1Z0-1085-26 Core Oci Services Practice Test 6 — 15 Questions

Question 1

What is the container image registry service provided natively by Oracle Cloud Infrastructure for storing and sharing OCI container images?

Accepted Answer

Oracle Cloud Infrastructure Registry (OCIR). Oracle Cloud Infrastructure Registry (OCIR) is an Oracle-managed registry that enables you to store and manage your development container images.

Answer

File Storage Service

Answer

OCI Functions repository

Answer

OCI Object Storage

Question 2

An administrator needs to attach a block volume to a compute instance. Which two attachment methods are supported by OCI Block Volume service?

Accepted Answer

Paravirtualized and iSCSI. OCI Block Volume supports both Paravirtualized and iSCSI attachment methods for attaching block volumes to compute instances.

Answer

NVMe-oF and Fibre Channel

Answer

NFS and SMB

Answer

HTTP and FTP

Question 3

Which TWO OCI storage services provide file or object storage capabilities rather than block storage? (Choose two.)

Accepted Answer

OCI File Storage Service. OCI File Storage Service (A) is correct because it provides a managed, hierarchical NFSv3 file system that multiple compute instances can mount concurrently, making it a file storage service rather than block storage. OCI Object Storage (D) is correct because it stores data as objects in buckets accessed via REST APIs (Swift and S3-compatible), which is object storage, not block storage. The remaining options are block-level storage: Local NVMe Storage (B) is ephemeral disk physically attached to the compute instance, OCI Block Volume (C) is a network-attached iSCSI block device that can be attached to an instance, and Boot Volume (E) is simply a specialized block volume holding the OS image, so none of them provide file or object storage capabilities.

Answer

Local NVMe Storage

Answer

OCI Block Volume

Answer

Boot Volume

Question 4

Which TWO statements are true regarding OCI Flexible Compute shapes? (Choose two.)

Accepted Answer

You can independently configure the number of OCPUs and memory (RAM) when launching a flexible VM.. Option A is correct because OCI Flexible Compute shapes let you independently choose the number of OCPUs and the amount of memory (RAM) within the shape's supported range when launching a flexible VM, rather than being locked to a fixed OCPU-to-memory ratio. Option E is correct because on flexible shapes the network bandwidth scales proportionally with the number of OCPUs selected, so more OCPUs yield higher maximum network throughput. Option B is wrong because flexible shapes are available for both Virtual Machine and Bare Metal instances, not Bare Metal only. Option C is wrong because boot volume resizing is supported independently of whether the shape is flexible. Option D is wrong because flexible shapes specifically allow you to vary memory per OCPU rather than forcing a fixed memory tier for each OCPU.

Answer

Flexible shapes are only available on Bare Metal instances and cannot be used with Virtual Machines.

Answer

Flexible shapes do not support boot volume resizing.

Answer

You must select a fixed tier of memory for every OCPU selected.

Question 5

Which THREE storage performance tiers are available for OCI Block Volumes? (Choose three.)

Accepted Answer

Lower Cost. OCI Block Volumes offer exactly three performance tiers: Lower Cost (option A), Balanced (option D), and Higher Performance (option C). Lower Cost is the cheapest tier, delivering a minimum of 2 VPUs per GB with the lowest IOPS/throughput, suitable for cost-sensitive, less demanding workloads. Balanced is the default mid-range tier providing 10 VPUs per GB, while Higher Performance delivers 20 VPUs per GB for the most latency-sensitive, high-IOPS workloads. Archive Tier (option B) and Infrequent Access Tier (option E) are Object Storage storage-class options, not Block Volume performance tiers, so they do not apply here.

Answer

Archive Tier

Answer

Infrequent Access Tier

Question 6

An administrator needs to create a private network inside a VCN that isolates database servers from the public internet. How should this be structured?

Accepted Answer

Create a private subnet with no route to an Internet Gateway. A private subnet with a route table that does not contain a route to an Internet Gateway ensures instances are isolated from inbound public internet traffic.

Answer

Create a public subnet and attach an Internet Gateway

Answer

Disable all security lists globally across the tenancy

Answer

Attach a NAT Gateway with an assigned public IP

Question 7

Which TWO networking services or gateways in OCI can be used to route traffic from a VCN to the public internet? (Choose two.)

Accepted Answer

Internet Gateway. The Internet Gateway (A) is correct because it provides a bidirectional path for traffic between a VCN's public subnets and the public internet, allowing resources with public IPs to both initiate and receive internet traffic. The NAT Gateway (E) is correct because it allows instances in private subnets to initiate outbound connections to the public internet while blocking inbound connections, using the gateway's public IP for translation. The Dynamic Routing Gateway (B) is incorrect because it connects a VCN to on-premises networks via IPSec VPN or FastConnect, not directly to the public internet. The Service Gateway (C) is incorrect because it provides private access to OCI public services such as Object Storage, not general internet routing. The Local Peering Gateway (D) is incorrect because it connects two VCNs within the same region, not a VCN to the internet.

Answer

Dynamic Routing Gateway

Answer

Service Gateway

Answer

Local Peering Gateway

Question 8

Which TWO features are characteristic of OCI Network Load Balancers (NLB)? (Choose two.)

Accepted Answer

Preserves client source IP addresses to backend servers. Option A is correct because OCI Network Load Balancers operate at Layer 4 and are designed to preserve the original client source IP address when forwarding traffic to backend servers, which is essential for logging, access control, and backend applications that need the real client IP. Option C is correct because NLBs function at Layer 4 of the OSI model, load-balancing TCP, UDP, and ICMP traffic rather than inspecting application-layer protocols. Option B is incorrect because HTTP and HTTPS support is characteristic of Layer 7 load balancers (such as OCI Flexible Load Balancer), not the NLB. Option D is incorrect because SSL/TLS termination and URL path-based routing are Layer 7 capabilities, which the NLB does not provide. Option E is incorrect because OCI NLBs are elastic and scale automatically based on traffic, without requiring manual configuration up to a fixed 100 Gbps limit.

Answer

Only supports HTTP and HTTPS protocols

Answer

Terminates SSL/TLS connections and performs URL path-based routing

Answer

Requires manual scaling configuration up to 100 Gbps

Question 9

You are configuring an OCI Load Balancer and want to ensure high availability by distributing traffic across backend servers in different availability domains within a region. Which type of load balancer should you deploy?

Accepted Answer

Regional Load Balancer. A Regional Load Balancer in OCI is a managed service that spans the entire region and can distribute traffic across backend servers in multiple availability domains (ADs) or fault domains. It provides high availability by automatically routing around failed ADs and supports both public and private IP addresses. This is the only load balancer type designed for cross-AD traffic distribution within a region.

Answer

Availability Domain-specific Load Balancer

Answer

Dynamic Routing Load Balancer

Answer

Local Peering Load Balancer

Question 10

Which OCI service enables you to run serverless functions triggered by events or HTTP requests without managing servers or runtimes?

Accepted Answer

OCI Functions. OCI Functions is a serverless platform enabling developers to deploy code that executes in response to events or HTTP requests.

Answer

Oracle Container Engine for Kubernetes

Answer

Compute Instance Pools

Answer

Container Instances

Question 11

You have an application running in OCI that needs to query Oracle Autonomous Database privately. Traffic must not traverse the public internet and must use OCI's backbone network. Which service should you configure in your VCN?

Accepted Answer

Service Gateway. A Service Gateway in OCI provides a private, one-way path from a VCN to Oracle services such as Autonomous Database, Object Storage, and other Oracle Cloud services without traversing the public internet. Traffic stays entirely on the OCI backbone network, satisfying the requirement for private connectivity. It is the only gateway type specifically designed for accessing Oracle services privately from within a VCN.

Answer

IPsec VPN Tunnel

Answer

NAT Gateway

Answer

Internet Gateway

Question 12

You need to back up an on-premises database directly to OCI Object Storage using a dedicated, high-speed connection that does not use the public internet. Which networking service should you use?

Accepted Answer

FastConnect. FastConnect provides dedicated private connectivity between on-premises data centers and OCI, bypassing the public internet.

Answer

Internet Gateway

Answer

Site-to-Site VPN

Answer

Local Peering Gateway

Question 13

An administrator needs to modify the route table of a private subnet so that all traffic destined for an on-premises data center is routed correctly. What should be the target in the route table rule?

Accepted Answer

Dynamic Routing Gateway (DRG). To route traffic from a VCN to an on-premises network, the target in the route table must be the Dynamic Routing Gateway (DRG).

Answer

NAT Gateway

Answer

Service Gateway

Answer

Internet Gateway

Question 14

What is the default maximum size of a single Object Storage bucket in OCI?

Accepted Answer

Unlimited (Practically boundless). OCI Object Storage buckets have no practical size limit and can store an unlimited amount of data.

Answer

50 Terabytes

Answer

10 Petabytes

Answer

100 Gigabytes

Question 15

You are configuring security lists for a subnet hosting web servers. You want to allow incoming HTTP traffic on port 80 from any IP address on the internet. How should you configure the ingress rule?

Accepted Answer

Source: 0.0.0.0/0, Protocol: TCP, Destination Port: 80. An ingress security rule allowing TCP traffic on destination port 80 with source CIDR 0.0.0.0/0 permits public HTTP access.

Answer

Source: Internet Gateway, Protocol: ICMP

Answer

Source: 10.0.0.0/16, Protocol: UDP, Destination Port: 443

Answer

Source: 0.0.0.0/0, Protocol: UDP, Destination Port: 80