1Z0-1085-26 Core Oci Services — 25 Questions

Question 1

An enterprise application requires block storage with extremely high IOPS and ultra-low latency for an Oracle Database deployment. Which OCI Block Volume performance tier should you configure?

Accepted Answer

Higher Performance. Higher Performance (formerly Ultra High Performance) offers up to 300,000 IOPS and 4rd-generation NVMe performance, specifically built for demanding databases.

Answer

Lower Cost

Answer

Basic

Answer

Balanced

Question 2

You are configuring autoscaling for an instance pool. Which two metric types are natively supported by OCI Autoscaling to trigger scale-out and scale-in events?

Accepted Answer

CPU utilization and Memory utilization. OCI Autoscaling natively supports CPU utilization and Memory utilization metrics to trigger scaling actions.

Answer

HTTP request rate and database query latency

Answer

Disk I/O throughput and Network packet drops

Answer

GPU temperature and power consumption

Question 3

An administrator needs to attach a block volume to a compute instance. Which two attachment methods are supported by OCI Block Volume service?

Accepted Answer

Paravirtualized and iSCSI. OCI Block Volume supports both Paravirtualized and iSCSI attachment methods for attaching block volumes to compute instances.

Answer

NVMe-oF and Fibre Channel

Answer

NFS and SMB

Answer

HTTP and FTP

Question 4

Which THREE components are required to successfully configure a Site-to-Site VPN connection from an on-premises data center to an OCI VCN? (Choose three.)

Accepted Answer

Customer Premise Equipment (CPE) object. A Site-to-Site VPN requires a Customer Premise Equipment (CPE) object, a Dynamic Routing Gateway (DRG), and an IPsec connection linking them.

Answer

Local Peering Gateway

Question 5

An organization has multiple business units with separate VCNs in the same OCI region. They need to peer these VCNs directly to share data privately without routing traffic through an on-premises data center. Which OCI component enables this?

Accepted Answer

Service Gateway. A Local Peering Gateway (LPG) enables you to peer two VCNs in the same region so that traffic flows privately between them.

Answer

Internet Gateway with NAT

Answer

Remote Peering Connection via DRG

Question 6

Which TWO OCI compute offerings allow you to run workloads without managing physical server hardware or underlying hypervisors? (Choose two.)

Accepted Answer

Bare Metal Compute Instances. OCI Container Instances and OCI Functions are serverless compute options requiring no infrastructure management.

Answer

Standard Flexible Virtual Machines

Answer

Standard Dedicated Virtual Machine Hosts

Question 7

You need to create a secure connection between two VCNs in the same region, ensuring that traffic remains private and does not traverse the public internet. Which component should you configure?

Accepted Answer

Local Peering Gateway (LPG). A Local Peering Gateway (LPG) enables private peering between two VCNs within the same region.

Answer

Dynamic Routing Gateway with IPsec VPN

Answer

Internet Gateway with NAT

Question 8

Which THREE components are required to successfully configure a Site-to-Site VPN connection from an on-premises data center to an OCI VCN? (Choose three.)

Accepted Answer

Dynamic Routing Gateway (DRG). A Site-to-Site VPN requires a Customer Premise Equipment (CPE) object, a Dynamic Routing Gateway (DRG), and an IPsec connection linking them.

Answer

Local Peering Gateway

Question 9

Which THREE of the following parameters can be configured when setting up an OCI Compute Autoscaling configuration? (Choose three.)

Accepted Answer

Metric triggers such as CPU utilization or memory utilization thresholds. Compute autoscaling allows setting threshold metrics like CPU or memory utilization, setting minimum and maximum instance counts, and cooldown periods.

Answer

Automatic database schema migration scripts upon scale-out

Question 10

Which THREE of the following are valid OCI networking components used to connect a VCN to other networks?

Accepted Answer

Internet Gateway. Internet Gateways, NAT Gateways, and Dynamic Routing Gateways (DRGs) are core connectivity components.

Answer

Service Gateway

Answer

Local Peering Gateway

Question 11

An administrator wants to restrict inbound SSH access to a specific group of database compute instances without modifying subnet-level security rules. Which OCI feature should be used to define these fine-grained VNIC rules?

Accepted Answer

Network Security Groups. Network Security Groups (NSGs) allow you to apply security rules to a specific set of VNICs of your choice, independent of subnets.

Answer

Route Tables

Answer

Security Lists

Answer

Dynamic Routing Gateway

Question 12

A company needs to store petabytes of data that is rarely accessed but must be retained for compliance for 7 years. Retrievals can take up to several hours. Which storage tier should they use?

Accepted Answer

Archive Storage. Archive Storage is the lowest-cost OCI Object Storage tier designed for long-term retention of infrequently accessed data with a multi-hour retrieval time.

Answer

Standard Storage

Answer

Infrequent Access Storage

Answer

Block Volume Backups

Question 13

A cloud architect needs to deploy a cloud-native application using Docker containers without managing any underlying infrastructure, servers, or Kubernetes worker nodes. Which OCI service should they select?

Accepted Answer

OCI Container Instances. OCI Container Instances is a serverless compute service that lets you run containers quickly without needing to manage any underlying infrastructure or provision compute instances.

Answer

OCI Functions

Answer

Oracle Container Engine for Kubernetes (OKE)

Answer

Compute Instances with Custom Images

Question 14

An application running on OCI Compute instances requires shared file storage that can be mounted concurrently across hundreds of Linux instances via the standard NFS protocol. Which OCI storage service is best suited?

Accepted Answer

File Storage Service. File Storage Service (FSS) provides a durable, scalable, enterprise-grade network file system that can be mounted by NFS protocol across multiple compute instances simultaneously.

Answer

Object Storage

Answer

Block Volume

Answer

Local NVMe Temporary Storage

Question 15

Your development team needs to deploy microservices orchestrated via Kubernetes with automated worker node scaling and managed control plane upgrades. Which OCI service should you provision?

Accepted Answer

Oracle Container Engine for Kubernetes (OKE). Oracle Container Engine for Kubernetes (OKE) is a fully managed, scalable, and highly available service where you can deploy your containerized applications.

Answer

OCI Functions

Answer

OCI Container Instances

Answer

OCI Compute Instances with Docker

Question 16

You are configuring an Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN) and need to ensure that compute instances in a private subnet can initiate outbound internet connections to download software patches without allowing unsolicited inbound traffic from the internet. Which gateway must you attach to the VCN?

Accepted Answer

NAT Gateway. A NAT (Network Address Translation) Gateway enables instances in a private subnet to connect to the internet for updates while blocking inbound connections from the internet.

Answer

Service Gateway

Answer

Internet Gateway

Answer

Dynamic Routing Gateway

Question 17

You need to connect an on-premises data center to an OCI Virtual Cloud Network with dedicated, high-bandwidth, and predictable network performance that bypasses the public internet entirely. Which OCI networking service should you implement?

Accepted Answer

FastConnect. OCI FastConnect provides a dedicated, private connection between your on-premises data center and OCI with higher bandwidth and better reliability than the public internet.

Answer

Internet Gateway

Answer

Local Peering Gateway

Answer

Site-to-Site VPN

Question 18

You need to route traffic privately from your VCN to Oracle Cloud Infrastructure Object Storage in the same region without traversing the public internet. Which components must be configured?

Accepted Answer

Service Gateway and a route table rule with service destination. A Service Gateway combined with a route table entry pointing to the service destination allows private traffic routing to regional Oracle services.

Answer

NAT Gateway and an inbound firewall rule

Answer

Dynamic Routing Gateway and IPsec VPN

Answer

Internet Gateway and a matching security list rule

Question 19

A web application experiencing fluctuating traffic needs a compute solution that automatically scales out the number of virtual machine instances based on CPU utilization. Which combination of OCI services should be configured?

Accepted Answer

Instance Pools and Autoscaling Configurations. Instance Pools and Autoscaling Configurations work together to automatically provision or terminate compute instances based on defined performance metrics.

Answer

Container Instances and OKE

Answer

Compute Instances and Load Balancer

Answer

Bare Metal Instances and NAT Gateway

Question 20

You are designing an architecture requiring a resilient, fault-tolerant entry point that distributes incoming HTTP/HTTPS traffic across multiple backend compute instances across different availability domains. Which load balancing service should you deploy?

Accepted Answer

Public Load Balancer. A Public Load Balancer provides automated traffic distribution across multiple backend servers and availability domains with a public IP address.

Answer

Local Peering Gateway

Answer

Network Load Balancer

Answer

Dynamic Routing Gateway