How many Troubleshooting Scenario Questions questions are on this page?

This page has 5 Troubleshooting Scenario Questions scenario questions for the 1Z0-1085-26 exam, each with detailed explanations and wrong-answer analysis.

How should I approach 1Z0-1085-26 scenario questions?

Read the full scenario before looking at the answer options. Identify the constraint or requirement in the scenario, then eliminate options that are generally true but wrong for this specific case. Scenario questions reward careful reading over pattern matching.

← Back to Oracle Cloud Infrastructure Foundations 2026 Associate (1Z0-1085-26) (1Z0-1085-26) questions

Scenario-based practice

Troubleshooting Scenario Questions

Practise Oracle Cloud Infrastructure Foundations 2026 Associate (1Z0-1085-26) (1Z0-1085-26) practice questions — original exam-style scenarios covering every exam domain, with detailed explanations, wrong-answer analysis, and common exam traps.

Start full practice test Read exam guide

scenario questions

1Z0-1085-26

exam code

Oracle

vendor

Scenario guide

How to approach troubleshooting scenario questions

These questions describe a network symptom and ask you to identify the root cause or the correct fix. They appear across all certification exams and reward systematic thinking over memorisation. The best candidates follow a consistent troubleshooting framework even under time pressure.

Quick answer

Troubleshooting Scenario Questions questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Practice scenarios

Question 1hardmultiple choice

Review the full subnetting walkthrough →

An enterprise has two VCNs in the same OCI region. VCN-A needs to communicate with VCN-B. The VCN CIDR blocks do not overlap. The administrator configures a Local Peering Gateway (LPG) on VCN-A and another on VCN-B, and establishes the peer connection. However, instances in VCN-A still cannot reach instances in VCN-B. What additional step is required?

A
Modify the default Security List to allow inbound traffic from the same VCN CIDR.
Why wrong: Security lists control packet inspection, but without route rules, packets will never reach the LPG.
B
Attach an Internet Gateway to both VCNs to route traffic between them.
Why wrong: Internet Gateways route traffic to the public internet, not across private local peering connections.
C
Create a Dynamic Routing Gateway (DRG) and attach both VCNs to it.
Why wrong: Local peering can be done directly via LPGs without a DRG if they are in the same region.
D
Add route rules in the respective subnet route tables pointing the peer VCN's CIDR block to the LPG target.
Route table rules are mandatory for directing traffic into the Local Peering Gateway.

Full breakdown with real-world context →

Question 2hardmultiple choice

Review the full subnetting walkthrough →

You are troubleshooting intermittent packet drops between two subnets in different VCNs connected via a Local Peering Gateway (LPG). Both VCNs have non-overlapping CIDR blocks. What is a common misconfiguration that could cause this issue?

A
Using security lists instead of Network Security Groups
Why wrong: Both security lists and NSGs can be configured correctly; security mechanism type doesn't prevent routing if properly configured.
B
Missing route table entries directing traffic to the Local Peering Gateway in both VCNs
Without route table entries pointing to the LPG, traffic cannot find its way across the peering connection.
C
Attaching an Internet Gateway to the peering connection
Why wrong: Internet Gateways are not required for local VCN peering.
D
Enabling Flow Logs on the subnets
Why wrong: Flow logs record traffic metadata and do not drop packets.

Full breakdown with real-world context →

Question 3hardmultiple choice

Read the full VPN explanation →

You are troubleshooting a connectivity issue where an on-premises server cannot reach an OCI compute instance over an IPsec VPN tunnel. The security list and NSG rules are verified as correct. What is another common OCI networking configuration that must be checked?

A
Confirm that the subnet has a Service Gateway attached
Why wrong: Service Gateways are for regional Oracle services, not on-premises VPN.
B
Check that the compute instance has a public IP address assigned
Why wrong: Private compute instances communicate over VPN using private IP addresses.
C
Verify that an Internet Gateway is attached to the VCN
Why wrong: IPsec VPN traffic does not use Internet Gateways.
D
Ensure the VCN route table has a rule pointing on-premises CIDR to the DRG
Without a route table entry pointing to the DRG, return or outbound packets cannot traverse the VPN.

Full breakdown with real-world context →

Question 4hardmultiple choice

Read the full NAT/PAT explanation →

An administrator is troubleshooting a VCN where instances in a private subnet cannot reach the public internet via a NAT Gateway. The NAT Gateway is attached to the VCN, and the security list allows all outbound traffic. What is the most likely cause of the failure?

A
The subnet route table lacks a route rule with destination 0.0.0.0/0 pointing to the NAT Gateway.
Without a route table entry pointing to the NAT Gateway, outbound traffic will not be routed to it.
B
The NAT Gateway requires an incoming security list rule from 0.0.0.0/0.
Why wrong: NAT Gateways do not require inbound security list rules for outbound traffic to function.
C
The local OS firewall on the NAT Gateway is blocking packets.
Why wrong: OCI gateways are fully managed cloud services; users do not manage their OS firewalls.
D
The VCN lacks an Internet Gateway attached to the public subnets.
Why wrong: NAT Gateways operate independently of Internet Gateways for outbound private subnet traffic.

Full breakdown with real-world context →

Question 5mediummultiple choice

Review the full subnetting walkthrough →

If an instance in a public subnet cannot reach the internet, what is the first thing you should check?

A
Security List ingress rules
Why wrong: Ingress rules don't affect outbound internet connectivity.
B
Route table rules
Route tables determine if traffic is directed to the IGW.
C
Instance CPU usage
Why wrong: CPU usage doesn't block network routing.
D
Object Storage policy
Why wrong: Storage policies don't affect network routing.

Full breakdown with real-world context →

These 1Z0-1085-26 practice questions are part of Courseiva's free Oracle certification practice question bank. Courseiva provides original exam-style 1Z0-1085-26 questions with detailed explanations, topic-based practice, mock exams, readiness tracking, and study analytics.

Troubleshooting Scenario Questions

How to approach troubleshooting scenario questions

Quick answer

Related 1Z0-1085-26 topic practice pages

Getting Started With Oci practice questions

Core Oci Services practice questions

Governance And Administration practice questions

Security Services practice questions

1Z0-1085-26 fundamentals practice questions

1Z0-1085-26 scenario practice questions

1Z0-1085-26 troubleshooting practice questions

Practice scenarios

You are troubleshooting intermittent packet drops between two subnets in different VCNs connected via a Local Peering Gateway (LPG). Both VCNs have non-overlapping CIDR blocks. What is a common misconfiguration that could cause this issue?

You are troubleshooting a connectivity issue where an on-premises server cannot reach an OCI compute instance over an IPsec VPN tunnel. The security list and NSG rules are verified as correct. What is another common OCI networking configuration that must be checked?

An administrator is troubleshooting a VCN where instances in a private subnet cannot reach the public internet via a NAT Gateway. The NAT Gateway is attached to the VCN, and the security list allows all outbound traffic. What is the most likely cause of the failure?

If an instance in a public subnet cannot reach the internet, what is the first thing you should check?