1Z0-1085-26 Multiple Select — 30 Questions

Question 1

Which TWO mechanisms help protect OCI workloads against single points of failure at the infrastructure level? (Choose two.)

Accepted Answer

Deploying applications across multiple Availability Domains to survive a complete facility outage.. Fault domains and availability domains are core mechanisms for infrastructure fault isolation in OCI.

Answer

Relying on a single Virtual Cloud Network (VCN) with no backup subnets.

Answer

Placing all compute instances on a single physical host to maximize internal CPU cache efficiency.

Answer

Disabling automated backups to prevent storage controller contention.

Question 2

Which THREE best practices should be followed when designing an OCI compartment hierarchy and IAM policy structure? (Choose three.)

Accepted Answer

Grant permissions to user groups rather than attaching policies directly to individual users.. Best practices include keeping compartment hierarchies shallow, using groups rather than individual users in policies, and following the principle of least privilege.

Answer

Share tenancy root administrative credentials among all team members.

Answer

Write all IAM policies at the root tenancy level to avoid managing multiple policies.

Question 3

Which THREE features are associated with OCI Defined Tags and Tagged-Based Access Control (TBAC)? (Choose three.)

Accepted Answer

Defined tags require a Tag Namespace to be created first.. Defined tags require tag namespaces, support tag defaults, and can be evaluated in IAM policies for TBAC.

Answer

Defined tags replace IAM policies entirely for access control.

Answer

Defined tags can only be created as free-form strings without any governance.

Question 4

Which THREE components or services are part of the OCI distributed cloud strategy, providing flexibility in where and how cloud services are consumed?

Accepted Answer

OCI Cloud@Customer. The OCI distributed cloud model includes Public Cloud, Dedicated Region, and Cloud@Customer as core offerings to meet various business needs.

Answer

OCI Resource Manager

Answer

OCI Data Catalog

Question 5

An enterprise customer evaluating OCI's distributed cloud model wants to understand the advantages of OCI Dedicated Region compared to traditional public cloud. Which THREE benefits are provided by OCI Dedicated Region? (Choose three.)

Accepted Answer

Complete control and data residency within the customer's own data center facility.. Dedicated Region provides local data residency, full API/service parity with public cloud, and local control.

Answer

Elimination of all software licensing costs for third-party operating systems.

Answer

Requiring the customer's internal IT staff to manually patch the underlying hypervisors and control plane.

Question 6

An architect is planning a multi-region disaster recovery deployment in OCI. Which THREE design considerations are essential for ensuring successful data synchronization and failover? (Choose three.)

Accepted Answer

Selecting secondary regions that offer the necessary service availability and capacity to run the production workload.. DR planning requires considering replication RPO, inter-region latency limits, and failover automation.

Answer

Routing all database replication logs through the public internet for maximum transparency.

Answer

Assuming that all OCI regions have identical network latency to all global internet service providers.

Question 7

An enterprise customer is reviewing their high availability architecture in OCI. They want to ensure their database and application tiers are protected against both localized hardware failures and major facility disruptions. Which THREE architectural practices should they follow? (Choose three.)

Accepted Answer

Distribute database nodes across distinct Fault Domains within an Availability Domain to protect against rack-level failures.. High availability across hardware and facility levels requires multi-AD deployment, multi-FD placement, and regular failover testing.

Answer

Rely solely on manual administrator intervention for all failover scenarios without automated health checks.

Answer

Consolidate all application and database nodes onto a single physical server in Availability Domain 1.

Question 8

Which TWO configuration steps are necessary when setting up private access from a VCN to OCI Object Storage using a Service Gateway? (Choose two.)

Accepted Answer

Add a route table rule with the service destination pointing to the Service Gateway.. Setting up a Service Gateway requires creating the Service Gateway resource itself and adding a route table rule pointing traffic destined for the Object Storage service destination to the Service Gateway.

Answer

Assign a public IP address to every compute instance in the private subnet.

Answer

Attach an Internet Gateway to the VCN to route service traffic.

Answer

Configure a NAT Gateway as a next-hop in the subnet route table.

Question 9

Which TWO OCI compute shapes are available when provisioning virtual machines in OCI? (Choose two.)

Accepted Answer

Standard Shapes. OCI offers both Standard virtual machine shapes and Flexible virtual machine shapes where OCPUs and memory can be customized.

Answer

Object Storage Shapes

Answer

Database Shapes

Answer

Network Shapes

Question 10

Which THREE OCI networking components are required to connect an on-premises data center to a VCN via an IPsec VPN? (Choose three.)

Accepted Answer

IPsec Connection. Site-to-Site VPN requires a Dynamic Routing Gateway (DRG), a Customer Premise Equipment (CPE) object, and an IPsec connection.

Answer

Internet Gateway

Answer

Local Peering Gateway

Question 11

Which TWO core OCI services provide compute capabilities? (Choose two.)

Accepted Answer

Oracle Container Engine for Kubernetes (OKE). Compute Instances and Oracle Container Engine for Kubernetes (or Container Instances) provide compute power in OCI.

Answer

OCI File Storage Service

Answer

OCI Object Storage

Answer

OCI Virtual Cloud Network

Question 12

Which TWO OCI services are used to build and manage containerized applications? (Choose two.)

Accepted Answer

Oracle Container Engine for Kubernetes (OKE). Oracle Container Engine for Kubernetes (OKE) and OCI Container Instances are core container services in OCI.

Answer

OCI Internet Gateway

Answer

OCI File Storage Service

Answer

OCI Block Volume

Question 13

Which TWO OCI compute shape categories offer flexible sizing where you can independently select the number of OCPUs and memory? (Choose two.)

Accepted Answer

Flexible Virtual Machine Shapes. Flexible shapes are available for standard virtual machines and certain specialized compute families.

Answer

Preemptible Fixed VM Shapes

Answer

Standard Fixed Virtual Machine Shapes

Answer

Object Storage Compute Shapes

Question 14

Which TWO statements are true regarding OCI File Storage Service (FSS)? (Choose two.)

Accepted Answer

All data stored in OCI File Storage is encrypted at rest by default.. FSS supports concurrent NFS mounts across instances and encrypts all file system data at rest by default.

Answer

File storage data is stored entirely within a single compute instance's local NVMe drive.

Answer

File Storage file systems have a hard maximum capacity limit of 50 Gigabytes.

Answer

File Storage requires iSCSI protocol configuration on every client instance.

Question 15

Which THREE OCI networking components are regional constructs rather than availability domain-specific? (Choose three.)

Accepted Answer

Service Gateway. Virtual Cloud Networks, Internet Gateways, and Service Gateways are regional OCI resources.

Answer

Subnets (can be regional or AD-specific)

Answer

Compute Instances

Question 16

An administrator is configuring OCI Block Volume backups for production workloads. Which TWO features are natively supported by the OCI Block Volume service? (Choose two.)

Accepted Answer

Incremental backups that capture only blocks changed since the last backup. OCI Block Volume supports both manual backups and automated backup policies (Bronze, Silver, Gold), as well as cross-region volume replication for disaster recovery.

Answer

Real-time synchronous mirroring of block volumes across global cloud regions automatically

Answer

Direct backup storage to local NVMe drives on the same server

Answer

Instantaneous read-only block volume cloning

Question 17

Which THREE of the following statements about OCI Object Storage lifecycle management rules are true? (Choose three.)

Accepted Answer

Lifecycle rules can be applied to specific object name prefixes within a bucket.. Lifecycle rules can automatically transition objects to Archive/Infrequent Access or delete them based on age, and can target specific object name prefixes.

Answer

Lifecycle rules require manual execution via the OCI CLI every time objects are uploaded.

Answer

Lifecycle rules are restricted to buckets with versioning disabled.

Question 18

Which TWO OCI features are associated with OCI Object Storage? (Choose two.)

Accepted Answer

Pre-authenticated Requests (PARs). Object Storage supports bucket lifecycle rules and pre-authenticated requests (PARs).

Answer

iSCSI Block Volume Attachments

Answer

NFSv3 File System Mounts

Answer

VCN Security Lists

Question 19

Which TWO statements are true regarding OCI Load Balancer features? (Choose two.)

Accepted Answer

OCI Load Balancers can terminate SSL/TLS certificates and perform SSL offloading.. OCI Load Balancers support SSL termination and flexible bandwidth shaping.

Answer

Load balancers cannot distribute traffic across multiple availability domains.

Answer

Load balancers operate exclusively at Layer 4 of the OSI model.

Answer

Load balancers must be deployed inside on-premises data centers.

Question 20

Which TWO metrics can be monitored using OCI Monitoring service for compute instances? (Choose two.)

Accepted Answer

Memory Utilization. OCI Monitoring tracks standard metrics such as CPU utilization and Memory utilization for compute instances.

Answer

VCN Route Table Rule Count

Answer

Object Storage Bucket Count

Answer

Subnet CIDR block utilization