1Z0-1085-26 Core Oci Services Practice Test 4 — 15 Questions

Question 1

A company wants to migrate an on-premises Oracle Database to OCI with minimal changes. They require full control over the operating system, patching, and database software, and they want to use their existing Oracle licenses. Which OCI service should they choose?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

OCI Base Database Service. OCI Base Database Service provides a managed Oracle Database where customers retain OS and database-level control, including patching, and can bring existing Oracle licenses. It is purpose-built for migrating on-premises databases with minimal changes. Autonomous Database abstracts control, a compute instance is not a managed database service, and Exadata is excessive for this scenario.

Answer

Oracle Autonomous Database

Answer

OCI Exadata Database Service on Dedicated Infrastructure

Answer

OCI Compute instance with Oracle Database installed

Question 2

A company is designing a microservices architecture on OCI. They need a fully managed, scalable, and secure service to store and retrieve arbitrary amounts of unstructured data such as images, videos, and logs. They also require the ability to automatically archive older data to reduce costs. Which TWO OCI services should they use? (Choose two.)

Accepted Answer

OCI Archive Storage. OCI Object Storage is the primary service for storing unstructured data at scale, and it includes the Archive tier for cost-effective long-term retention. Together, they provide a fully managed solution with lifecycle policies to automatically transition data to Archive when it is no longer frequently accessed, reducing storage costs while maintaining durability and security.

Answer

OCI Data Transfer Service

Answer

OCI File Storage

Answer

OCI Block Volume

Question 3

A startup wants to run a stateless web application on OCI. The application must automatically scale out when CPU utilization exceeds 70% and scale in when it drops below 30%. The team wants to minimize operational overhead. Which OCI service should they use?

Accepted Answer

OCI Compute instance pools with autoscaling policies.. OCI Compute instance pools with autoscaling policies are designed for exactly this use case: managing a group of identical instances and automatically adjusting their count based on performance metrics. The autoscaling configuration lets you define scale-out and scale-in rules using CPU utilization thresholds. Because it is a managed service, the team can focus on the application rather than infrastructure, minimizing operational overhead.

Answer

OCI Functions with a schedule-based trigger.

Answer

OCI Autoscaling with a load balancer and a fixed number of compute instances.

Answer

OCI Container Engine for Kubernetes (OKE) with a horizontal pod autoscaler.

Question 4

A DevOps team is deploying a multi-tier application on OCI. They need to store and manage secrets such as database passwords and API keys securely, and they want to centrally manage encryption keys used by multiple OCI services. Which TWO OCI services should they use? (Choose two.)

Accepted Answer

OCI Vault. OCI Vault provides centralized management of encryption keys and secrets, including the Secrets feature for storing sensitive data like passwords and API keys. Together, they meet the requirements for secure secret storage and centralized key management. Key Management is part of Vault, Certificates handles TLS certificates, and IAM manages access but not secret storage.

Answer

OCI Certificates

Answer

OCI Identity and Access Management (IAM)

Answer

OCI Key Management

Question 5

A financial services company runs a critical application on OCI. The security team requires that all data at rest on Block Volumes be encrypted with keys that the company controls and can audit. They also need to ensure that if a key is compromised, it can be disabled immediately, rendering the data inaccessible. Which OCI service should they use to manage the encryption keys?

Accepted Answer

OCI Vault with customer-managed master encryption keys.. OCI Vault is the dedicated service for creating and managing encryption keys. With customer-managed master encryption keys, the company retains full control and can audit key usage through Vault's integration with OCI Audit. Disabling a key or a key version in Vault immediately prevents any new decryption operations, effectively locking data encrypted with that key. This satisfies the security team's requirements for control, auditability, and rapid response to key compromise.

Answer

OCI Key Management (KMS) with customer-managed keys.

Answer

OCI Data Safe with encryption key management.

Answer

OCI Certificates service with a private certificate authority.

Question 6

An administrator wants to restrict inbound SSH access to a specific group of database compute instances without modifying subnet-level security rules. Which OCI feature should be used to define these fine-grained VNIC rules?

Accepted Answer

Network Security Groups. Network Security Groups (NSGs) allow you to apply security rules to a specific set of VNICs of your choice, independent of subnets.

Answer

Route Tables

Answer

Security Lists

Answer

Dynamic Routing Gateway

Question 7

A company needs to store petabytes of data that is rarely accessed but must be retained for compliance for 7 years. Retrievals can take up to several hours. Which storage tier should they use?

Accepted Answer

Archive Storage. Archive Storage is the lowest-cost OCI Object Storage tier designed for long-term retention of infrequently accessed data with a multi-hour retrieval time.

Answer

Standard Storage

Answer

Infrequent Access Storage

Answer

Block Volume Backups

Question 8

A cloud architect needs to deploy a cloud-native application using Docker containers without managing any underlying infrastructure, servers, or Kubernetes worker nodes. Which OCI service should they select?

Accepted Answer

OCI Container Instances. OCI Container Instances is a serverless compute service that runs Docker containers directly without requiring you to manage servers, clusters, or Kubernetes worker nodes. It is designed for teams that want to deploy containerized workloads quickly with no infrastructure overhead, making it the correct choice for a cloud-native app that must avoid node management. It supports bringing your own container image and handles the underlying compute lifecycle.

Answer

OCI Functions

Answer

Oracle Container Engine for Kubernetes (OKE)

Answer

Compute Instances with Custom Images

Question 9

An application running on OCI Compute instances requires shared file storage that can be mounted concurrently across hundreds of Linux instances via the standard NFS protocol. Which OCI storage service is best suited?

Accepted Answer

File Storage Service. OCI File Storage Service provides a shared, POSIX-compliant NFS file system that can be mounted concurrently by many compute instances across subnets and availability domains. It is the only OCI storage service designed for concurrent multi-instance NFS access, making it the correct choice for hundreds of Linux instances needing shared file storage.

Answer

Object Storage

Answer

Block Volume

Answer

Local NVMe Temporary Storage

Question 10

Your development team needs to deploy microservices orchestrated via Kubernetes with automated worker node scaling and managed control plane upgrades. Which OCI service should you provision?

Accepted Answer

Oracle Container Engine for Kubernetes (OKE). Oracle Container Engine for Kubernetes (OKE) is a fully managed, scalable, and highly available service where you can deploy your containerized applications.

Answer

OCI Functions

Answer

OCI Container Instances

Answer

OCI Compute Instances with Docker

Question 11

You are configuring an Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN) and need to ensure that compute instances in a private subnet can initiate outbound internet connections to download software patches without allowing unsolicited inbound traffic from the internet. Which gateway must you attach to the VCN?

Accepted Answer

NAT Gateway. A NAT Gateway in OCI enables instances in a private subnet to initiate outbound connections to the internet while preventing unsolicited inbound traffic, because it performs source NAT and only allows return traffic for connections that originated inside the VCN. This exactly matches the requirement of downloading patches without exposing instances to inbound internet access. The NAT Gateway is attached to the VCN and referenced in the private subnet's route table.

Answer

Service Gateway

Answer

Internet Gateway

Answer

Dynamic Routing Gateway

Question 12

You need to connect an on-premises data center to an OCI Virtual Cloud Network with dedicated, high-bandwidth, and predictable network performance that bypasses the public internet entirely. Which OCI networking service should you implement?

Accepted Answer

FastConnect. FastConnect provides a dedicated, private physical connection between an on-premises data centre and OCI, delivering high and predictable bandwidth while completely bypassing the public internet. It is the only OCI service in the list designed for dedicated private connectivity with consistent performance. This matches the requirement for dedicated, high-bandwidth, predictable, internet-bypassing connectivity.

Answer

Internet Gateway

Answer

Local Peering Gateway

Answer

Site-to-Site VPN

Question 13

You need to route traffic privately from your VCN to Oracle Cloud Infrastructure Object Storage in the same region without traversing the public internet. Which components must be configured?

Accepted Answer

Service Gateway and a route table rule with service destination. A Service Gateway combined with a route table entry pointing to the service destination allows private traffic routing to regional Oracle services.

Answer

NAT Gateway and an inbound firewall rule

Answer

Dynamic Routing Gateway and IPsec VPN

Answer

Internet Gateway and a matching security list rule

Question 14

A web application experiencing fluctuating traffic needs a compute solution that automatically scales out the number of virtual machine instances based on CPU utilization. Which combination of OCI services should be configured?

Accepted Answer

Instance Pools and Autoscaling Configurations. OCI Instance Pools combined with Autoscaling Configurations provide automatic horizontal scaling of VM instances based on metrics like CPU utilization. The Instance Pool manages a group of identical instances, and the autoscaling configuration defines policies (threshold-based or schedule-based) to scale the pool in or out.

Answer

Container Instances and OKE

Answer

Compute Instances and Load Balancer

Answer

Bare Metal Instances and NAT Gateway

Question 15

You are designing an architecture requiring a resilient, fault-tolerant entry point that distributes incoming HTTP/HTTPS traffic across multiple backend compute instances across different availability domains. Which load balancing service should you deploy?

Accepted Answer

Public Load Balancer. The Public Load Balancer in OCI is a regional, Layer 7 service that distributes HTTP/HTTPS traffic across backend instances in multiple availability domains, providing fault tolerance and high availability. It supports advanced features like SSL termination, session persistence, and health checks, making it ideal for resilient web architectures. The other options are networking gateways, not load balancers.

Answer

Local Peering Gateway

Answer

Network Load Balancer

Answer

Dynamic Routing Gateway