1Z0-1085-26 Practice Test 7 — 10 Questions

Question 1

Which TWO of the following gateways can be attached to an OCI Virtual Cloud Network (VCN)? (Choose two.)

Accepted Answer

Internet Gateway. The Internet Gateway (A) is a valid OCI VCN gateway that provides bidirectional internet connectivity for resources in a public subnet, enabling inbound and outbound traffic to and from the internet. The Dynamic Routing Gateway (E) is also a valid VCN attachment that provides a path for private traffic between the VCN and external networks such as on-premises networks via FastConnect or IPSec VPN, and between VCNs via peering (local and remote). The other options are not real OCI gateway types: there is no Compute Scaling Gateway (B), no Object Routing Gateway (C), and no Local Storage Gateway (D) in OCI VCN networking; OCI offers Internet Gateway, NAT Gateway, Service Gateway, Local Peering Gateway, Dynamic Routing Gateway, and (in some contexts) Remote Peering Connection.

Answer

Compute Scaling Gateway

Answer

Object Routing Gateway

Answer

Local Storage Gateway

Question 2

An administrator needs to create a private network inside a VCN that isolates database servers from the public internet. How should this be structured?

Accepted Answer

Create a private subnet with no route to an Internet Gateway. A private subnet with a route table that does not contain a route to an Internet Gateway ensures instances are isolated from inbound public internet traffic.

Answer

Create a public subnet and attach an Internet Gateway

Answer

Disable all security lists globally across the tenancy

Answer

Attach a NAT Gateway with an assigned public IP

Question 3

Which TWO of the following statements accurately describe OCI Availability Domains? (Choose two.)

Accepted Answer

Availability domains are connected to each other by a high-bandwidth, low-latency network.. Option A is correct because OCI Availability Domains within a region are interconnected by a dedicated high-bandwidth, low-latency network, which enables low-latency communication between resources in different ADs while still supporting high availability designs. Option C is correct because each Availability Domain is physically isolated from the others, with independent power, cooling, and network infrastructure, so a failure in one AD does not affect the others. Option B is incorrect because Availability Domains are physical data center groupings, not purely logical constructs. Option D is incorrect because a fault domain is a grouping within a single Availability Domain and cannot span multiple ADs. Option E is incorrect because Availability Domains are region-specific and are not shared across distinct OCI regions.

Answer

Availability domains are purely logical constructs with no physical representation.

Answer

A single fault domain can span across multiple availability domains.

Answer

Availability domains are shared across multiple distinct OCI regions.

Question 4

An OCI tenant requires a dedicated, high-speed, private network connection from their on-premises data center to OCI that bypasses the public internet entirely. Which OCI service should be provisioned?

Accepted Answer

FastConnect. OCI FastConnect provides dedicated, private, high-bandwidth connections between an on-premises network and OCI.

Answer

Service Gateway

Answer

IPsec VPN

Answer

Internet Gateway

Question 5

Which OCI compute shape is best suited for workloads requiring dedicated physical servers with no virtualization layer or hypervisor overhead?

Accepted Answer

Bare Metal Shapes. Bare Metal shapes provide physical servers dedicated solely to your tenancy with zero virtualization overhead.

Answer

Flexible Virtual Machine Shapes

Answer

Preemptible Instance Shapes

Answer

OCI Container Instances

Question 6

A database administrator needs to share a multi-gigabyte Oracle Database backup file stored in an OCI Object Storage bucket with an external auditor who does not have an OCI account. How can this be achieved securely without granting IAM console access?

Accepted Answer

Generate a Pre-authenticated Request (PAR) for the specific backup object with an expiration date.. A Pre-authenticated Request (PAR) in OCI Object Storage generates a unique URL that grants time-limited access to a specific object or bucket without requiring the recipient to have an OCI account or IAM credentials. Because the auditor only needs to download a single backup file, creating a PAR scoped to that object with an expiration date provides the least-privilege, secure sharing mechanism. The PAR can also be configured as read-only, ensuring the auditor cannot modify or delete the backup.

Answer

Configure a Service Gateway to allow external IP ranges to access the bucket.

Answer

Make the entire bucket public by modifying the bucket access policy.

Answer

Create a temporary IAM user account with Object Storage Reader permissions.

Question 7

You are troubleshooting a connectivity issue where an on-premises server cannot reach an OCI compute instance over an IPsec VPN tunnel. The security list and NSG rules are verified as correct. What is another common OCI networking configuration that must be checked?

Accepted Answer

Ensure the VCN route table has a rule pointing on-premises CIDR to the DRG. The VCN route table must have a rule pointing traffic destined for the on-premises subnet to the Dynamic Routing Gateway (DRG).

Answer

Confirm that the subnet has a Service Gateway attached

Answer

Check that the compute instance has a public IP address assigned

Answer

Verify that an Internet Gateway is attached to the VCN

Question 8

Which TWO options are valid methods for organizing and managing infrastructure configuration in OCI? (Choose two.)

Accepted Answer

Using OCI Resource Manager to provision and manage Terraform configurations.. Option D is correct because OCI Resource Manager is the managed Terraform service that lets you create, plan, apply, and manage infrastructure-as-code stacks, so it is a valid way to organize and manage infrastructure configuration. Option E is correct because compartments are the fundamental logical containers in OCI used to segment resources and scope IAM policies, making them a core mechanism for organizing and controlling infrastructure. The remaining options are incorrect because Cloud Guard is a security posture service, not a compute deployment tool; Cost Analysis is a billing and usage reporting feature, not an IAM policy authoring tool; and Audit records API activity for compliance, it does not create VCNs.

Answer

Using OCI Cloud Guard to deploy compute instances.

Answer

Using OCI Cost Analysis to write IAM policies.

Answer

Using OCI Audit to create virtual cloud networks.

Question 9

An enterprise customer has a strict regulatory requirement that their database backups must be stored in a geographically distinct location at least 500 miles away from their primary data center, without utilizing the public internet. How can this be accomplished using OCI architecture?

Accepted Answer

Configure cross-region bucket replication from the primary OCI region to a secondary OCI region, utilizing Oracle's private network backbone.. OCI cross-region bucket replication copies objects between buckets in different OCI regions over Oracle's private backbone, never traversing the public internet. Because OCI regions are geographically separated (typically hundreds of miles apart), this satisfies both the distance and the no-public-internet requirements. It's the only option that meets both constraints simultaneously.

Answer

Store backups in multiple Fault Domains within the same Availability Domain.

Answer

Export backups via OCI CLI and transfer them manually using external hard drives shipped via courier.

Answer

Upload backups to a public cloud storage bucket over an encrypted IPsec VPN tunnel spanning the public internet.

Question 10

When designing a disaster recovery and high availability architecture across OCI, which TWO strategies help achieve high availability and fault tolerance? (Choose two.)

Accepted Answer

Distributing critical application instances across multiple fault domains within an availability domain.. Option D is correct because distributing critical application instances across multiple fault domains within an availability domain provides fault tolerance against hardware failures, since each fault domain has independent power and network infrastructure, so a failure in one fault domain does not affect instances in others. Option E is correct because replicating data and workloads across multiple OCI regions provides disaster recovery and geographic redundancy, protecting against region-wide outages and enabling business continuity through services like OCI Full Stack Disaster Recovery, remote replication, and cross-region backups. Option A is incorrect because a single availability domain with no redundancy creates a single point of failure, offering neither high availability nor fault tolerance. Option B is incorrect because placing all instances in a single fault domain concentrates risk, so a fault domain failure would take down the entire workload despite any local communication benefit. Option C is incorrect because creating resources in the root tenancy without compartments is an organizational and access-control anti-pattern that has no bearing on high availability or fault tolerance.

Answer

Relying solely on a single availability domain with no redundancy.

Answer

Placing all database and application instances in a single fault domain for faster local communication.

Answer

Creating all resources in the root tenancy without compartments.