Courseiva

1Z0-1085-26 · domain

Core Oci Services

This domain covers the core Oracle Cloud Infrastructure services you must configure and reason about: networking (VCNs, subnets, gateways, peering, FastConnect), compute instances, block and object storage, and identity-based access control. Questions are scenario-driven, asking you to pick the correct service, gateway type, or security construct for a stated requirement.

214 questions61 easy88 medium65 hard

Focused practice

Practice Core Oci Services questions

Scored sessions drawing only from this domain — pick a length below.

Start 20-question practice test →

What this domain covers

What to know about Core Oci Services

Be able to choose the right OCI networking and security component for a given scenario, and configure routing correctly. The single most important thing: know which gateway or security construct applies, since most questions hinge on that distinction.

Selecting Network Security Groups versus security lists to scope rules to specific VNICs or instances

Identifying attachable VCN gateways: Internet, NAT, Service, Dynamic Routing, Local Peering, Remote Peering

Designing FastConnect Partner/Provider connectivity to reach multiple VCNs across regions

Diagnosing LPG misconfigurations such as missing route table entries or asymmetric security rules

Watch out for

Common Core Oci Services exam traps

  • ▸Assuming security lists can target a single instance; they apply at the subnet level, so Network Security Groups are needed for per-instance control.
  • ▸Confusing NAT Gateway (outbound-only) with Internet Gateway, or forgetting Service Gateway for OCI services without public traffic.
  • ▸Overlooking that Local Peering Gateway connections require matching route rules on both VCNs and non-overlapping CIDRs.

Question index

All Core Oci Services questions (214)

Click any question to see the full explanation, or start a practice session above.

1

Which THREE of the following features are supported by OCI Network Load Balancer (NLB)? (Choose three.)

Hard
2

An administrator needs to create a point-in-time, read-only copy of a Block Volume data disk for backup and disaster recovery purposes. What OCI feature should be created?

Easy
3

Which THREE of the following are properties of a VCN?

Medium
4

Your organization wants to store compliance audit logs for 7 years at the absolute lowest storage cost, acknowledging that data retrieval may take several hours. Which OCI Object Storage tier should you use?

Easy
5

Which TWO OCI services are used to build and manage containerized applications? (Choose two.)

Easy
6

You are designing a high-throughput, fault-tolerant web application tier. You need to distribute incoming HTTP/HTTPS traffic across multiple compute instances across different availability domains within a region. Which service should you deploy?

Medium
7

Which TWO of the following are OCI storage services?

Medium
8

What is the primary function of a Dynamic Routing Gateway (DRG) in OCI?

Easy
9

What is the primary purpose of an OCI Service Gateway?

Easy
10

A company needs to store petabytes of data that is rarely accessed but must be retained for compliance for 7 years. Retrievals can take up to several hours. Which storage tier should they use?

Easy
11

Which THREE features are provided by OCI Object Storage buckets? (Choose three.)

Medium
12

Which TWO statements are true regarding Oracle Cloud Infrastructure (OCI) Compute Flexible Shapes?

Medium
13

A company is deploying a multi-tier application on OCI. The web tier runs on compute instances in a public subnet, and the database tier runs on compute instances in a private subnet. The security team requires that database instances be accessible only from the web tier on port 1521, and that the database instances have no direct internet access. Which TWO OCI features should be configured to meet these requirements? (Choose two.)

Hard
14

Which THREE statements are accurate regarding OCI Object Storage capabilities and architecture? (Choose three.)

Hard
15

Your application running on OCI compute instances requires a shared POSIX-compliant file system that can be mounted simultaneously by hundreds of compute instances across multiple availability domains. Which OCI storage service should you select?

Medium
16

A security engineer is designing a zero-trust architecture for a microservices environment in OCI. Traffic between compute instances in different subnets must be restricted based on individual workload roles rather than entire subnet CIDR blocks. Which OCI networking feature should be implemented?

Hard
17

You need to allow traffic from an on-premises site to a VCN using a VPN. What component is required in the VCN to act as the endpoint?

Hard
18

Which TWO of the following are types of OCI VCN subnets?

Medium
19

Which of the following is a capability of the OCI Block Volume service?

Medium
20

A cloud architect needs to provision an Oracle Cloud Infrastructure (OCI) Compute instance with a custom number of OCPUs and memory for a memory-intensive application. Which shape type should the architect select?

Easy
21

An application requires a block volume with guaranteed high performance and low latency for heavy database operations. Which OCI Block Volume performance tier should you select?

Hard
22

What is the term used in OCI to describe a software-defined version of a traditional physical network, including subnets, route tables, and gateways?

Easy
23

You are configuring an OCI Load Balancer and want to ensure high availability by distributing traffic across backend servers in different availability domains within a region. Which type of load balancer should you deploy?

Medium
24

You need to ensure that database block volumes are automatically backed up every day with a retention policy of 30 days across multiple regions. What OCI feature should you use?

Hard
25

An administrator needs to temporarily grant read access to a specific file in an OCI Object Storage bucket to a colleague without managing IAM user credentials. What feature should be used?

Easy
26

An administrator needs to ensure that data in an OCI Object Storage bucket is automatically transitioned from Standard storage to Infrequent Access storage after 30 days, and then deleted after 365 days. Which Object Storage feature should be used?

Easy
27

A research team runs a long-running simulation on an OCI Compute instance in the Frankfurt region. They need a shared, POSIX-compliant file system that can be mounted by multiple Linux instances simultaneously and that can automatically scale capacity up to 8 EB without provisioning. Which OCI service should they use?

Medium
28

A company wants to store backup data in OCI Object Storage. The data is infrequently accessed but must be retrievable within milliseconds when needed. The company wants to minimize storage costs while meeting the retrieval requirement. Which Object Storage tier should they use?

Easy
29

Which OCI service allows you to back up your on-premises data to the cloud for long-term storage?

Easy
30

Which THREE of the following statements are true regarding OCI Block Volume backups and performance? (Choose three.)

Hard
31

You are configuring security lists for a subnet hosting web servers. You want to allow incoming HTTP traffic on port 80 from any IP address on the internet. How should you configure the ingress rule?

Medium
32

You need to connect an on-premises data center to an OCI Virtual Cloud Network with dedicated, high-bandwidth, and predictable network performance that bypasses the public internet entirely. Which OCI networking service should you implement?

Medium
33

A DevOps engineer needs to store application configuration files and secrets for a containerized application running on OCI. The secrets must be retrievable by the application at runtime without hardcoding them in the container image. The solution must support versioning and auditing of secret access. Which OCI service should the engineer use?

Medium
34

An administrator needs to create a flexible OCI compute virtual machine instance. Which parameters are required when selecting a flexible compute shape?

Medium
35

Which TWO statements accurately describe OCI Block Volume backups?

Medium
36

What is the primary purpose of an OCI Internet Gateway when attached to a Virtual Cloud Network (VCN)?

Easy
37

Which TWO statements are true regarding OCI File Storage Service (FSS)? (Choose two.)

Hard
38

You are troubleshooting a connectivity issue where an on-premises server cannot reach an OCI compute instance over an IPsec VPN tunnel. The security list and NSG rules are verified as correct. What is another common OCI networking configuration that must be checked?

Hard
39

A company is running a batch processing workload on OCI and wants to optimize compute costs by using spare capacity. The workload can tolerate sudden termination if OCI reclaims the capacity. Which compute instance type should be deployed?

Medium
40

A web application experiencing fluctuating traffic needs a compute solution that automatically scales out the number of virtual machine instances based on CPU utilization. Which combination of OCI services should be configured?

Easy
41

You need to back up an on-premises database directly to OCI Object Storage using a dedicated, high-speed connection that does not use the public internet. Which networking service should you use?

Medium
42

Which TWO core OCI services provide compute capabilities? (Choose two.)

Easy
43

An OCI tenant requires a dedicated, high-speed, private network connection from their on-premises data center to OCI that bypasses the public internet entirely. Which OCI service should be provisioned?

Easy
44

Which THREE configuration items are specified when creating an OCI Virtual Cloud Network (VCN)? (Choose three.)

Medium
45

An enterprise has two VCNs in the same OCI region. VCN-A needs to communicate with VCN-B. The VCN CIDR blocks do not overlap. The administrator configures a Local Peering Gateway (LPG) on VCN-A and another on VCN-B, and establishes the peer connection. However, instances in VCN-A still cannot reach instances in VCN-B. What additional step is required?

Hard
46

A company needs to store unstructured data such as log files, images, and backups in OCI for long-term retention at the lowest possible cost, and data retrieval times of several hours are acceptable. Which OCI Object Storage tier should be chosen?

Easy
47

Which THREE of the following statements regarding OCI Virtual Cloud Network (VCN) Security Lists and Network Security Groups (NSGs) are correct? (Choose three.)

Hard
48

Which OCI service is best suited for running serverless code functions that trigger based on events or HTTP requests?

Easy
49

You are configuring an Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN) and need to ensure that compute instances in a private subnet can initiate outbound internet connections to download software patches without allowing unsolicited inbound traffic from the internet. Which gateway must you attach to the VCN?

Hard
50

A financial services company needs to run a high-performance computing (HPC) workload on OCI that requires extremely low latency and high bandwidth between compute instances. They want to minimize network overhead and jitter. Which OCI feature should they enable?

Hard
51

An organization requires a highly available IPsec VPN connection from their on-premises data center to an OCI VCN. To ensure high availability, what is the recommended architecture for the Dynamic Routing Gateway (DRG) and customer premise equipment (CPE)?

Hard
52

What is the default behavior of a Security List in OCI?

Medium
53

An application deployed on OCI Compute instances requires custom DNS records that resolve only within a specific VCN and are not exposed to the public internet. Which OCI DNS feature should you configure?

Hard
54

An application running in an OCI VCN needs to access OCI Object Storage and Oracle Autonomous Database privately. Both services must be accessed without traffic leaving Oracle's network backbone and without using public IPs. Which combination of OCI gateway features accomplishes this?

Hard
55

Which THREE storage performance tiers are available for OCI Block Volumes? (Choose three.)

Medium
56

You need to ensure that database block volumes are automatically backed up daily with a retention policy of 30 days and cross-region replication. What OCI feature should you use?

Hard
57

Which TWO of the following features are provided by OCI DNS? (Choose two.)

Medium
58

To ensure high availability for your web application, you should deploy your instances across:

Medium
59

An architect is provisioning a high-performance compute cluster that requires direct, unvirtualized access to physical hardware components, including raw local NVMe SSDs and high core counts, without hypervisor overhead. Which compute shape category must be chosen?

Hard
60

Which OCI Object Storage feature allows you to grant temporary, time-bound read or write access to a specific bucket or object without sharing user credentials?

Easy
61

Which THREE actions can be performed using OCI Object Storage features? (Choose three.)

Medium
62

A media company stores millions of video files in an OCI Object Storage bucket. The compliance team requires that all objects be encrypted with a customer-managed key stored in OCI Vault, and that the encryption key be rotated automatically every 90 days. Which OCI feature should the administrator configure to meet these requirements?

Medium
63

You are configuring an OCI Network Load Balancer (NLB) for a high-performance database cluster. Why would you choose NLB over a regional Layer 7 Load Balancer?

Medium
64

A database administrator needs to deploy a highly available Oracle Database on OCI. The database must automatically fail over to a standby database in another Availability Domain within the same region in case of a primary failure, with minimal data loss. Which OCI service should be used?

Hard
65

An application running on OCI Compute instances requires shared file storage that can be mounted concurrently across hundreds of Linux instances via the standard NFS protocol. Which OCI storage service is best suited?

Hard
66

Which THREE of the following actions can be performed using OCI File Storage Service (FSS)? (Choose three.)

Hard
67

Which OCI feature allows you to attach a single block volume to multiple instances simultaneously?

Medium
68

An operations team wants to ensure that a critical web application automatically scales compute capacity up during high traffic spikes and scales down when traffic subsides. Which OCI service combination provides this capability?

Easy
69

Which TWO actions are supported when managing OCI Block Volume backups? (Choose two.)

Hard
70

Your development team needs to deploy containerized applications rapidly on OCI without managing underlying compute servers or clusters. Which OCI container service fits this requirement best?

Easy
71

You are deploying a microservices architecture on OKE. You need to ensure that the control plane is managed by OCI to reduce management overhead. Which OKE deployment model is best?

Medium
72

An administrator must configure DNS resolution so that instances within a VCN can resolve custom internal domain names managed by an on-premises DNS server connected via FastConnect. Which OCI DNS feature should be used?

Hard
73

You need to deploy a microservice application in OCI using serverless containers that start in seconds without provisioning Kubernetes clusters or virtual machines. Which OCI service should you use?

Medium
74

What is the purpose of a Pre-Authenticated Request in Object Storage?

Medium
75

A company is running multiple web servers behind an OCI Public Load Balancer. They notice that client IP addresses are appearing in web server logs as the internal private IP address of the load balancer rather than the actual client's public IP address. How can this be resolved?

Medium
76

Which OCI service is used to host containerized applications and manage clusters?

Medium
77

You want to automate object lifecycle management in an OCI Object Storage bucket so that files older than 90 days are automatically transitioned to Archive storage. What should you configure?

Medium
78

When using an OCI Load Balancer, which protocol is recommended for securing traffic?

Medium
79

Which TWO OCI networking components are required to successfully enable private communication between two separate VCNs residing in the same OCI region? (Choose two.)

Medium
80

Which TWO OCI features are associated with OCI Object Storage? (Choose two.)

Easy
81

Which OCI storage service is best suited for storing database backups that require high durability and lowest cost without immediate file system mounting requirements?

Easy
82

What is the default maximum size of a single Object Storage bucket in OCI?

Easy
83

Which TWO OCI compute shape categories offer flexible sizing where you can independently select the number of OCPUs and memory? (Choose two.)

Easy
84

An application team is deploying microservices on OCI Container Engine for Kubernetes (OKE). They want to expose multiple HTTP services using a single public IP address and route traffic based on URL path routing rules. Which OCI service should they integrate with their Kubernetes Ingress controller?

Hard
85

An auditor is reviewing security controls for OCI Virtual Cloud Networks. Which THREE characteristics differentiate Security Lists from Network Security Groups (NSGs)? (Choose three.)

Hard
86

An administrator needs to configure custom DNS resolution for instances within a VCN so they can resolve hostnames pointing to an internal on-premises corporate directory server over a FastConnect link. Which OCI DNS feature should be configured?

Hard
87

An administrator needs to configure autoscaling for a compute instance pool so that instances scale out when CPU usage exceeds 80% and scale in when CPU usage drops below 20%. Where is this autoscaling configuration applied?

Hard
88

An administrator needs to attach a block volume to a compute instance. Which two attachment methods are supported by OCI Block Volume service?

Medium
89

An enterprise application running on OCI requires high availability across two Availability Domains within a single region. The database backend needs to be securely isolated from public internet traffic while maintaining high-speed, low-latency communication with the application servers. How should the Virtual Cloud Network (VCN) be structured?

Medium
90

Which THREE of the following are valid OCI File Storage Service (FSS) characteristics?

Hard
91

You are configuring security rules for a multi-tier application. You want to allow web servers in a specific Network Security Group (NSG) to communicate with database servers in another NSG. How should you define the rule in the database NSG?

Medium
92

An administrator is setting up an OCI File Storage (FSS) mount target in a specific subnet. When attempting to mount the file system from a compute instance in a different subnet within the same VCN, the mount command hangs. What must be configured to allow this connection?

Medium
93

Which OCI compute feature allows you to run virtual machines on dedicated physical servers allocated exclusively to your organization?

Easy
94

Which TWO metrics can be monitored using OCI Monitoring service for compute instances? (Choose two.)

Easy
95

A network engineer is configuring a Site-to-Site VPN between an on-premises data center and an OCI VCN. To ensure high availability, the setup requires multiple customer-premises equipment (CPE) public IP addresses communicating with distinct Oracle VPN tunnel endpoints on the DRG. How many default tunnels does each OCI VPN connection provision per DRG attachment?

Hard
96

When creating a block volume backup, where is the data stored?

Medium
97

Which OCI Object Storage tier is optimized for storing active data that requires fast and frequent access with lowest latency?

Easy
98

Which OCI Object Storage tier is recommended for storing data that is accessed infrequently, but requires rapid access when needed with lower retrieval costs than Archive?

Easy
99

You need to automatically increase the number of compute instances in your cluster when CPU utilization exceeds 80%. Which service should you use?

Medium
100

Which OCI service provides a managed Domain Name System (DNS) to manage your domain records?

Easy
101

An administrator has configured a Dynamic Routing Gateway (DRG) to connect an on-premises datacenter to an OCI VCN using an IPsec VPN. However, on-premises servers cannot communicate with instances in the VCN. Which VCN routing configuration is missing?

Medium
102

A company requires a dedicated, private connection between their on-premises data center and OCI that provides consistent bandwidth. Which service is recommended?

Hard
103

An application developer needs to trigger a data-processing script immediately whenever a new object is uploaded to an OCI Object Storage bucket. Which OCI service should be used to execute the script in a serverless manner?

Easy
104

An administrator is configuring autoscaling on an OCI Instance Pool. They notice that the autoscaling configuration is not triggering scale-out actions despite high CPU utilization. What is a likely cause?

Hard
105

A startup wants to run a containerized web application on OCI without managing any worker nodes or control plane infrastructure. They need automatic scaling and pay only for the compute resources their pods consume. Which OCI service should they use?

Easy
106

A security administrator wants to implement stateful packet filtering at the individual instance level within a VCN subnet, allowing different rules to apply to different groups of instances in the same subnet. Which OCI feature should be used?

Medium
107

Which TWO statements are true regarding OCI Flexible Compute shapes? (Choose two.)

Hard
108

An application running on an Oracle Cloud Infrastructure (OCI) compute instance needs secure, private access to Object Storage in the same region without traversing the public internet. Which architecture should you implement?

Medium
109

An enterprise application deployed across multiple OCI subnets requires a Layer 4 load balancer that can handle millions of packets per second with ultra-low latency and preserve client source IP addresses. Which service should you deploy?

Hard
110

A database administrator needs to share a multi-gigabyte Oracle Database backup file stored in an OCI Object Storage bucket with an external auditor who does not have an OCI account. How can this be achieved securely without granting IAM console access?

Medium
111

You are troubleshooting intermittent packet drops between two subnets in different VCNs connected via a Local Peering Gateway (LPG). Both VCNs have non-overlapping CIDR blocks. What is a common misconfiguration that could cause this issue?

Hard
112

Which TWO networking services or gateways in OCI can be used to route traffic from a VCN to the public internet? (Choose two.)

Easy
113

You need to allow your OKE cluster to access a private database. Where should the database be placed for the best security practice?

Hard
114

An engineer needs to deploy flexible compute instances on OCI. Which TWO parameters can be independently adjusted when configuring a flexible compute shape? (Choose two.)

Easy
115

Your development team needs to deploy microservices orchestrated via Kubernetes with automated worker node scaling and managed control plane upgrades. Which OCI service should you provision?

Medium
116

What happens to an Ephemeral Public IP when you stop a compute instance?

Hard
117

Which THREE storage tiers are available in OCI Object Storage? (Choose three.)

Medium
118

How does OCI ensure that high-availability requirements are met within a single region?

Medium
119

Which OCI storage service is best suited for sharing configuration files across multiple Linux virtual machine instances simultaneously?

Easy
120

An administrator needs to store infrequently accessed backups in OCI Object Storage that require long-term retention and can tolerate a retrieval time of up to several hours. Which storage tier is most cost-effective?

Easy
121

Which THREE of the following are features of OCI Load Balancer?

Hard
122

A database administrator must establish a high-throughput, highly reliable hybrid connection between an on-premises data center and OCI. The connection must bypass the public internet and guarantee steady throughput with SLA-backed performance. Which networking service combination meets these criteria?

Hard
123

Which TWO of the following are valid OCI Object Storage storage tiers? (Choose two.)

Medium
124

You are configuring security rules for a multi-tier application. You want to allow web servers in a specific Network Security Group (NSG) to communicate with database servers in another NSG. How should you define the ingress rule in the database NSG?

Medium
125

A web application deployed across multiple compute instances experiences fluctuating traffic loads throughout the day. The infrastructure needs to automatically add or remove compute instances based on CPU utilization metrics. Which OCI service combination provides this capability?

Medium
126

You are configuring a VCN and need to ensure that instances in a private subnet can access the internet to download updates without exposing them to incoming traffic. Which component is required?

Medium
127

A solutions architect needs to run a stateless web application on OCI. The application must automatically scale out when CPU utilization exceeds 70% and scale in when it drops below 30%, while minimizing operational overhead. Which OCI service should the architect use to achieve this?

Medium
128

You have two VCNs in the same region that need to communicate privately. Which component must be configured?

Hard
129

An administrator needs to route internet-bound traffic from private compute instances through a NAT Gateway. What route table configuration is required in the private subnet?

Hard
130

You need to migrate a legacy application to OCI that requires a specific IP address to be retained for compliance. Which OCI networking feature allows you to attach a specific public IP to an instance?

Hard
131

Which THREE of the following are components of an OCI Load Balancer?

Hard
132

Which TWO features are characteristic of OCI Network Load Balancers (NLB)? (Choose two.)

Hard
133

What is the container image registry service provided natively by Oracle Cloud Infrastructure for storing and sharing OCI container images?

Easy
134

You need to run a stateless containerized background processing job that executes periodically and terminates immediately upon completion without managing servers. Which OCI serverless service is ideal?

Easy
135

You need to route traffic privately from your VCN to Oracle Cloud Infrastructure Object Storage in the same region without traversing the public internet. Which components must be configured?

Hard
136

How do you improve the performance of a block volume attached to a compute instance?

Medium
137

What is the primary benefit of using OCI Container Instances?

Easy
138

Which OCI storage option is recommended for storing high-performance boot volumes for virtual machines?

Medium
139

Which TWO of the following are valid OCI compute shape types?

Medium
140

Which TWO of the following statements about OCI FastConnect are correct? (Choose two.)

Medium
141

You need to deploy a web application across multiple compute instances with automated scaling and load balancing. Which combination of OCI services provides this complete architecture?

Medium
142

A cloud architect needs to configure a regional subnet in a Virtual Cloud Network (VCN). Across how many availability domains can a regional subnet span?

Easy
143

An operations engineer needs to provision a Network File System (NFS) that can be simultaneously mounted across hundreds of OCI Compute instances for shared data processing. Which OCI storage service is best suited for this?

Easy
144

You need to deploy a web application on OCI that requires a flexible compute shape to adjust CPU and memory independently. Which OCI compute feature should you select?

Medium
145

If an instance in a public subnet cannot reach the internet, what is the first thing you should check?

Medium
146

An architect wants to distribute incoming client traffic evenly across a pool of backend OCI Compute web servers while terminating SSL/TLS connections at the load balancer layer. Which OCI service should be used?

Easy
147

Which TWO protocols or methods are supported when attaching an OCI Block Volume to a compute instance? (Choose two.)

Hard
148

You are managing a mission-critical database workload on an OCI Block Volume. The workload experiences extremely high and unpredictable I/O bursts, requiring the highest possible IOPS performance per volume. Which performance tier should you select?

Hard
149

Which TWO statements are true regarding OCI Load Balancer features? (Choose two.)

Hard
150

An administrator wants to restrict inbound SSH access to a specific group of database compute instances without modifying subnet-level security rules. Which OCI feature should be used to define these fine-grained VNIC rules?

Easy
151

Which THREE entities can be attached to an OCI Dynamic Routing Gateway (DRG) to facilitate network connectivity? (Choose three.)

Medium
152

What is the primary function of an OCI Internet Gateway?

Easy
153

Which OCI compute shape type provides dedicated physical server hardware with no hypervisor overhead, ensuring maximum performance and isolation?

Easy
154

Which TWO mechanisms can be used to secure data in transit within OCI networking? (Choose two.)

Hard
155

Which THREE of the following are characteristics of OCI Container Instances? (Choose three.)

Hard
156

Which THREE of the following are primary benefits of using Object Storage?

Medium
157

Which TWO of the following networking components are required to configure a working site-to-site IPsec VPN connection to an OCI VCN? (Choose two.)

Medium
158

An organization has strict compliance requirements to ensure that all data stored in OCI Object Storage buckets is encrypted using a custom encryption key managed entirely by the customer, rather than Oracle-managed keys. How can this be achieved?

Medium
159

An administrator wants to ensure that critical files stored in an OCI Object Storage bucket are automatically deleted after 90 days to comply with data retention policies. What feature should be used?

Easy
160

Which TWO of the following can be used to manage containerized workloads in OCI?

Hard
161

An application deployment requires traffic from an OCI Virtual Cloud Network (VCN) to securely access Oracle Autonomous Database instances in the region without traversing the public internet. Which gateway must be configured in the VCN?

Medium
162

Which THREE types of gateways can be attached to an OCI Virtual Cloud Network (VCN)? (Choose three.)

Medium
163

An organization is setting up a hybrid network architecture using OCI FastConnect with a Partner/Provider model. They need to ensure that their on-premises network can communicate with multiple VCNs across different regions using private IP addresses without traversing the public internet. Which OCI component is mandatory to achieve this?

Hard
164

You need to copy an existing Block Volume backup from your home region to another OCI region for disaster recovery purposes. What feature should you use?

Medium
165

Your application team needs to store millions of small files that are rarely accessed but must be available immediately when requested. Which storage tier is most cost-effective?

Medium
166

An architect is designing a highly resilient web application on OCI. Which TWO components are essential for distributing incoming HTTP/HTTPS traffic across multiple backend compute instances across different availability domains? (Choose two.)

Medium
167

A developer has deployed a Node.js web application on an OCI Compute instance, but external users cannot access the application on port 3000. The instance's VCN has a security list allowing TCP traffic on port 3000. What additional OS-level configuration is likely blocking the traffic?

Medium
168

An administrator wants to configure automated backup policies for OCI Block Volumes attached to production databases. They need a policy that takes daily backups and retains them for 30 days, as well as weekly backups retained for 1 year. How can this be accomplished?

Hard
169

An administrator is configuring a site-to-site VPN connection between an on-premises data center and an OCI VCN. During testing, packets are being dropped because the on-premises firewall expects a specific encryption algorithm and IPsec tunnel parameters that do not match OCI defaults. How can this be resolved?

Hard
170

A cloud architect needs to deploy a cloud-native application using Docker containers without managing any underlying infrastructure, servers, or Kubernetes worker nodes. Which OCI service should they select?

Easy
171

An enterprise application team needs to migrate an existing multi-tier application into Oracle Container Engine for Kubernetes (OKE). They need a managed Kubernetes control plane where OCI manages the master nodes while worker nodes run in their VCN. Which OKE cluster type should they create?

Medium
172

Which TWO methods can be used to connect an on-premises data center to an OCI Virtual Cloud Network? (Choose two.)

Hard
173

What is the primary purpose of an OCI Internet Gateway?

Easy
174

A web application hosted on OCI requires layer-7 load balancing, SSL termination, and cookie-based session persistence across multiple backend compute instances. Which OCI Load Balancer type meets these requirements?

Medium
175

You need to deploy a batch processing job that can tolerate sudden termination by OCI if compute capacity is reclaimed, significantly reducing your compute costs. Which instance type should you choose?

Medium
176

You need to allow database instances in a private subnet to communicate with Object Storage over the private network. Which service is required?

Hard
177

What is the primary benefit of using OCI Preemptible Instances?

Easy
178

Your application requires a high-performance, POSIX-compliant shared file system that can be accessed by multiple compute instances across different availability domains. Which service should you choose?

Medium
179

You are configuring an OCI Load Balancer. Which component defines the backend servers that receive traffic?

Medium
180

A company needs to register and manage public DNS records (such as A, CNAME, and TXT records) for their domain name hosted on OCI. Which OCI service should they use?

Easy
181

You want to host a static HTML website with images and JavaScript files entirely on OCI without provisioning any virtual machine web servers. Where should you store and serve these website files?

Medium
182

An enterprise customer requires a dedicated, private, high-speed connection between their on-premises datacenter and OCI, bypassing the public internet entirely while offering predictable network performance. Which OCI connectivity option meets this requirement?

Hard
183

You need to deploy a scalable containerized web application where Oracle manages the Kubernetes control plane and you manage the underlying compute worker nodes. Which service should you choose?

Medium
184

Which of the following is a benefit of OCI Bare Metal instances?

Easy
185

An administrator wants to run Docker containers in OCI quickly without managing Kubernetes clusters, node pools, or servers. Which OCI service is most appropriate?

Easy
186

An administrator is troubleshooting a VCN where instances in a private subnet cannot reach the public internet via a NAT Gateway. The NAT Gateway is attached to the VCN, and the security list allows all outbound traffic. What is the most likely cause of the failure?

Hard
187

A developer wants to run event-driven data processing tasks in OCI without provisioning or managing any underlying servers. The execution duration is short (under 5 minutes). Which OCI service should the developer use?

Medium
188

Which TWO OCI storage services provide file or object storage capabilities rather than block storage? (Choose two.)

Easy
189

Which TWO configuration steps are necessary when setting up private access from a VCN to OCI Object Storage using a Service Gateway? (Choose two.)

Hard
190

You need to create a container cluster in OCI where Oracle manages the Kubernetes control plane and you manage the worker nodes. Which service do you deploy?

Medium
191

An enterprise application requires private connectivity between two VCNs in different OCI regions. Which component must be used to connect them?

Hard
192

Which THREE OCI networking components are required to connect an on-premises data center to a VCN via an IPsec VPN? (Choose three.)

Medium
193

What is the primary function of an OCI NAT Gateway?

Easy
194

You are configuring an OCI Load Balancer and need to distribute traffic based on the URL path (e.g., /api vs /web). Which feature should you configure?

Medium
195

A company needs a shared file system accessible by multiple Linux compute instances simultaneously via the Network File System (NFSv3) protocol across different availability domains. Which OCI service should be deployed?

Medium
196

An administrator needs to create a custom DNS domain name resolution for instances within an OCI VCN so they can resolve hostnames to internal IP addresses. Which OCI DNS feature should be configured?

Easy
197

An administrator is managing an Oracle Container Engine for Kubernetes (OKE) cluster. They want to ensure that worker nodes are distributed across multiple failure domains or Availability Domains to prevent downtime if a single hardware rack fails. How should this be configured?

Hard
198

A database administrator needs to take an instantaneous, point-in-time, space-efficient copy of a large block volume without waiting for full data copying to complete. Which Block Volume feature should they use?

Hard
199

Which TWO of the following gateways can be attached to an OCI Virtual Cloud Network (VCN)? (Choose two.)

Medium
200

An administrator needs to create a private network inside a VCN that isolates database servers from the public internet. How should this be structured?

Easy
201

Which OCI compute shape is best suited for workloads requiring dedicated physical servers with no virtualization layer or hypervisor overhead?

Easy
202

An administrator needs to modify the route table of a private subnet so that all traffic destined for an on-premises data center is routed correctly. What should be the target in the route table rule?

Hard
203

Which TWO of the following are methods to protect data in Block Volume?

Medium
204

You are designing an architecture requiring a resilient, fault-tolerant entry point that distributes incoming HTTP/HTTPS traffic across multiple backend compute instances across different availability domains. Which load balancing service should you deploy?

Medium
205

Which OCI service allows you to run serverless code in response to events without provisioning or managing virtual servers?

Easy
206

You need to restrict access to a specific compute instance based on the application it is running, without affecting other instances in the same subnet. Which security feature should you use?

Medium
207

You need to configure an OCI Load Balancer listener to handle secure HTTPS traffic with SSL certificate termination. Where do you configure the SSL certificate?

Medium
208

Which OCI service enables you to run serverless functions triggered by events or HTTP requests without managing servers or runtimes?

Easy
209

Which TWO of the following are valid methods for deploying applications on OCI without managing underlying operating systems or virtual machine hypervisors? (Choose two.)

Medium
210

You are configuring security rules for an OCI Virtual Cloud Network. What is the key difference between a Security List and a Network Security Group (NSG)?

Medium
211

An administrator wants to ensure that OCI Compute instances in an instance pool are automatically replaced if the underlying physical hardware experiences a catastrophic failure. Which OCI feature provides this capability?

Easy
212

You have an application running in OCI that needs to query Oracle Autonomous Database privately. Traffic must not traverse the public internet and must use OCI's backbone network. Which service should you configure in your VCN?

Hard
213

You need to ensure that Object Storage data is automatically moved to Archive Storage after 90 days to save costs. How can you achieve this?

Hard
214

Which OCI service is highly recommended for storing large amounts of unstructured data such as images and backups?

Easy

Frequently asked questions

What does the Core Oci Services domain cover on the 1Z0-1085-26 exam?
Be able to choose the right OCI networking and security component for a given scenario, and configure routing correctly. The single most important thing: know which gateway or security construct applies, since most questions hinge on that distinction.
How many questions are in this domain?
This page lists all 214 Core Oci Services questions in the 1Z0-1085-26 question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
What is the best way to practise this domain?
Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
Can I practise only Core Oci Services questions?
Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.
Oracle Cloud Infrastructure Foundations 2026 Associate (1Z0-1085-26) (1Z0-1085-26) Core Oci Services Practice Questions