1Z0-1085-26 Getting Started With Oci — 50 Questions

Question 1

A multinational corporation requires low-latency access for users in Frankfurt and London, with strict data isolation ensuring European data does not leave designated jurisdictions. Which OCI architectural construct should you use to organize their resources?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

OCI Regions. OCI Regions are geographic areas that contain one or more Availability Domains. To provide low-latency access to users in Frankfurt and London while ensuring data isolation within European jurisdictions, you would deploy resources in the Frankfurt and London regions (or a single region if data can be replicated within the EU). Regions are the primary construct for geographic distribution and data residency compliance.

Answer

Compartments

Answer

Availability Domains

Answer

Fault Domains

Question 2

An enterprise customer requires strict residency compliance where all data, including backups and metadata, must remain within their on-premises data center, but they still want native OCI cloud services and API parity. Which OCI deployment model should you recommend?

Accepted Answer

OCI Cloud@Customer. OCI Dedicated Region and Exadata Cloud@Customer deliver native cloud services directly to a customer's on-premises data center. Cloud@Customer provides specific cloud services (like Exadata database and infrastructure), while Dedicated Region brings the entire public cloud region on-premises.

Answer

OCI Public Cloud Region

Answer

OCI Dedicated Region

Answer

OCI Multi-Cloud

Question 3

Which OCI architectural component provides high-speed, low-latency network connectivity between multiple Availability Domains within the same region?

Accepted Answer

A high-bandwidth, low-latency inter-AD network fabric. Availability domains within a region are connected by a high-bandwidth, low-latency network fabric.

Answer

Local Peering Gateway (LPG)

Answer

Dynamic Routing Gateway (DRG)

Answer

OCI FastConnect

Question 4

Your application requires 99.99% uptime. You decide to deploy instances across three Fault Domains (FD-1, FD-2, FD-3) within Availability Domain 1. When launching a new compute instance, what happens if you do not explicitly specify a Fault Domain?

Accepted Answer

OCI automatically assigns the instance to a Fault Domain using a load-balancing algorithm that distributes instances evenly across all available Fault Domains.. If no fault domain is specified, OCI automatically distributes instances evenly across the available fault domains using a round-robin approach.

Answer

The instance is placed in a default scratchpad fault domain and must be manually moved later.

Answer

OCI places the instance in Fault Domain 1 by default every time.

Answer

The instance fails to launch until a Fault Domain is explicitly provided in the API request.

Question 5

An organization must comply with strict data sovereignty laws requiring that their cloud environment remain physically isolated from the public internet and operated independently, yet still receive continuous updates and feature parity with OCI public cloud. Which deployment model satisfies this requirement?

Accepted Answer

OCI Dedicated Region. OCI Dedicated Region delivers a complete OCI region deployed inside the customer's own data center, giving full physical isolation from the public internet while Oracle retains operational responsibility for patching and upgrades. Because Oracle manages the infrastructure, customers receive continuous updates and feature parity with the OCI public cloud. This uniquely satisfies the combination of sovereignty, isolation, and parity required by the scenario.

Answer

OCI Hybrid Cloud via VPN Connect.

Answer

OCI FastConnect with a dedicated private circuit.

Answer

OCI Public Cloud with a dedicated Virtual Cloud Network (VCN).

Question 6

An enterprise customer wants to leverage OCI Compute Cloud@Customer to run containerized microservices on-premises while integrating seamlessly with OCI public cloud management tools. How does Compute Cloud@Customer achieve this integration?

Accepted Answer

By running an autonomous Kubernetes control plane locally that synchronizes with public cloud APIs via a secure management connection.. Compute Cloud@Customer runs an autonomous Kubernetes control plane locally on the on-premises rack and synchronizes with OCI public cloud APIs through a secure management connection. This allows customers to use OCI management tools and APIs while keeping compute workloads on-premises.

Answer

By replicating all public cloud control plane services locally onto every customer node.

Answer

By requiring manual exports of cloud templates and uploading them via Secure Shell (SSH) daily.

Answer

By converting the on-premises rack into a public OCI Region accessible via the public internet.

Question 7

When designing a disaster recovery plan utilizing multiple OCI regions, which THREE factors must an architect consider? (Choose three.)

Accepted Answer

Configuring automated DNS or traffic management failover to redirect users during an outage.. Cross-region DR planning involves RPO/RTO metrics, data replication mechanisms, and automated traffic failover.

Answer

Physically shipping backup tapes between regional data centers on a weekly basis.

Answer

Ensuring that all availability domains across both regions share the exact same fault domain naming convention.

Question 8

Which TWO statements are true regarding OCI Regions and their global naming conventions or structure? (Choose two.)

Accepted Answer

OCI regions are deployed worldwide to provide low-latency access and meet data residency regulations.. OCI regions have distinct identifiers/key names and are geographically distributed.

Answer

An OCI region can span across multiple continents simultaneously.

Answer

All OCI regions share the same Availability Domain identifiers globally.

Answer

OCI regions are managed by individual third-party cloud providers in each country.

Question 9

An enterprise customer requires strict residency and data sovereignty within their own physical data center, yet demands full compatibility with standard OCI cloud services and APIs. Which OCI deployment model best fits this requirement?

Accepted Answer

OCI Cloud@Customer. Oracle Cloud Infrastructure (OCI) Dedicated Region and Cloud@Customer allow enterprises to run OCI services on-premises. Specifically, OCI Cloud@Customer brings OCI public cloud services directly to the customer's data center behind their firewall.

Answer

OCI Public Cloud

Answer

OCI Dedicated Region Cloud@Customer

Answer

Hybrid Multi-Cloud Interconnect

Question 10

Your development team needs to deploy a multi-tier web application in OCI. To guarantee maximum high availability against unexpected power failures and cooling outages within a single data center facility, how should the application instances be distributed?

Accepted Answer

Place instances across multiple availability domains.. High availability within a region is achieved by spreading workloads across multiple availability domains.

Answer

Place all instances in the same fault domain.

Answer

Assign all instances to the root compartment.

Answer

Deploy all instances across different global regions.

Question 11

An organization is evaluating the OCI distributed cloud model and requires an environment that is completely managed and operated by Oracle, yet deployed within the customer's own building to meet stringent data residency regulations. Which product meets this?

Accepted Answer

OCI Dedicated Region. OCI Dedicated Region provides all OCI cloud services locally in the customer's data center, managed by Oracle.

Answer

OCI Hybrid Gateway

Answer

OCI Public Cloud

Answer

OCI Compute Instance

Question 12

When you create a compute instance in an OCI region that has three availability domains, and you do not explicitly specify an availability domain or fault domain, how does OCI handle the placement?

Accepted Answer

OCI automatically distributes the instance across availability domains and fault domains for high availability.. If not specified, OCI automatically selects an availability domain and distributes instances across fault domains to ensure high availability.

Answer

OCI places it in the first availability domain and fault domain by default every time.

Answer

Creation fails until you explicitly choose a fault domain.

Answer

The instance is created in a paused state until placement is manually resolved.

Question 13

Which THREE characteristics apply to OCI Fault Domains? (Choose three.)

Accepted Answer

Each availability domain contains three fault domains by default.. Fault domains are chosen during instance creation (or assigned automatically), provide anti-affinity, and reside within an availability domain.

Answer

Fault domains span across multiple availability domains.

Answer

Fault domains require separate network subscriptions for each domain.

Question 14

When designing a highly available web application on OCI, an architect wants to ensure that if a fiber-optic cable is accidentally cut leading into one specific data center facility, user traffic can automatically fail over to a completely independent facility within the same metropolitan area. What should the architect use?

Accepted Answer

Multiple Availability Domains. Availability Domains are designed to be fault-tolerant with independent power, cooling, and network infrastructure, meaning they do not share infrastructure dependencies.

Answer

Multiple Fault Domains

Answer

Single Availability Domain with multiple compartments

Answer

Multiple Tenancies

Question 15

A government agency requires full control over their physical infrastructure and data sovereignty, necessitating a solution that keeps the hardware on-premises but uses the OCI control plane. Which OCI distributed cloud model best fits this requirement?

Accepted Answer

OCI Cloud@Customer. OCI Dedicated Region or OCI Cloud@Customer allows for the OCI cloud experience to be delivered within the customer's own data center, satisfying strict data sovereignty requirements.

Answer

OCI Edge Services

Answer

OCI Public Cloud

Answer

OCI Multicloud

Question 16

You are architecting a disaster recovery plan for a mission-critical database. The business requirement states that in the event of a total regional outage, the service must be operational within a recovery time objective (RTO) of less than one hour. What is the most appropriate strategy?

Accepted Answer

Use cross-region replication. To survive a regional outage, resources must be replicated across regions, utilizing OCI's cross-region replication capabilities for databases.

Answer

Implement backup to local Object Storage only

Answer

Deploy instances in multiple Fault Domains

Answer

Use cross-Availability Domain replication within the same region

Question 17

Which TWO statements accurately describe the differences between Availability Domains (ADs) and Fault Domains (FDs)?

Accepted Answer

ADs are only available in specific regions, while FDs are available in every region.. ADs are isolated physical data centers within a region, while FDs are isolated hardware groups within an AD. Both are critical for high availability.

Answer

Fault domains allow for cross-region data replication.

Answer

ADs are connected by a low-latency network, whereas FDs are not connected to each other.

Answer

You can move a running instance from one AD to another without a reboot.

Question 18

A cloud administrator is onboarding a new OCI tenancy and must explain the foundational Identity and Access Management building blocks to the security team. The team wants to know which entities are used to represent people, to collect those people for easier permission management, and to define what actions they may perform. Which TWO statements correctly describe OCI IAM fundamentals? (Choose two.)

Accepted Answer

A user can be a member of multiple groups, and permissions are the union of the policies that apply to those groups. OCI IAM relies on users as identities, groups as flat collections for granting permissions, and policies as the human-readable authorization statements. Because authorization is additive and users may hold multiple group memberships, effective access is the union of all applicable statements. Groups cannot nest and policies do not name individual users, so permissions should always be granted through group membership.

Answer

Each user account can be associated with only one group at any time

Answer

Groups can belong to other groups to build nested permission hierarchies

Answer

Policies can reference individual users directly as the subject of a statement

Question 19

A cloud administrator is preparing to grant access to a new team of engineers in Oracle Cloud Infrastructure. The administrator needs to understand which components are required to define and assign permissions. Which TWO statements correctly describe OCI Identity and Access Management concepts? (Choose two.)

Accepted Answer

Users must be placed in groups, and policies grant permissions to groups rather than directly to individual users.. OCI IAM policies are written in a readable syntax and grant permissions to groups, with users gaining access through group membership. Policies are additive and can contain multiple statements referencing multiple compartments. The two correct statements reflect the group-centric, readable policy model that administrators must use when granting access to engineering teams.

Answer

A single policy can reference multiple compartments, but it cannot include more than one statement per policy document.

Answer

IAM policies are evaluated based on the order in which they are listed, with the first matching statement determining the final access decision.

Answer

Permissions are granted by attaching an IAM policy directly to each compute instance's metadata, which the instance then presents to other services.

Question 20

A financial services company is designing its OCI tenancy to meet strict regulatory requirements. The security team wants to ensure that users cannot create public Object Storage buckets and that any attempt to weaken security is blocked at the tenancy level. Which OCI feature should the architect implement to enforce these guardrails?

Accepted Answer

Security Zones, which are associated with a compartment and prevent actions that violate specified security policies, such as creating public buckets.. Security Zones enforce preventive controls by associating security policies with a compartment, blocking actions like creating public Object Storage buckets or public subnets. Unlike Cloud Guard, which detects and responds after the fact, Security Zones stop the action before it occurs. IAM policies cannot deny actions because OCI IAM is additive, and audit logs or budget alerts are merely observational. For regulatory guardrails, Security Zones are the correct choice.

Answer

Cloud Guard, which detects and remediates insecure configurations after they occur, ensuring no public buckets remain in the tenancy.

Answer

Audit logs combined with a budget alert, which notify administrators when a public bucket is created so they can remove it manually.

Answer

IAM policies that explicitly deny the ability to create public buckets for all users in the tenancy.