1Z0-1085-26 Multiple Select — 30 Questions

Question 1

An enterprise architect is designing a highly available and resilient web application in OCI. Which THREE strategies should be implemented to ensure maximum uptime and fault isolation? (Choose three.)

Accepted Answer

Configure OCI Traffic Management to automatically route client requests away from an impaired region.. High resilience involves multi-AD/FD placement, cross-region disaster recovery, and automated traffic management.

Answer

Rely solely on single-instance virtual machines with automatic daily backups instead of multi-node clustering.

Answer

Deploy all database and application instances in a single Fault Domain to optimize network latency.

Question 2

Which THREE types of gateways can be attached to an OCI Virtual Cloud Network (VCN)? (Choose three.)

Accepted Answer

NAT Gateway. In OCI, a VCN can have a NAT Gateway (B), which lets instances in a private subnet initiate outbound internet connections without exposing them to inbound traffic, and an Internet Gateway (D), which provides bidirectional internet connectivity for instances in public subnets. A Service Gateway (E) is also attachable to a VCN and enables private access to Oracle services such as Object Storage or Autonomous Database without traversing the internet. By contrast, a Storage Gateway (A) is not an OCI VCN gateway type — OCI offers a Storage Gateway appliance for hybrid on-premises access to Object Storage, but it is not attached to a VCN as a gateway. A Database Gateway (C) is likewise not a VCN-attachable gateway in OCI; database connectivity is handled through other constructs such as private endpoints or the service gateway.

Answer

Storage Gateway

Answer

Database Gateway

Question 3

Which TWO of the following are core tenets of the OCI distributed cloud model? (Choose two.)

Accepted Answer

Offering flexible deployment options including public cloud, dedicated regions, and hybrid cloud solutions.. Option B is correct because the OCI distributed cloud model is defined by flexible deployment choices, spanning public multi-tenant regions, dedicated regions (such as OCI Dedicated Region and Oracle Alloy), and hybrid offerings like Exadata Cloud@Customer and Compute Cloud@Customer. Option D is correct because a core promise of OCI's distributed cloud is delivering the same cloud services, OCI Console/management tooling, and API parity consistently across those deployment models, so workloads and automation remain portable. Option A is wrong because OCI explicitly does not limit its services to Oracle-operated public multi-tenant data centers; the distributed cloud model extends services to customer and partner sites. Option C is wrong because database services such as Autonomous Database and Base Database Service run in OCI public regions, dedicated regions, and on-premises, not exclusively on-premises. Option E is wrong because in OCI public regions Oracle owns and manages the physical hardware, while customers manage only their own resources and configurations.

Answer

Providing cloud services exclusively through public multi-tenant data centers operated solely by Oracle.

Answer

Restricting all database services to run exclusively on-premises.

Answer

Requiring customers to manage their own underlying physical hardware in OCI public regions.

Question 4

Which TWO statements are true regarding OCI Flexible Compute shapes? (Choose two.)

Accepted Answer

You can independently configure the number of OCPUs and memory (RAM) when launching a flexible VM.. Option A is correct because OCI Flexible Compute shapes let you independently choose the number of OCPUs and the amount of memory (RAM) within the shape's supported range when launching a flexible VM, rather than being locked to a fixed OCPU-to-memory ratio. Option E is correct because on flexible shapes the network bandwidth scales proportionally with the number of OCPUs selected, so more OCPUs yield higher maximum network throughput. Option B is wrong because flexible shapes are available for both Virtual Machine and Bare Metal instances, not Bare Metal only. Option C is wrong because boot volume resizing is supported independently of whether the shape is flexible. Option D is wrong because flexible shapes specifically allow you to vary memory per OCPU rather than forcing a fixed memory tier for each OCPU.

Answer

Flexible shapes are only available on Bare Metal instances and cannot be used with Virtual Machines.

Answer

Flexible shapes do not support boot volume resizing.

Answer

You must select a fixed tier of memory for every OCPU selected.

Question 5

Which TWO statements describe OCI Service Limits? (Choose two.)

Accepted Answer

Service limits restrict the maximum amount of a resource you can consume in a tenancy or region.. Service limits are thresholds set on resource consumption per tenancy/region, and administrators can request increases via the console.

Answer

Service limits cannot be increased under any circumstances.

Answer

Service limits are managed entirely by writing IAM policy statements.

Answer

Service limits apply only to Object Storage and cannot restrict compute or networking.

Question 6

Which THREE statements are true regarding the architecture and design principles of OCI Availability Domains (ADs) and Regions?

Accepted Answer

Some OCI regions are built with a single availability domain, while others contain multiple availability domains.. Option C is correct because OCI regions vary in topology: some regions are single-AD (for example, certain smaller or newer regions), while most commercial regions contain three availability domains, so the statement accurately reflects that AD count is not uniform across regions. Option D is correct because each OCI region is an independent, isolated geographic area, and regions are deliberately separated by large distances so that a regional failure does not affect other regions. Option E is correct because ADs within the same region are interconnected through a high-bandwidth, low-latency network, which enables multi-AD architectures such as cross-AD replication and low-latency synchronous data mirroring. Option A is incorrect because an availability domain is confined to a single region and cannot span multiple geographic countries. Option B is incorrect because each availability domain has independent power, cooling, and physical security infrastructure; sharing those would defeat the fault-isolation purpose of ADs.

Answer

An availability domain can span across multiple geographic countries to maximize data locality.

Answer

Availability domains share power, cooling, and physical security infrastructure to reduce operational overhead.

Question 7

Which TWO methods can be used to connect an on-premises data center to an OCI Virtual Cloud Network? (Choose two.)

Accepted Answer

OCI FastConnect. OCI FastConnect (C) is correct because it provides a dedicated, private physical connection between an on-premises data center and an OCI VCN, bypassing the public internet for higher bandwidth and more consistent latency. OCI Site-to-Site VPN (D) is also correct because it establishes an IPsec VPN tunnel over the public internet between the on-premises customer-premises equipment (CPE) and a Dynamic Routing Gateway (DRG) attached to the VCN, enabling encrypted hybrid connectivity. Internet Gateway with Public IP (A) only provides outbound/inbound internet access for resources in the VCN and does not create a dedicated or private link to an on-premises network. Local Peering Gateway (B) connects two VCNs within the same OCI region, not an on-premises data center. Object Storage Gateway (E) is a service for accessing Object Storage from on-premises or other clouds, not a method for connecting a data center network to a VCN.

Answer

Internet Gateway with Public IP

Answer

Local Peering Gateway

Answer

Object Storage Gateway

Question 8

Which TWO deployment models are part of Oracle Cloud Infrastructure's distributed cloud strategy, bringing cloud services closer to customers or specific data residency locations?

Accepted Answer

OCI Cloud@Customer. OCI's distributed cloud strategy includes Dedicated Regions and Cloud@Customer offerings, which bring public cloud services to customer-controlled locations.

Answer

OCI Virtual Private Tenant

Answer

OCI Local Compute Zone

Answer

OCI Bare Metal Isolated Instance

Question 9

Which TWO of the following are OCI storage services?

Accepted Answer

Block Volume. Object Storage and Block Volume are primary OCI storage services.

Answer

DNS Service

Answer

Load Balancer

Answer

Functions

Question 10

Which THREE OCI networking components are required to connect an on-premises data center to a VCN via an IPsec VPN? (Choose three.)

Accepted Answer

IPsec Connection. The three required OCI components for an IPsec VPN connection to a VCN are the IPsec Connection (A), the Customer Premise Equipment (CPE) object (C), and the Dynamic Routing Gateway (DRG) (D). The IPsec Connection (A) is the actual tunnel resource that defines the shared secret, routing type (static or BGP), and links the CPE to the DRG. The CPE object (C) is a logical representation of the on-premises VPN device, holding its public IP address and identifying the remote endpoint of the tunnel. The DRG (D) is the virtual router attached to the VCN that terminates the IPsec tunnels and provides the path into the VCN's subnets. An Internet Gateway (B) is not required because IPsec VPN traffic traverses the public internet to reach the DRG's public IP; an IGW only enables inbound/outbound internet access for VCN resources. A Local Peering Gateway (E) is used to connect two VCNs within the same region and plays no role in on-premises connectivity.

Answer

Internet Gateway

Answer

Local Peering Gateway

Question 11

Which THREE components are required when writing an OCI IAM policy statement? (Choose three.)

Accepted Answer

Location (compartment name or tenancy). OCI IAM policy syntax requires a verb, a resource type (or all-resources), and a location (compartment or tenancy).

Answer

Availability domain identifier

Answer

Compute shape specification

Question 12

Which TWO OCI storage services provide file or object storage capabilities rather than block storage? (Choose two.)

Accepted Answer

OCI File Storage Service. OCI File Storage Service (A) is correct because it provides a managed, hierarchical NFSv3 file system that multiple compute instances can mount concurrently, making it a file storage service rather than block storage. OCI Object Storage (D) is correct because it stores data as objects in buckets accessed via REST APIs (Swift and S3-compatible), which is object storage, not block storage. The remaining options are block-level storage: Local NVMe Storage (B) is ephemeral disk physically attached to the compute instance, OCI Block Volume (C) is a network-attached iSCSI block device that can be attached to an instance, and Boot Volume (E) is simply a specialized block volume holding the OS image, so none of them provide file or object storage capabilities.

Answer

Local NVMe Storage

Answer

OCI Block Volume

Answer

Boot Volume

Question 13

Which TWO options correctly describe features of OCI Regions? (Choose two.)

Accepted Answer

Regions are completely independent and do not share infrastructure with other regions.. Option B is correct because OCI regions are designed as isolated geographic areas with independent infrastructure, so they do not share physical infrastructure such as data centers, power, or networking with other regions. Option D is correct because an OCI region contains one or more availability domains, and the number can vary by region rather than being fixed. Option A is incorrect because not every OCI region has exactly three availability domains; some regions have one availability domain, while others may have three. Option C is incorrect because a region is a localized geographic area and does not span multiple continents simultaneously. Option E is incorrect because regions are physical/logical deployment boundaries for resources and services, not constructs used exclusively for billing.

Answer

Every OCI region is guaranteed to have exactly three availability domains.

Answer

Regions span across multiple continents simultaneously.

Answer

Regions are logical constructs used exclusively for billing purposes.

Question 14

Which TWO of the following gateways can be attached to an OCI Virtual Cloud Network (VCN)? (Choose two.)

Accepted Answer

Internet Gateway. The Internet Gateway (A) is a valid OCI VCN gateway that provides bidirectional internet connectivity for resources in a public subnet, enabling inbound and outbound traffic to and from the internet. The Dynamic Routing Gateway (E) is also a valid VCN attachment that provides a path for private traffic between the VCN and external networks such as on-premises networks via FastConnect or IPSec VPN, and between VCNs via peering (local and remote). The other options are not real OCI gateway types: there is no Compute Scaling Gateway (B), no Object Routing Gateway (C), and no Local Storage Gateway (D) in OCI VCN networking; OCI offers Internet Gateway, NAT Gateway, Service Gateway, Local Peering Gateway, Dynamic Routing Gateway, and (in some contexts) Remote Peering Connection.

Answer

Compute Scaling Gateway

Answer

Object Routing Gateway

Answer

Local Storage Gateway

Question 15

Which TWO of the following statements accurately describe OCI Availability Domains? (Choose two.)

Accepted Answer

Availability domains are connected to each other by a high-bandwidth, low-latency network.. Option A is correct because OCI Availability Domains within a region are interconnected by a dedicated high-bandwidth, low-latency network, which enables low-latency communication between resources in different ADs while still supporting high availability designs. Option C is correct because each Availability Domain is physically isolated from the others, with independent power, cooling, and network infrastructure, so a failure in one AD does not affect the others. Option B is incorrect because Availability Domains are physical data center groupings, not purely logical constructs. Option D is incorrect because a fault domain is a grouping within a single Availability Domain and cannot span multiple ADs. Option E is incorrect because Availability Domains are region-specific and are not shared across distinct OCI regions.

Answer

Availability domains are purely logical constructs with no physical representation.

Answer

A single fault domain can span across multiple availability domains.

Answer

Availability domains are shared across multiple distinct OCI regions.

Question 16

Which TWO options are valid methods for organizing and managing infrastructure configuration in OCI? (Choose two.)

Accepted Answer

Using OCI Resource Manager to provision and manage Terraform configurations.. Option D is correct because OCI Resource Manager is the managed Terraform service that lets you create, plan, apply, and manage infrastructure-as-code stacks, so it is a valid way to organize and manage infrastructure configuration. Option E is correct because compartments are the fundamental logical containers in OCI used to segment resources and scope IAM policies, making them a core mechanism for organizing and controlling infrastructure. The remaining options are incorrect because Cloud Guard is a security posture service, not a compute deployment tool; Cost Analysis is a billing and usage reporting feature, not an IAM policy authoring tool; and Audit records API activity for compliance, it does not create VCNs.

Answer

Using OCI Cloud Guard to deploy compute instances.

Answer

Using OCI Cost Analysis to write IAM policies.

Answer

Using OCI Audit to create virtual cloud networks.

Question 17

When designing a disaster recovery and high availability architecture across OCI, which TWO strategies help achieve high availability and fault tolerance? (Choose two.)

Accepted Answer

Distributing critical application instances across multiple fault domains within an availability domain.. Option D is correct because distributing critical application instances across multiple fault domains within an availability domain provides fault tolerance against hardware failures, since each fault domain has independent power and network infrastructure, so a failure in one fault domain does not affect instances in others. Option E is correct because replicating data and workloads across multiple OCI regions provides disaster recovery and geographic redundancy, protecting against region-wide outages and enabling business continuity through services like OCI Full Stack Disaster Recovery, remote replication, and cross-region backups. Option A is incorrect because a single availability domain with no redundancy creates a single point of failure, offering neither high availability nor fault tolerance. Option B is incorrect because placing all instances in a single fault domain concentrates risk, so a fault domain failure would take down the entire workload despite any local communication benefit. Option C is incorrect because creating resources in the root tenancy without compartments is an organizational and access-control anti-pattern that has no bearing on high availability or fault tolerance.

Answer

Relying solely on a single availability domain with no redundancy.

Answer

Placing all database and application instances in a single fault domain for faster local communication.

Answer

Creating all resources in the root tenancy without compartments.

Question 18

Which TWO statements accurately describe the characteristics of OCI Availability Domains and Fault Domains? (Choose two.)

Accepted Answer

A region can contain one or more Availability Domains.. Option C is correct because an OCI region is composed of one or more Availability Domains (ADs), which are isolated, fault-tolerant data center groupings within that region; some regions have a single AD while others have three. Option D is correct because Fault Domains (FDs) are isolated hardware and power groupings within a single Availability Domain, and OCI provides three FDs per AD to enable anti-affinity placement of instances. Option A is incorrect because Availability Domains do not span multiple global regions; they are contained within a single region, and it is regions that are geographically distributed. Option B is incorrect because Availability Domains are deliberately isolated from one another with independent power, cooling, and network infrastructure to maximize fault tolerance, not to share physical power infrastructure. Option E is incorrect because Fault Domains are physical hardware and power isolation groupings confined within one Availability Domain, not software-defined constructs that span across different ADs.

Answer

Availability domains span across multiple global regions to provide high availability.

Answer

Availability domains share physical power infrastructure to minimize data center costs.

Answer

Fault domains are software-defined constructs that exist across different availability domains.

Question 19

An auditor is reviewing security controls for OCI Virtual Cloud Networks. Which THREE characteristics differentiate Security Lists from Network Security Groups (NSGs)? (Choose three.)

Accepted Answer

Security Lists have different resource limits per VCN compared to Network Security Groups.. Security lists are subnet-wide with stateful/stateless rules and have strict limits per VCN, whereas NSGs are VNIC-specific and have different service limits.

Answer

Security Lists require an Internet Gateway to function, while NSGs require a NAT Gateway.

Answer

Security Lists can contain both stateful and stateless rules, while NSGs only support stateless rules.

Question 20

Which TWO of the following are valid methods for deploying applications on OCI without managing underlying operating systems or virtual machine hypervisors? (Choose two.)

Accepted Answer

OCI Functions. OCI Functions and OCI Container Instances are serverless compute options that eliminate OS and hypervisor management.

Answer

DenseIO Compute Instances

Answer

Bare Metal Compute Instances

Answer

Standard Virtual Machine Compute Instances