1Z0-1085-26 Core Oci Services Practice Test 9 — 15 Questions

Question 1

What is the primary function of an OCI NAT Gateway?

Accepted Answer

To allow outbound internet access from private subnets without incoming internet access. A NAT Gateway enables instances in a private subnet to initiate outbound connections to the internet while preventing inbound connections from the internet.

Answer

To route private traffic to on-premises data centers

Answer

To provide private access to regional Oracle services

Answer

To allow bidirectional internet access for public instances

Question 2

You need to deploy a web application across multiple compute instances with automated scaling and load balancing. Which combination of OCI services provides this complete architecture?

Accepted Answer

Public Load Balancer, Instance Pools, and Autoscaling Configurations. A Public Load Balancer combined with an Instance Pool and Autoscaling Configuration provides incoming load balancing and dynamic compute scaling.

Answer

Dynamic Routing Gateway and OCI Functions

Answer

File Storage Service and Network Security Groups

Answer

Internet Gateway, Block Volume backups, and Object Storage

Question 3

Which OCI storage service is best suited for storing database backups that require high durability and lowest cost without immediate file system mounting requirements?

Accepted Answer

OCI Object Storage. OCI Object Storage is the correct choice because it is a highly durable, scalable, and low-cost object storage service designed for storing unstructured data such as database backups. It provides 99.999999999% (11 nines) durability by replicating data across multiple availability domains or within a region, and it does not require a file system mount to access data—objects are accessed via REST APIs or CLI/SDK. Its pay-for-what-you-use pricing and infrequent access tiers make it the most cost-effective option for backup storage compared to block or file storage services.

Answer

Local NVMe Storage

Answer

Boot Volume Storage

Answer

OCI File Storage Service

Question 4

You are configuring security rules for an OCI Virtual Cloud Network. What is the key difference between a Security List and a Network Security Group (NSG)?

Accepted Answer

Security Lists apply to entire subnets, while NSGs apply to specific VNICs.. Security Lists are subnet-level constructs: they apply to all VNICs in a subnet and are the traditional OCI network security mechanism. Network Security Groups (NSGs) are VNIC-level constructs: they apply only to the specific VNICs to which they are attached, allowing more granular, instance-level security policy. This is the fundamental architectural difference between the two.

Answer

Security Lists only support stateless rules, while NSGs only support stateful rules.

Answer

Security Lists apply to specific VNICs, while NSGs apply to entire subnets.

Answer

Security Lists are regional, while NSGs are availability domain-specific.

Question 5

Which TWO OCI features are associated with OCI Object Storage? (Choose two.)

Accepted Answer

Pre-authenticated Requests (PARs). Option B, Pre-authenticated Requests (PARs), is correct because OCI Object Storage lets you create PARs that grant time-limited, URL-based access to a bucket or object without requiring an OCI IAM identity or credentials, which is a native Object Storage capability. Option E, Lifecycle Management Rules, is correct because Object Storage supports lifecycle policies that automatically transition objects between storage tiers (Standard, Infrequent Access, Archive) or delete them based on age or prefix rules. The other options do not belong: iSCSI Block Volume Attachments (A) apply to OCI Block Volume service, NFSv3 File System Mounts (C) apply to the OCI File Storage service, and VCN Security Lists (D) are networking constructs within a Virtual Cloud Network, not Object Storage features.

Answer

iSCSI Block Volume Attachments

Answer

NFSv3 File System Mounts

Answer

VCN Security Lists

Question 6

Which OCI compute shape is best suited for workloads requiring dedicated physical servers with no virtualization layer or hypervisor overhead?

Accepted Answer

Bare Metal Shapes. Bare Metal shapes provide physical servers dedicated solely to your tenancy with zero virtualization overhead.

Answer

Flexible Virtual Machine Shapes

Answer

Preemptible Instance Shapes

Answer

OCI Container Instances

Question 7

Which TWO statements are true regarding OCI Load Balancer features? (Choose two.)

Accepted Answer

OCI Load Balancers can terminate SSL/TLS certificates and perform SSL offloading.. Option A is correct because OCI Load Balancer listeners support SSL/TLS termination, meaning the load balancer decrypts incoming HTTPS traffic and can perform SSL offloading so backend servers handle plain HTTP, reducing their CPU overhead. Option C is correct because OCI Load Balancers offer flexible shapes (for example, 10 Mbps up to 8000 Mbps) that let you scale bandwidth up or down as demand changes, rather than being locked to fixed hardware shapes. Option B is wrong because OCI Load Balancers can span multiple availability domains and even multiple regions, distributing traffic across ADs for high availability. Option D is wrong because OCI Load Balancers operate at both Layer 4 (TCP) and Layer 7 (HTTP/HTTPS), not exclusively Layer 4. Option E is wrong because OCI Load Balancers are cloud-native services deployed within OCI regions, not inside on-premises data centers.

Answer

Load balancers cannot distribute traffic across multiple availability domains.

Answer

Load balancers operate exclusively at Layer 4 of the OSI model.

Answer

Load balancers must be deployed inside on-premises data centers.

Question 8

Which TWO core OCI services provide compute capabilities? (Choose two.)

Accepted Answer

Oracle Container Engine for Kubernetes (OKE). Option B, Oracle Container Engine for Kubernetes (OKE), is correct because it is a managed Kubernetes service that runs containerized workloads on worker nodes backed by OCI compute instances, so it delivers compute capability. Option E, Compute Instances, is correct because OCI Compute provides virtual machine and bare metal instances that are the fundamental compute resource in OCI. Option A, OCI File Storage Service, is incorrect because it is a managed NFS file system service for shared storage, not compute. Option C, OCI Object Storage, is incorrect because it is an object storage service for unstructured data, not compute. Option D, OCI Virtual Cloud Network, is incorrect because it is a software-defined networking service that provides subnets, gateways, and routing, not compute.

Answer

OCI File Storage Service

Answer

OCI Object Storage

Answer

OCI Virtual Cloud Network

Question 9

An administrator is configuring autoscaling on an OCI Instance Pool. They notice that the autoscaling configuration is not triggering scale-out actions despite high CPU utilization. What is a likely cause?

Accepted Answer

The autoscaling policy threshold or cooldown period is misconfigured. Autoscaling requires a co-configured scaling policy with defined thresholds and cooldown periods linked to the instance pool. If the cooldown period is active or thresholds are improperly configured, scaling won't occur.

Answer

The VCN Security List lacks an inbound rule for autoscaling metrics

Answer

The instance pool is attached to an Internet Gateway instead of a NAT Gateway

Answer

The compute instances are using Flexible shapes instead of Bare Metal

Question 10

Which THREE OCI networking components are required to connect an on-premises data center to a VCN via an IPsec VPN? (Choose three.)

Accepted Answer

IPsec Connection. The three required OCI components for an IPsec VPN connection to a VCN are the IPsec Connection (A), the Customer Premise Equipment (CPE) object (C), and the Dynamic Routing Gateway (DRG) (D). The IPsec Connection (A) is the actual tunnel resource that defines the shared secret, routing type (static or BGP), and links the CPE to the DRG. The CPE object (C) is a logical representation of the on-premises VPN device, holding its public IP address and identifying the remote endpoint of the tunnel. The DRG (D) is the virtual router attached to the VCN that terminates the IPsec tunnels and provides the path into the VCN's subnets. An Internet Gateway (B) is not required because IPsec VPN traffic traverses the public internet to reach the DRG's public IP; an IGW only enables inbound/outbound internet access for VCN resources. A Local Peering Gateway (E) is used to connect two VCNs within the same region and plays no role in on-premises connectivity.

Answer

Internet Gateway

Answer

Local Peering Gateway

Question 11

Which THREE storage tiers are available in OCI Object Storage? (Choose three.)

Accepted Answer

Standard Storage. OCI Object Storage offers exactly three storage tiers: Standard Storage (B), Archive Storage (C), and Infrequent Access Storage (D). Standard Storage is the default, hot tier designed for frequently accessed data with low latency and high durability. Archive Storage is the lowest-cost tier intended for long-term retention of rarely accessed data, with retrieval times measured in hours. Infrequent Access Storage sits between them, suited for data accessed less often but still requiring rapid, millisecond access when needed. The remaining options, Higher Performance Storage (A) and Balanced Performance Storage (E), are not OCI Object Storage tiers — those names correspond to block volume performance levels, not object storage classes.

Answer

Higher Performance Storage

Answer

Balanced Performance Storage

Question 12

What is the primary function of an OCI Internet Gateway?

Accepted Answer

To route bidirectional traffic between the VCN and the public internet. An Internet Gateway provides a path for bidirectional network traffic between your VCN and the public internet.

Answer

To provide private access to Oracle services like Object Storage

Answer

To peer two VCNs within the same tenancy

Answer

To connect on-premises data centers via private circuits

Question 13

Which TWO configuration steps are necessary when setting up private access from a VCN to OCI Object Storage using a Service Gateway? (Choose two.)

Accepted Answer

Add a route table rule with the service destination pointing to the Service Gateway.. Option B is correct because a Service Gateway must first be created and attached to the VCN; this gateway is the OCI construct that provides private access to Object Storage (and other OCI services) without traversing the internet. Option A is correct because, once the Service Gateway exists, the subnet's route table must include a route whose destination is the Object Storage service CIDR (the Oracle Services Network service destination, e.g., all-region services in the oracle-services network) with the Service Gateway as the next-hop target, so traffic to Object Storage is directed through it. Option C is incorrect because private access via a Service Gateway is specifically designed to avoid public IPs; instances in the private subnet do not need public addresses. Option D is incorrect because an Internet Gateway routes traffic to/from the public internet and is not used for private service access through a Service Gateway. Option E is incorrect because a NAT Gateway provides outbound internet access for private instances and is not the next-hop for Object Storage service traffic when a Service Gateway is used.

Answer

Assign a public IP address to every compute instance in the private subnet.

Answer

Attach an Internet Gateway to the VCN to route service traffic.

Answer

Configure a NAT Gateway as a next-hop in the subnet route table.

Question 14

You need to deploy a scalable containerized web application where Oracle manages the Kubernetes control plane and you manage the underlying compute worker nodes. Which service should you choose?

Accepted Answer

Oracle Container Engine for Kubernetes (OKE). Oracle Container Engine for Kubernetes (OKE) is OCI's managed Kubernetes service where Oracle operates the control plane (API server, etcd, scheduler) and the customer manages the worker nodes. This matches the requirement exactly: a scalable containerized web app with Oracle-managed control plane and self-managed compute worker nodes.

Answer

Compute VM instance pools without Docker

Answer

OCI Container Instances

Answer

OCI Functions

Question 15

What is the primary purpose of an OCI Internet Gateway?

Accepted Answer

To provide a communication path between the VCN and the public internet. An Internet Gateway provides a path for bidirectional network traffic between your VCN and the public internet.

Answer

To peer two VCNs within the same tenancy

Answer

To route traffic privately to Oracle services like Object Storage

Answer

To connect on-premises data centers via private circuits