1Z0-1085-26 Core Oci Services Practice Test 2 — 15 Questions

Question 1

You need to create a secure connection between two VCNs in the same region, ensuring that traffic remains private and does not traverse the public internet. Which component should you configure?

Accepted Answer

Local Peering Gateway (LPG). A Local Peering Gateway (LPG) enables private peering between two VCNs within the same region.

Answer

Dynamic Routing Gateway with IPsec VPN

Answer

Internet Gateway with NAT

Question 2

You need to deploy a batch processing job that can tolerate sudden termination by OCI if compute capacity is reclaimed, significantly reducing your compute costs. Which instance type should you choose?

Accepted Answer

Preemptible Instance. Preemptible Instances in OCI are spare compute capacity offered at a significant discount, but OCI can reclaim them with a short notice when capacity is needed elsewhere. They are explicitly designed for fault-tolerant, interruption-tolerant workloads like batch processing, rendering, or stateless jobs, which matches the scenario's requirement to tolerate sudden termination in exchange for lower cost. Choosing a preemptible instance is the correct cost-optimization strategy here.

Answer

Standard Flexible VM Shape

Answer

Dedicated Virtual Machine Host

Answer

Standard Bare Metal Shape

Question 3

An enterprise application deployed across multiple OCI subnets requires a Layer 4 load balancer that can handle millions of packets per second with ultra-low latency and preserve client source IP addresses. Which service should you deploy?

Accepted Answer

Network Load Balancer. OCI Network Load Balancer is a Layer 4 (TCP/UDP) load balancer designed for extreme throughput (millions of packets per second) and ultra-low latency, and it preserves the client source IP by default. It is the correct choice when the requirement is high-performance, connection-oriented load balancing across subnets without Layer 7 inspection.

Answer

OCI API Gateway

Answer

Dynamic Routing Gateway

Answer

Public Load Balancer (Layer 7)

Question 4

Which OCI Object Storage tier is recommended for storing data that is accessed infrequently, but requires rapid access when needed with lower retrieval costs than Archive?

Accepted Answer

Infrequent Access Storage. OCI Object Storage Infrequent Access tier is designed for data accessed less often but requiring rapid retrieval when needed, with lower storage cost than Standard and lower retrieval cost than Archive. It is ideal for backups, disaster recovery, and long-term data that must remain immediately available. Standard is for frequently accessed data, and Archive is for rarely accessed data with hours-long retrieval.

Answer

Standard Storage

Answer

Archive Storage

Answer

Boot Volume storage

Question 5

You are configuring security rules for a multi-tier application. You want to allow web servers in a specific Network Security Group (NSG) to communicate with database servers in another NSG. How should you define the ingress rule in the database NSG?

Accepted Answer

Specify the web server Network Security Group as the source. OCI Network Security Groups (NSGs) allow security rules to reference other NSGs as sources or destinations, enabling dynamic, identity-based security policies. By specifying the web server NSG as the source in the database NSG's ingress rule, only instances in that NSG can reach the database, regardless of their IP addresses. This is the recommended approach for multi-tier applications because it decouples security policy from IP addressing.

Answer

Specify the CIDR block of the entire VCN as the source

Answer

Use an Internet Gateway source identifier

Answer

Configure a Dynamic Routing Gateway rule

Question 6

An organization requires a highly available IPsec VPN connection from their on-premises data center to an OCI VCN. To ensure high availability, what is the recommended architecture for the Dynamic Routing Gateway (DRG) and customer premise equipment (CPE)?

Accepted Answer

Redundant VPN tunnels utilizing multiple CPE public IP addresses terminating on the DRG.. OCI supports redundant VPN tunnels across multiple CPE public IPs terminating on a DRG to ensure high availability and failover.

Answer

A single VPN tunnel connecting to a single CPE device.

Answer

Configuring active-passive peering across two separate VCNs.

Answer

Using an Internet Gateway instead of a DRG with redundant static routes.

Question 7

Which TWO OCI storage services provide file or object storage capabilities rather than block storage? (Choose two.)

Accepted Answer

OCI File Storage Service. OCI File Storage Service (C) is correct because it provides a managed NFSv3 file system that can be mounted by multiple compute instances simultaneously, delivering shared file-level storage rather than raw block devices. OCI Object Storage (D) is correct because it is a flat, internet-scale object store accessed via REST APIs/SDKs using buckets and objects, which is object storage rather than block storage. The unmarked options do not belong: a Boot Volume (A) and OCI Block Volume (B) are both block-level storage presented to an instance as virtual disk devices, and Local NVMe Storage (E) is also block storage physically attached to the host, not file or object storage.

Answer

Boot Volume

Answer

OCI Block Volume

Answer

Local NVMe Storage

Question 8

Which THREE components are required to successfully configure a Site-to-Site VPN connection from an on-premises data center to an OCI VCN? (Choose three.)

Accepted Answer

Dynamic Routing Gateway (DRG). A Site-to-Site VPN requires a Customer Premise Equipment (CPE) object, a Dynamic Routing Gateway (DRG), and an IPsec connection linking them.

Answer

Local Peering Gateway

Question 9

Which TWO statements are true regarding OCI Flexible Compute shapes? (Choose two.)

Accepted Answer

Network bandwidth scales proportionally with the number of OCPUs selected on flexible shapes.. Option A is correct because OCI flexible shapes tie network bandwidth to the OCPU count: as you increase the number of OCPUs, the available network bandwidth scales proportionally, so a shape with more OCPUs gets more bandwidth. Option E is correct because flexible shapes let you independently choose the OCPU count and the memory amount within the shape's allowed range, rather than being locked to a fixed memory-per-OCPU ratio. Option B is wrong because flexible shapes are available for both Virtual Machine and Bare Metal instances, not Bare Metal only. Option C is wrong because boot volume resizing is supported independently of whether a shape is flexible. Option D is wrong because flexible shapes specifically allow you to vary memory per OCPU instead of forcing a fixed tier.

Answer

Flexible shapes are only available on Bare Metal instances and cannot be used with Virtual Machines.

Answer

Flexible shapes do not support boot volume resizing.

Answer

You must select a fixed tier of memory for every OCPU selected.

Question 10

An administrator needs to attach a Block Volume to a Compute instance using the paravirtualized attachment type. However, the application requires maximum possible IOPS and throughput performance. What is the recommended approach to resolve this requirement?

Accepted Answer

Switch the volume attachment method from paravirtualized to iSCSI and select the Higher Performance volume performance tier.. To achieve maximum performance (such as up to 75,000 IOPS and 800 MB/s per volume), the administrator should use an ISCSI attachment type instead of paravirtualized, alongside a Higher Performance volume performance unit.

Answer

Keep the paravirtualized attachment and increase the volume size to the maximum limit of 32 TB.

Answer

Enable Block Volume backups with incremental scheduling to reduce I/O contention.

Answer

Use a local NVMe scratch disk instead of a Block Volume for the database storage.

Question 11

An application deployment in a VCN private subnet needs to query external APIs hosted on the public internet, but malicious actors must not be able to initiate inbound connections to the application instances. Which combination of VCN gateways provides this required behavior?

Accepted Answer

NAT Gateway combined with a Security List blocking all inbound traffic from 0.0.0.0/0. A NAT Gateway allows instances in a private subnet to initiate outbound connections to the internet while blocking all unsolicited inbound connections.

Answer

Internet Gateway combined with a Service Gateway

Answer

Dynamic Routing Gateway combined with a NAT Gateway

Answer

Local Peering Gateway combined with an Internet Gateway

Question 12

An administrator needs to restrict access to a specific OCI Object Storage bucket so that only traffic originating from compute instances within a specific subnet can read or write objects, bypassing the public internet entirely. Which OCI feature should be used?

Accepted Answer

A Service Gateway combined with a VCN route table rule targeting Oracle Services. A Service Gateway combined with IAM policies or bucket policies allows VCN instances to access Object Storage privately via Oracle's internal network backbone.

Answer

An Internet Gateway with a stateful security list blocking external ports

Answer

A NAT Gateway routing traffic through a public IP address

Answer

A Local Peering Gateway connected to the Object Storage tenancy

Question 13

A company is hosting a critical web application on OCI Compute instances behind a Public Load Balancer. They need to ensure that client SSL certificates are terminated at the load balancer and traffic is securely encrypted between the load balancer and backend web servers. How should this be configured?

Accepted Answer

Configure an HTTPS (SSL) listener on the load balancer and enable SSL on the backend server pool settings.. Configuring an SSL/TLS listener on the load balancer with end-to-end encryption ensures traffic is encrypted both from client to load balancer and from load balancer to backend servers.

Answer

Install a NAT Gateway on the load balancer subnet to handle SSL handshakes.

Answer

Attach a Security List to the load balancer subnet blocking all port 80 traffic.

Answer

Configure an HTTP listener on the load balancer and enable HTTPS on the backend servers.

Question 14

A company is deploying an application that requires a shared storage filesystem across multiple OCI Compute instances. The performance requirements dictate sub-millisecond latency and high IOPS for heavy database logging. Which OCI storage service is most appropriate?

Accepted Answer

Block Volume with Higher Performance performance tier attached via iSCSI. High-performance Block Volumes attached via iSCSI or local NVMe storage provide the necessary high IOPS and sub-millisecond latency required for database workloads.

Answer

File Storage Service (FSS)

Answer

Archive Storage Tier

Answer

Object Storage Standard Tier

Question 15

Which TWO of the following statements are correct regarding OCI Compute flexible shapes? (Choose two.)

Accepted Answer

Flexible shapes are supported across multiple processor architectures, including AMD and Intel.. Option B is correct because OCI flexible shapes are available on multiple processor architectures, including AMD (e.g., E4/E5-based VM.Standard.E4.Flex and E5.Flex) and Intel (e.g., X7/X9-based VM.Standard3.Flex and VM.Standard.X9.Flex), so they are not tied to a single vendor. Option C is correct because the defining feature of a flexible shape is that you select OCPUs and memory independently within defined limits (for example, 1–64 OCPUs with 1–64 GB per OCPU, up to a shape-specific maximum), rather than having memory fixed to a preset ratio. Option A is wrong because increasing OCPUs does not automatically decrease memory; memory is chosen separately and can be scaled up or down independently. Option D is wrong because flexible shapes are primarily used with virtual machine instances (bare-metal flexible shapes exist but are not the only option). Option E is wrong because flexible-shape instances fully support attaching Block Volumes over iSCSI like any other OCI compute instance.

Answer

When using a flexible shape, increasing OCPUs automatically decreases available memory proportionally.

Answer

Flexible shapes are restricted to bare-metal instances only and cannot be used with virtual machines.

Answer

Flexible shapes do not support attaching Block Volumes via iSCSI.