1Z0-1085-26 Core Oci Services Practice Test 8 — 15 Questions

Question 1

Which TWO protocols or methods are supported when attaching an OCI Block Volume to a compute instance? (Choose two.)

Accepted Answer

Paravirtualized attachment. Option C (Paravirtualized attachment) is correct because OCI Block Volumes can be attached to compute instances using the paravirtualized attachment type, where the hypervisor presents the volume to the guest OS as a virtual block device without requiring the guest to handle iSCSI commands directly. Option E (iSCSI attachment) is correct because OCI also supports attaching Block Volumes over iSCSI, where the instance connects to the volume's iSCSI target using the provided IQN, IP address, and port, and then the volume appears as a local block device. Option A (NFSv3 attachment) is incorrect because NFSv3 is a file-level network protocol used by OCI File Storage, not a method for attaching Block Volumes. Option B (HTTP REST API attachment) is incorrect because HTTP REST APIs are used for OCI control-plane management operations, not as a data-plane attachment protocol for Block Volumes. Option D (SMB protocol attachment) is incorrect because SMB is a file-sharing protocol and is not supported for attaching OCI Block Volumes.

Answer

NFSv3 attachment

Answer

HTTP REST API attachment

Answer

SMB protocol attachment

Question 2

What is the primary benefit of using OCI Preemptible Instances?

Accepted Answer

Significantly lower cost compute capacity for fault-tolerant workloads. Preemptible instances provide discounted compute capacity that can be used for fault-tolerant workloads.

Answer

Guaranteed lifetime execution without interruptions

Answer

Dedicated physical hardware isolation with zero multi-tenancy

Answer

Automatic scaling of storage volumes

Question 3

Which TWO OCI services are used to build and manage containerized applications? (Choose two.)

Accepted Answer

Oracle Container Engine for Kubernetes (OKE). Oracle Container Engine for Kubernetes (OKE) is correct because it is OCI's managed Kubernetes service, purpose-built to deploy, orchestrate, and manage containerized applications across node pools and clusters. OCI Container Instances is also correct because it provides a serverless compute service that runs containers directly without requiring you to manage underlying hosts or Kubernetes, making it a core OCI service for building and managing containerized workloads. The OCI Internet Gateway is not correct because it is a networking component that provides internet connectivity for a VCN, not a container platform. OCI File Storage Service is not correct because it is a managed NFS file system for shared file data, not a container runtime or orchestrator. OCI Block Volume is not correct because it provides persistent block storage for compute instances, not a service for building or managing containers.

Answer

OCI Internet Gateway

Answer

OCI File Storage Service

Answer

OCI Block Volume

Question 4

You need to configure an OCI Load Balancer listener to handle secure HTTPS traffic with SSL certificate termination. Where do you configure the SSL certificate?

Accepted Answer

In the Load Balancer Certificate configuration associated with the HTTPS listener. SSL certificates are added to the Load Balancer as a Certificate resource and associated with an HTTPS listener.

Answer

Inside the VCN Security List ingress rule

Answer

Inside the Dynamic Routing Gateway settings

Answer

On the backend compute instance OS firewall

Question 5

An administrator needs to route internet-bound traffic from private compute instances through a NAT Gateway. What route table configuration is required in the private subnet?

Accepted Answer

Destination: 0.0.0.0/0, Target: NAT Gateway. A private subnet route table must have a rule directing destination CIDR 0.0.0.0/0 to the NAT Gateway target.

Answer

Destination: 0.0.0.0/0, Target: Service Gateway

Answer

Destination: 10.0.0.0/16, Target: Internet Gateway

Answer

Destination: VCN CIDR, Target: NAT Gateway

Question 6

Which OCI storage service is best suited for sharing configuration files across multiple Linux virtual machine instances simultaneously?

Accepted Answer

OCI File Storage Service. OCI File Storage Service (FSS) provides a shared network file system that can be mounted simultaneously by multiple instances.

Answer

OCI Block Volume

Answer

Local NVMe Storage

Answer

OCI Object Storage

Question 7

You are configuring an OCI Network Load Balancer (NLB) for a high-performance database cluster. Why would you choose NLB over a regional Layer 7 Load Balancer?

Accepted Answer

NLB operates at Layer 4 and preserves client source IP addresses. Network Load Balancer operates at Layer 4, handles high packet rates with ultra-low latency, and preserves client source IP addresses.

Answer

NLB requires fewer VCN subnets than regional load balancers

Answer

NLB terminates SSL certificates and inspects HTTP payloads

Answer

NLB supports URL path-based routing for HTTP applications

Question 8

An enterprise application requires private connectivity between two VCNs in different OCI regions. Which component must be used to connect them?

Accepted Answer

Remote Peering Connection (RPC) via DRG. A Remote Peering Connection (RPC) via Dynamic Routing Gateways (DRGs) connects VCNs across different regions.

Answer

Local Peering Gateway (LPG)

Answer

Service Gateway

Answer

Internet Gateway with IPsec VPN

Question 9

What is the primary purpose of an OCI Service Gateway?

Accepted Answer

To provide private access to regional Oracle services without traversing the public internet. A Service Gateway allows your VCN to access regional Oracle services (like Object Storage) privately without using public internet or NAT.

Answer

To peer two VCNs in the same region

Answer

To connect to on-premises data centers

Answer

To route public internet traffic for virtual machines

Question 10

You need to deploy a microservice application in OCI using serverless containers that start in seconds without provisioning Kubernetes clusters or virtual machines. Which OCI service should you use?

Accepted Answer

OCI Container Instances. OCI Container Instances allows you to run containerized applications serverlessly without managing compute or Kubernetes.

Answer

Compute VM instance pools

Answer

Oracle Container Engine for Kubernetes (OKE)

Answer

OCI Functions

Question 11

Which TWO actions are supported when managing OCI Block Volume backups? (Choose two.)

Accepted Answer

Copying block volume backups across regions for disaster recovery. Option A is correct because OCI Block Volume backups can be copied from one region to another, which is a standard mechanism for cross-region disaster recovery and migration. Option E is correct because OCI supports backup policies, both Oracle-predefined and user-defined, that automatically schedule and retain block volume backups based on the policy's schedule. Option B is incorrect because a block volume backup is not attachable; you must first create a block volume from the backup and then attach that volume to an instance. Option C is incorrect because backups are stored in the Block Volume service's backup storage and cannot be directly converted into an Object Storage bucket. Option D is incorrect because block volume backups are not NFS file systems; mounting requires restoring the backup to a block volume and attaching it to an instance.

Answer

Attaching a block volume backup directly to multiple running instances

Answer

Converting a block volume backup directly into an Object Storage bucket

Answer

Mounting a block volume backup directly as an NFS file system

Question 12

You are troubleshooting a connectivity issue where an on-premises server cannot reach an OCI compute instance over an IPsec VPN tunnel. The security list and NSG rules are verified as correct. What is another common OCI networking configuration that must be checked?

Accepted Answer

Ensure the VCN route table has a rule pointing on-premises CIDR to the DRG. The VCN route table must have a rule pointing traffic destined for the on-premises subnet to the Dynamic Routing Gateway (DRG).

Answer

Confirm that the subnet has a Service Gateway attached

Answer

Check that the compute instance has a public IP address assigned

Answer

Verify that an Internet Gateway is attached to the VCN

Question 13

Which TWO OCI compute shape categories offer flexible sizing where you can independently select the number of OCPUs and memory? (Choose two.)

Accepted Answer

Flexible Virtual Machine Shapes. Option A (Flexible Virtual Machine Shapes) is correct because OCI flexible VM shapes let you independently choose the number of OCPUs and the amount of memory per OCPU within defined limits, allowing custom sizing rather than a fixed bundle. Option B (Flexible Bare Metal Shapes) is also correct because flexible bare metal shapes provide the same independent OCPU and memory selection, letting you tailor the physical instance's resources to your workload. Option C (Preemptible Fixed VM Shapes) is incorrect because preemptible instances are a pricing/capacity model, not a flexible-sizing shape category, and they use fixed shape configurations. Option D (Standard Fixed Virtual Machine Shapes) is incorrect because standard shapes come in predefined OCPU/memory ratios that cannot be independently adjusted. Option E (Object Storage Compute Shapes) is incorrect because object storage is a storage service, not a compute shape category, so it has no OCPU or memory sizing.

Answer

Preemptible Fixed VM Shapes

Answer

Standard Fixed Virtual Machine Shapes

Answer

Object Storage Compute Shapes

Question 14

Which THREE configuration items are specified when creating an OCI Virtual Cloud Network (VCN)? (Choose three.)

Accepted Answer

CIDR Block (IPv4). When creating an OCI VCN, you must specify the CIDR Block (IPv4) (option B), which defines the VCN's IPv4 address range (e.g., 10.0.0.0/16) and is a required parameter. You must also provide the VCN Name (option C), a friendly display name that identifies the VCN within the compartment. The DNS Label (option D) is also specified at creation; it enables DNS hostnames for instances in the VCN (e.g., <dns-label>.oraclevcn.com) and is a configurable field in the Create VCN dialog. Availability Domain assignment (option A) is not a VCN-level setting—ADs apply to subnets and compute instances, not the VCN itself. GPU count specification (option E) is unrelated to VCN creation and pertains to compute instance shapes, not networking.

Answer

Availability Domain assignment

Answer

GPU count specification

Question 15

Which TWO mechanisms can be used to secure data in transit within OCI networking? (Choose two.)

Accepted Answer

TLS/SSL encryption for application and load balancer traffic. TLS/SSL encryption (Option A) is correct because it secures data in transit at the application layer by encrypting traffic between clients, load balancers, and backend services, protecting against eavesdropping and tampering on the wire. IPsec VPN tunnels (Option B) are correct because they encrypt and authenticate traffic in transit between on-premises networks and OCI over the internet, using protocols such as ESP and IKE to provide confidentiality and integrity for the connection. In contrast, Object Storage Lifecycle rules (Option C) only automate tiering or deletion of stored objects and do not encrypt network traffic. Subnet Security Lists (Option D) are stateful by default and act as virtual firewalls controlling allowed IP/port traffic, but they filter rather than encrypt data in transit. VCN Route Tables (Option E) only direct traffic to gateways or targets and provide no encryption or security for data in transit.

Answer

Object Storage Lifecycle rules

Answer

Subnet Security Lists (without stateful tracking)

Answer

VCN Route Tables