1Z0-1085-26 Practice Test 3 — 25 Questions

Question 1

What is the primary function of an OCI NAT Gateway?

Accepted Answer

To allow outbound internet access from private subnets without incoming internet access. A NAT Gateway enables instances in a private subnet to initiate outbound connections to the internet while preventing inbound connections from the internet.

Answer

To route private traffic to on-premises data centers

Answer

To provide private access to regional Oracle services

Answer

To allow bidirectional internet access for public instances

Question 2

How do you improve the performance of a block volume attached to a compute instance?

Accepted Answer

Change volume performance tier. Changing the performance tier of a block volume (e.g., to Higher Performance) increases IOPS and throughput.

Answer

Add more RAM to instance

Answer

Increase subnets

Answer

Switch to a different VCN

Question 3

A database administrator must establish a high-throughput, highly reliable hybrid connection between an on-premises data center and OCI. The connection must bypass the public internet and guarantee steady throughput with SLA-backed performance. Which networking service combination meets these criteria?

Accepted Answer

OCI FastConnect connected to a Dynamic Routing Gateway (DRG). OCI FastConnect provides a dedicated, private physical connection between on-premises and OCI, bypassing the public internet, and when paired with a Dynamic Routing Gateway (DRG), it enables dynamic routing and high-throughput, SLA-backed hybrid connectivity. This combination meets the requirements for reliability and steady throughput.

Answer

Service Gateway connected to an IPSec VPN

Answer

IPSec VPN connected to an Internet Gateway

Answer

Local Peering Gateway connected to a NAT Gateway

Question 4

You are configuring an OCI Load Balancer and need to distribute traffic based on the URL path (e.g., /api vs /web). Which feature should you configure?

Accepted Answer

Path-based Routing. Path-based routing in the Load Balancer allows traffic direction based on URL paths.

Answer

Round Robin Policy

Answer

SSL Termination

Answer

Health Checks

Question 5

Which OCI compute feature allows you to run virtual machines on dedicated physical servers allocated exclusively to your organization?

Accepted Answer

Dedicated Virtual Machine Hosts. Dedicated Virtual Machine Hosts in OCI allow you to run virtual machines on dedicated physical servers allocated exclusively to your organization, providing isolation and control over the host. This is ideal for compliance, licensing, or security requirements that mandate dedicated hardware. It is the OCI feature specifically designed for this purpose.

Answer

OCI Container Instances

Answer

Preemptible Instances

Answer

Standard Flexible VM Shapes

Question 6

Which OCI Object Storage tier is optimized for storing active data that requires fast and frequent access with lowest latency?

Accepted Answer

Standard Storage. Standard storage tier is the default tier for hot data that is accessed frequently.

Answer

Archive Storage

Answer

Infrequent Access Storage

Answer

Backup Storage Tier

Question 7

An administrator needs to create a custom DNS domain name resolution for instances within an OCI VCN so they can resolve hostnames to internal IP addresses. Which OCI DNS feature should be configured?

Accepted Answer

Private DNS Zones. Private DNS Zones in OCI are designed to provide name resolution for internal resources within a VCN, allowing instances to resolve custom hostnames to private IP addresses. They are scoped to one or more VCNs and are not publicly resolvable, ensuring internal DNS queries stay within the virtual cloud network. This is the correct service for custom internal DNS resolution, as opposed to public DNS zones which are for internet-facing domains.

Answer

Virtual Circuit DNS resolver

Answer

Internet Gateway DNS forwarding

Answer

Public DNS Zones

Question 8

A web application experiencing fluctuating traffic needs a compute solution that automatically scales out the number of virtual machine instances based on CPU utilization. Which combination of OCI services should be configured?

Accepted Answer

Instance Pools and Autoscaling Configurations. OCI Instance Pools combined with Autoscaling Configurations provide automatic horizontal scaling of VM instances based on metrics like CPU utilization. The Instance Pool manages a group of identical instances, and the autoscaling configuration defines policies (threshold-based or schedule-based) to scale the pool in or out.

Answer

Container Instances and OKE

Answer

Compute Instances and Load Balancer

Answer

Bare Metal Instances and NAT Gateway

Question 9

An administrator needs to create a flexible OCI compute virtual machine instance. Which parameters are required when selecting a flexible compute shape?

Accepted Answer

Number of OCPUs and amount of memory (RAM). Flexible compute shapes require specifying the number of OCPUs and the amount of memory (RAM) independently.

Answer

Physical socket count and hypervisor version

Answer

Only the fixed instance shape family name

Answer

Network bandwidth allocation and disk spindle speed

Question 10

You want to organize your OCI resources so that all networking components belong to one administrative boundary, security tools belong to another, and application workloads belong to a third. Which OCI entity is specifically designed to isolate resources for administrative and security delegation?

Accepted Answer

Compartments. Compartments are logical partitions within a tenancy used to organize and isolate OCI resources.

Answer

Virtual Cloud Networks

Answer

Identity Domains

Answer

Availability Domains

Question 11

Which TWO of the following gateways can be attached to an OCI Virtual Cloud Network (VCN)? (Choose two.)

Accepted Answer

Internet Gateway. The Internet Gateway (A) is a valid OCI VCN gateway that provides bidirectional internet connectivity for resources in a public subnet, enabling inbound and outbound traffic to and from the internet. The Dynamic Routing Gateway (E) is also a valid VCN attachment that provides a path for private traffic between the VCN and external networks such as on-premises networks via FastConnect or IPSec VPN, and between VCNs via peering (local and remote). The other options are not real OCI gateway types: there is no Compute Scaling Gateway (B), no Object Routing Gateway (C), and no Local Storage Gateway (D) in OCI VCN networking; OCI offers Internet Gateway, NAT Gateway, Service Gateway, Local Peering Gateway, Dynamic Routing Gateway, and (in some contexts) Remote Peering Connection.

Answer

Compute Scaling Gateway

Answer

Object Routing Gateway

Answer

Local Storage Gateway

Question 12

An administrator needs to create a private network inside a VCN that isolates database servers from the public internet. How should this be structured?

Accepted Answer

Create a private subnet with no route to an Internet Gateway. A private subnet with a route table that does not contain a route to an Internet Gateway ensures instances are isolated from inbound public internet traffic.

Answer

Create a public subnet and attach an Internet Gateway

Answer

Disable all security lists globally across the tenancy

Answer

Attach a NAT Gateway with an assigned public IP

Question 13

Which TWO of the following statements accurately describe OCI Availability Domains? (Choose two.)

Accepted Answer

Availability domains are connected to each other by a high-bandwidth, low-latency network.. Option A is correct because OCI Availability Domains within a region are interconnected by a dedicated high-bandwidth, low-latency network, which enables low-latency communication between resources in different ADs while still supporting high availability designs. Option C is correct because each Availability Domain is physically isolated from the others, with independent power, cooling, and network infrastructure, so a failure in one AD does not affect the others. Option B is incorrect because Availability Domains are physical data center groupings, not purely logical constructs. Option D is incorrect because a fault domain is a grouping within a single Availability Domain and cannot span multiple ADs. Option E is incorrect because Availability Domains are region-specific and are not shared across distinct OCI regions.

Answer

Availability domains are purely logical constructs with no physical representation.

Answer

A single fault domain can span across multiple availability domains.

Answer

Availability domains are shared across multiple distinct OCI regions.

Question 14

An OCI tenant requires a dedicated, high-speed, private network connection from their on-premises data center to OCI that bypasses the public internet entirely. Which OCI service should be provisioned?

Accepted Answer

FastConnect. OCI FastConnect provides dedicated, private, high-bandwidth connections between an on-premises network and OCI.

Answer

Service Gateway

Answer

IPsec VPN

Answer

Internet Gateway

Question 15

Which OCI compute shape is best suited for workloads requiring dedicated physical servers with no virtualization layer or hypervisor overhead?

Accepted Answer

Bare Metal Shapes. Bare Metal shapes provide physical servers dedicated solely to your tenancy with zero virtualization overhead.

Answer

Flexible Virtual Machine Shapes

Answer

Preemptible Instance Shapes

Answer

OCI Container Instances

Question 16

A database administrator needs to share a multi-gigabyte Oracle Database backup file stored in an OCI Object Storage bucket with an external auditor who does not have an OCI account. How can this be achieved securely without granting IAM console access?

Accepted Answer

Generate a Pre-authenticated Request (PAR) for the specific backup object with an expiration date.. A Pre-authenticated Request (PAR) in OCI Object Storage generates a unique URL that grants time-limited access to a specific object or bucket without requiring the recipient to have an OCI account or IAM credentials. Because the auditor only needs to download a single backup file, creating a PAR scoped to that object with an expiration date provides the least-privilege, secure sharing mechanism. The PAR can also be configured as read-only, ensuring the auditor cannot modify or delete the backup.

Answer

Configure a Service Gateway to allow external IP ranges to access the bucket.

Answer

Make the entire bucket public by modifying the bucket access policy.

Answer

Create a temporary IAM user account with Object Storage Reader permissions.

Question 17

You are troubleshooting a connectivity issue where an on-premises server cannot reach an OCI compute instance over an IPsec VPN tunnel. The security list and NSG rules are verified as correct. What is another common OCI networking configuration that must be checked?

Accepted Answer

Ensure the VCN route table has a rule pointing on-premises CIDR to the DRG. The VCN route table must have a rule pointing traffic destined for the on-premises subnet to the Dynamic Routing Gateway (DRG).

Answer

Confirm that the subnet has a Service Gateway attached

Answer

Check that the compute instance has a public IP address assigned

Answer

Verify that an Internet Gateway is attached to the VCN

Question 18

Which TWO options are valid methods for organizing and managing infrastructure configuration in OCI? (Choose two.)

Accepted Answer

Using OCI Resource Manager to provision and manage Terraform configurations.. Option D is correct because OCI Resource Manager is the managed Terraform service that lets you create, plan, apply, and manage infrastructure-as-code stacks, so it is a valid way to organize and manage infrastructure configuration. Option E is correct because compartments are the fundamental logical containers in OCI used to segment resources and scope IAM policies, making them a core mechanism for organizing and controlling infrastructure. The remaining options are incorrect because Cloud Guard is a security posture service, not a compute deployment tool; Cost Analysis is a billing and usage reporting feature, not an IAM policy authoring tool; and Audit records API activity for compliance, it does not create VCNs.

Answer

Using OCI Cloud Guard to deploy compute instances.

Answer

Using OCI Cost Analysis to write IAM policies.

Answer

Using OCI Audit to create virtual cloud networks.

Question 19

An enterprise customer has a strict regulatory requirement that their database backups must be stored in a geographically distinct location at least 500 miles away from their primary data center, without utilizing the public internet. How can this be accomplished using OCI architecture?

Accepted Answer

Configure cross-region bucket replication from the primary OCI region to a secondary OCI region, utilizing Oracle's private network backbone.. OCI cross-region bucket replication copies objects between buckets in different OCI regions over Oracle's private backbone, never traversing the public internet. Because OCI regions are geographically separated (typically hundreds of miles apart), this satisfies both the distance and the no-public-internet requirements. It's the only option that meets both constraints simultaneously.

Answer

Store backups in multiple Fault Domains within the same Availability Domain.

Answer

Export backups via OCI CLI and transfer them manually using external hard drives shipped via courier.

Answer

Upload backups to a public cloud storage bucket over an encrypted IPsec VPN tunnel spanning the public internet.

Question 20

When designing a disaster recovery and high availability architecture across OCI, which TWO strategies help achieve high availability and fault tolerance? (Choose two.)

Accepted Answer

Distributing critical application instances across multiple fault domains within an availability domain.. Option D is correct because distributing critical application instances across multiple fault domains within an availability domain provides fault tolerance against hardware failures, since each fault domain has independent power and network infrastructure, so a failure in one fault domain does not affect instances in others. Option E is correct because replicating data and workloads across multiple OCI regions provides disaster recovery and geographic redundancy, protecting against region-wide outages and enabling business continuity through services like OCI Full Stack Disaster Recovery, remote replication, and cross-region backups. Option A is incorrect because a single availability domain with no redundancy creates a single point of failure, offering neither high availability nor fault tolerance. Option B is incorrect because placing all instances in a single fault domain concentrates risk, so a fault domain failure would take down the entire workload despite any local communication benefit. Option C is incorrect because creating resources in the root tenancy without compartments is an organizational and access-control anti-pattern that has no bearing on high availability or fault tolerance.

Answer

Relying solely on a single availability domain with no redundancy.

Answer

Placing all database and application instances in a single fault domain for faster local communication.

Answer

Creating all resources in the root tenancy without compartments.