1Z0-1085-26 Getting Started With Oci Practice Test 2 — 15 Questions

Question 1

You are architecting a disaster recovery plan for a mission-critical database. The business requirement states that in the event of a total regional outage, the service must be operational within a recovery time objective (RTO) of less than one hour. What is the most appropriate strategy?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Use cross-region replication. To survive a regional outage, resources must be replicated across regions, utilizing OCI's cross-region replication capabilities for databases.

Answer

Implement backup to local Object Storage only

Answer

Deploy instances in multiple Fault Domains

Answer

Use cross-Availability Domain replication within the same region

Question 2

Which TWO statements accurately describe the differences between Availability Domains (ADs) and Fault Domains (FDs)?

Accepted Answer

ADs are only available in specific regions, while FDs are available in every region.. ADs are isolated physical data centers within a region, while FDs are isolated hardware groups within an AD. Both are critical for high availability.

Answer

Fault domains allow for cross-region data replication.

Answer

ADs are connected by a low-latency network, whereas FDs are not connected to each other.

Answer

You can move a running instance from one AD to another without a reboot.

Question 3

A cloud administrator is onboarding a new OCI tenancy and must explain the foundational Identity and Access Management building blocks to the security team. The team wants to know which entities are used to represent people, to collect those people for easier permission management, and to define what actions they may perform. Which TWO statements correctly describe OCI IAM fundamentals? (Choose two.)

Accepted Answer

A user can be a member of multiple groups, and permissions are the union of the policies that apply to those groups. OCI IAM relies on users as identities, groups as flat collections for granting permissions, and policies as the human-readable authorization statements. Because authorization is additive and users may hold multiple group memberships, effective access is the union of all applicable statements. Groups cannot nest and policies do not name individual users, so permissions should always be granted through group membership.

Answer

Each user account can be associated with only one group at any time

Answer

Groups can belong to other groups to build nested permission hierarchies

Answer

Policies can reference individual users directly as the subject of a statement

Question 4

A cloud administrator is preparing to grant access to a new team of engineers in Oracle Cloud Infrastructure. The administrator needs to understand which components are required to define and assign permissions. Which TWO statements correctly describe OCI Identity and Access Management concepts? (Choose two.)

Accepted Answer

Users must be placed in groups, and policies grant permissions to groups rather than directly to individual users.. OCI IAM policies are written in a readable syntax and grant permissions to groups, with users gaining access through group membership. Policies are additive and can contain multiple statements referencing multiple compartments. The two correct statements reflect the group-centric, readable policy model that administrators must use when granting access to engineering teams.

Answer

A single policy can reference multiple compartments, but it cannot include more than one statement per policy document.

Answer

IAM policies are evaluated based on the order in which they are listed, with the first matching statement determining the final access decision.

Answer

Permissions are granted by attaching an IAM policy directly to each compute instance's metadata, which the instance then presents to other services.

Question 5

A financial services company is designing its OCI tenancy to meet strict regulatory requirements. The security team wants to ensure that users cannot create public Object Storage buckets and that any attempt to weaken security is blocked at the tenancy level. Which OCI feature should the architect implement to enforce these guardrails?

Accepted Answer

Security Zones, which are associated with a compartment and prevent actions that violate specified security policies, such as creating public buckets.. Security Zones enforce preventive controls by associating security policies with a compartment, blocking actions like creating public Object Storage buckets or public subnets. Unlike Cloud Guard, which detects and responds after the fact, Security Zones stop the action before it occurs. IAM policies cannot deny actions because OCI IAM is additive, and audit logs or budget alerts are merely observational. For regulatory guardrails, Security Zones are the correct choice.

Answer

Cloud Guard, which detects and remediates insecure configurations after they occur, ensuring no public buckets remain in the tenancy.

Answer

Audit logs combined with a budget alert, which notify administrators when a public bucket is created so they can remove it manually.

Answer

IAM policies that explicitly deny the ability to create public buckets for all users in the tenancy.

Question 6

An application administrator is configuring a high-availability database cluster across three Fault Domains in a single Availability Domain. During a scheduled infrastructure maintenance event affecting Fault Domain 1, the administrator notices that one of the database nodes becomes unreachable. What is the expected behavior of OCI Fault Domains in this scenario?

Accepted Answer

Only instances in Fault Domain 1 are impacted by the maintenance, while instances in Fault Domains 2 and 3 continue to run normally without disruption.. OCI Fault Domains are independent, isolated groups of hardware within a single Availability Domain, each with its own power, cooling, and network. When maintenance affects Fault Domain 1, only resources in that fault domain are impacted; instances in Fault Domains 2 and 3 remain fully operational because they are physically and logically separate. This isolation is the core purpose of fault domains: to prevent a single failure or maintenance event from affecting all resources in an Availability Domain.

Answer

The database cluster automatically fails over its primary role to an instance in a different Availability Domain.

Answer

The entire Availability Domain is taken offline to synchronize the maintenance state across all Fault Domains.

Answer

Instances in Fault Domain 1 are automatically migrated to Fault Domain 2, causing a brief network partition.

Question 7

You are deploying a mission-critical web application that must remain available even if an entire Oracle Cloud Infrastructure availability domain experiences a major outage. The application architecture requires two compute instances. How should you provision these instances to achieve high availability?

Accepted Answer

Deploy one instance in Availability Domain 1 and the other instance in Availability Domain 2.. To survive the loss of an entire Availability Domain, the two instances must be placed in different Availability Domains, because each AD is an isolated fault domain with independent power, cooling, and network. Spreading instances across AD 1 and AD 2 ensures that an AD-level outage leaves at least one instance running. Fault domains only protect against failures within a single AD and cannot survive an AD outage.

Answer

Deploy both instances in the same Availability Domain but assign them to different Fault Domains.

Answer

Deploy both instances in separate OCI Regions using an explicit cross-region pairing gateway.

Answer

Deploy both instances in the same Availability Domain and configure autonomous cross-AD scaling.

Question 8

Your development team needs to test an application's resilience against infrastructure hardware failures within a specific OCI region that contains only a single Availability Domain. Which OCI feature should you utilize to distribute your compute instances for fault tolerance?

Accepted Answer

Fault Domains. Fault Domains are the OCI construct designed for high availability within a single Availability Domain. Each AD contains three fault domains, which are essentially independent groupings of hardware (racks, power, and network) so that a hardware failure in one fault domain does not affect instances in another. Distributing instances across fault domains in a single-AD region provides the required fault tolerance against hardware failures.

Answer

Dynamic Routing Gateways

Answer

Cross-Region Replication

Answer

Secondary Regions

Question 9

An organization is planning a disaster recovery strategy for a Tier-1 financial application. They need a Recovery Point Objective (RPO) of near-zero and a Recovery Time Objective (RTO) of seconds. Which OCI deployment pattern best fulfills these stringent requirements?

Accepted Answer

Deploy an active-active architecture across two low-latency interconnected OCI regions using synchronous replication and automated traffic management failover.. Near-zero RPO requires that no committed data be lost, which only synchronous replication can guarantee because the write is acknowledged only after it is persisted in both sites. An RTO of seconds demands automated failover with no manual intervention, which an active-active multi-region design with automated traffic management provides. OCI's low-latency interconnected regions (e.g., within a region pair) make synchronous cross-region replication feasible.

Answer

Deploy instances across three Fault Domains in a single Availability Domain with automated compute health checks.

Answer

Backup daily block volumes to Object Storage and restore them in a secondary region upon disaster declaration.

Answer

Deploy an active-passive architecture across two OCI regions using asynchronous database replication and manual DNS failover.

Question 10

You are designing a web application hosted in OCI. You want to ensure that if a top-of-rack switch fails inside a data center, your application remains online. How are OCI Fault Domains engineered to address this specific risk?

Accepted Answer

Fault domains are isolated racks with their own power, cooling, and network hardware, ensuring anti-affinity for instance placement.. Fault domains are isolated racks (or groups of racks) within an availability domain, each with independent power, cooling, and network hardware — including top-of-rack switches. By placing instances across fault domains, you ensure that a single top-of-rack switch failure only affects instances in that fault domain, leaving the others online. This is exactly the anti-affinity placement behavior that OCI fault domains provide.

Answer

Fault domains provide automatic geographic failover across different countries.

Answer

Fault domains automatically replicate virtual machine memory across different availability domains.

Answer

Each Fault Domain has its own dedicated external internet gateway to route traffic around broken switches.

Question 11

What is the primary characteristic of an Oracle Cloud Infrastructure Availability Domain?

Accepted Answer

One or more data centers located within a region, fault-isolated from each other with independent power and cooling.. Availability domains are distinct, standalone data centers within a region, featuring independent power, cooling, and network infrastructure.

Answer

A software-defined network boundary that connects local data centers to the OCI backbone.

Answer

A logical grouping of users and compartments for billing purposes.

Answer

A hardware rack dedicated entirely to a single enterprise customer on-premises.

Question 12

An architect is evaluating OCI's distributed cloud offerings. A client in the healthcare sector requires an on-premises deployment that includes the complete portfolio of OCI cloud services, autonomous database capabilities, and exact API parity with the public cloud, all managed locally. Which OCI solution should be proposed?

Accepted Answer

OCI Dedicated Region. OCI Dedicated Region is the only OCI distributed cloud offering that delivers the complete portfolio of OCI public cloud services—including autonomous database capabilities—directly into a customer's on-premises data center. It provides exact API parity with the public cloud and is fully managed by Oracle, meeting the healthcare client's requirement for a local, comprehensive cloud environment. Other options provide only subsets of services or are hosted in the public cloud, not on-premises.

Answer

Oracle Autonomous Database on Dedicated Exadata Infrastructure in the Public Cloud

Answer

OCI Exadata Cloud@Customer

Answer

OCI Compute Cloud@Customer

Question 13

Which statement best describes the geographical relationship between OCI Regions and Availability Domains?

Accepted Answer

A region is a localized geographic area that contains one or more availability domains.. Regions contain one or more availability domains, and multiple regions make up the OCI global footprint.

Answer

Regions and availability domains are completely independent and interchangeable concepts.

Answer

Each availability domain represents a separate public cloud region in a different country.

Answer

An availability domain spans across multiple global regions to provide high availability.

Question 14

You are deploying a distributed database cluster that requires three nodes to be isolated from one another regarding underlying infrastructure failures. The chosen OCI region has only one Availability Domain. How should you provision the database instances?

Accepted Answer

Deploy each node in a separate Fault Domain (FD-1, FD-2, and FD-3) within the single Availability Domain.. Fault Domains (FDs) within a single Availability Domain provide anti-affinity at the hardware/rack level — each FD has independent power, cooling, and network infrastructure. When only one AD is available, spreading nodes across FD-1, FD-2, and FD-3 is the only way to achieve infrastructure-failure isolation within that region. OCI guarantees that FDs within an AD do not share the same physical rack, so a single rack failure cannot take down more than one node.

Answer

Deploy the nodes in the same Fault Domain and configure OCI Compute Auto-Scaling.

Answer

Deploy the nodes across three different OCI regions using asynchronous database links.

Answer

Deploy all three nodes in the same Fault Domain to maximize internal rack-level network performance.

Question 15

An architect is designing an application that requires data replication between two OCI regions. The primary region is Ashburn and the secondary region is Phoenix. What is the foundational nature of OCI's multi-region architecture regarding inter-region traffic?

Accepted Answer

OCI regions are independent geographic areas connected by Oracle's high-speed private network backbone, allowing secure cross-region replication.. OCI regions are completely independent and connected by secure, high-speed global network backbones, allowing safe cross-region data transfer.

Answer

All inter-region traffic must traverse the public internet via encrypted IPsec VPN tunnels.

Answer

OCI regions are isolated from each other; cross-region data transfer requires third-party WAN optimizers.

Answer

Inter-region communication is restricted to metadata only; user data cannot be moved between regions.