1Z0-1085-26 Practice Test 5 — 25 Questions

Question 1

Which OCI service provides a managed Domain Name System (DNS) to manage your domain records?

Accepted Answer

DNS Service. OCI DNS service manages public and private DNS zones.

Answer

Load Balancer

Answer

FastConnect

Answer

Object Storage

Question 2

Which TWO of the following are methods to protect data in Block Volume?

Accepted Answer

Volume Cloning. Backups and volume cloning are standard data protection methods.

Answer

VCN Peering

Answer

Security Lists

Answer

Load Balancing

Question 3

An enterprise is planning a multi-cloud strategy and needs to connect their OCI tenancy directly to Microsoft Azure with extremely low latency and high throughput. Which OCI architectural feature or partnership makes this possible?

Accepted Answer

Oracle Interconnect for Azure. Oracle Interconnect for Azure provides direct, low-latency, high-throughput connectivity between OCI and Microsoft Azure in select regions.

Answer

OCI Dynamic Routing Gateway (DRG) peering over the internet

Answer

OCI Cloud Guard cross-cloud integration

Answer

OCI FastConnect with public peering

Question 4

Which of the following is a capability of the OCI Block Volume service?

Accepted Answer

Volume cloning. Block volumes support automatic and manual backups to Object Storage.

Answer

Global replication

Answer

Direct console access

Answer

Automatic OS patching

Question 5

What is the primary characteristic of an Oracle Cloud Infrastructure Availability Domain?

Accepted Answer

One or more data centers located within a region, fault-isolated from each other with independent power and cooling.. Availability domains are distinct, standalone data centers within a region, featuring independent power, cooling, and network infrastructure.

Answer

A software-defined network boundary that connects local data centers to the OCI backbone.

Answer

A logical grouping of users and compartments for billing purposes.

Answer

A hardware rack dedicated entirely to a single enterprise customer on-premises.

Question 6

Which TWO of the following are types of OCI VCN subnets?

Accepted Answer

Regional. Subnets can be regional or availability domain-specific.

Answer

Global

Answer

Public-only

Answer

Reserved

Question 7

Which THREE components are typically isolated from each other across different Fault Domains within an Availability Domain? (Choose three.)

Accepted Answer

Top-of-rack network switches. Fault domains isolate instances from shared physical hardware racks, power sources, and top-of-rack switches.

Answer

Geographic regions

Answer

Building facilities

Question 8

What is a key benefit of OCI's multi-region architecture for enterprise disaster recovery?

Accepted Answer

It allows organizations to deploy workloads across geographically disparate regions to protect against large-scale regional disasters.. Multi-region architecture enables disaster recovery by placing backup infrastructure in a geographically separate region.

Answer

It eliminates the need for data backups by synchronizing all data locally across fault domains.

Answer

It ensures that all regions share the same physical power grid to reduce energy consumption.

Answer

It allows developers to bypass IAM security policies when migrating data between regions.

Question 9

A security officer wants to monitor security risks across multiple OCI tenancies and compartments from a single consolidated dashboard. Which OCI service should they configure?

Accepted Answer

OCI Cloud Guard. OCI Cloud Guard is a cloud security posture management service that helps customers monitor, assess, identify, and maintain a strong security posture on OCI by detecting misconfigured resources and insecure user activities.

Answer

OCI Bastion

Answer

OCI Web Application Firewall

Answer

OCI Vault

Question 10

You want to ensure that any compute instance launched by the data science team is automatically tagged with a specific project code, without requiring manual tagging by the users. Which OCI governance mechanism is best suited for this?

Accepted Answer

Tag Defaults. Tag defaults allow you to set default values for defined tags at the compartment level, automatically applying them upon resource creation.

Answer

OCI Vault

Answer

Compartment Quotas

Answer

Cloud Guard Detector Recipes

Question 11

You need to ensure that Object Storage data is automatically moved to Archive Storage after 90 days to save costs. How can you achieve this?

Accepted Answer

Lifecycle Management Policy. Object Storage Lifecycle Policies automate the movement of objects between tiers based on age.

Answer

Pre-authenticated requests

Answer

Manual script

Answer

Version Control

Question 12

You need to configure an OCI Load Balancer listener to handle secure HTTPS traffic with SSL certificate termination. Where do you configure the SSL certificate?

Accepted Answer

In the Load Balancer Certificate configuration associated with the HTTPS listener. SSL certificates are added to the Load Balancer as a Certificate resource and associated with an HTTPS listener.

Answer

Inside the VCN Security List ingress rule

Answer

Inside the Dynamic Routing Gateway settings

Answer

On the backend compute instance OS firewall

Question 13

A company is running a batch processing workload on OCI and wants to optimize compute costs by using spare capacity. The workload can tolerate sudden termination if OCI reclaims the capacity. Which compute instance type should be deployed?

Accepted Answer

Preemptible Instances. Preemptible instances allow customers to utilize spare OCI compute capacity at a significant discount, with the caveat that OCI can reclaim them when needed.

Answer

Reserved Capacity Instances

Answer

Standard Flexible Compute Instances

Answer

Dedicated Virtual Machine Hosts

Question 14

Which OCI service enables you to run serverless functions triggered by events or HTTP requests without managing servers or runtimes?

Accepted Answer

OCI Functions. OCI Functions is a serverless platform enabling developers to deploy code that executes in response to events or HTTP requests.

Answer

Oracle Container Engine for Kubernetes

Answer

Compute Instance Pools

Answer

Container Instances

Question 15

Which OCI service is highly recommended for storing large amounts of unstructured data such as images and backups?

Accepted Answer

Object Storage. Object Storage is designed for unstructured, massive-scale data storage.

Answer

Block Volume

Answer

File Storage

Answer

Memory

Question 16

You are configuring security rules for an OCI Virtual Cloud Network. What is the key difference between a Security List and a Network Security Group (NSG)?

Accepted Answer

Security Lists apply to entire subnets, while NSGs apply to specific VNICs.. Security Lists are subnet-level constructs: they apply to all VNICs in a subnet and are the traditional OCI network security mechanism. Network Security Groups (NSGs) are VNIC-level constructs: they apply only to the specific VNICs to which they are attached, allowing more granular, instance-level security policy. This is the fundamental architectural difference between the two.

Answer

Security Lists only support stateless rules, while NSGs only support stateful rules.

Answer

Security Lists apply to specific VNICs, while NSGs apply to entire subnets.

Answer

Security Lists are regional, while NSGs are availability domain-specific.

Question 17

An enterprise customer requires a dedicated, private, high-speed connection between their on-premises datacenter and OCI, bypassing the public internet entirely while offering predictable network performance. Which OCI connectivity option meets this requirement?

Accepted Answer

OCI FastConnect. OCI FastConnect provides a dedicated, private physical connection between an on-premises datacenter and OCI, bypassing the public internet. It offers predictable, high-bandwidth, low-latency performance with options for private peering (to VCNs) or public peering (to OCI services). This is the only option that satisfies the requirement of a dedicated private high-speed link.

Answer

Internet Gateway

Answer

Remote Peering Connection

Answer

IPsec VPN

Question 18

An administrator wants to ensure that OCI Compute instances in an instance pool are automatically replaced if the underlying physical hardware experiences a catastrophic failure. Which OCI feature provides this capability?

Accepted Answer

Instance Pool auto-healing / health checks. Instance pools include automatic instance health monitoring that replaces unhealthy or failed instances automatically.

Answer

Manual intervention and CLI reboot scripts

Answer

Object Storage bucket replication

Answer

Block Volume differential backups

Question 19

A security administrator needs to ensure that users configure Multi-Factor Authentication (MFA) for their OCI accounts to enhance login security. Where is MFA managed in OCI?

Accepted Answer

Identity Domains. In OCI, MFA is configured and enforced through Identity Domains (the IAM identity layer that replaced the legacy tenancy-level identity). Within an Identity Domain, administrators configure MFA settings such as 'Enrolled' or 'Required' at the domain level, and individual users enroll their MFA factors (OCI Mobile App, TOTP authenticator, SMS, etc.) from their My Profile page. This is where sign-on policies and MFA enforcement rules live.

Answer

OCI Vault

Answer

Compartment Quotas

Answer

IAM Policies

Question 20

You are configuring an OCI Network Load Balancer (NLB) for a high-performance database cluster. Why would you choose NLB over a regional Layer 7 Load Balancer?

Accepted Answer

NLB operates at Layer 4 and preserves client source IP addresses. Network Load Balancer operates at Layer 4, handles high packet rates with ultra-low latency, and preserves client source IP addresses.

Answer

NLB requires fewer VCN subnets than regional load balancers

Answer

NLB terminates SSL certificates and inspects HTTP payloads

Answer

NLB supports URL path-based routing for HTTP applications