1Z0-1085-24 Online Practice Questions and Answers

Correct Answer: B

Network Security Groups (NSGs) act as virtual firewalls in OCI, controlling inbound and outbound traffic for specific resources within a VCN. You can define rules based on IPs, ports, and protocols.

Correct Answer: C

OCI Dedicated Region provides a fully managed Oracle Cloud Infrastructure region in a customer's data center, allowing them to meet regulatory compliance while running cloud services on-premises.

Correct Answer: B

Cryptographic operations for a Vault Master Encryption Key protected by an HSM are performed directly on the HSM. The HSM is a specialized hardware device designed to securely generate, store, and perform cryptographic operations, ensuring the confidentiality and integrity of the encryption keys.

Correct Answer: B

Using prepaid credits for any eligible cloud service is a feature of the Universal Credits pricing model in Oracle Cloud Infrastructure. Customers can allocate their prepaid credits to various services based on their needs and usage.

Correct Answer: D

In OCI, users and groups must be explicitly granted access to resources through IAM policies. If access is not granted in a policy, it is denied by default, ensuring controlled access.

Correct Answer: DE

Customer and Oracle's responsibilities can be divided into the following areas: Physical Security: Oracle is responsible for protecting the global infrastructure that runs all of the services offered in Oracle Cloud Infrastructure. This infrastructure consists of the hardware, software, networking, and facilities that run Oracle Cloud Infrastructure services. Identity and Access Management (IAM): As with all Oracle cloud services, you should protect your cloud access credentials and set up individual user accounts. You are responsible for managing and reviewing access for your own employee accounts and for all activities that occur under your tenancy. Oracle is responsible for providing effective IAM services such as identity management, authentication, authorization, and auditing. Workload Security: You are responsible for protecting and securing the operating system and application layers of your compute instances from attacks and compromises. This protection includes patching applications and operating systems, operating system configuration, and protection against malware and network attacks. Oracle is responsible for providing secure images that are hardened and have the latest patches. Also, Oracle makes it simple for you to bring the same third-party security solutions that you use today. Data Classification and Compliance: You are responsible for correctly classifying and labeling your data and meeting any compliance obligations. Also, you are responsible for auditing your solutions to ensure that they meet your compliance obligations. Host Infrastructure Security: You are responsible for securely configuring and managing your compute (virtual hosts, containers), storage (object, local storage, block volumes), and platform (database configuration) services. Oracle has a shared responsibility with you to ensure that the service is optimally configured and secured. This responsibility includes hypervisor security and the configuration of the permissions and network access controls required to ensure that hosts can communicate correctly and that devices are able to attach or mount the correct storage devices. Network Security: You are responsible for securely configuring network elements such as virtual networking, load balancing, DNS, and gateways. Oracle is responsible for providing a secure network infrastructure. Client and Endpoint Protection: Your enterprise uses various hardware and software systems, such as mobile devices and browsers, to access your cloud resources. You are responsible for securing all clients and endpoints that you allow to access Oracle Cloud Infrastructure services.

Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Security/Concepts/security_overview.htm

Correct Answer: AE

A fault domain is a grouping of hardware and infrastructure within an availability domain. Each availability domain contains three fault domains. Fault domains provide anti-affinity: they let you distribute your instances so that the instances are not on the same physical hardware within a single availability domain. A hardware failure or Compute hardware maintenance event that affects one fault domain does not affect instances in other fault domains. In addition, the physical hardware in a fault domain has independent and redundant power supplies, which prevents a failure in the power supply hardware within one fault domain from affecting other fault domains. To control the placement of your compute instances, bare metal DB system instances, or virtual machine DB system instances, you can optionally specify the fault domain for a new instance or instance pool at launch time. If you don't specify the fault domain, the system selects one for you. Oracle Cloud Infrastructure makes a best-effort anti-affinity placement across different fault domains, while optimizing for available capacity in the availability domain. To change the fault domain for an instance, terminate it and launch a new instance in the preferred fault domain. Use fault domains to do the following things: Protect against unexpected hardware failures or power supply failures. Protect against planned outages because of Compute hardware maintenance. We can use fault domains to do the following things: 1) Protect against unexpected hardware failures or power supply failures. 2) Protect against planned outages because of Compute hardware maintenance

Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/General/Concepts/regions.htm

Correct Answer: B

When creating a compartment, you must provide a name for it (maximum 100 characters, including letters, numbers, periods, hyphens, and underscores) that is unique within its parent compartment. You must also provide a description,

which is a non-unique, changeable description for the compartment, from 1 through 400 characters. Oracle will also assign the compartment a unique ID called an Oracle Cloud ID.

You can create subcompartments in compartments to create hierarchies that are six levels deep.

Reference:

https://docs.cloud.oracle.com/en-us/iaas/Content/Identity/Tasks/managingcompartments.htm When you first start working with Oracle Cloud Infrastructure, you need to think carefully about how you want to use compartments to organize and

isolate your cloud resources. Compartments are fundamental to that process. Most resources can be moved between compartments. However, it's important to think through your compartment design for your organization up front, before

implementing anything. For more information, see Setting Up Your Tenancy. The Console is designed to display your resources by compartment within the current region. When you work with your resources in the Console, you must choose

which compartment to work in from a list on the page. That list is filtered to show only the compartments in the tenancy that you have permission to access. If you're an administrator, you'll have permission to view all compartments and work

with any compartment's resources, but if you're a user with limited access, you probably won't. Compartments are tenancy-wide, across regions. When you create a compartment, it is available in every region that your tenancy is subscribed

to. You can get a cross-region view of your resources in a specific compartment with the compartment explorer. See Viewing All Resources in a Compartment. You can create subcompartments in compartments to create hierarchies that are

six levels deep.

Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Identity/Tasks/managingcompartments.htm

Correct Answer: A

The Oracle Cloud Infrastructure Domain Name System (DNS) service lets you create and manage your DNS zones. You can create zones, add records to zones, and allow Oracle Cloud Infrastructure's edge network to handle your domain's DNS queries.

Reference: https://www.oracle.com/a/ocom/docs/cloud/edge-services-100.pdf

Correct Answer: B

A shape is a template that determines the number of CPUs, amount of memory, and other resources that are allocated to an instance. Standard shapes don't incur costs in a STOPPED state.

Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Compute/References/computeshapes.htm#baremetalshapes__bm-standard