1Z0-1085-26 Core Oci Services Practice Question
You are configuring security rules for a multi-tier application. You want to allow web servers in a specific Network Security Group (NSG) to communicate with database servers in another NSG. How should you define the ingress rule in the database NSG?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Specify the web server Network Security Group as the source
OCI NSGs allow you to reference another NSG as the source in security rules, enabling tight access control between tiers without managing IP addresses.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Configure a Dynamic Routing Gateway rule
Why it's wrong here
DRG is for external or cross-VCN networking.
- ✗
Use an Internet Gateway source identifier
Why it's wrong here
Internet Gateway represents internet traffic, not internal tier communication.
- ✓
Specify the web server Network Security Group as the source
Why this is correct
Reference the web server NSG as the source for precise tier-to-tier security rules.
- ✗
Specify the CIDR block of the entire VCN as the source
Why it's wrong here
Using the VCN CIDR is too broad and violates security best practices.
About these practice questions
Courseiva writes every 1Z0-1085-26 question from scratch — 378 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Oracle exam blueprint
This 1Z0-1085-26 practice question is part of Courseiva's free Oracle certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 1Z0-1085-26 exam.