1Z0-1085-26 Practice Test 4 — 25 Questions

Question 1

An administrator is troubleshooting a VCN where instances in a private subnet cannot reach the public internet via a NAT Gateway. The NAT Gateway is attached to the VCN, and the security list allows all outbound traffic. What is the most likely cause of the failure?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

The subnet route table lacks a route rule with destination 0.0.0.0/0 pointing to the NAT Gateway.. Even with a NAT Gateway attached and security lists open, the private subnet's route table must have a route rule with destination 0.0.0.0/0 pointing to the NAT Gateway.

Answer

The NAT Gateway requires an incoming security list rule from 0.0.0.0/0.

Answer

The local OS firewall on the NAT Gateway is blocking packets.

Answer

The VCN lacks an Internet Gateway attached to the public subnets.

Question 2

Which statement best describes the geographical relationship between OCI Regions and Availability Domains?

Accepted Answer

A region is a localized geographic area that contains one or more availability domains.. Regions contain one or more availability domains, and multiple regions make up the OCI global footprint.

Answer

Regions and availability domains are completely independent and interchangeable concepts.

Answer

Each availability domain represents a separate public cloud region in a different country.

Answer

An availability domain spans across multiple global regions to provide high availability.

Question 3

What is the primary function of a Dynamic Routing Gateway (DRG) in OCI?

Accepted Answer

To provide a path for private traffic between a VCN and on-premises networks or remote VCNs. A DRG acts as a virtual router that provides a path for private traffic between your VCN and locations outside your VCN, such as on-premises networks or other VCNs.

Answer

To route public internet traffic to virtual machines

Answer

To balance HTTP traffic across backend web servers

Answer

To provide private access to regional Oracle Cloud services

Question 4

An administrator needs to configure autoscaling for a compute instance pool so that instances scale out when CPU usage exceeds 80% and scale in when CPU usage drops below 20%. Where is this autoscaling configuration applied?

Accepted Answer

On an Instance Pool. Autoscaling configurations in OCI are linked directly to an Instance Pool to automatically manage the number of instances.

Answer

On the OCI Load Balancer backend set

Answer

Directly on the VCN Route Table

Answer

Inside an individual Compute VM's operating system configuration

Question 5

You want to automate object lifecycle management in an OCI Object Storage bucket so that files older than 90 days are automatically transitioned to Archive storage. What should you configure?

Accepted Answer

Object Storage Lifecycle Rules. Object Storage Lifecycle Rules allow you to define automated actions to transition objects to different storage tiers or delete them after a specified time period.

Answer

Pre-authenticated requests

Answer

A scheduled OCI Function with a custom script

Answer

Object Versioning policies

Question 6

An administrator needs to modify the route table of a private subnet so that all traffic destined for an on-premises data center is routed correctly. What should be the target in the route table rule?

Accepted Answer

Dynamic Routing Gateway (DRG). To route traffic from a VCN to an on-premises network, the target in the route table must be the Dynamic Routing Gateway (DRG).

Answer

NAT Gateway

Answer

Service Gateway

Answer

Internet Gateway

Question 7

What is the primary benefit of using OCI Preemptible Instances?

Accepted Answer

Significantly lower cost compute capacity for fault-tolerant workloads. Preemptible instances provide discounted compute capacity that can be used for fault-tolerant workloads.

Answer

Guaranteed lifetime execution without interruptions

Answer

Dedicated physical hardware isolation with zero multi-tenancy

Answer

Automatic scaling of storage volumes

Question 8

Which OCI Object Storage tier is recommended for storing data that is accessed infrequently, but requires rapid access when needed with lower retrieval costs than Archive?

Accepted Answer

Infrequent Access Storage. Infrequent Access storage tier is designed for data accessed less frequently, offering lower storage costs than Standard and faster retrieval than Archive.

Answer

Standard Storage

Answer

Boot Volume storage

Answer

Archive Storage

Question 9

An enterprise application team needs to migrate an existing multi-tier application into Oracle Container Engine for Kubernetes (OKE). They need a managed Kubernetes control plane where OCI manages the master nodes while worker nodes run in their VCN. Which OKE cluster type should they create?

Accepted Answer

Managed OKE Cluster (Standard control plane with Node Pools). A standard managed OKE cluster provides a fully managed Kubernetes control plane with user-managed worker node pools.

Answer

OCI Container Instances Cluster

Answer

Virtual Node OKE Cluster

Answer

Unmanaged Bare Metal Kubernetes Deployment

Question 10

Which of the following is a benefit of OCI Bare Metal instances?

Accepted Answer

Full hardware isolation. Bare metal instances provide full hardware performance without hypervisor interference.

Answer

Automatic scaling

Answer

Shared hypervisor

Answer

Lower cost than VMs

Question 11

You need to automatically increase the number of compute instances in your cluster when CPU utilization exceeds 80%. Which service should you use?

Accepted Answer

Autoscaling. Autoscaling allows automatic adjustment of instance counts based on performance metrics.

Answer

OCI Events

Answer

Load Balancer

Answer

Instance Pools

Question 12

A company needs a shared file system accessible by multiple Linux compute instances simultaneously via the Network File System (NFSv3) protocol across different availability domains. Which OCI service should be deployed?

Accepted Answer

File Storage Service (FSS). File Storage Service (FSS) provides a durable, scalable, enterprise-grade network file system that can be mounted by multiple compute instances across availability domains.

Answer

Local NVMe temporary storage

Answer

Object Storage service

Answer

Block Volume service

Question 13

Which OCI service allows you to run serverless code in response to events without provisioning or managing virtual servers?

Accepted Answer

OCI Functions. OCI Functions is a serverless platform enabling developers to run code in response to events.

Answer

Block Storage Volumes

Answer

Bare Metal Compute Instances

Answer

Oracle Container Engine for Kubernetes

Question 14

You are managing a mission-critical database workload on an OCI Block Volume. The workload experiences extremely high and unpredictable I/O bursts, requiring the highest possible IOPS performance per volume. Which performance tier should you select?

Accepted Answer

Ultra High Performance. Ultra High Performance is the highest performance tier available for OCI Block Volumes, designed for workloads with intensive I/O requirements and high IOPS demands.

Answer

Higher Performance

Answer

Lower Cost

Answer

Balanced

Question 15

An auditor is reviewing security controls for OCI Virtual Cloud Networks. Which THREE characteristics differentiate Security Lists from Network Security Groups (NSGs)? (Choose three.)

Accepted Answer

Security Lists have different resource limits per VCN compared to Network Security Groups.. Security lists are subnet-wide with stateful/stateless rules and have strict limits per VCN, whereas NSGs are VNIC-specific and have different service limits.

Answer

Security Lists require an Internet Gateway to function, while NSGs require a NAT Gateway.

Answer

Security Lists can contain both stateful and stateless rules, while NSGs only support stateless rules.

Question 16

Which OCI storage option is recommended for storing high-performance boot volumes for virtual machines?

Accepted Answer

Block Volume. Block Volumes are the standard for high-performance boot and data volumes.

Answer

Object Storage

Answer

Archive Storage

Answer

File Storage

Question 17

What is the primary benefit of using OCI Container Instances?

Accepted Answer

Serverless container execution. Container Instances allow running containers without managing the underlying VMs or clusters.

Answer

Persistent block storage access only

Answer

Full root access to the host

Answer

Manual cluster patching

Question 18

You have two VCNs in the same region that need to communicate privately. Which component must be configured?

Accepted Answer

Local Peering Gateway. Local Peering Gateways (LPG) are required for VCN peering within the same region.

Answer

DRG

Answer

Internet Gateway

Answer

NAT Gateway

Question 19

You are provisioning a new compute instance and need to ensure it is isolated from hardware failures on a specific physical rack while residing in the same availability domain. Which OCI feature should you leverage?

Accepted Answer

Fault Domain. Fault domains provide anti-affinity within an availability domain by placing instances across physical hardware racks with independent power and networking.

Answer

Availability Domain

Answer

Compartment

Answer

Region

Question 20

Which TWO of the following are valid methods for deploying applications on OCI without managing underlying operating systems or virtual machine hypervisors? (Choose two.)

Accepted Answer

OCI Functions. OCI Functions and OCI Container Instances are serverless compute options that eliminate OS and hypervisor management.

Answer

DenseIO Compute Instances

Answer

Bare Metal Compute Instances

Answer

Standard Virtual Machine Compute Instances