1Z0-1085-26 · domain
Core Oci Services
This domain covers the core Oracle Cloud Infrastructure services you must configure and reason about: networking (VCNs, subnets, gateways, peering, FastConnect), compute instances, block and object storage, and identity-based access control. Questions are scenario-driven, asking you to pick the correct service, gateway type, or security construct for a stated requirement.
Focused practice
Practice Core Oci Services questions
Scored sessions drawing only from this domain — pick a length below.
Start 20-question practice test →What this domain covers
What to know about Core Oci Services
Be able to choose the right OCI networking and security component for a given scenario, and configure routing correctly. The single most important thing: know which gateway or security construct applies, since most questions hinge on that distinction.
Selecting Network Security Groups versus security lists to scope rules to specific VNICs or instances
Identifying attachable VCN gateways: Internet, NAT, Service, Dynamic Routing, Local Peering, Remote Peering
Designing FastConnect Partner/Provider connectivity to reach multiple VCNs across regions
Diagnosing LPG misconfigurations such as missing route table entries or asymmetric security rules
Watch out for
Common Core Oci Services exam traps
- ▸Assuming security lists can target a single instance; they apply at the subnet level, so Network Security Groups are needed for per-instance control.
- ▸Confusing NAT Gateway (outbound-only) with Internet Gateway, or forgetting Service Gateway for OCI services without public traffic.
- ▸Overlooking that Local Peering Gateway connections require matching route rules on both VCNs and non-overlapping CIDRs.
Question index
All Core Oci Services questions (214)
Click any question to see the full explanation, or start a practice session above.
Which THREE of the following features are supported by OCI Network Load Balancer (NLB)? (Choose three.)
Hard2An administrator needs to create a point-in-time, read-only copy of a Block Volume data disk for backup and disaster recovery purposes. What OCI feature should be created?
Easy3Which THREE of the following are properties of a VCN?
Medium4Your organization wants to store compliance audit logs for 7 years at the absolute lowest storage cost, acknowledging that data retrieval may take several hours. Which OCI Object Storage tier should you use?
Easy5Which TWO OCI services are used to build and manage containerized applications? (Choose two.)
Easy6You are designing a high-throughput, fault-tolerant web application tier. You need to distribute incoming HTTP/HTTPS traffic across multiple compute instances across different availability domains within a region. Which service should you deploy?
Medium7Which TWO of the following are OCI storage services?
Medium8What is the primary function of a Dynamic Routing Gateway (DRG) in OCI?
Easy9What is the primary purpose of an OCI Service Gateway?
Easy10A company needs to store petabytes of data that is rarely accessed but must be retained for compliance for 7 years. Retrievals can take up to several hours. Which storage tier should they use?
Easy11Which THREE features are provided by OCI Object Storage buckets? (Choose three.)
Medium12Which TWO statements are true regarding Oracle Cloud Infrastructure (OCI) Compute Flexible Shapes?
Medium13A company is deploying a multi-tier application on OCI. The web tier runs on compute instances in a public subnet, and the database tier runs on compute instances in a private subnet. The security team requires that database instances be accessible only from the web tier on port 1521, and that the database instances have no direct internet access. Which TWO OCI features should be configured to meet these requirements? (Choose two.)
Hard14Which THREE statements are accurate regarding OCI Object Storage capabilities and architecture? (Choose three.)
Hard15Your application running on OCI compute instances requires a shared POSIX-compliant file system that can be mounted simultaneously by hundreds of compute instances across multiple availability domains. Which OCI storage service should you select?
Medium16A security engineer is designing a zero-trust architecture for a microservices environment in OCI. Traffic between compute instances in different subnets must be restricted based on individual workload roles rather than entire subnet CIDR blocks. Which OCI networking feature should be implemented?
Hard17You need to allow traffic from an on-premises site to a VCN using a VPN. What component is required in the VCN to act as the endpoint?
Hard18Which TWO of the following are types of OCI VCN subnets?
Medium19Which of the following is a capability of the OCI Block Volume service?
Medium20A cloud architect needs to provision an Oracle Cloud Infrastructure (OCI) Compute instance with a custom number of OCPUs and memory for a memory-intensive application. Which shape type should the architect select?
Easy21An application requires a block volume with guaranteed high performance and low latency for heavy database operations. Which OCI Block Volume performance tier should you select?
Hard22What is the term used in OCI to describe a software-defined version of a traditional physical network, including subnets, route tables, and gateways?
Easy23You are configuring an OCI Load Balancer and want to ensure high availability by distributing traffic across backend servers in different availability domains within a region. Which type of load balancer should you deploy?
Medium24You need to ensure that database block volumes are automatically backed up every day with a retention policy of 30 days across multiple regions. What OCI feature should you use?
Hard25An administrator needs to temporarily grant read access to a specific file in an OCI Object Storage bucket to a colleague without managing IAM user credentials. What feature should be used?
Easy26An administrator needs to ensure that data in an OCI Object Storage bucket is automatically transitioned from Standard storage to Infrequent Access storage after 30 days, and then deleted after 365 days. Which Object Storage feature should be used?
Easy27A research team runs a long-running simulation on an OCI Compute instance in the Frankfurt region. They need a shared, POSIX-compliant file system that can be mounted by multiple Linux instances simultaneously and that can automatically scale capacity up to 8 EB without provisioning. Which OCI service should they use?
Medium28A company wants to store backup data in OCI Object Storage. The data is infrequently accessed but must be retrievable within milliseconds when needed. The company wants to minimize storage costs while meeting the retrieval requirement. Which Object Storage tier should they use?
Easy29Which OCI service allows you to back up your on-premises data to the cloud for long-term storage?
Easy30Which THREE of the following statements are true regarding OCI Block Volume backups and performance? (Choose three.)
Hard31You are configuring security lists for a subnet hosting web servers. You want to allow incoming HTTP traffic on port 80 from any IP address on the internet. How should you configure the ingress rule?
Medium32You need to connect an on-premises data center to an OCI Virtual Cloud Network with dedicated, high-bandwidth, and predictable network performance that bypasses the public internet entirely. Which OCI networking service should you implement?
Medium33A DevOps engineer needs to store application configuration files and secrets for a containerized application running on OCI. The secrets must be retrievable by the application at runtime without hardcoding them in the container image. The solution must support versioning and auditing of secret access. Which OCI service should the engineer use?
Medium34An administrator needs to create a flexible OCI compute virtual machine instance. Which parameters are required when selecting a flexible compute shape?
Medium35Which TWO statements accurately describe OCI Block Volume backups?
Medium36What is the primary purpose of an OCI Internet Gateway when attached to a Virtual Cloud Network (VCN)?
Easy37Which TWO statements are true regarding OCI File Storage Service (FSS)? (Choose two.)
Hard38You are troubleshooting a connectivity issue where an on-premises server cannot reach an OCI compute instance over an IPsec VPN tunnel. The security list and NSG rules are verified as correct. What is another common OCI networking configuration that must be checked?
Hard39A company is running a batch processing workload on OCI and wants to optimize compute costs by using spare capacity. The workload can tolerate sudden termination if OCI reclaims the capacity. Which compute instance type should be deployed?
Medium40A web application experiencing fluctuating traffic needs a compute solution that automatically scales out the number of virtual machine instances based on CPU utilization. Which combination of OCI services should be configured?
Easy41You need to back up an on-premises database directly to OCI Object Storage using a dedicated, high-speed connection that does not use the public internet. Which networking service should you use?
Medium42Which TWO core OCI services provide compute capabilities? (Choose two.)
Easy43An OCI tenant requires a dedicated, high-speed, private network connection from their on-premises data center to OCI that bypasses the public internet entirely. Which OCI service should be provisioned?
Easy44Which THREE configuration items are specified when creating an OCI Virtual Cloud Network (VCN)? (Choose three.)
Medium45An enterprise has two VCNs in the same OCI region. VCN-A needs to communicate with VCN-B. The VCN CIDR blocks do not overlap. The administrator configures a Local Peering Gateway (LPG) on VCN-A and another on VCN-B, and establishes the peer connection. However, instances in VCN-A still cannot reach instances in VCN-B. What additional step is required?
Hard46A company needs to store unstructured data such as log files, images, and backups in OCI for long-term retention at the lowest possible cost, and data retrieval times of several hours are acceptable. Which OCI Object Storage tier should be chosen?
Easy47Which THREE of the following statements regarding OCI Virtual Cloud Network (VCN) Security Lists and Network Security Groups (NSGs) are correct? (Choose three.)
Hard48Which OCI service is best suited for running serverless code functions that trigger based on events or HTTP requests?
Easy49You are configuring an Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN) and need to ensure that compute instances in a private subnet can initiate outbound internet connections to download software patches without allowing unsolicited inbound traffic from the internet. Which gateway must you attach to the VCN?
Hard50A financial services company needs to run a high-performance computing (HPC) workload on OCI that requires extremely low latency and high bandwidth between compute instances. They want to minimize network overhead and jitter. Which OCI feature should they enable?
Hard51An organization requires a highly available IPsec VPN connection from their on-premises data center to an OCI VCN. To ensure high availability, what is the recommended architecture for the Dynamic Routing Gateway (DRG) and customer premise equipment (CPE)?
Hard52What is the default behavior of a Security List in OCI?
Medium53An application deployed on OCI Compute instances requires custom DNS records that resolve only within a specific VCN and are not exposed to the public internet. Which OCI DNS feature should you configure?
Hard54An application running in an OCI VCN needs to access OCI Object Storage and Oracle Autonomous Database privately. Both services must be accessed without traffic leaving Oracle's network backbone and without using public IPs. Which combination of OCI gateway features accomplishes this?
Hard55Which THREE storage performance tiers are available for OCI Block Volumes? (Choose three.)
Medium56You need to ensure that database block volumes are automatically backed up daily with a retention policy of 30 days and cross-region replication. What OCI feature should you use?
Hard57Which TWO of the following features are provided by OCI DNS? (Choose two.)
Medium58To ensure high availability for your web application, you should deploy your instances across:
Medium59An architect is provisioning a high-performance compute cluster that requires direct, unvirtualized access to physical hardware components, including raw local NVMe SSDs and high core counts, without hypervisor overhead. Which compute shape category must be chosen?
Hard60Which OCI Object Storage feature allows you to grant temporary, time-bound read or write access to a specific bucket or object without sharing user credentials?
Easy61Which THREE actions can be performed using OCI Object Storage features? (Choose three.)
Medium62A media company stores millions of video files in an OCI Object Storage bucket. The compliance team requires that all objects be encrypted with a customer-managed key stored in OCI Vault, and that the encryption key be rotated automatically every 90 days. Which OCI feature should the administrator configure to meet these requirements?
Medium63You are configuring an OCI Network Load Balancer (NLB) for a high-performance database cluster. Why would you choose NLB over a regional Layer 7 Load Balancer?
Medium64A database administrator needs to deploy a highly available Oracle Database on OCI. The database must automatically fail over to a standby database in another Availability Domain within the same region in case of a primary failure, with minimal data loss. Which OCI service should be used?
Hard65An application running on OCI Compute instances requires shared file storage that can be mounted concurrently across hundreds of Linux instances via the standard NFS protocol. Which OCI storage service is best suited?
Hard66Which THREE of the following actions can be performed using OCI File Storage Service (FSS)? (Choose three.)
Hard67Which OCI feature allows you to attach a single block volume to multiple instances simultaneously?
Medium68An operations team wants to ensure that a critical web application automatically scales compute capacity up during high traffic spikes and scales down when traffic subsides. Which OCI service combination provides this capability?
Easy69Which TWO actions are supported when managing OCI Block Volume backups? (Choose two.)
Hard70Your development team needs to deploy containerized applications rapidly on OCI without managing underlying compute servers or clusters. Which OCI container service fits this requirement best?
Easy71You are deploying a microservices architecture on OKE. You need to ensure that the control plane is managed by OCI to reduce management overhead. Which OKE deployment model is best?
Medium72An administrator must configure DNS resolution so that instances within a VCN can resolve custom internal domain names managed by an on-premises DNS server connected via FastConnect. Which OCI DNS feature should be used?
Hard73You need to deploy a microservice application in OCI using serverless containers that start in seconds without provisioning Kubernetes clusters or virtual machines. Which OCI service should you use?
Medium74What is the purpose of a Pre-Authenticated Request in Object Storage?
Medium75A company is running multiple web servers behind an OCI Public Load Balancer. They notice that client IP addresses are appearing in web server logs as the internal private IP address of the load balancer rather than the actual client's public IP address. How can this be resolved?
Medium76Which OCI service is used to host containerized applications and manage clusters?
Medium77You want to automate object lifecycle management in an OCI Object Storage bucket so that files older than 90 days are automatically transitioned to Archive storage. What should you configure?
Medium78When using an OCI Load Balancer, which protocol is recommended for securing traffic?
Medium79Which TWO OCI networking components are required to successfully enable private communication between two separate VCNs residing in the same OCI region? (Choose two.)
Medium80Which TWO OCI features are associated with OCI Object Storage? (Choose two.)
Easy81Which OCI storage service is best suited for storing database backups that require high durability and lowest cost without immediate file system mounting requirements?
Easy82What is the default maximum size of a single Object Storage bucket in OCI?
Easy83Which TWO OCI compute shape categories offer flexible sizing where you can independently select the number of OCPUs and memory? (Choose two.)
Easy84An application team is deploying microservices on OCI Container Engine for Kubernetes (OKE). They want to expose multiple HTTP services using a single public IP address and route traffic based on URL path routing rules. Which OCI service should they integrate with their Kubernetes Ingress controller?
Hard85An auditor is reviewing security controls for OCI Virtual Cloud Networks. Which THREE characteristics differentiate Security Lists from Network Security Groups (NSGs)? (Choose three.)
Hard86An administrator needs to configure custom DNS resolution for instances within a VCN so they can resolve hostnames pointing to an internal on-premises corporate directory server over a FastConnect link. Which OCI DNS feature should be configured?
Hard87An administrator needs to configure autoscaling for a compute instance pool so that instances scale out when CPU usage exceeds 80% and scale in when CPU usage drops below 20%. Where is this autoscaling configuration applied?
Hard88An administrator needs to attach a block volume to a compute instance. Which two attachment methods are supported by OCI Block Volume service?
Medium89An enterprise application running on OCI requires high availability across two Availability Domains within a single region. The database backend needs to be securely isolated from public internet traffic while maintaining high-speed, low-latency communication with the application servers. How should the Virtual Cloud Network (VCN) be structured?
Medium90Which THREE of the following are valid OCI File Storage Service (FSS) characteristics?
Hard91You are configuring security rules for a multi-tier application. You want to allow web servers in a specific Network Security Group (NSG) to communicate with database servers in another NSG. How should you define the rule in the database NSG?
Medium92An administrator is setting up an OCI File Storage (FSS) mount target in a specific subnet. When attempting to mount the file system from a compute instance in a different subnet within the same VCN, the mount command hangs. What must be configured to allow this connection?
Medium93Which OCI compute feature allows you to run virtual machines on dedicated physical servers allocated exclusively to your organization?
Easy94Which TWO metrics can be monitored using OCI Monitoring service for compute instances? (Choose two.)
Easy95A network engineer is configuring a Site-to-Site VPN between an on-premises data center and an OCI VCN. To ensure high availability, the setup requires multiple customer-premises equipment (CPE) public IP addresses communicating with distinct Oracle VPN tunnel endpoints on the DRG. How many default tunnels does each OCI VPN connection provision per DRG attachment?
Hard96When creating a block volume backup, where is the data stored?
Medium97Which OCI Object Storage tier is optimized for storing active data that requires fast and frequent access with lowest latency?
Easy98Which OCI Object Storage tier is recommended for storing data that is accessed infrequently, but requires rapid access when needed with lower retrieval costs than Archive?
Easy99You need to automatically increase the number of compute instances in your cluster when CPU utilization exceeds 80%. Which service should you use?
Medium100Which OCI service provides a managed Domain Name System (DNS) to manage your domain records?
Easy101An administrator has configured a Dynamic Routing Gateway (DRG) to connect an on-premises datacenter to an OCI VCN using an IPsec VPN. However, on-premises servers cannot communicate with instances in the VCN. Which VCN routing configuration is missing?
Medium102A company requires a dedicated, private connection between their on-premises data center and OCI that provides consistent bandwidth. Which service is recommended?
Hard103An application developer needs to trigger a data-processing script immediately whenever a new object is uploaded to an OCI Object Storage bucket. Which OCI service should be used to execute the script in a serverless manner?
Easy104An administrator is configuring autoscaling on an OCI Instance Pool. They notice that the autoscaling configuration is not triggering scale-out actions despite high CPU utilization. What is a likely cause?
Hard105A startup wants to run a containerized web application on OCI without managing any worker nodes or control plane infrastructure. They need automatic scaling and pay only for the compute resources their pods consume. Which OCI service should they use?
Easy106A security administrator wants to implement stateful packet filtering at the individual instance level within a VCN subnet, allowing different rules to apply to different groups of instances in the same subnet. Which OCI feature should be used?
Medium107Which TWO statements are true regarding OCI Flexible Compute shapes? (Choose two.)
Hard108An application running on an Oracle Cloud Infrastructure (OCI) compute instance needs secure, private access to Object Storage in the same region without traversing the public internet. Which architecture should you implement?
Medium109An enterprise application deployed across multiple OCI subnets requires a Layer 4 load balancer that can handle millions of packets per second with ultra-low latency and preserve client source IP addresses. Which service should you deploy?
Hard110A database administrator needs to share a multi-gigabyte Oracle Database backup file stored in an OCI Object Storage bucket with an external auditor who does not have an OCI account. How can this be achieved securely without granting IAM console access?
Medium111You are troubleshooting intermittent packet drops between two subnets in different VCNs connected via a Local Peering Gateway (LPG). Both VCNs have non-overlapping CIDR blocks. What is a common misconfiguration that could cause this issue?
Hard112Which TWO networking services or gateways in OCI can be used to route traffic from a VCN to the public internet? (Choose two.)
Easy113You need to allow your OKE cluster to access a private database. Where should the database be placed for the best security practice?
Hard114An engineer needs to deploy flexible compute instances on OCI. Which TWO parameters can be independently adjusted when configuring a flexible compute shape? (Choose two.)
Easy115Your development team needs to deploy microservices orchestrated via Kubernetes with automated worker node scaling and managed control plane upgrades. Which OCI service should you provision?
Medium116What happens to an Ephemeral Public IP when you stop a compute instance?
Hard117Which THREE storage tiers are available in OCI Object Storage? (Choose three.)
Medium118How does OCI ensure that high-availability requirements are met within a single region?
Medium119Which OCI storage service is best suited for sharing configuration files across multiple Linux virtual machine instances simultaneously?
Easy120An administrator needs to store infrequently accessed backups in OCI Object Storage that require long-term retention and can tolerate a retrieval time of up to several hours. Which storage tier is most cost-effective?
Easy121Which THREE of the following are features of OCI Load Balancer?
Hard122A database administrator must establish a high-throughput, highly reliable hybrid connection between an on-premises data center and OCI. The connection must bypass the public internet and guarantee steady throughput with SLA-backed performance. Which networking service combination meets these criteria?
Hard123Which TWO of the following are valid OCI Object Storage storage tiers? (Choose two.)
Medium124You are configuring security rules for a multi-tier application. You want to allow web servers in a specific Network Security Group (NSG) to communicate with database servers in another NSG. How should you define the ingress rule in the database NSG?
Medium125A web application deployed across multiple compute instances experiences fluctuating traffic loads throughout the day. The infrastructure needs to automatically add or remove compute instances based on CPU utilization metrics. Which OCI service combination provides this capability?
Medium126You are configuring a VCN and need to ensure that instances in a private subnet can access the internet to download updates without exposing them to incoming traffic. Which component is required?
Medium127A solutions architect needs to run a stateless web application on OCI. The application must automatically scale out when CPU utilization exceeds 70% and scale in when it drops below 30%, while minimizing operational overhead. Which OCI service should the architect use to achieve this?
Medium128You have two VCNs in the same region that need to communicate privately. Which component must be configured?
Hard129An administrator needs to route internet-bound traffic from private compute instances through a NAT Gateway. What route table configuration is required in the private subnet?
Hard130You need to migrate a legacy application to OCI that requires a specific IP address to be retained for compliance. Which OCI networking feature allows you to attach a specific public IP to an instance?
Hard131Which THREE of the following are components of an OCI Load Balancer?
Hard132Which TWO features are characteristic of OCI Network Load Balancers (NLB)? (Choose two.)
Hard133What is the container image registry service provided natively by Oracle Cloud Infrastructure for storing and sharing OCI container images?
Easy134You need to run a stateless containerized background processing job that executes periodically and terminates immediately upon completion without managing servers. Which OCI serverless service is ideal?
Easy135You need to route traffic privately from your VCN to Oracle Cloud Infrastructure Object Storage in the same region without traversing the public internet. Which components must be configured?
Hard136How do you improve the performance of a block volume attached to a compute instance?
Medium137What is the primary benefit of using OCI Container Instances?
Easy138Which OCI storage option is recommended for storing high-performance boot volumes for virtual machines?
Medium139Which TWO of the following are valid OCI compute shape types?
Medium140Which TWO of the following statements about OCI FastConnect are correct? (Choose two.)
Medium141You need to deploy a web application across multiple compute instances with automated scaling and load balancing. Which combination of OCI services provides this complete architecture?
Medium142A cloud architect needs to configure a regional subnet in a Virtual Cloud Network (VCN). Across how many availability domains can a regional subnet span?
Easy143An operations engineer needs to provision a Network File System (NFS) that can be simultaneously mounted across hundreds of OCI Compute instances for shared data processing. Which OCI storage service is best suited for this?
Easy144You need to deploy a web application on OCI that requires a flexible compute shape to adjust CPU and memory independently. Which OCI compute feature should you select?
Medium145If an instance in a public subnet cannot reach the internet, what is the first thing you should check?
Medium146An architect wants to distribute incoming client traffic evenly across a pool of backend OCI Compute web servers while terminating SSL/TLS connections at the load balancer layer. Which OCI service should be used?
Easy147Which TWO protocols or methods are supported when attaching an OCI Block Volume to a compute instance? (Choose two.)
Hard148You are managing a mission-critical database workload on an OCI Block Volume. The workload experiences extremely high and unpredictable I/O bursts, requiring the highest possible IOPS performance per volume. Which performance tier should you select?
Hard149Which TWO statements are true regarding OCI Load Balancer features? (Choose two.)
Hard150An administrator wants to restrict inbound SSH access to a specific group of database compute instances without modifying subnet-level security rules. Which OCI feature should be used to define these fine-grained VNIC rules?
Easy151Which THREE entities can be attached to an OCI Dynamic Routing Gateway (DRG) to facilitate network connectivity? (Choose three.)
Medium152What is the primary function of an OCI Internet Gateway?
Easy153Which OCI compute shape type provides dedicated physical server hardware with no hypervisor overhead, ensuring maximum performance and isolation?
Easy154Which TWO mechanisms can be used to secure data in transit within OCI networking? (Choose two.)
Hard155Which THREE of the following are characteristics of OCI Container Instances? (Choose three.)
Hard156Which THREE of the following are primary benefits of using Object Storage?
Medium157Which TWO of the following networking components are required to configure a working site-to-site IPsec VPN connection to an OCI VCN? (Choose two.)
Medium158An organization has strict compliance requirements to ensure that all data stored in OCI Object Storage buckets is encrypted using a custom encryption key managed entirely by the customer, rather than Oracle-managed keys. How can this be achieved?
Medium159An administrator wants to ensure that critical files stored in an OCI Object Storage bucket are automatically deleted after 90 days to comply with data retention policies. What feature should be used?
Easy160Which TWO of the following can be used to manage containerized workloads in OCI?
Hard161An application deployment requires traffic from an OCI Virtual Cloud Network (VCN) to securely access Oracle Autonomous Database instances in the region without traversing the public internet. Which gateway must be configured in the VCN?
Medium162Which THREE types of gateways can be attached to an OCI Virtual Cloud Network (VCN)? (Choose three.)
Medium163An organization is setting up a hybrid network architecture using OCI FastConnect with a Partner/Provider model. They need to ensure that their on-premises network can communicate with multiple VCNs across different regions using private IP addresses without traversing the public internet. Which OCI component is mandatory to achieve this?
Hard164You need to copy an existing Block Volume backup from your home region to another OCI region for disaster recovery purposes. What feature should you use?
Medium165Your application team needs to store millions of small files that are rarely accessed but must be available immediately when requested. Which storage tier is most cost-effective?
Medium166An architect is designing a highly resilient web application on OCI. Which TWO components are essential for distributing incoming HTTP/HTTPS traffic across multiple backend compute instances across different availability domains? (Choose two.)
Medium167A developer has deployed a Node.js web application on an OCI Compute instance, but external users cannot access the application on port 3000. The instance's VCN has a security list allowing TCP traffic on port 3000. What additional OS-level configuration is likely blocking the traffic?
Medium168An administrator wants to configure automated backup policies for OCI Block Volumes attached to production databases. They need a policy that takes daily backups and retains them for 30 days, as well as weekly backups retained for 1 year. How can this be accomplished?
Hard169An administrator is configuring a site-to-site VPN connection between an on-premises data center and an OCI VCN. During testing, packets are being dropped because the on-premises firewall expects a specific encryption algorithm and IPsec tunnel parameters that do not match OCI defaults. How can this be resolved?
Hard170A cloud architect needs to deploy a cloud-native application using Docker containers without managing any underlying infrastructure, servers, or Kubernetes worker nodes. Which OCI service should they select?
Easy171An enterprise application team needs to migrate an existing multi-tier application into Oracle Container Engine for Kubernetes (OKE). They need a managed Kubernetes control plane where OCI manages the master nodes while worker nodes run in their VCN. Which OKE cluster type should they create?
Medium172Which TWO methods can be used to connect an on-premises data center to an OCI Virtual Cloud Network? (Choose two.)
Hard173What is the primary purpose of an OCI Internet Gateway?
Easy174A web application hosted on OCI requires layer-7 load balancing, SSL termination, and cookie-based session persistence across multiple backend compute instances. Which OCI Load Balancer type meets these requirements?
Medium175You need to deploy a batch processing job that can tolerate sudden termination by OCI if compute capacity is reclaimed, significantly reducing your compute costs. Which instance type should you choose?
Medium176You need to allow database instances in a private subnet to communicate with Object Storage over the private network. Which service is required?
Hard177What is the primary benefit of using OCI Preemptible Instances?
Easy178Your application requires a high-performance, POSIX-compliant shared file system that can be accessed by multiple compute instances across different availability domains. Which service should you choose?
Medium179You are configuring an OCI Load Balancer. Which component defines the backend servers that receive traffic?
Medium180A company needs to register and manage public DNS records (such as A, CNAME, and TXT records) for their domain name hosted on OCI. Which OCI service should they use?
Easy181You want to host a static HTML website with images and JavaScript files entirely on OCI without provisioning any virtual machine web servers. Where should you store and serve these website files?
Medium182An enterprise customer requires a dedicated, private, high-speed connection between their on-premises datacenter and OCI, bypassing the public internet entirely while offering predictable network performance. Which OCI connectivity option meets this requirement?
Hard183You need to deploy a scalable containerized web application where Oracle manages the Kubernetes control plane and you manage the underlying compute worker nodes. Which service should you choose?
Medium184Which of the following is a benefit of OCI Bare Metal instances?
Easy185An administrator wants to run Docker containers in OCI quickly without managing Kubernetes clusters, node pools, or servers. Which OCI service is most appropriate?
Easy186An administrator is troubleshooting a VCN where instances in a private subnet cannot reach the public internet via a NAT Gateway. The NAT Gateway is attached to the VCN, and the security list allows all outbound traffic. What is the most likely cause of the failure?
Hard187A developer wants to run event-driven data processing tasks in OCI without provisioning or managing any underlying servers. The execution duration is short (under 5 minutes). Which OCI service should the developer use?
Medium188Which TWO OCI storage services provide file or object storage capabilities rather than block storage? (Choose two.)
Easy189Which TWO configuration steps are necessary when setting up private access from a VCN to OCI Object Storage using a Service Gateway? (Choose two.)
Hard190You need to create a container cluster in OCI where Oracle manages the Kubernetes control plane and you manage the worker nodes. Which service do you deploy?
Medium191An enterprise application requires private connectivity between two VCNs in different OCI regions. Which component must be used to connect them?
Hard192Which THREE OCI networking components are required to connect an on-premises data center to a VCN via an IPsec VPN? (Choose three.)
Medium193What is the primary function of an OCI NAT Gateway?
Easy194You are configuring an OCI Load Balancer and need to distribute traffic based on the URL path (e.g., /api vs /web). Which feature should you configure?
Medium195A company needs a shared file system accessible by multiple Linux compute instances simultaneously via the Network File System (NFSv3) protocol across different availability domains. Which OCI service should be deployed?
Medium196An administrator needs to create a custom DNS domain name resolution for instances within an OCI VCN so they can resolve hostnames to internal IP addresses. Which OCI DNS feature should be configured?
Easy197An administrator is managing an Oracle Container Engine for Kubernetes (OKE) cluster. They want to ensure that worker nodes are distributed across multiple failure domains or Availability Domains to prevent downtime if a single hardware rack fails. How should this be configured?
Hard198A database administrator needs to take an instantaneous, point-in-time, space-efficient copy of a large block volume without waiting for full data copying to complete. Which Block Volume feature should they use?
Hard199Which TWO of the following gateways can be attached to an OCI Virtual Cloud Network (VCN)? (Choose two.)
Medium200An administrator needs to create a private network inside a VCN that isolates database servers from the public internet. How should this be structured?
Easy201Which OCI compute shape is best suited for workloads requiring dedicated physical servers with no virtualization layer or hypervisor overhead?
Easy202An administrator needs to modify the route table of a private subnet so that all traffic destined for an on-premises data center is routed correctly. What should be the target in the route table rule?
Hard203Which TWO of the following are methods to protect data in Block Volume?
Medium204You are designing an architecture requiring a resilient, fault-tolerant entry point that distributes incoming HTTP/HTTPS traffic across multiple backend compute instances across different availability domains. Which load balancing service should you deploy?
Medium205Which OCI service allows you to run serverless code in response to events without provisioning or managing virtual servers?
Easy206You need to restrict access to a specific compute instance based on the application it is running, without affecting other instances in the same subnet. Which security feature should you use?
Medium207You need to configure an OCI Load Balancer listener to handle secure HTTPS traffic with SSL certificate termination. Where do you configure the SSL certificate?
Medium208Which OCI service enables you to run serverless functions triggered by events or HTTP requests without managing servers or runtimes?
Easy209Which TWO of the following are valid methods for deploying applications on OCI without managing underlying operating systems or virtual machine hypervisors? (Choose two.)
Medium210You are configuring security rules for an OCI Virtual Cloud Network. What is the key difference between a Security List and a Network Security Group (NSG)?
Medium211An administrator wants to ensure that OCI Compute instances in an instance pool are automatically replaced if the underlying physical hardware experiences a catastrophic failure. Which OCI feature provides this capability?
Easy212You have an application running in OCI that needs to query Oracle Autonomous Database privately. Traffic must not traverse the public internet and must use OCI's backbone network. Which service should you configure in your VCN?
Hard213You need to ensure that Object Storage data is automatically moved to Archive Storage after 90 days to save costs. How can you achieve this?
Hard214Which OCI service is highly recommended for storing large amounts of unstructured data such as images and backups?
EasyOther domains
All 1Z0-1085-26 exam domains
Frequently asked questions
- What does the Core Oci Services domain cover on the 1Z0-1085-26 exam?
- Be able to choose the right OCI networking and security component for a given scenario, and configure routing correctly. The single most important thing: know which gateway or security construct applies, since most questions hinge on that distinction.
- How many questions are in this domain?
- This page lists all 214 Core Oci Services questions in the 1Z0-1085-26 question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
- What is the best way to practise this domain?
- Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
- Can I practise only Core Oci Services questions?
- Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.