1Z0-1085-26 Governance And Administration Practice Test 3 — 15 Questions

Question 1

An administrator wants to ensure that all Audit log events in the tenancy are archived to an Object Storage bucket for long-term retention and compliance. How should this be configured?

Accepted Answer

Configure Audit Log Configuration in the OCI Console to export logs to an Object Storage bucket.. OCI Audit provides an archival feature where you can configure a retention period and point Audit logs to an Object Storage bucket for long-term preservation.

Answer

Create a Cloud Guard detector recipe for log archiving.

Answer

Write a custom Python script that polls the OCI Monitoring API every minute.

Answer

Attach a compartment quota to the audit compartment.

Question 2

You need to grant an external auditing firm read-only access to view all resources across your entire OCI tenancy without allowing them to make any changes. What is the most efficient way to achieve this?

Accepted Answer

Create an IAM policy: 'Allow group Auditors to inspect all-resources in tenancy'. Using the 'inspect' or 'read' verb across 'all-resources' at the tenancy level grants read-only visibility to auditors.

Answer

Export all resource configurations to a CSV file and email them weekly.

Answer

Create an IAM policy: 'Allow group Auditors to manage all-resources in tenancy'

Answer

Manually add the auditor accounts as co-administrators of the root tenancy.

Question 3

Which OCI administrative feature allows you to organize and categorize cloud resources using user-defined key-value pairs for granular tracking and automation?

Accepted Answer

Tags. Tags in OCI are user-defined key-value pairs that can be applied to resources for organization, tracking, and automation. They allow granular categorization beyond compartments, enabling cost tracking, access control, and automation based on tag values. This matches the requirement for user-defined key-value pairs for granular tracking and automation.

Answer

Compartments

Answer

Identity Domains

Answer

Service Limits

Question 4

Where in the OCI Console can an administrator view current service limits, usage, and request a service limit increase?

Accepted Answer

Limits, Quotas and Usage. The 'Limits, Quotas and Usage' page in the OCI Console is the central place to view current service limits, monitor usage against those limits, and submit service limit increase requests. Administrators navigate here to manage capacity and request adjustments.

Answer

Cloud Guard

Answer

Cost Analysis

Answer

Identity Domains

Question 5

Your organization wants to ensure that all resources tagged with `Environment: Production` cannot be deleted accidentally by any user, including administrators. Which OCI feature can help achieve protection against accidental deletion?

Accepted Answer

Resource Locks. OCI provides resource locks (full or delete locks) that can be applied to resources to prevent accidental modification or deletion.

Answer

Tag Defaults

Answer

Compartment Quotas

Answer

IAM Deny Policies

Question 6

What is the primary purpose of the OCI Vault service in relation to administrative governance?

Accepted Answer

Centrally managing encryption keys and secrets securely.. OCI Vault is used to centrally manage encryption keys and secret credentials securely.

Answer

Monitoring compute performance metrics and alarms.

Answer

Tracking cloud billing and costs across compartments.

Answer

Writing and testing Terraform infrastructure templates.

Question 7

You have a parent compartment named 'ParentComp' and a child compartment named 'ChildComp'. If you write an IAM policy at the root tenancy level granting a group access to 'ParentComp', what is the inheritance rule regarding 'ChildComp'?

Accepted Answer

The policy automatically applies to ChildComp because permissions inherit downward in compartment hierarchies.. Policies defined at a parent compartment or tenancy level automatically inherit down to all nested child compartments.

Answer

ChildComp never inherits permissions; a separate policy must always be written for every child compartment.

Answer

Parent compartment policies are blocked if child compartments exist.

Answer

Permissions inherit upward from ChildComp to ParentComp.

Question 8

Which OCI service allows you to define and run infrastructure as code (IaC) using Terraform configurations natively managed inside your tenancy?

Accepted Answer

OCI Resource Manager. OCI Resource Manager is a managed service that lets you define and run Terraform configurations natively within your OCI tenancy. It provides a managed Terraform state, plan/apply workflows, and integration with OCI IAM.

Answer

OCI Audit

Answer

OCI Identity Domains

Answer

OCI Cloud Guard

Question 9

You need to export billing and usage data automatically every day into an Object Storage bucket for custom financial analysis and reporting. Which OCI feature facilitates this?

Accepted Answer

OCI Usage Reports. Usage Reports in OCI automatically generate detailed CSV cost and usage reports and deposit them into a designated tenancy-owned Object Storage bucket daily.

Answer

OCI Cost Analysis export button

Answer

OCI Audit log archiving

Answer

OCI Budget alert triggers

Question 10

An administrator creates a new dynamic group with matching rules, but instances belonging to that group are not receiving the permissions granted by the policy referencing the dynamic group. What is the most likely cause?

Accepted Answer

No IAM policy has been created that grants permissions to the dynamic group.. A dynamic group only defines membership based on matching rules; it grants no permissions by itself. Permissions are granted exclusively through IAM policies that reference the dynamic group as the principal. If no such policy exists, instances in the group receive nothing, which is the most likely cause described.

Answer

Dynamic group names are case-insensitive in rules but case-sensitive in IAM policies, causing a mismatch.

Answer

The instances must be terminated and relaunched for dynamic group membership to evaluate.

Answer

Dynamic groups cannot be used in IAM policies; only user groups can.

Question 11

Which OCI service provides native tools to monitor resource metrics (such as CPU utilization) and trigger alarms when thresholds are breached?

Accepted Answer

OCI Monitoring. OCI Monitoring collects metrics and enables alarms based on telemetry data.

Answer

OCI Identity Domains

Answer

OCI Vault

Answer

OCI Cost Analysis

Question 12

You want to organize your OCI resources so that all networking components belong to one administrative boundary, security tools belong to another, and application workloads belong to a third. Which OCI entity is specifically designed to isolate resources for administrative and security delegation?

Accepted Answer

Compartments. Compartments are logical partitions within a tenancy used to organize and isolate OCI resources.

Answer

Virtual Cloud Networks

Answer

Identity Domains

Answer

Availability Domains

Question 13

What is the name of the file format used by OCI Usage Reports that allows financial teams to ingest cloud spending data into spreadsheet and BI tools?

Accepted Answer

CSV. Usage Reports export data as CSV (Comma-Separated Values) files.

Answer

SQL

Answer

XML

Answer

PDF

Question 14

A security administrator needs to ensure that users configure Multi-Factor Authentication (MFA) for their OCI accounts to enhance login security. Where is MFA managed in OCI?

Accepted Answer

Identity Domains. In OCI, MFA is configured and enforced through Identity Domains (the IAM identity layer that replaced the legacy tenancy-level identity). Within an Identity Domain, administrators configure MFA settings such as 'Enrolled' or 'Required' at the domain level, and individual users enroll their MFA factors (OCI Mobile App, TOTP authenticator, SMS, etc.) from their My Profile page. This is where sign-on policies and MFA enforcement rules live.

Answer

OCI Vault

Answer

Compartment Quotas

Answer

IAM Policies

Question 15

Which TWO tools can you use to analyze and track Oracle Cloud Infrastructure costs and spending? (Choose two.)

Accepted Answer

OCI Cost Analysis. OCI Cost Analysis (B) is correct because it is the native OCI tool that lets you visualize and analyze your spending by dimensions such as compartment, service, resource tag, and time period, providing detailed cost breakdowns and trend tracking. OCI Budgets (C) is correct because it lets you set spending thresholds on compartments or tags and triggers alerts when actual or forecasted costs approach or exceed those limits, enabling ongoing cost tracking and control. OCI Cloud Guard (A) is not a cost tool; it is a security posture management service that detects misconfigurations and threats. OCI Resource Manager (D) is an infrastructure-as-code service for provisioning and managing Terraform stacks, not for cost analysis. OCI Audit (E) records API activity and user actions for compliance and security auditing, not for tracking spending.

Answer

OCI Cloud Guard

Answer

OCI Resource Manager

Answer

OCI Audit