1Z0-1085-26 Timed Practice Test 1 — 10 Questions

Question 1

; You need to access a private database instance in an OCI VCN that has no public IP addresses assigned, without setting up a traditional VPN or an inbound bastion host with an open SSH port. Which service should you configure?

10 minute time limit — choose an answer to begin.

Accepted Answer

OCI Bastion. OCI Bastion service provides restricted and time-limited secure access to target resources that do not have public IPs, using ephemeral SSH or port forwarding sessions without maintaining a permanent bastion host.

Answer

Dynamic Routing Gateway

Answer

NAT Gateway

Answer

Site-to-Site VPN

Question 2

According to the OCI shared-responsibility model, who is responsible for managing user accounts, password policies, and multi-factor authentication (MFA) configurations?

Accepted Answer

The customer. IAM user lifecycle management, password policies, and MFA configurations are the sole responsibility of the customer.

Answer

Oracle

Answer

Both Oracle and the customer jointly via shared IAM consoles

Answer

Third-party identity auditor

Question 3

Your security team notices that Cloud Guard has generated numerous 'problems' related to overly permissive IAM policies across multiple compartments. Where do these problems originate from?

Accepted Answer

Detector recipes. Cloud Guard uses detector recipes to continuously analyze resources, including IAM policies, network configurations, and storage buckets, to identify security posture deviations.

Answer

Vault Master Encryption keys

Answer

Security Zone recipes

Answer

Responder recipes

Question 4

An administrator needs to understand where the boundary of customer responsibility lies when deploying compute instances in Oracle Cloud Infrastructure. According to the OCI shared-responsibility model, which responsibility falls solely on the customer?

Accepted Answer

Guest operating system patching and configuration on the compute instances. In the OCI shared-responsibility model, OCI is responsible for security OF the cloud, including the underlying physical infrastructure, virtualization, and global network. The customer is responsible for security IN the cloud, which includes guest OS patching, data classification, firewall configurations, and identity and access management.

Answer

Hypervisor patching and firmware updates on the physical host

Answer

Redundancy and cooling of the physical networking hardware

Answer

Physical security of the data center hosting the compute instances

Question 5

A developer needs to store database connection strings and API tokens securely so that applications can retrieve them dynamically without hardcoding credentials. Which OCI service is designed specifically for this purpose?

Accepted Answer

Vault Secrets. OCI Vault provides secrets management capabilities that allow you to securely store, manage, and retrieve secrets such as passwords, database connection strings, and certificates.

Answer

Object Storage with customer-managed keys

Answer

Key Management Service Master Keys

Answer

Identity and Access Management Dynamic Groups

Question 6

Which of the following best describes the isolation level between OCI Availability Domains within the same region?

Accepted Answer

They are completely isolated from each other with independent power, cooling, and physical security, while being connected by a low-latency network.. Availability domains are isolated with independent power, cooling, and network infrastructure, preventing correlated failures.

Answer

They are located in different countries to ensure compliance with international tax laws.

Answer

They share physical power supplies and network switches to reduce operational costs.

Answer

They operate as independent public clouds with separate IAM user directories.

Question 7

Which OCI Console menu section should an administrator navigate to in order to create and manage user groups, compartments, and IAM policies?

Accepted Answer

Identity & Security. Identity & Security (or Governance & Administration depending on console navigation structure) contains Identity, Compartments, and Policies.

Answer

Analytics & AI

Answer

Storage

Answer

Networking

Question 8

Where in the OCI Console can an administrator view current service limits, usage, and request a service limit increase?

Accepted Answer

Limits, Quotas and Usage. The 'Limits, Quotas and Usage' section under Governance and Administration in the OCI Console is where service limits are managed.

Answer

Cloud Guard

Answer

Cost Analysis

Answer

Identity Domains

Question 9

An organization is planning a disaster recovery strategy for a Tier-1 financial application. They need a Recovery Point Objective (RPO) of near-zero and a Recovery Time Objective (RTO) of seconds. Which OCI deployment pattern best fulfills these stringent requirements?

Accepted Answer

Deploy an active-active architecture across two low-latency interconnected OCI regions using synchronous replication and automated traffic management failover.. A multi-region active-active or active-passive configuration with synchronous data replication across regions provides the lowest RPO and RTO.

Answer

Deploy instances across three Fault Domains in a single Availability Domain with automated compute health checks.

Answer

Backup daily block volumes to Object Storage and restore them in a secondary region upon disaster declaration.

Answer

Deploy an active-passive architecture across two OCI regions using asynchronous database replication and manual DNS failover.

Question 10

You are deploying a mission-critical web application that must remain available even if an entire Oracle Cloud Infrastructure availability domain experiences a major outage. The application architecture requires two compute instances. How should you provision these instances to achieve high availability?

Accepted Answer

Deploy one instance in Availability Domain 1 and the other instance in Availability Domain 2.. To protect against availability domain failures, instances must be placed in separate Availability Domains within the same OCI region.

Answer

Deploy both instances in the same Availability Domain but assign them to different Fault Domains.

Answer

Deploy both instances in separate OCI Regions using an explicit cross-region pairing gateway.

Answer

Deploy both instances in the same Availability Domain and configure autonomous cross-AD scaling.