1Z0-1085-26 Core Oci Services Practice Test 14 — 15 Questions

Question 1

Which TWO OCI networking components are required to successfully enable private communication between two separate VCNs residing in the same OCI region? (Choose two.)

Accepted Answer

Route table rules pointing traffic to the LPG. Local Peering connects two VCNs in the same region, requiring a Local Peering Gateway (LPG) in each VCN and corresponding routing rule updates in the VCN route tables.

Answer

Dynamic Routing Gateway (DRG) with remote peering

Answer

NAT Gateway configured on the source VCN

Answer

Internet Gateway attached to both VCNs

Question 2

An architect is designing a highly resilient web application on OCI. Which TWO components are essential for distributing incoming HTTP/HTTPS traffic across multiple backend compute instances across different availability domains? (Choose two.)

Accepted Answer

OCI Load Balancer configured as regional. A regional OCI Load Balancer combined with a backend set containing instances across multiple Availability Domains ensures high availability and load distribution.

Answer

Internet Gateway attached to the backend compute instances directly

Answer

Service Gateway for internal telemetry

Answer

Dynamic Routing Gateway (DRG) attached to the subnet

Question 3

Which THREE statements are accurate regarding OCI Object Storage capabilities and architecture? (Choose three.)

Accepted Answer

Object Versioning can be enabled to protect against accidental overwrites and deletions.. OCI Object Storage is regional, highly durable, provides standard and archive tiers, and allows data immutability via Object Versioning and Object Locking.

Answer

Object Storage buckets can be directly mounted to Linux file systems via NFSv3 protocol natively.

Answer

Archive Storage data can be retrieved instantly upon API call without prior restoration requests.

Question 4

An engineer needs to deploy flexible compute instances on OCI. Which TWO parameters can be independently adjusted when configuring a flexible compute shape? (Choose two.)

Accepted Answer

Amount of Memory (RAM). Flexible shapes allow users to customize the number of OCPUs and the amount of memory independently to fit workload requirements.

Answer

GPU manufacturer and core architecture

Answer

Hypervisor version and vendor

Answer

Physical motherboard serial number

Question 5

Which THREE entities can be attached to an OCI Dynamic Routing Gateway (DRG) to facilitate network connectivity? (Choose three.)

Accepted Answer

Site-to-Site VPN static or dynamic connections. Option A is correct because a DRG is the OCI endpoint for Site-to-Site VPN, supporting both static (policy-based) and dynamic (BGP-based) IPSec connections that terminate on the DRG. Option B is correct because FastConnect virtual circuits attach to a DRG to provide private dedicated connectivity between on-premises networks and OCI VCNs. Option D is correct because VCNs are attached to a DRG through VCN attachments, which is the mechanism that lets the DRG route traffic between the VCN and external networks. Option C is incorrect because an Internet Gateway attaches to a VCN (not a DRG) to enable public internet routing for resources in public subnets. Option E is incorrect because IPSec VPN tunnels are part of a Site-to-Site VPN connection (covered by option A), and there is no OCI entity called an 'RPC attachment' to a DRG.

Answer

Internet Gateways for public routing

Answer

IPSec VPN tunnels via RPC attachments

Question 6

An auditor is reviewing security controls for OCI Virtual Cloud Networks. Which THREE characteristics differentiate Security Lists from Network Security Groups (NSGs)? (Choose three.)

Accepted Answer

Security Lists have different resource limits per VCN compared to Network Security Groups.. Security lists are subnet-wide with stateful/stateless rules and have strict limits per VCN, whereas NSGs are VNIC-specific and have different service limits.

Answer

Security Lists require an Internet Gateway to function, while NSGs require a NAT Gateway.

Answer

Security Lists can contain both stateful and stateless rules, while NSGs only support stateless rules.

Question 7

An application running on an Oracle Cloud Infrastructure (OCI) compute instance needs secure, private access to Object Storage in the same region without traversing the public internet. Which architecture should you implement?

Accepted Answer

Configure a Service Gateway in your VCN and add a route rule with the destination set to the Object Storage service CIDR.. To securely access OCI Object Storage privately from a VCN without public internet, you should configure a Service Gateway and a corresponding route table rule targeting the Object Storage service.

Answer

Attach a NAT Gateway to your VCN and route traffic destined for Object Storage through it.

Answer

Deploy an Internet Gateway and use security lists to block all inbound traffic except Object Storage traffic.

Answer

Set up a Local Peering Gateway and peer your VCN directly to the Object Storage public namespace.

Question 8

Your development team needs to deploy containerized applications rapidly on OCI without managing underlying compute servers or clusters. Which OCI container service fits this requirement best?

Accepted Answer

OCI Container Instances. OCI Container Instances is a serverless compute service that lets you run containers quickly without having to manage any servers or Kubernetes clusters.

Answer

Oracle Container Engine for Kubernetes (OKE)

Answer

Compute Instances with Docker pre-installed

Answer

OCI Functions

Question 9

You are managing a mission-critical database workload on an OCI Block Volume. The workload experiences extremely high and unpredictable I/O bursts, requiring the highest possible IOPS performance per volume. Which performance tier should you select?

Accepted Answer

Ultra High Performance. Ultra High Performance is the highest performance tier available for OCI Block Volumes, designed for workloads with intensive I/O requirements and high IOPS demands.

Answer

Higher Performance

Answer

Lower Cost

Answer

Balanced

Question 10

Your organization wants to store compliance audit logs for 7 years at the absolute lowest storage cost, acknowledging that data retrieval may take several hours. Which OCI Object Storage tier should you use?

Accepted Answer

Archive Storage. OCI Archive Storage is designed for data that is rarely accessed and must be retained for long periods, providing the lowest cost storage with a multi-hour retrieval time.

Answer

Infrequent Access Storage

Answer

Cold Storage

Answer

Standard Storage

Question 11

You are designing a high-throughput, fault-tolerant web application tier. You need to distribute incoming HTTP/HTTPS traffic across multiple compute instances across different availability domains within a region. Which service should you deploy?

Accepted Answer

OCI Load Balancer. OCI Load Balancer is a regional service that distributes incoming traffic across backend servers across multiple availability domains, ensuring high availability.

Answer

Dynamic Routing Gateway (DRG)

Answer

OCI Traffic Director

Answer

OCI Network Load Balancer

Question 12

An enterprise customer requires a dedicated, private, high-speed connection between their on-premises datacenter and OCI, bypassing the public internet entirely while offering predictable network performance. Which OCI connectivity option meets this requirement?

Accepted Answer

OCI FastConnect. OCI FastConnect provides a dedicated, private physical connection between an on-premises datacenter and OCI, bypassing the public internet. It offers predictable, high-bandwidth, low-latency performance with options for private peering (to VCNs) or public peering (to OCI services). This is the only option that satisfies the requirement of a dedicated private high-speed link.

Answer

Internet Gateway

Answer

Remote Peering Connection

Answer

IPsec VPN

Question 13

Your application running on OCI compute instances requires a shared POSIX-compliant file system that can be mounted simultaneously by hundreds of compute instances across multiple availability domains. Which OCI storage service should you select?

Accepted Answer

File Storage Service (FSS). OCI File Storage Service (FSS) provides a durable, scalable, enterprise-grade network file system that supports the standard NFS v3.0 protocol and can be mounted concurrently from multiple instances across availability domains.

Answer

Block Volume

Answer

Object Storage

Answer

Archive Storage

Question 14

Which TWO statements are true regarding Oracle Cloud Infrastructure (OCI) Compute Flexible Shapes?

Accepted Answer

Flexible shapes allow you to independently customize the amount of memory and the number of OCPUs for a virtual machine instance.. Option D is correct because OCI flexible shapes let you independently select the number of OCPUs and the amount of memory (within the shape's allowed min/max and OCPU-to-memory ratio range) when provisioning or resizing a VM instance, rather than being locked to a fixed bundle. Option E is correct because flexible shapes are offered on AMD-based VM instances (e.g., VM.Standard.E4/E5.Flex) as well as Ampere Arm-based instances (VM.Standard.A1.Flex), so both processor families support them. Option A is wrong because flexible shapes do not force a single fixed OCPU-to-memory ratio; you can choose memory independently within a permitted range. Option B is wrong because flexible shapes are not limited to Intel Xeon families—they are available on AMD and Ampere as well. Option C is wrong because flexible-shape instances can be resized (OCPUs and memory changed) after provisioning, subject to shape limits and a reboot.

Answer

When you use a flexible shape, you must scale OCPUs and memory in a fixed, predefined ratio.

Answer

Flexible shapes are only supported with Intel Xeon processor families.

Answer

Flexible shapes cannot be resized once the compute instance has been provisioned.

Question 15

Which TWO statements accurately describe OCI Block Volume backups?

Accepted Answer

Block volume backups are stored in OCI Object Storage and can be restored as new volumes.. OCI allows both manual and automated scheduled backups, and backups can be copied across different OCI regions for disaster recovery.

Answer

Block volume backups can only be restored within the exact same availability domain where they were created.

Answer

Creating a block volume backup requires stopping the attached compute instance to ensure data integrity.

Answer

Block volume backups cannot be copied across different OCI regions.