Question 1

In Oracle Cloud Infrastructure (OCI), what is the significance of regions and availability domains in designing a resilient cloud infrastructure?

Accepted Answer

D

Explanation: Oracle Cloud Infrastructure (OCI) is architected around geographically isolated regions. Each region is a separate geographic area that operates independently and is completely isolated from other regions. This intentional isolation is a core design principle for achieving high availability and fault tolerance. By deploying applications across multiple regions, an organization can design a disaster recovery strategy that protects against large-scale, region-wide events, thereby enhancing global resilience and ensuring service continuity.

Question 2

Which type of load balancing policy is supported by Oracle Cloud Infrastructure Load Balancer?

Accepted Answer

B

Explanation: The Oracle Cloud Infrastructure (OCI) Load Balancer service supports three load balancing policies: IP Hash, Least Connections, and Round Robin. The Round Robin policy implementation in OCI allows an administrator to assign a numerical weight (from 1 to 100) to each backend server. This configuration directs a proportional amount of traffic to each server based on its assigned weight, which is the definition of a Weighted Round Robin policy. This feature is crucial for balancing loads across backend servers with varying capacities.

Question 3

What is the first step a new customer should take after signing up for Oracle Cloud Infrastructure (OCI) to ensure their account and resources are secure?

Accepted Answer

A

Explanation: The most critical first step after gaining access to a new Oracle Cloud Infrastructure (OCI) tenancy is to secure the administrative access itself. The initial user has extensive permissions, and protecting this account is paramount. Enabling Multi-Factor Authentication (MFA) adds a vital second layer of security, ensuring that even if a password is compromised, unauthorized access is prevented. This foundational action secures the primary control plane of the tenancy before any resources are provisioned or configurations are made, aligning with security best practices for cloud environments.

Question 4

In order to enhance network security and control traffic to and from Oracle Cloud Infrastructure (OCI)
resources, which OCI service allows the definition of rules to allow or deny traffic based on source and
destination IP addresses, port numbers, and protocols?

Accepted Answer

A, C

Explanation: Both OCI Network Security Groups (NSGs) and Security Lists are virtual firewall services used to control network traffic. They both utilize stateful ingress and egress rules to filter traffic based on source/destination IP addresses (in CIDR notation), port numbers, and IP protocols. A Security List applies its rules to all Virtual Network Interface Cards (VNICs) within a specific subnet. In contrast, an NSG applies its rules to a group of VNICs that you choose, which can span multiple subnets, allowing for more granular, application-centric security policies. Since both services meet the criteria described in the question, both are correct.

Question 5

A software development company is looking to implement a disaster recovery (DR) solution for their
critical application using Oracle Cloud Infrastructure (OCI). Their primary objectives are to minimize data
loss and ensure rapid recovery in the event of a regional outage. The application is currently hosted in
the US East (Ashburn) region. Which of the following strategies best aligns with their objectives?

Accepted Answer

D

Explanation: The primary objective is to create a disaster recovery (DR) solution capable of withstanding a regional outage. The only strategy that accomplishes this is replicating data to a geographically separate OCI region. If the primary US East (Ashburn) region fails, the application and its data can be brought online in the secondary region. OCI's cross-region asynchronous replication services for Block Volumes, Object Storage, and databases are specifically designed for this DR scenario, helping to minimize data loss (RPO) and support rapid recovery (RTO) by enabling a failover to the unaffected region.

Question 6

Under the Oracle Cloud Infrastructure (OCI) Shared Security Model, which two responsibilities are primarily the customer's to manage and ensure compliance with security best practices? Select two.

Accepted Answer

B, C

Explanation: Under the Oracle Cloud Infrastructure (OCI) Shared Security Responsibility Model, security is a partnership between Oracle and the customer. Oracle is responsible for the security of the cloud, which includes the physical data centers, hardware, and the core hypervisor. The customer is responsible for security in the cloud. This encompasses managing who has access to their cloud resources through Identity and Access Management (IAM) policies and securing the applications they build and deploy on OCI, including patching, configuration, and access controls at the application layer.

Question 7

Which of the following best describes the role of "Committed Use Discounts" within the Oracle Cloud Infrastructure (OCI) Pricing Model for governance and administration?

Accepted Answer

D

Explanation: Committed Use Discounts, within the Oracle Universal Credits model, are a core component of OCI's pricing strategy for financial governance. This model allows customers to commit to a minimum monthly spend on OCI services over a fixed term (typically one to three years). In return for this commitment, Oracle provides a significant discount on the standard pay-as-you-go rates. This enables organizations to achieve predictable billing and lower costs for stable, long-term workloads, which is a key aspect of effective cloud financial administration and governance.

Question 8

An international news organization is planning to use Oracle Cloud Infrastructure (OCI) to host its digital
archives. The archives will be accessed by journalists, researchers, and content creators from various
global locations. Given the sensitive nature of some archived materials, the organization needs to
implement an IAM strategy that ensures only authorized personnel can access specific archives based
on their clearance level, role, and the geographic origin of the access request. Which OCI IAM feature
would best meet these multifaceted access requirements?

Accepted Answer

A

Explanation: OCI IAM Policies are the fundamental mechanism for defining and enforcing granular access control. A policy is a document that specifies who can access which OCI resources and how. The policy syntax allows for the creation of multifaceted rules by defining a subject (who, e.g., a group representing a role or clearance level), a resource (what, e.g., archives in a specific compartment), and conditions. The where clause in a policy statement is critical for this scenario, as it can enforce rules based on the request's context, such as the source IP address (to control by geographic origin) or tags on resources (to control by clearance level).

Question 9

Which feature does the Oracle Cloud Infrastructure Compute service leverage for ensuring high availability of applications?

Accepted Answer

A

Explanation: Fault Domains are a fundamental building block for high availability within Oracle Cloud Infrastructure (OCI). An Availability Domain is divided into three independent Fault Domains, each representing a distinct grouping of hardware and infrastructure (e.g., power, cooling, networking). By distributing application resources, such as Compute instances, across multiple Fault Domains, you ensure that a localized hardware failure or maintenance event in one domain does not impact the resources in the others. This architectural design is a core feature leveraged by the OCI Compute service to enable customers to build and deploy highly available applications.

Question 10

You are configuring storage solutions in Oracle Cloud Infrastructure (OCI) for a variety of use cases. Which of the following is not a storage option offered by OCI?

Accepted Answer

D

Explanation: Oracle Cloud Infrastructure (OCI) provides several distinct storage services. These include Block Volume for persistent, high-performance block storage attached to compute instances; Object Storage for durable, scalable storage of unstructured data; and File Storage for a shared, network file system. The term "Distributed Database Storage" does not represent a specific, standalone storage service offered by OCI. While OCI database services like Exadata Cloud Service utilize a distributed storage architecture internally, it is an integral part of the database service itself, not a separate storage option that customers provision independently.

Question 11

What is a key advantage of using virtual nodes in an Oracle Container Engine for Kubernetes cluster?

Accepted Answer

C

Explanation: Virtual nodes in Oracle Container Engine for Kubernetes (OKE) provide a serverless Kubernetes experience. They abstract the underlying compute infrastructure by running pods on Oracle Cloud Infrastructure (OCI) Container Instances. This eliminates the need for users to provision, manage, scale, or upgrade worker node infrastructure (the data plane). The primary advantage is a significant reduction in operational overhead, as Oracle manages the lifecycle of the nodes on which the pods are scheduled, allowing teams to focus solely on their applications.

Question 12

An international e-commerce company is deploying its application on Oracle Cloud Infrastructure (OCI)
and needs to ensure PCI DSS compliance for handling credit card information. The deployment must
securely process, store, and transmit credit card data, provide detailed access control, and maintain
comprehensive audit trails. Which OCI configuration should the company use to meet these stringent
security and compliance requirements?

Accepted Answer

C

Explanation: This configuration provides a comprehensive, multi-layered security architecture that directly addresses the core requirements of the Payment Card Industry Data Security Standard (PCI DSS). OCI Vault is crucial for managing encryption keys, satisfying PCI DSS Requirement 3 for protecting stored cardholder data. Identity and Access Management (IAM) policies fulfill Requirement 7 by enforcing the principle of least privilege for access control. The Audit service provides immutable logs of all API calls, which is essential for meeting Requirement 10 on tracking and monitoring access. Finally, the Web Application Firewall (WAF) helps satisfy Requirement 6.6 by protecting the web application from common exploits and securing data in transit.

Question 13

Which Oracle Cloud Infrastructure (OCI) Database service option allows for the deployment of Oracle
databases in a fully managed, multi-tenant architecture, providing cost efficiency and the ability to easily
scale compute and storage resources?

Accepted Answer

D

Explanation: Oracle Autonomous Database is a fully managed database service that automates patching, tuning, and backups without human intervention. It is built on a multi-tenant architecture in its Serverless deployment option, running on shared Exadata infrastructure, which provides significant cost-efficiency. A core feature of Autonomous Database is its elasticity, allowing for the independent and online scaling of compute (OCPUs) and storage resources to match workload demands without any downtime. This combination of being fully managed, multi-tenant, cost-effective, and easily scalable directly addresses all aspects of the question.

Question 14

In Oracle Cloud Infrastructure (OCI), which database service option is optimized for running high-
performance, mission-critical Oracle Database applications and provides automated backups, scaling,
and patching in a dedicated environment?

Accepted Answer

B

Explanation: Oracle Exadata Cloud Service is an engineered system delivered as a cloud service, specifically designed to run mission-critical Oracle Database workloads. It provides a dedicated infrastructure environment with pre-configured hardware and software optimized for extreme performance and high availability. The service integrates cloud automation for essential database lifecycle management tasks, including backups, scaling of compute resources (CPU), and patching. This combination of a dedicated, high-performance platform with cloud automation makes it the ideal choice for the requirements stated in the question.

Question 15

In the context of enhancing an organization's security posture within Oracle Cloud Infrastructure (OCI),
which two of the following services specifically address security and compliance needs? Select two.

Accepted Answer

B, D

Explanation: Oracle Data Safe is a unified control center specifically designed for managing the security posture of Oracle Databases. It provides features for assessing security configurations, evaluating user risks, auditing user activity, and discovering and protecting sensitive data, which directly addresses security and compliance requirements. OCI Key Management (KMS) is a core security service that provides centralized management of encryption keys. Controlling the lifecycle of keys is a fundamental aspect of data protection strategies and is essential for meeting various compliance mandates (e.g., PCI DSS, HIPAA) that require data-at-rest and in-transit encryption.

Free Oracle 1Z0-1085-25 Actual Exam Questions