1Z0-1085-26 Core Oci Services Practice Test 10 — 15 Questions

Question 1

An application requires a block volume with guaranteed high performance and low latency for heavy database operations. Which OCI Block Volume performance tier should you select?

Accepted Answer

Higher Performance. OCI Block Volume offers three performance tiers: Lower Cost, Balanced, and Higher Performance. The Higher Performance tier is designed for latency-sensitive, I/O-intensive workloads such as large databases, providing the highest VPUs/GB and lowest latency. For heavy database operations requiring guaranteed high performance and low latency, Higher Performance is the correct selection.

Answer

Archive Tier

Answer

Balanced

Answer

Lower Cost

Question 2

Which OCI service allows you to run serverless code in response to events without provisioning or managing virtual servers?

Accepted Answer

OCI Functions. OCI Functions is a serverless platform enabling developers to run code in response to events.

Answer

Block Storage Volumes

Answer

Bare Metal Compute Instances

Answer

Oracle Container Engine for Kubernetes

Question 3

You are configuring security rules for a multi-tier application. You want to allow web servers in a specific Network Security Group (NSG) to communicate with database servers in another NSG. How should you define the rule in the database NSG?

Accepted Answer

Specify the web server Network Security Group as the source. OCI NSGs allow you to reference another NSG as the source in security rules for fine-grained access control.

Answer

Configure a Dynamic Routing Gateway rule

Answer

Use an Internet Gateway source identifier

Answer

Specify the entire VCN CIDR block as the source

Question 4

You need to ensure that database block volumes are automatically backed up daily with a retention policy of 30 days and cross-region replication. What OCI feature should you use?

Accepted Answer

Block Volume Backup Policies. Block Volume Backup Policies automate scheduled backups, retentions, and cross-region replication.

Answer

Object Storage Lifecycle Management rules

Answer

Compute Instance Autoscaling configurations

Answer

Manual OCI CLI snapshot scripts

Question 5

A cloud architect needs to provision an Oracle Cloud Infrastructure (OCI) Compute instance with a custom number of OCPUs and memory for a memory-intensive application. Which shape type should the architect select?

Accepted Answer

Flexible shape. Flexible shapes in OCI allow you to independently specify the number of OCPUs and the amount of memory per OCPU, making them ideal for memory-intensive workloads that need a non-standard CPU-to-memory ratio. You can provision as few as 1 OCPU and up to 64 GB memory per OCPU (depending on the shape series), giving precise control over the resource mix. This is the only shape type that supports custom OCPU/memory configurations.

Answer

GPU shape

Answer

Standard shape

Answer

DenseIO shape

Question 6

An enterprise application running on OCI requires high availability across two Availability Domains within a single region. The database backend needs to be securely isolated from public internet traffic while maintaining high-speed, low-latency communication with the application servers. How should the Virtual Cloud Network (VCN) be structured?

Accepted Answer

Create public subnets in each Availability Domain for the application servers and private subnets in each Availability Domain for the database instances.. To achieve high availability across two Availability Domains while isolating the database from the internet, you need public subnets in each AD for the application servers (so they can receive external traffic) and private subnets in each AD for the database instances (so they have no public IP and are isolated). This design provides both HA and security.

Answer

Create a single VCN with only private subnets and use a NAT Gateway to allow inbound traffic to the database.

Answer

Deploy all resources in a single Availability Domain using Network Security Groups to isolate traffic.

Answer

Place both application and database instances in a single public subnet spanning both Availability Domains.

Question 7

An administrator has configured a Dynamic Routing Gateway (DRG) to connect an on-premises datacenter to an OCI VCN using an IPsec VPN. However, on-premises servers cannot communicate with instances in the VCN. Which VCN routing configuration is missing?

Accepted Answer

A route rule in the subnet route table with the on-premises CIDR as the destination and the DRG as the target.. Traffic coming from the DRG needs a route rule in the VCN route table pointing to the DRG as the target for the on-premises CIDR block.

Answer

A security list rule allowing ingress TCP traffic from the local VCN CIDR.

Answer

A NAT Gateway attached to the DRG to translate internal IP addresses.

Answer

A route rule in the subnet route table with a destination of 0.0.0.0/0 and target as the Internet Gateway.

Question 8

A company needs to store unstructured data such as log files, images, and backups in OCI for long-term retention at the lowest possible cost, and data retrieval times of several hours are acceptable. Which OCI Object Storage tier should be chosen?

Accepted Answer

Archive Storage Tier. Archive Storage is designed for data that is rarely accessed and requires long-term retention, offering the lowest storage cost with a retrieval time of up to 4 hours.

Answer

Block Volume Backup Tier

Answer

Infrequent Access Tier

Answer

Standard Tier

Question 9

An application team is deploying microservices on OCI Container Engine for Kubernetes (OKE). They want to expose multiple HTTP services using a single public IP address and route traffic based on URL path routing rules. Which OCI service should they integrate with their Kubernetes Ingress controller?

Accepted Answer

OCI Load Balancer. OCI Load Balancer supports path-based routing and integrates seamlessly with OKE through the OCI Load Balancer Ingress controller to manage external HTTP/HTTPS traffic.

Answer

OCI Network Load Balancer

Answer

OCI Service Gateway

Answer

OCI Internet Gateway

Question 10

A database administrator needs to share a multi-gigabyte Oracle Database backup file stored in an OCI Object Storage bucket with an external auditor who does not have an OCI account. How can this be achieved securely without granting IAM console access?

Accepted Answer

Generate a Pre-authenticated Request (PAR) for the specific backup object with an expiration date.. A Pre-authenticated Request (PAR) in OCI Object Storage generates a unique URL that grants time-limited access to a specific object or bucket without requiring the recipient to have an OCI account or IAM credentials. Because the auditor only needs to download a single backup file, creating a PAR scoped to that object with an expiration date provides the least-privilege, secure sharing mechanism. The PAR can also be configured as read-only, ensuring the auditor cannot modify or delete the backup.

Answer

Configure a Service Gateway to allow external IP ranges to access the bucket.

Answer

Make the entire bucket public by modifying the bucket access policy.

Answer

Create a temporary IAM user account with Object Storage Reader permissions.

Question 11

An administrator wants to ensure that critical files stored in an OCI Object Storage bucket are automatically deleted after 90 days to comply with data retention policies. What feature should be used?

Accepted Answer

Object Lifecycle Management rules. OCI Object Lifecycle Management rules let administrators define policies that automatically transition or delete objects based on age (e.g., delete after 90 days) or other criteria. This is the native, declarative mechanism for enforcing retention and cleanup without custom scripts. It directly satisfies the requirement to auto-delete critical files after 90 days.

Answer

Cross-Region Replication

Answer

Bucket Versioning

Answer

Pre-authenticated Requests

Question 12

An organization is setting up a hybrid network architecture using OCI FastConnect with a Partner/Provider model. They need to ensure that their on-premises network can communicate with multiple VCNs across different regions using private IP addresses without traversing the public internet. Which OCI component is mandatory to achieve this?

Accepted Answer

Dynamic Routing Gateway (DRG). A Dynamic Routing Gateway (DRG) version 2 supports attaching to FastConnect and can peer across regions or connect multiple VCNs to a single on-premises connection.

Answer

Internet Gateway

Answer

Local Peering Gateway

Answer

NAT Gateway

Question 13

An operations engineer needs to provision a Network File System (NFS) that can be simultaneously mounted across hundreds of OCI Compute instances for shared data processing. Which OCI storage service is best suited for this?

Accepted Answer

File Storage Service (FSS). OCI File Storage Service (FSS) is a managed NFSv3 file system that can be mounted concurrently by many compute instances across multiple availability domains and VCNs via mount targets. It is purpose-built for shared, POSIX-compliant file access, which is exactly what hundreds of instances doing shared data processing require. Block Volume and Local NVMe are single-attach (or limited multi-attach) block devices, and Object Storage is HTTP/REST-based, not NFS-mountable.

Answer

Local NVMe

Answer

Object Storage

Answer

Block Volume

Question 14

A developer wants to run event-driven data processing tasks in OCI without provisioning or managing any underlying servers. The execution duration is short (under 5 minutes). Which OCI service should the developer use?

Accepted Answer

OCI Functions. OCI Functions is a serverless, highly scalable platform based on the Fn Project open source engine that allows developers to run code without managing servers.

Answer

Container Instances

Answer

Compute Instances with Autoscaling

Answer

Oracle Container Engine for Kubernetes (OKE)

Question 15

An administrator needs to create a custom DNS domain name resolution for instances within an OCI VCN so they can resolve hostnames to internal IP addresses. Which OCI DNS feature should be configured?

Accepted Answer

Private DNS Zones. Private DNS Zones in OCI are designed to provide name resolution for internal resources within a VCN, allowing instances to resolve custom hostnames to private IP addresses. They are scoped to one or more VCNs and are not publicly resolvable, ensuring internal DNS queries stay within the virtual cloud network. This is the correct service for custom internal DNS resolution, as opposed to public DNS zones which are for internet-facing domains.

Answer

Virtual Circuit DNS resolver

Answer

Internet Gateway DNS forwarding

Answer

Public DNS Zones