1Z0-1085-26 Core Oci Services — Timed 10 Questions

Question 1

An enterprise application requires block storage with extremely high IOPS and ultra-low latency for an Oracle Database deployment. Which OCI Block Volume performance tier should you configure?

Accepted Answer

Higher Performance. Higher Performance (formerly Ultra High Performance) offers up to 300,000 IOPS and 4rd-generation NVMe performance, specifically built for demanding databases.

Answer

Lower Cost

Answer

Basic

Answer

Balanced

Question 2

You are configuring autoscaling for an instance pool. Which two metric types are natively supported by OCI Autoscaling to trigger scale-out and scale-in events?

Accepted Answer

CPU utilization and Memory utilization. OCI Autoscaling natively supports CPU utilization and Memory utilization metrics to trigger scaling actions.

Answer

HTTP request rate and database query latency

Answer

Disk I/O throughput and Network packet drops

Answer

GPU temperature and power consumption

Question 3

Which THREE components are required to successfully configure a Site-to-Site VPN connection from an on-premises data center to an OCI VCN? (Choose three.)

Accepted Answer

Customer Premise Equipment (CPE) object. A Site-to-Site VPN requires a Customer Premise Equipment (CPE) object, a Dynamic Routing Gateway (DRG), and an IPsec connection linking them.

Answer

Local Peering Gateway

Question 4

Which TWO OCI compute shapes are available when provisioning virtual machines in OCI? (Choose two.)

Accepted Answer

Standard Shapes. Standard Shapes (C) are correct because OCI offers fixed-size VM shapes such as VM.Standard2.1, VM.Standard.E4.Flex, and VM.Standard3.Flex where CPU, memory, and network resources are pre-defined per shape. Flexible Shapes (D) are correct because OCI allows flexible VM shapes (e.g., VM.Standard.E4.Flex, VM.Standard3.Flex, VM.Optimized3.Flex) where you can independently select the number of OCPUs and amount of memory within supported ranges, providing granular sizing. Object Storage Shapes (A) are not compute shapes; Object Storage is a storage service with tiers like Standard, Infrequent Access, and Archive, not VM provisioning options. Database Shapes (B) are not a valid OCI VM shape category; databases run on compute shapes (e.g., VM.Standard or BM.DenseIO) or as autonomous services, but 'Database Shapes' is not an OCI compute shape classification. Network Shapes (E) do not exist as an OCI compute shape category; networking is configured via VCNs, subnets, and gateways, not selected as a VM shape.

Answer

Object Storage Shapes

Answer

Database Shapes

Answer

Network Shapes

Question 5

An organization has multiple business units with separate VCNs in the same OCI region. They need to peer these VCNs directly to share data privately without routing traffic through an on-premises data center. Which OCI component enables this?

Accepted Answer

Service Gateway. A Local Peering Gateway (LPG) enables you to peer two VCNs in the same region so that traffic flows privately between them.

Answer

Internet Gateway with NAT

Answer

Remote Peering Connection via DRG

Question 6

You need to perform maintenance on a physical host running your OCI compute instance. How can you ensure minimal downtime when OCI is scheduled to reboot the instance for underlying host maintenance?

Accepted Answer

Manually reboot the instance before the maintenance deadline to trigger migration to a healthy host. OCI publishes host maintenance events in advance, and rebooting the instance yourself before the deadline triggers live migration to a healthy host, which typically completes with only seconds of downtime. If you let OCI perform the maintenance reboot at the scheduled time, the instance is stopped and restarted, causing longer unplanned downtime. Proactively rebooting is the documented best practice for minimizing impact.

Answer

Change the VCN route table during maintenance windows

Answer

Attach an additional Block Volume to prevent host reboots

Answer

Convert the virtual machine into a Bare Metal server

Question 7

You are designing a secure web application architecture. You want to ensure that incoming database traffic is restricted to only web servers belonging to a specific Network Security Group, without exposing database ports to the rest of the subnet. Which feature enables this?

Accepted Answer

Network Security Groups (NSGs). Network Security Groups (NSGs) allow you to specify security rules referencing other NSGs as sources or destinations for fine-grained filtering.

Answer

Dynamic Routing Gateway policies

Answer

Internet Gateway rules

Answer

Security Lists

Question 8

An organization is setting up a multi-region deployment. They need to replicate Block Volume backups automatically across regions. Where is this configuration managed?

Accepted Answer

Block Volume Backup Policies. Block volume backup policies allow you to configure automated cross-region replication settings when defining backup schedules.

Answer

Identity and Access Management (IAM) dynamic groups

Answer

Virtual Cloud Network Route Tables

Answer

OCI Object Storage Lifecycle Rules

Question 9

Which TWO OCI compute offerings allow you to run workloads without managing physical server hardware or underlying hypervisors? (Choose two.)

Accepted Answer

Bare Metal Compute Instances. OCI Container Instances and OCI Functions are serverless compute options requiring no infrastructure management.

Answer

Standard Flexible Virtual Machines

Answer

Standard Dedicated Virtual Machine Hosts

Question 10

Which TWO statements are correct regarding OCI Virtual Cloud Network (VCN) Security Lists and Network Security Groups (NSGs)? (Choose two.)

Accepted Answer

Security Lists apply to all VNICs contained within a specific subnet.. Option B is correct because a Security List is a subnet-level, stateful virtual firewall whose rules apply to every VNIC in the subnet(s) it is associated with, so all instances in that subnet inherit the same rule set. Option D is correct because an NSG is a VNIC-level construct: you add specific VNICs to the NSG, and those VNICs can reside in different subnets (even across multiple VCNs in the same region when using NSG references), giving granular, per-instance control. Option A is wrong because Security List rules can reference CIDR blocks, services, or other Security Lists only in the sense of NSG-style references—OCI Security Lists do not support referencing another Security List as a source; NSGs are the construct that supports source/destination NSG references. Option C is wrong because NSGs work in both public and private subnets; subnet type does not restrict NSG usage. Option E is wrong because Security Lists are stateful—return traffic for allowed connections is automatically permitted—so they do support stateful firewall rules.

Answer

Security Lists can reference another Security List as a rule source.

Answer

Network Security Groups can only be used in public subnets.

Answer

Security Lists do not support stateful firewall rules.