378 questions total · 6pages · All types, answers revealed
Which OCI service is best suited for running serverless code functions that trigger based on events or HTTP requests?
OCI Functions is designed for serverless, event-driven architectures.
Why this answer
OCI Functions is a serverless, event-driven compute service.
You are configuring an Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN) and need to ensure that compute instances in a private subnet can initiate outbound internet connections to download software patches without allowing unsolicited inbound traffic from the internet. Which gateway must you attach to the VCN?
A NAT Gateway allows outbound traffic to the internet while preventing inbound sessions.
Which TWO storage services in OCI provide encryption at rest by default? (Choose two.)
Block Volume encrypts all data at rest by default.
Why this answer
All major OCI storage services including Object Storage and Block Volume encrypt data at rest by default.
Which TWO statements accurately describe the differences between Availability Domains (ADs) and Fault Domains (FDs)?
Every region must have fault domains, but not every region has multiple availability domains.
Why this answer
ADs are isolated physical data centers within a region, while FDs are isolated hardware groups within an AD. Both are critical for high availability.
A financial services company needs to ensure that their database primary and standby nodes are never placed on the same physical infrastructure rack, despite being in the same data center building. What configuration satisfies this?
Fault Domain 1 and Fault Domain 2 represent separate physical hardware racks.
Why this answer
Assigning the primary and standby nodes to separate fault domains ensures they reside on different physical hardware racks.
Your development team is deploying a new service and wants to ensure that a scheduled hypervisor maintenance event on a physical host does not take down all instances of the service. How does OCI handle hypervisor maintenance across Fault Domains?
Staggered maintenance across fault domains ensures high availability during updates.
Why this answer
OCI performs maintenance on one fault domain at a time, allowing instances in other fault domains to remain running.
Which TWO OCI storage services provide file or object storage capabilities rather than block storage? (Choose two.)
File Storage Service provides shared network file system storage.
Why this answer
Object Storage and File Storage Service provide object and file storage respectively, whereas Block Volume provides block-level storage.
An application deployment in a VCN private subnet needs to query external APIs hosted on the public internet, but malicious actors must not be able to initiate inbound connections to the application instances. Which combination of VCN gateways provides this required behavior?
A NAT Gateway allows outbound traffic, and Security Lists control packet filtering to block unsolicited inbound traffic.
Redundant tunnels across multiple CPEs provide automatic failover and high availability.
What is the default behavior of a Security List in OCI?
Stateful rules track connection status.
Why this answer
Security Lists are stateful by default, meaning return traffic for allowed requests is automatically permitted.
An application deployed on OCI Compute instances requires custom DNS records that resolve only within a specific VCN and are not exposed to the public internet. Which OCI DNS feature should you configure?
Private DNS zones provide internal domain name resolution within VCNs.
Why this answer
Private DNS zones allow you to manage internal domain names that are resolved exclusively within your VCNs.
An administrator is configuring OCI Block Volume backups for production workloads. Which TWO features are natively supported by the OCI Block Volume service? (Choose two.)
Block volume backups are fully incremental, capturing only blocks that have changed since the previous backup.
Why this answer
OCI Block Volume supports both manual backups and automated backup policies (Bronze, Silver, Gold), as well as cross-region volume replication for disaster recovery.
Service Gateways provide private connectivity to Oracle services without public internet traversal.
Why this answer
A Service Gateway allows private access to regional Oracle services (like Object Storage), while Oracle Database services are accessed natively within private subnets via the service network.
Which THREE storage performance tiers are available for OCI Block Volumes? (Choose three.)
Lower Cost is one of the Block Volume performance tiers.
Why this answer
OCI Block Volume offers Lower Cost, Balanced, and Higher Performance tiers.
You need to ensure that database block volumes are automatically backed up daily with a retention policy of 30 days and cross-region replication. What OCI feature should you use?
Backup policies automate scheduled backups, retention, and cross-region copying.
Why this answer
Block Volume Backup Policies automate scheduled backups, retentions, and cross-region replication.
Which TWO of the following features are provided by OCI DNS? (Choose two.)
OCI DNS supports public zones for internet-facing domains.
Why this answer
OCI DNS supports both public DNS zones for internet domain resolution and private DNS zones for internal VCN name resolution.
When architecting a high-availability database cluster across multiple availability domains in an OCI region, what is the recommended approach for handling latency-sensitive synchronous replication?
The high-speed fiber backbone between availability domains supports low-latency synchronous replication.
Why this answer
Since availability domains within an OCI region are connected by low-latency networks, synchronous replication is fully supported across them.
To ensure high availability for your web application, you should deploy your instances across:
Spanning ADs protects against entire data center failures.
Why this answer
Deploying across different availability domains (ADs) or fault domains (FDs) is best practice for HA.
An enterprise customer is reviewing their high availability architecture in OCI. They want to ensure their database and application tiers are protected against both localized hardware failures and major facility disruptions. Which THREE architectural practices should they follow? (Choose three.)
Multi-FD distribution protects against single-rack power or switch failures.
Why this answer
High availability across hardware and facility levels requires multi-AD deployment, multi-FD placement, and regular failover testing.
An architect is provisioning a high-performance compute cluster that requires direct, unvirtualized access to physical hardware components, including raw local NVMe SSDs and high core counts, without hypervisor overhead. Which compute shape category must be chosen?
Bare Metal shapes provide dedicated physical hardware access without a hypervisor layer.
Why this answer
Bare Metal shapes provide dedicated physical servers with direct hardware access and no virtualization overhead.
Which OCI Object Storage feature allows you to grant temporary, time-bound read or write access to a specific bucket or object without sharing user credentials?
PARs allow temporary URL-based access without credentials.
Why this answer
Pre-authenticated requests (PARs) provide a way to securely let external users access or download specific objects or buckets without credentials for a defined duration.
Which THREE actions can be performed using OCI Object Storage features? (Choose three.)
Versioning retains previous object states.
Why this answer
Object Storage supports versioning, pre-authenticated requests, and cross-region replication.
You are deploying a critical application that must remain available even if a single hardware failure occurs within a specific data center. You have already chosen an Availability Domain. Which configuration provides the best protection against this failure?
Fault domains are specifically designed to provide isolation from hardware failures within an availability domain.
Why this answer
Fault domains allow for the distribution of instances across different hardware within an Availability Domain to protect against localized hardware or rack failure.
An auditor needs to verify who deleted a critical production virtual cloud network (VCN) yesterday. Which OCI service should the auditor query to find this exact API event history?
OCI Audit logs every API call and user action, making it the definitive tool for tracking who did what and when.
Why this answer
The OCI Audit service automatically records all API calls made to supported OCI services, including identity, user actions, and resource deletions.
Which THREE of the following are methods to connect to OCI?
Standard connection method.
Why this answer
FastConnect, VPN, and Public Internet are standard connection methods.
An administrator wants to move a Virtual Cloud Network (VCN) from 'CompartmentA' to 'CompartmentB'. What is the primary prerequisite that must be met for this move to succeed?
Moving resources across compartments requires 'manage' access on both the source and destination compartments to ensure authorization.
Why this answer
To move a resource between compartments, all dependent child or associated resources (like subnets, route tables, or security lists) must be supported, and you must have manage permissions on both source and destination compartments.
A company is expanding its operations and requires the lowest possible latency for its application within a specific geographic area. Which OCI construct should they select to ensure their resources are located closest to their users?
Selecting the correct OCI region ensures proximity to the user, reducing network latency.
Why this answer
OCI Regions provide the primary geographic location for resources. Selecting the region closest to the user minimizes network latency.
You are configuring an OCI Network Load Balancer (NLB) for a high-performance database cluster. Why would you choose NLB over a regional Layer 7 Load Balancer?
NLB is Layer 4 and preserves source IPs.
Why this answer
Network Load Balancer operates at Layer 4, handles high packet rates with ultra-low latency, and preserves client source IP addresses.
Which TWO tools can you use to analyze and track Oracle Cloud Infrastructure costs and spending? (Choose two.)
Cost Analysis provides visual dashboards and filters for exploring billing data.
Why this answer
OCI Cost Analysis and OCI Budgets are the primary tools for tracking and analyzing cloud expenditures.
A financial institution is prohibited by regulation from storing data in any public data center, even if it is encrypted. They require a complete, physically isolated OCI deployment. What is the recommended deployment?
Dedicated Regions provide a self-contained, isolated cloud environment that is physically separated.
Why this answer
The OCI Dedicated Region provides a fully integrated, physically isolated OCI footprint exclusively for a single customer.
OCI Bastion provides secure, managed, zero-public-IP access to private target resources.
An application running on OCI Compute instances requires shared file storage that can be mounted concurrently across hundreds of Linux instances via the standard NFS protocol. Which OCI storage service is best suited?
File Storage Service supports standard NFSv3 protocol and concurrent multi-instance mounting.
Why this answer
File Storage Service (FSS) provides a durable, scalable, enterprise-grade network file system that can be mounted by NFS protocol across multiple compute instances simultaneously.
Which THREE of the following actions can be performed using OCI File Storage Service (FSS)? (Choose three.)
FSS supports encryption at rest using keys managed in OCI Vault.
Why this answer
FSS supports NFSv3, snapshot creation for data protection, and cross-region replication or cloning.
An administrator wants to ensure that all Audit log events in the tenancy are archived to an Object Storage bucket for long-term retention and compliance. How should this be configured?
OCI Audit allows you to configure periodic export and archiving of audit logs into an Object Storage bucket.
Why this answer
OCI Audit provides an archival feature where you can configure a retention period and point Audit logs to an Object Storage bucket for long-term preservation.
Which OCI feature allows you to attach a single block volume to multiple instances simultaneously?
Multi-attach feature enables shared block storage access.
Why this answer
Block Volume 'multi-attach' allows read/write access from multiple instances.
Which TWO characteristics accurately describe Oracle Cloud Infrastructure (OCI) Fault Domains?
Fault domains isolate your instances so they do not share physical infrastructure.
Why this answer
Fault domains are logical groupings of hardware within an AD that provide anti-affinity, protecting against unexpected hardware and power failures.
An operations team wants to ensure that a critical web application automatically scales compute capacity up during high traffic spikes and scales down when traffic subsides. Which OCI service combination provides this capability?
Autoscaling configurations dynamically adjust the size of an instance pool based on performance metrics.
Why this answer
Compute autoscaling configurations work alongside Load Balancers and Instance Pools to automatically adjust the number of compute instances based on metrics like CPU utilization.
An administrator needs to grant a group of database administrators the ability to manage Autonomous Databases only within a specific compartment named DevCompartment, without giving them access to any other resources in that compartment. Which IAM policy statement achieves this requirement?
This statement correctly scopes the 'manage' verb to autonomous-databases specifically within DevCompartment for DBA-Group.
Why this answer
To scope access to a specific resource type within a specific compartment, the policy must use the target resource type (autonomous-databases) and be defined at the appropriate compartment level.
In an OCI region with a single availability domain, how does OCI achieve high availability and fault isolation for compute workloads?
Fault domains provide hardware fault isolation within single-AD regions.
Why this answer
In regions with a single availability domain, OCI relies on multiple fault domains to distribute workloads across isolated physical hardware.
Which TWO actions are supported when managing OCI Block Volume backups? (Choose two.)
Cross-region replication copies block backups to secondary regions.
Why this answer
Block volume backups can be scheduled using backup policies and replicated across regions.
A retail company needs to run a subset of OCI services (such as Autonomous Database and Container Engine for Kubernetes) locally within their corporate data center due to extreme latency requirements for point-of-sale terminals, while keeping data management tied to the public cloud control plane. Which OCI deployment option should they choose?
OCI Cloud@Customer enables enterprises to run OCI services on-premises in their own data centers with local data processing and low latency.
Why this answer
OCI Cloud@Customer brings specific OCI cloud services and managed infrastructure directly into customer data centers while managed via the public cloud control plane.
What is the name of the file format used by OCI Usage Reports that allows financial teams to ingest cloud spending data into spreadsheet and BI tools?
Usage Reports deliver data in compressed CSV format into an Object Storage bucket.
Why this answer
Usage Reports export data as CSV (Comma-Separated Values) files.
Your development team needs to deploy containerized applications rapidly on OCI without managing underlying compute servers or clusters. Which OCI container service fits this requirement best?
Container Instances is a serverless service that enables developers to run containers instantly on OCI without managing underlying compute infrastructure.
Why this answer
OCI Container Instances is a serverless compute service that lets you run containers quickly without having to manage any servers or Kubernetes clusters.
Your company operates workloads in an OCI region that suffers a rare regional-wide network partition. Your architecture remains online because you implemented a multi-region deployment. Which OCI feature enables this level of business continuity?
Multiple OCI regions provide complete geographic isolation for disaster recovery.
Why this answer
Independent OCI regions allow organizations to deploy active-active or active-passive architectures across geographies.
An organization is building a hybrid cloud strategy and evaluates OCI's cloud models. They want to run Oracle Database workloads on Exadata infrastructure inside their own data center, managed through the OCI console, with infrastructure maintenance performed by Oracle. Which service matches this requirement?
Exadata Cloud@Customer brings Oracle Exadata database infrastructure to the customer's data center while maintaining OCI cloud management and operational control.
Why this answer
Exadata Cloud@Customer provides Oracle Database on Exadata infrastructure installed on-premises and managed via the OCI console.
An organization requires a complete disaster recovery site located in a different geographic jurisdiction hundreds of miles away to comply with business continuity mandates, ensuring data replication across independent regions. Which construct forms the foundational basis for this requirement?
OCI Regions are completely independent geographic areas, separated by significant distance to provide robust disaster recovery capabilities.
Why this answer
OCI Regions are localized geographic areas that are completely independent of one another, separated by hundreds of miles, making them ideal for disaster recovery.
An enterprise customer evaluating OCI's distributed cloud model wants to understand the advantages of OCI Dedicated Region compared to traditional public cloud. Which THREE benefits are provided by OCI Dedicated Region? (Choose three.)
Dedicated Region satisfies strict data residency by placing the cloud infrastructure locally.
Why this answer
Dedicated Region provides local data residency, full API/service parity with public cloud, and local control.
You are deploying a microservices architecture on OKE. You need to ensure that the control plane is managed by OCI to reduce management overhead. Which OKE deployment model is best?
OKE manages the control plane for the user.
Why this answer
OKE is a managed Kubernetes service where the control plane is managed by Oracle.
An administrator must configure DNS resolution so that instances within a VCN can resolve custom internal domain names managed by an on-premises DNS server connected via FastConnect. Which OCI DNS feature should be used?
Private DNS resolver supports custom views and forwarding rules to on-premises resolvers.
Why this answer
OCI Private DNS resolver allows conditional forwarding rules to forward queries for specific domains to designated on-premises DNS servers.
Which OCI architectural component provides high-speed, low-latency network connectivity between multiple Availability Domains within the same region?
OCI connects availability domains within a region with a dedicated, high-performance network fabric that ensures low latency.
Why this answer
Availability domains within a region are connected by a high-bandwidth, low-latency network fabric.
You need to deploy a microservice application in OCI using serverless containers that start in seconds without provisioning Kubernetes clusters or virtual machines. Which OCI service should you use?
Container Instances provides serverless container execution.
Why this answer
OCI Container Instances allows you to run containerized applications serverlessly without managing compute or Kubernetes.
You are configuring disaster recovery for an Oracle Database running in OCI. You choose to replicate your database to a standby instance in a different OCI region. How does OCI's distributed cloud architecture support this cross-region replication?
OCI uses its private global network backbone for secure, high-performance cross-region communication.
Why this answer
OCI's private global network connects regions, facilitating secure and reliable cross-region replication.
Your development team needs to test an application's resilience against infrastructure hardware failures within a specific OCI region that contains only a single Availability Domain. Which OCI feature should you utilize to distribute your compute instances for fault tolerance?
Fault Domains allow you to distribute instances across physical hardware within a single availability domain to protect against unexpected hardware failures or maintenance.
Why this answer
In regions with a single Availability Domain, Fault Domains provide the necessary high availability by logically isolating instances onto separate underlying hardware.
What is the purpose of a Pre-Authenticated Request in Object Storage?
PARs provide limited-time access.
Why this answer
PARs allow temporary, time-bound access to objects without requiring user credentials.
A company is running multiple web servers behind an OCI Public Load Balancer. They notice that client IP addresses are appearing in web server logs as the internal private IP address of the load balancer rather than the actual client's public IP address. How can this be resolved?
The X-Forwarded-For header contains the original client IP address when using a load balancer.
Why this answer
OCI Load Balancer adds standard HTTP headers such as 'X-Forwarded-For' to pass the original client IP address to backend web servers.
A DevOps engineer is provisioning compute instances in a region that has a single availability domain. To protect the application from unexpected physical hardware failures and power supply outages within that single availability domain, how should the engineer distribute the instances?
Fault domains allow you to distribute your instances so that they do not share the same physical hardware and power infrastructure within an availability domain.
Why this answer
Fault domains provide anti-affinity and isolate instances across different physical hardware, power, and network infrastructure within a single availability domain.
Which OCI service is used to host containerized applications and manage clusters?
OKE is the managed Kubernetes service.
Why this answer
Oracle Container Engine for Kubernetes (OKE) is the service for container orchestration.
You want to automate object lifecycle management in an OCI Object Storage bucket so that files older than 90 days are automatically transitioned to Archive storage. What should you configure?
Lifecycle rules automate object tier transitions and deletions natively.
Why this answer
Object Storage Lifecycle Rules allow you to define automated actions to transition objects to different storage tiers or delete them after a specified time period.
When using an OCI Load Balancer, which protocol is recommended for securing traffic?
HTTPS ensures encryption.
Which TWO OCI networking components are required to successfully enable private communication between two separate VCNs residing in the same OCI region? (Choose two.)
VCN route tables must be updated to route traffic destined for the peered VCN CIDR block through the LPG.
Why this answer
Local Peering connects two VCNs in the same region, requiring a Local Peering Gateway (LPG) in each VCN and corresponding routing rule updates in the VCN route tables.
Which TWO OCI features are associated with OCI Object Storage? (Choose two.)
PARs provide temporary URL access to objects.
Why this answer
Object Storage supports bucket lifecycle rules and pre-authenticated requests (PARs).
Which OCI storage service is best suited for storing database backups that require high durability and lowest cost without immediate file system mounting requirements?
Object Storage is ideal for durable, low-cost backup storage.
Why this answer
OCI Object Storage provides highly durable, low-cost object storage ideal for backups.
You need to write an IAM policy that allows a group named 'NetworkAdmins' to manage all VCN components, but you want to ensure that this policy is only applicable when evaluated from the home region of the tenancy. How can you accomplish this using policy conditions?
The 'request.region' variable checks the region where the API request is being executed.
Why this answer
OCI IAM policy conditions support checking contextual variables such as request.region, enabling regional scoping.
Your organization has strict compliance requirements and needs to ensure that no compute instance in a specific production compartment can ever have a public IP address attached. Which OCI service should you use to enforce this rule automatically?
Security Zones use pre-built security recipes to enforce preventive guardrails that block non-compliant resource creation.
Why this answer
OCI Security Zones enforce maximum security policies (recipes) by automatically validating and preventing misconfigurations, such as blocking public IP addresses on compute instances or ensuring buckets are private.
Which THREE features or capabilities are associated with OCI Virtual Cloud Network (VCN) Security Lists?
Security lists are stateful by default, meaning return traffic is automatically permitted regardless of inbound or outbound rules.
Why this answer
Security lists are stateful by default, act as virtual firewall rules at the subnet level, and apply to all compute instances in the associated subnet.
What is the default maximum size of a single Object Storage bucket in OCI?
Object Storage buckets scale automatically to store virtually unlimited data.
Why this answer
OCI Object Storage buckets have no practical size limit and can store an unlimited amount of data.
Which TWO OCI compute shape categories offer flexible sizing where you can independently select the number of OCPUs and memory? (Choose two.)
Flexible VMs allow custom OCPU and memory allocation.
Why this answer
Flexible shapes are available for standard virtual machines and certain specialized compute families.
A government agency requires full control over their physical infrastructure and data sovereignty, necessitating a solution that keeps the hardware on-premises but uses the OCI control plane. Which OCI distributed cloud model best fits this requirement?
This model brings OCI services to the customer's data center, maintaining full control and compliance.
Why this answer
OCI Dedicated Region or OCI Cloud@Customer allows for the OCI cloud experience to be delivered within the customer's own data center, satisfying strict data sovereignty requirements.
A company is deploying an application that requires a shared storage filesystem across multiple OCI Compute instances. The performance requirements dictate sub-millisecond latency and high IOPS for heavy database logging. Which OCI storage service is most appropriate?
iSCSI attached Block Volumes with high performance tiers deliver sub-millisecond latency and high IOPS.
Why this answer
High-performance Block Volumes attached via iSCSI or local NVMe storage provide the necessary high IOPS and sub-millisecond latency required for database workloads.
A developer needs to store database connection strings and API tokens securely so that applications can retrieve them dynamically without hardcoding credentials. Which OCI service is designed specifically for this purpose?
Vault Secrets allows secure storage and dynamic retrieval of sensitive application configuration data.
Why this answer
OCI Vault provides secrets management capabilities that allow you to securely store, manage, and retrieve secrets such as passwords, database connection strings, and certificates.
An application team is deploying microservices on OCI Container Engine for Kubernetes (OKE). They want to expose multiple HTTP services using a single public IP address and route traffic based on URL path routing rules. Which OCI service should they integrate with their Kubernetes Ingress controller?
OCI Load Balancer provides layer 7 load balancing, including HTTP/HTTPS routing based on paths.
Why this answer
OCI Load Balancer supports path-based routing and integrates seamlessly with OKE through the OCI Load Balancer Ingress controller to manage external HTTP/HTTPS traffic.
An auditor is reviewing security controls for OCI Virtual Cloud Networks. Which THREE characteristics differentiate Security Lists from Network Security Groups (NSGs)? (Choose three.)
OCI enforces distinct resource quotas and limits for Security Lists versus NSGs within a VCN.
Why this answer
Security lists are subnet-wide with stateful/stateless rules and have strict limits per VCN, whereas NSGs are VNIC-specific and have different service limits.
An administrator needs to configure custom DNS resolution for instances within a VCN so they can resolve hostnames pointing to an internal on-premises corporate directory server over a FastConnect link. Which OCI DNS feature should be configured?
Private DNS resolver forwarding rules allow routing queries for specific domains to internal DNS servers via a DRG.
Why this answer
Private DNS resolver rules, specifically forward zones, allow VCN instances to forward DNS queries for custom domains to designated on-premises name servers.
You are deploying a distributed database cluster that requires three nodes to be isolated from one another regarding underlying infrastructure failures. The chosen OCI region has only one Availability Domain. How should you provision the database instances?
Distributing the three nodes across FD-1, FD-2, and FD-3 ensures that no single hardware failure or maintenance event takes down more than one node.
Why this answer
When an OCI region has only one Availability Domain, you achieve high availability by placing instances across three distinct Fault Domains within that AD.
An administrator needs to configure autoscaling for a compute instance pool so that instances scale out when CPU usage exceeds 80% and scale in when CPU usage drops below 20%. Where is this autoscaling configuration applied?
Autoscaling configurations are attached to Instance Pools.
Why this answer
Autoscaling configurations in OCI are linked directly to an Instance Pool to automatically manage the number of instances.
Practice 1Z0-1085-26 by domain
Target a specific domain to shore up weak areas.
See all domains with question counts →