizes with public cloud APIs via a secure management connection.. Compute Cloud@Customer connects back to the OCI control plane over secure, dedicated network connections to maintain consistent management APIs.

Answer

By replicating all public cloud control plane services locally onto every customer node.

Answer

By requiring manual exports of cloud templates and uploading them via Secure Shell (SSH) daily.

Answer

By converting the on-premises rack into a public OCI Region accessible via the public internet.

Question 14

An enterprise customer evaluating OCI's distributed cloud model wants to understand the advantages of OCI Dedicated Region compared to traditional public cloud. Which THREE benefits are provided by OCI Dedicated Region? (Choose three.)

Accepted Answer

Complete control and data residency within the customer's own data center facility.. Dedicated Region provides local data residency, full API/service parity with public cloud, and local control.

Answer

Elimination of all software licensing costs for third-party operating systems.

Answer

Requiring the customer's internal IT staff to manually patch the underlying hypervisors and control plane.

Question 15

Which OCI service allows you to define and run infrastructure as code (IaC) using Terraform configurations natively managed inside your tenancy?

Accepted Answer

OCI Resource Manager. OCI Resource Manager is a fully managed service that uses Terraform to provision and govern OCI resources.

Answer

OCI Audit

Answer

OCI Identity Domains

Answer

OCI Cloud Guard

Question 16

You have a dynamic group named 'AppInstances' configured with the matching rule `instance.compartment.id = 'ocid1.compartment...'`. An instance is moved from this compartment into a different compartment. How quickly does OCI update the dynamic group membership for this instance?

Accepted Answer

Near-real-time (typically within a few minutes). Dynamic group membership evaluations happen dynamically and near-real-time as instances change states or compartments.

Answer

Only when the instance is stopped and restarted.

Answer

Dynamic group membership is static and never updates after initial creation.

Answer

Exactly every 24 hours during the daily IAM sync cycle.

Question 17

An application administrator is configuring a high-availability database cluster across three Fault Domains in a single Availability Domain. During a scheduled infrastructure maintenance event affecting Fault Domain 1, the administrator notices that one of the database nodes becomes unreachable. What is the expected behavior of OCI Fault Domains in this scenario?

Accepted Answer

Only instances in Fault Domain 1 are impacted by the maintenance, while instances in Fault Domains 2 and 3 continue to run normally without disruption.. Fault domains are isolated hardware and power groupings. Maintenance events or hardware failures impact only the specific Fault Domain being maintained, leaving other Fault Domains unaffected.

Answer

The database cluster automatically fails over its primary role to an instance in a different Availability Domain.

Answer

The entire Availability Domain is taken offline to synchronize the maintenance state across all Fault Domains.

Answer

Instances in Fault Domain 1 are automatically migrated to Fault Domain 2, causing a brief network partition.

Question 18

You are deploying a distributed database cluster that requires three nodes to be isolated from one another regarding underlying infrastructure failures. The chosen OCI region has only one Availability Domain. How should you provision the database instances?

Accepted Answer

Deploy each node in a separate Fault Domain (FD-1, FD-2, and FD-3) within the single Availability Domain.. When an OCI region has only one Availability Domain, you achieve high availability by placing instances across three distinct Fault Domains within that AD.

Answer

Deploy the nodes in the same Fault Domain and configure OCI Compute Auto-Scaling.

Answer

Deploy the nodes across three different OCI regions using asynchronous database links.

Answer

Deploy all three nodes in the same Fault Domain to maximize internal rack-level network performance.

Question 19

An architect is planning a multi-region disaster recovery deployment in OCI. Which THREE design considerations are essential for ensuring successful data synchronization and failover? (Choose three.)

Accepted Answer

Selecting secondary regions that offer the necessary service availability and capacity to run the production workload.. DR planning requires considering replication RPO, inter-region latency limits, and failover automation.

Answer

Routing all database replication logs through the public internet for maximum transparency.

Answer

Assuming that all OCI regions have identical network latency to all global internet service providers.

Question 20

An enterprise customer is reviewing their high availability architecture in OCI. They want to ensure their database and application tiers are protected against both localized hardware failures and major facility disruptions. Which THREE architectural practices should they follow? (Choose three.)

Accepted Answer

Distribute database nodes across distinct Fault Domains within an Availability Domain to protect against rack-level failures.. High availability across hardware and facility levels requires multi-AD deployment, multi-FD placement, and regular failover testing.

Answer

Rely solely on manual administrator intervention for all failover scenarios without automated health checks.

Answer

Consolidate all application and database nodes onto a single physical server in Availability Domain 1.