1Z0-1085-26 Practice Test 3 — 30 Questions

Question 1

An application running in an OCI VCN needs to access OCI Object Storage and Oracle Autonomous Database privately. Both services must be accessed without traffic leaving Oracle's network backbone and without using public IPs. Which combination of OCI gateway features accomplishes this?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Service Gateway with appropriate VCN route table rules and security policies. A Service Gateway allows private access to regional Oracle services (like Object Storage), while Oracle Database services are accessed natively within private subnets via the service network.

Answer

Internet Gateway and NAT Gateway

Answer

Dynamic Routing Gateway paired with an external DNS resolver

Answer

Local Peering Gateway attached to the Object Storage tenancy

Question 2

You are configuring an Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN) and need to ensure that compute instances in a private subnet can initiate outbound internet connections to download software patches without allowing unsolicited inbound traffic from the internet. Which gateway must you attach to the VCN?

Accepted Answer

NAT Gateway. A NAT (Network Address Translation) Gateway enables instances in a private subnet to connect to the internet for updates while blocking inbound connections from the internet.

Answer

Service Gateway

Answer

Internet Gateway

Answer

Dynamic Routing Gateway

Question 3

A cloud architect needs to deploy a cloud-native application using Docker containers without managing any underlying infrastructure, servers, or Kubernetes worker nodes. Which OCI service should they select?

Accepted Answer

OCI Container Instances. OCI Container Instances is a serverless compute service that lets you run containers quickly without needing to manage any underlying infrastructure or provision compute instances.

Answer

OCI Functions

Answer

Oracle Container Engine for Kubernetes (OKE)

Answer

Compute Instances with Custom Images

Question 4

An application requires a block volume with guaranteed high performance and low latency for heavy database operations. Which OCI Block Volume performance tier should you select?

Accepted Answer

Higher Performance. Higher Performance provides maximum IOPS and throughput for demanding database workloads.

Answer

Archive Tier

Answer

Balanced

Answer

Lower Cost

Question 5

You need to deploy a scalable containerized web application where Oracle manages the Kubernetes control plane and you manage the underlying compute worker nodes. Which service should you choose?

Accepted Answer

Oracle Container Engine for Kubernetes (OKE). Oracle Container Engine for Kubernetes (OKE) is a fully managed service where Oracle manages the Kubernetes control plane.

Answer

Compute VM instance pools without Docker

Answer

OCI Container Instances

Answer

OCI Functions

Question 6

Which TWO OCI services are used to build and manage containerized applications? (Choose two.)

Accepted Answer

Oracle Container Engine for Kubernetes (OKE). Oracle Container Engine for Kubernetes (OKE) and OCI Container Instances are core container services in OCI.

Answer

OCI Internet Gateway

Answer

OCI File Storage Service

Answer

OCI Block Volume

Question 7

Which TWO OCI compute shape categories offer flexible sizing where you can independently select the number of OCPUs and memory? (Choose two.)

Accepted Answer

Flexible Virtual Machine Shapes. Flexible shapes are available for standard virtual machines and certain specialized compute families.

Answer

Preemptible Fixed VM Shapes

Answer

Standard Fixed Virtual Machine Shapes

Answer

Object Storage Compute Shapes

Question 8

A database administrator must establish a high-throughput, highly reliable hybrid connection between an on-premises data center and OCI. The connection must bypass the public internet and guarantee steady throughput with SLA-backed performance. Which networking service combination meets these criteria?

Accepted Answer

OCI FastConnect connected to a Dynamic Routing Gateway (DRG). FastConnect provides a dedicated, private connection with higher speeds and SLAs, bypassing the public internet, paired with a Dynamic Routing Gateway (DRG) on the VCN side.

Answer

Service Gateway connected to an IPSec VPN

Answer

IPSec VPN connected to an Internet Gateway

Answer

Local Peering Gateway connected to a NAT Gateway

Question 9

You are configuring an OCI Load Balancer and want to ensure high availability by distributing traffic across backend servers in different availability domains within a region. Which type of load balancer should you deploy?

Accepted Answer

Regional Load Balancer. A regional load balancer distributes traffic across backend servers across multiple availability domains within the region.

Answer

Availability Domain-specific Load Balancer

Answer

Dynamic Routing Load Balancer

Answer

Local Peering Load Balancer

Question 10

Which OCI Object Storage tier is recommended for storing data that is accessed infrequently, but requires rapid access when needed with lower retrieval costs than Archive?

Accepted Answer

Infrequent Access Storage. Infrequent Access storage tier is designed for data accessed less frequently, offering lower storage costs than Standard and faster retrieval than Archive.

Answer

Standard Storage

Answer

Archive Storage

Answer

Boot Volume storage

Question 11

Which TWO statements are true regarding OCI File Storage Service (FSS)? (Choose two.)

Accepted Answer

All data stored in OCI File Storage is encrypted at rest by default.. FSS supports concurrent NFS mounts across instances and encrypts all file system data at rest by default.

Answer

File storage data is stored entirely within a single compute instance's local NVMe drive.

Answer

File Storage file systems have a hard maximum capacity limit of 50 Gigabytes.

Answer

File Storage requires iSCSI protocol configuration on every client instance.

Question 12

An operations engineer needs to provision a Network File System (NFS) that can be simultaneously mounted across hundreds of OCI Compute instances for shared data processing. Which OCI storage service is best suited for this?

Accepted Answer

File Storage Service (FSS). File Storage Service (FSS) provides a durable, enterprise-grade network file system that supports the standard NFS v3 protocol and can be mounted concurrently by thousands of compute instances.

Answer

Local NVMe

Answer

Object Storage

Answer

Block Volume

Question 13

You need to perform maintenance on a physical host running your OCI compute instance. How can you ensure minimal downtime when OCI is scheduled to reboot the instance for underlying host maintenance?

Accepted Answer

Manually reboot the instance before the maintenance deadline to trigger migration to a healthy host. OCI notifies users of scheduled maintenance and allows you to manually reboot the instance early to migrate it to a healthy physical host before the deadline.

Answer

Change the VCN route table during maintenance windows

Answer

Attach an additional Block Volume to prevent host reboots

Answer

Convert the virtual machine into a Bare Metal server

Question 14

A security administrator wants to implement stateful packet filtering at the individual instance level within a VCN subnet, allowing different rules to apply to different groups of instances in the same subnet. Which OCI feature should be used?

Accepted Answer

Network Security Groups (NSGs). Network Security Groups (NSGs) act as virtual firewalls that provide security rules applied to a specified set of VNICs, unlike security lists which apply to entire subnets.

Answer

Dynamic Routing Gateway firewall rules

Answer

Security Lists

Answer

Internet Gateway security policies

Question 15

An organization has strict compliance requirements to ensure that all data stored in OCI Object Storage buckets is encrypted using a custom encryption key managed entirely by the customer, rather than Oracle-managed keys. How can this be achieved?

Accepted Answer

Use OCI Vault to create and manage Customer-Managed Keys (CMK) for encrypting the Object Storage bucket.. OCI Object Storage supports Customer-Managed Keys (CMK) using OCI Vault, allowing customers to control the master encryption keys used to encrypt their data.

Answer

Enable bucket versioning and assign an IAM administrator password.

Answer

Attach an Internet Gateway configured with SSL certificates.

Answer

Encrypt the data manually using local scripts before uploading to Object Storage.

Question 16

Which THREE OCI networking components are regional constructs rather than availability domain-specific? (Choose three.)

Accepted Answer

Service Gateway. Virtual Cloud Networks, Internet Gateways, and Service Gateways are regional OCI resources.

Answer

Subnets (can be regional or AD-specific)

Answer

Compute Instances

Question 17

You need to deploy a batch processing job that can tolerate sudden termination by OCI if compute capacity is reclaimed, significantly reducing your compute costs. Which instance type should you choose?

Accepted Answer

Preemptible Instance. Preemptible instances are spare compute capacity offered at a lower price that can be reclaimed by OCI when capacity is needed.

Answer

Standard Flexible VM Shape

Answer

Dedicated Virtual Machine Host

Answer

Standard Bare Metal Shape

Question 18

An administrator is configuring OCI Block Volume backups for production workloads. Which TWO features are natively supported by the OCI Block Volume service? (Choose two.)

Accepted Answer

Incremental backups that capture only blocks changed since the last backup. OCI Block Volume supports both manual backups and automated backup policies (Bronze, Silver, Gold), as well as cross-region volume replication for disaster recovery.

Answer

Real-time synchronous mirroring of block volumes across global cloud regions automatically

Answer

Direct backup storage to local NVMe drives on the same server

Answer

Instantaneous read-only block volume cloning

Question 19

An enterprise customer requires a dedicated, private, high-speed connection between their on-premises datacenter and OCI, bypassing the public internet entirely while offering predictable network performance. Which OCI connectivity option meets this requirement?

Accepted Answer

OCI FastConnect. OCI FastConnect provides a dedicated, private connection between your on-premises data center and OCI, offering higher bandwidth and a more reliable network experience than public internet connections.

Answer

Internet Gateway

Answer

Remote Peering Connection

Answer

IPsec VPN

Question 20

A developer has deployed a Node.js web application on an OCI Compute instance, but external users cannot access the application on port 3000. The instance's VCN has a security list allowing TCP traffic on port 3000. What additional OS-level configuration is likely blocking the traffic?

Accepted Answer

The local OS firewall (such as firewalld or iptables) running on the compute instance.. Linux compute instances run local software firewalls (such as firewalld or iptables) by default, which can block incoming traffic even if OCI network security rules allow it.

Answer

The OCI Object Storage bucket policy restricting HTTP ports.

Answer

The VCN Service Gateway intercepting local port requests.

Answer

The Dynamic Routing Gateway dropping layer 4 packets.