378 questions total · 6pages · All types, answers revealed
What is the container image registry service provided natively by Oracle Cloud Infrastructure for storing and sharing OCI container images?
OCIR is the native container image registry service.
Why this answer
Oracle Cloud Infrastructure Registry (OCIR) is an Oracle-managed registry that enables you to store and manage your development container images.
Which THREE characteristics apply to OCI Fault Domains? (Choose three.)
OCI availability domains typically contain three fault domains.
Why this answer
Fault domains are chosen during instance creation (or assigned automatically), provide anti-affinity, and reside within an availability domain.
Which TWO statements are true regarding OCI File Storage Service (FSS)? (Choose two.)
All OCI File Storage file systems are encrypted at rest using keys managed by Oracle or customers.
Why this answer
FSS provides a managed file system accessible via NFSv3 that automatically scales and encrypts data at rest by default.
You need to run a stateless containerized background processing job that executes periodically and terminates immediately upon completion without managing servers. Which OCI serverless service is ideal?
OCI Functions is ideal for event-driven, short-lived containerized code execution.
Why this answer
OCI Functions is a serverless, pay-as-you-go platform built on Fn Project that runs code in response to events or schedules.
You need to route traffic privately from your VCN to Oracle Cloud Infrastructure Object Storage in the same region without traversing the public internet. Which components must be configured?
A Service Gateway allows private connectivity to regional Oracle services using a service destination route.
Why this answer
A Service Gateway combined with a route table entry pointing to the service destination allows private traffic routing to regional Oracle services.
Which TWO statements accurately describe the characteristics of OCI Availability Domains and Fault Domains? (Choose two.)
OCI regions consist of one or multiple availability domains.
Why this answer
Availability domains are isolated data centers within a region, and fault domains are isolated hardware groupings within an availability domain.
An organization is planning a disaster recovery strategy for a Tier-1 financial application. They need a Recovery Point Objective (RPO) of near-zero and a Recovery Time Objective (RTO) of seconds. Which OCI deployment pattern best fulfills these stringent requirements?
Active-active deployment with synchronous replication and automated routing achieves near-zero RPO and instantaneous RTO.
Why this answer
A multi-region active-active or active-passive configuration with synchronous data replication across regions provides the lowest RPO and RTO.
How do you improve the performance of a block volume attached to a compute instance?
OCI allows dynamic adjustment of volume performance.
Why this answer
Changing the performance tier of a block volume (e.g., to Higher Performance) increases IOPS and throughput.
An administrator needs to configure DNS resolution so that an on-premises server connected via FastConnect can resolve private hostnames within an OCI VCN. Which OCI DNS component must be configured?
Private DNS resolver listener endpoints allow on-premises servers to query OCI private zones.
Why this answer
A Private DNS resolver in OCI can be configured with listening endpoints and custom zones to resolve queries from on-premises networks.
What is the primary benefit of using OCI Container Instances?
Container instances are serverless, managed container execution environments.
Why this answer
Container Instances allow running containers without managing the underlying VMs or clusters.
Which OCI storage option is recommended for storing high-performance boot volumes for virtual machines?
Block volume is block-level storage for compute instances.
Why this answer
Block Volumes are the standard for high-performance boot and data volumes.
Which TWO of the following are valid OCI compute shape types?
Allows scaling.
Why this answer
Flexible and Bare Metal are valid shape categories in OCI.
Which TWO of the following statements about OCI FastConnect are correct? (Choose two.)
OCI supports partner network providers and direct colocation models for FastConnect.
Why this answer
FastConnect provides private connectivity bypassing the public internet and supports both Partner and Colocation provider models.
Which TWO OCI features are used to monitor the performance of your infrastructure?
Provides logs for analysis.
Why this answer
OCI Monitoring and OCI Logging are the standard tools for observability.
You need to deploy a web application across multiple compute instances with automated scaling and load balancing. Which combination of OCI services provides this complete architecture?
This combination load balances traffic and automatically scales compute capacity.
Why this answer
A Public Load Balancer combined with an Instance Pool and Autoscaling Configuration provides incoming load balancing and dynamic compute scaling.
A cloud architect needs to configure a regional subnet in a Virtual Cloud Network (VCN). Across how many availability domains can a regional subnet span?
Regional subnets span all availability domains in a region for high availability.
Why this answer
In OCI, regional subnets can span all availability domains within a region, simplifying IP address management and resource placement.
An operations engineer needs to provision a Network File System (NFS) that can be simultaneously mounted across hundreds of OCI Compute instances for shared data processing. Which OCI storage service is best suited for this?
FSS provides shared file storage accessible via standard NFS protocol across multiple instances.
Why this answer
File Storage Service (FSS) provides a durable, enterprise-grade network file system that supports the standard NFS v3 protocol and can be mounted concurrently by thousands of compute instances.
You need to deploy a web application on OCI that requires a flexible compute shape to adjust CPU and memory independently. Which OCI compute feature should you select?
Flexible shapes allow users to customize CPU and memory allocations.
Why this answer
Flexible shapes allow independent scaling of CPU and memory, optimizing costs for workload requirements.
If an instance in a public subnet cannot reach the internet, what is the first thing you should check?
Route tables determine if traffic is directed to the IGW.
Why this answer
Route tables must have a rule directing traffic to the Internet Gateway.
An administrator needs to organize and control access to resources for different departments within an OCI tenancy. Which OCI construct is used for resource organization and isolation?
Compartments are used to organize resources and apply policies for access control.
Why this answer
Compartments are the fundamental logical organizing and security-isolating units in OCI.
Your application requires high availability, and you want to ensure that your instances are not all updated or patched at the exact same time. Which OCI concept ensures that maintenance events are distributed?
Fault domains are specifically used to isolate instances during maintenance events.
Why this answer
Distributing instances across different Fault Domains ensures that Oracle maintenance tasks (like patching) occur at different times for each domain, maintaining application uptime.
An organization is setting up a multi-region deployment. They need to replicate Block Volume backups automatically across regions. Where is this configuration managed?
Backup policies include automated cross-region replication rules.
Why this answer
Block volume backup policies allow you to configure automated cross-region replication settings when defining backup schedules.
You need to export billing and usage data automatically every day into an Object Storage bucket for custom financial analysis and reporting. Which OCI feature facilitates this?
Usage Reports provide granular CSV files of cost and usage data delivered automatically to an Object Storage bucket.
Why this answer
Usage Reports in OCI automatically generate detailed CSV cost and usage reports and deposit them into a designated tenancy-owned Object Storage bucket daily.
An architect wants to distribute incoming client traffic evenly across a pool of backend OCI Compute web servers while terminating SSL/TLS connections at the load balancer layer. Which OCI service should be used?
OCI Load Balancer provides layer 7 load balancing and SSL termination.
Why this answer
OCI Load Balancer distributes incoming traffic across backend servers and supports SSL termination.
Which TWO protocols or methods are supported when attaching an OCI Block Volume to a compute instance? (Choose two.)
Paravirtualized attachment is supported for block volumes.
Why this answer
OCI Block Volume supports Paravirtualized and iSCSI attachment methods.
Which TWO statements are correct regarding OCI Budgets and spending alerts? (Choose two.)
OCI Budgets integrate with OCI Notifications to dispatch alerts when thresholds are reached.
Why this answer
Budgets can alert on both actual and forecasted spend, and notifications can be sent via OCI Notifications to email or endpoints.
You are managing a mission-critical database workload on an OCI Block Volume. The workload experiences extremely high and unpredictable I/O bursts, requiring the highest possible IOPS performance per volume. Which performance tier should you select?
Ultra High Performance is engineered for the most demanding workloads, providing the highest IOPS and throughput per volume.
Why this answer
Ultra High Performance is the highest performance tier available for OCI Block Volumes, designed for workloads with intensive I/O requirements and high IOPS demands.
Which TWO statements are true regarding the connectivity between OCI Availability Domains within a region? (Choose two.)
ADs are connected via a dedicated, high-performance internal network fabric.
Why this answer
ADs within a region are connected by a high-speed network fabric and do not incur standard internet egress fees.
An enterprise is planning a multi-cloud strategy and needs to connect their OCI tenancy directly to Microsoft Azure with extremely low latency and high throughput. Which OCI architectural feature or partnership makes this possible?
Oracle Interconnect for Azure links OCI and Azure data centers directly.
Why this answer
Oracle Interconnect for Azure provides direct, low-latency, high-throughput connectivity between OCI and Microsoft Azure in select regions.
Which TWO statements are true regarding OCI Load Balancer features? (Choose two.)
Load balancers support SSL termination and certificate management.
Why this answer
OCI Load Balancers support SSL termination and flexible bandwidth shaping.
An enterprise application deployed on OCI is experiencing frequent Layer 7 HTTP flood attacks and SQL injection attempts. Which OCI service provides comprehensive protection against these web vulnerabilities?
WAF inspects HTTP/S traffic to protect web applications against Layer 7 application exploits.
An administrator wants to restrict inbound SSH access to a specific group of database compute instances without modifying subnet-level security rules. Which OCI feature should be used to define these fine-grained VNIC rules?
NSGs apply to specific sets of VNICs chosen by the administrator.
Why this answer
Network Security Groups (NSGs) allow you to apply security rules to a specific set of VNICs of your choice, independent of subnets.
An organization with strict data residency requirements is evaluating OCI's hybrid and dedicated offerings. Which THREE options represent OCI deployment models designed to bring cloud services into customer-controlled environments? (Choose three.)
Compute Cloud@Customer provides rack-scale cloud infrastructure on-premises.
Why this answer
Dedicated Region, Exadata Cloud@Customer, and Compute Cloud@Customer bring OCI capabilities to on-premises data centers.
Which THREE entities can be attached to an OCI Dynamic Routing Gateway (DRG) to facilitate network connectivity? (Choose three.)
Site-to-Site VPN connections attach to DRGs to link on-premises networks.
What is the primary function of an OCI Internet Gateway?
Internet Gateway provides public internet connectivity.
Why this answer
An Internet Gateway provides a path for bidirectional network traffic between your VCN and the public internet.
You are architecting a disaster recovery plan for a mission-critical database. The business requirement states that in the event of a total regional outage, the service must be operational within a recovery time objective (RTO) of less than one hour. What is the most appropriate strategy?
Cross-region replication is the mandatory architecture to ensure availability during a total regional outage.
Why this answer
To survive a regional outage, resources must be replicated across regions, utilizing OCI's cross-region replication capabilities for databases.
Which OCI compute shape type provides dedicated physical server hardware with no hypervisor overhead, ensuring maximum performance and isolation?
Bare Metal shapes provide dedicated physical hardware without a hypervisor.
Why this answer
Bare Metal shapes provide dedicated physical servers with direct hardware access and zero virtualization overhead.
Which OCI service provides native tools to monitor resource metrics (such as CPU utilization) and trigger alarms when thresholds are breached?
OCI Monitoring collects performance metrics and allows you to set up alarms based on metric triggers.
Why this answer
OCI Monitoring collects metrics and enables alarms based on telemetry data.
You want to delegate the ability to create and manage sub-compartments within an existing compartment called 'AppCompartment' to a lead architect, without granting them full tenancy administration rights. How should you write this IAM policy?
This allows the group to create, move, and manage sub-compartments specifically underneath AppCompartment.
Why this answer
To allow managing compartments within a specific parent compartment, the policy must target the 'compartments' resource type at the parent compartment level.
Which TWO mechanisms can be used to secure data in transit within OCI networking? (Choose two.)
TLS/SSL secures web and application traffic in transit.
Which THREE features are provided by OCI Cloud Guard to help secure a tenancy? (Choose three.)
Responder recipes contain actions that can automatically respond to and remediate security alerts.
Why this answer
Cloud Guard provides detector recipes, responder recipes, and targeted security problem remediation and monitoring.
Which THREE of the following are characteristics of OCI Container Instances? (Choose three.)
Container instances support mounting Block Volumes and File Storage.
Why this answer
Container Instances are serverless, run Docker-compatible containers without managing Kubernetes or compute infrastructure, and allow configuring CPU and memory resources.
Which THREE of the following are primary benefits of using Object Storage?
Data is replicated for high durability.
Why this answer
Durability, scalability, and lifecycle management are key features of OCI Object Storage.
A CPE object represents the public IP address of the on-premises VPN device.
Which TWO statements are true regarding OCI Flexible Compute shapes? (Choose two.)
Network bandwidth automatically increases as more OCPUs are allocated.
Why this answer
Flexible compute shapes allow independent scaling of OCPUs and memory, and are available for both virtual machine and certain bare metal or specialized instance families.
An organization has strict compliance requirements to ensure that all data stored in OCI Object Storage buckets is encrypted using a custom encryption key managed entirely by the customer, rather than Oracle-managed keys. How can this be achieved?
OCI Vault enables using customer-managed encryption keys for Object Storage buckets.
Why this answer
OCI Object Storage supports Customer-Managed Keys (CMK) using OCI Vault, allowing customers to control the master encryption keys used to encrypt their data.
You are provisioning a new compute instance and need to ensure it is isolated from hardware failures on a specific physical rack while residing in the same availability domain. Which OCI feature should you leverage?
Fault domains group instances onto distinct physical hardware to protect against single rack failures.
Why this answer
Fault domains provide anti-affinity within an availability domain by placing instances across physical hardware racks with independent power and networking.
An administrator wants to ensure that critical files stored in an OCI Object Storage bucket are automatically deleted after 90 days to comply with data retention policies. What feature should be used?
Lifecycle rules automate the deletion or tiering of objects based on age.
Why this answer
Object Storage Object Lifecycle Management allows users to configure rules that automatically transition or delete objects based on their age.
An enterprise customer wants to leverage OCI Compute Cloud@Customer to run containerized microservices on-premises while integrating seamlessly with OCI public cloud management tools. How does Compute Cloud@Customer achieve this integration?
Compute Cloud@Customer relies on a secure connection to the OCI control plane, enabling unified management and consistent APIs locally and in the cloud.
Why this answer
Compute Cloud@Customer connects back to the OCI control plane over secure, dedicated network connections to maintain consistent management APIs.
Which TWO of the following can be used to manage containerized workloads in OCI?
Serverless containers.
Why this answer
OKE and Container Instances are the primary ways to run containers.
Which TWO mechanisms help protect OCI workloads against single points of failure at the infrastructure level? (Choose two.)
Multiple availability domains protect against availability-domain-wide outages.
Why this answer
Fault domains and availability domains are core mechanisms for infrastructure fault isolation in OCI.
An application deployment requires traffic from an OCI Virtual Cloud Network (VCN) to securely access Oracle Autonomous Database instances in the region without traversing the public internet. Which gateway must be configured in the VCN?
A Service Gateway enables private access to OCI services like Autonomous Database over the Oracle network backbone.
Why this answer
A Service Gateway allows VCN resources to privately access supported OCI public services, such as Oracle Services Network, without using the public internet.
Which THREE types of gateways can be attached to an OCI Virtual Cloud Network (VCN)? (Choose three.)
NAT Gateway provides outbound internet for private subnets.
An organization is setting up a hybrid network architecture using OCI FastConnect with a Partner/Provider model. They need to ensure that their on-premises network can communicate with multiple VCNs across different regions using private IP addresses without traversing the public internet. Which OCI component is mandatory to achieve this?
A DRG is required to route traffic between on-premises networks and OCI VCNs via FastConnect.
Why this answer
A Dynamic Routing Gateway (DRG) version 2 supports attaching to FastConnect and can peer across regions or connect multiple VCNs to a single on-premises connection.
A multinational corporation has strict data residency regulations that prohibit their core financial data from leaving their physical corporate headquarters, yet they want to use OCI managed services and the exact same control plane API. Which OCI deployment model satisfies these requirements?
An OCI Dedicated Region provides all OCI services directly inside a customer's own data center, completely satisfying strict data residency and local control requirements.
Why this answer
OCI Dedicated Region or OCI Cloud@Customer allows organizations to run OCI services on-premises, maintaining data residency while using the public cloud control plane and APIs.
You want to organize your OCI resources so that all networking components belong to one administrative boundary, security tools belong to another, and application workloads belong to a third. Which OCI entity is specifically designed to isolate resources for administrative and security delegation?
Compartments are the fundamental logical building blocks used to isolate and govern resources in OCI.
Why this answer
Compartments are logical partitions within a tenancy used to organize and isolate OCI resources.
You need to copy an existing Block Volume backup from your home region to another OCI region for disaster recovery purposes. What feature should you use?
Cross-region replication copies block backups to secondary regions.
Why this answer
Block Volume Cross-Region Replication allows you to automatically or manually copy volume backups to another OCI region.
Your application team needs to store millions of small files that are rarely accessed but must be available immediately when requested. Which storage tier is most cost-effective?
Infrequent Access provides lower storage costs for data with lower retrieval needs.
Why this answer
Infrequent Access tier in Object Storage is optimized for infrequently accessed data that requires immediate retrieval.
An architect is designing a highly resilient web application on OCI. Which TWO components are essential for distributing incoming HTTP/HTTPS traffic across multiple backend compute instances across different availability domains? (Choose two.)
A regional OCI Load Balancer accepts incoming traffic and distributes it across availability domains.
Why this answer
A regional OCI Load Balancer combined with a backend set containing instances across multiple Availability Domains ensures high availability and load distribution.
A developer has deployed a Node.js web application on an OCI Compute instance, but external users cannot access the application on port 3000. The instance's VCN has a security list allowing TCP traffic on port 3000. What additional OS-level configuration is likely blocking the traffic?
Local OS firewalls must be configured to allow incoming traffic on application ports like 3000.
Why this answer
Linux compute instances run local software firewalls (such as firewalld or iptables) by default, which can block incoming traffic even if OCI network security rules allow it.
Which TWO of the following are core tenets of the OCI distributed cloud model? (Choose two.)
OCI's distributed cloud model encompasses public cloud, Dedicated Region, and Cloud@Customer offerings.
Why this answer
The OCI distributed cloud model offers public cloud, hybrid cloud, and dedicated cloud options to meet customer deployment needs.
An administrator wants to configure automated backup policies for OCI Block Volumes attached to production databases. They need a policy that takes daily backups and retains them for 30 days, as well as weekly backups retained for 1 year. How can this be accomplished?
User-defined policies allow configuring multiple backup frequencies and retention rules within a single policy.
Why this answer
OCI Block Volume backups support user-defined backup policies that allow combining multiple schedules (e.g., daily and weekly) with custom retention periods.
You are setting up OCI Budgets for multiple departments. You want a budget to evaluate spending based on the actual costs incurred plus estimated charges for resources that have been running during the month. Which budget calculation rule should you select?
Forecasted spend looks at historical consumption patterns to predict total end-of-month spending, allowing alerts before the budget is exceeded.
Why this answer
OCI Budgets support both 'ACTUAL' and 'FORECASTED' spend tracking types. To include both incurred spend and projected end-of-month spend, you use forecasted spend alerts.
An administrator creates a new dynamic group with matching rules, but instances belonging to that group are not receiving the permissions granted by the policy referencing the dynamic group. What is the most likely cause?
Creating a dynamic group defines who the principal is, but an IAM policy is still required to grant them access.
Why this answer
For a dynamic group to receive permissions, an IAM policy must be written granting access to that specific dynamic group name (e.g., 'Allow dynamic-group <group-name> to...').
You have a parent compartment named 'ParentComp' and a child compartment named 'ChildComp'. If you write an IAM policy at the root tenancy level granting a group access to 'ParentComp', what is the inheritance rule regarding 'ChildComp'?
Compartment hierarchies inherit permissions downward, meaning permissions granted at ParentComp apply to ChildComp as well.
Why this answer
Policies defined at a parent compartment or tenancy level automatically inherit down to all nested child compartments.
Which TWO statements describe OCI Service Limits? (Choose two.)
Service limits act as built-in safeguards and capacity ceilings for cloud resources.
Why this answer
Service limits are thresholds set on resource consumption per tenancy/region, and administrators can request increases via the console.
An administrator is configuring a site-to-site VPN connection between an on-premises data center and an OCI VCN. During testing, packets are being dropped because the on-premises firewall expects a specific encryption algorithm and IPsec tunnel parameters that do not match OCI defaults. How can this be resolved?
Custom IPsec configuration allows matching specific cryptographic requirements of third-party firewalls.
A cloud architect needs to deploy a cloud-native application using Docker containers without managing any underlying infrastructure, servers, or Kubernetes worker nodes. Which OCI service should they select?
Container Instances is designed for serverless container deployment without infrastructure management.
Why this answer
OCI Container Instances is a serverless compute service that lets you run containers quickly without needing to manage any underlying infrastructure or provision compute instances.
An enterprise application team needs to migrate an existing multi-tier application into Oracle Container Engine for Kubernetes (OKE). They need a managed Kubernetes control plane where OCI manages the master nodes while worker nodes run in their VCN. Which OKE cluster type should they create?
Standard OKE clusters manage the Kubernetes control plane while allowing full control over worker node pools in the VCN.
Why this answer
A standard managed OKE cluster provides a fully managed Kubernetes control plane with user-managed worker node pools.
Which TWO methods can be used to connect an on-premises data center to an OCI Virtual Cloud Network? (Choose two.)
FastConnect provides dedicated private connectivity.
Why this answer
On-premises connectivity to OCI is established using OCI FastConnect or Site-to-Site VPN.
What is the primary purpose of an OCI Internet Gateway?
Internet Gateway enables bidirectional internet communication.
Why this answer
An Internet Gateway provides a path for bidirectional network traffic between your VCN and the public internet.
A web application hosted on OCI requires layer-7 load balancing, SSL termination, and cookie-based session persistence across multiple backend compute instances. Which OCI Load Balancer type meets these requirements?
The OCI Load Balancer operates at Layer 7, supporting HTTP/HTTPS routing, SSL termination, and cookie-based persistence.
Why this answer
The OCI Layer 7 Load Balancer provides HTTP/HTTPS traffic management, SSL termination, and session stickiness.
Which OCI Object Storage tier is recommended for storing data that is accessed infrequently, but requires rapid access when needed with lower retrieval costs than Archive?
Infrequent Access is optimized for data accessed less often with rapid retrieval.
Why this answer
Infrequent Access storage tier is designed for data accessed less frequently, offering lower storage costs than Standard and faster retrieval than Archive.
You need to deploy a batch processing job that can tolerate sudden termination by OCI if compute capacity is reclaimed, significantly reducing your compute costs. Which instance type should you choose?
Preemptible instances offer discounted compute capacity subject to reclamation.
Why this answer
Preemptible instances are spare compute capacity offered at a lower price that can be reclaimed by OCI when capacity is needed.
When designing a disaster recovery plan utilizing multiple OCI regions, which THREE factors must an architect consider? (Choose three.)
Automated traffic management ensures rapid redirection of user traffic during a disaster.
Why this answer
Cross-region DR planning involves RPO/RTO metrics, data replication mechanisms, and automated traffic failover.
Practice 1Z0-1085-26 by domain
Target a specific domain to shore up weak areas.
See all domains with question counts →