OCI Foundations Practice Exam (1Z0-1085) questions and answers latest top score.

OCI Foundations Practice Exam (1Z0-1085) questions and answers latest top score. What does compute instance vertical scaling mean? - correct answer. Changing to large or smaller shape - New shape must have the same hardware architecture Which resource do you manage in IaaS? - correct answer. Middleware Operation System Runtime Data Apps A company has developed a payroll app in OCI. What should they do to ensure the app has highest level of availability and resilience? - correct answer. Deploy across multiple ADs and Regions Which OCI capability can be used to protect against power failures within an AD? - correct answer. Fault Domains Which statement is NOT true for OCI compartments? Resources and compartments can be added and deleted anytime Compartments cannot be nested Each OCI resource belongs to a single compartment Resources can be moved from one compartment to another - correct answer. Compartments cannot be nested Which OCI service would you use to distribute incoming traffic between a set of web servers? - correct answer. Public Load Balancer Which DB service offering provides the best performance for running OLTP workloads in OCI? - correct answer. Exadata Compute instance always gets what kind of IP address - correct answer. Private IP address What purpose does OCI Dynamic Routing Gateway serve? - correct answer. Enables Oracle Compute instance to connect to on-prem env. You have an app that requires a shared file system. Which service would you choose? - correct answer. File Storage Which statement is correct regarding OCI Compute service? You can attach a max of 1 public IP to each compute instance Can launch either VMs or BMs When you stop a compute instance, all data on the boot volume is lost You cannot attach a block volume to a compute instance - correct answer. Can launch either VMs or BMs How is total network throughput allocated to a VM instance? - correct answer. Network bandwidth is proportional to the # of OCPUs in the instance shape You want to leverage a managed RAC offering in OCI. Which managed DB service would you choose? - correct answer. VM DB System Which security service is offered by OCI? - correct answer. Key Management Which OCI storage service does not provide encryption of data-at-rest? - correct answer. Local NVMe What is Oracle's responsibility according to the OCI shared security model? - correct answer. Security of data-center facilities Which 2 situations incur costs within OCI? Data ingress from internet Data egress to the internet Transferring data from 1 instance to another within the same AD Transferring data from 1 instance to another across ADs in a region Transferring data across Regions - correct answer. (1) data egress to the internet (2) transferring data across regions Which SLA types are not offered by OCI compute service? - correct answer. Service Plane You run 4 OCI VM's on OCI Dedicated Virtual Host. How will deployment be billed? - correct answer. Dedicated VM host & the BV of each instance will be billed Which OCI Compute shape does NOT incur instance billing in a stopped state? - correct answer. Standard Which 2 security capabilities are offered by OCI? - Always On Data Encryption for data at rest - Managed Active Directory service - Key Management Service - Certificate Management Service - Compute - correct answer. Always On Data Encryption for data at rest Key Management Service A platform has been re-deployed to a microservices based architecture using Docker containers for deployment. Which service can you use to deploy containers on OCI? - API Gateway - Streaming Service - File Storage Service - Container Engine for Kubernetes - correct answer. Container Engine for Kubernetes A new customer has logged into OCI as an administrator for the first time. The admin would like to deploy infrastructure into a region other than their home region. - Use API endpoints to create resources in the desired region. - Navigate to the desired region and begin creating resources. - Subscribe to the desired region. - File 1 SR for access to such additional regions. - correct answer. Subscribe to the desired region. Which is NOT required to register and log support request in MOS? - Your account password - Your resource OCID (Oracle Cloud Identifier) - your Customer Support Identifier(CSI) -Your Tenancy OCID (Oracle CLoud Identifier) - correct answer. account password Budgets can be set on which two options? - Variables - Regions - Cost-Tracking Tags - Compartments - correct answer. - Cost-Tracking Tags - Compartments Which kind of scaling is supported by virtual machine in OCI? - Only scaling up or down - Only scaling out - Scaling up or down, and scaling in or out. - Only Scaling In - correct answer. Scaling up or down, and scaling in or out. Which is a key benefit of using OCI Autonomous Data Warehouse? - Maintain root level access to the underlying operating systems. - Apply database patches as they become available. - No username and password needed. - Scale both CPU and Storage without downtime. - correct answer. Scale both CPU and Storage without downtime. You have mission critical application which requires to be globally available at all time. Which deployment strategy should you adopt? - Use multiple fault domain in any availability domain with multiple regions. - Use multiple fault domains in one regions - Use multiple fault domains in each availability domain in each region - Use multiple availability domains in one Region - correct answer. Use multiple fault domain in any availability domain with multiple regions Explanation: Availability domains are isolated from each other, fault tolerant, and very unlikely to fail simultaneously. Because availability domains do not share infrastructure such as power or cooling, or the internal availability domain network, a failure at one availability domain within a region is unlikely to impact the availability of the others within the same region. fault domain is a grouping of hardware and infrastructure within an availability domain. Each availability domain contains three fault domains. Fault domains provide anti-affinity: they let you distribute your instances so that the instances are not on the same physical hardware within a single availability domain. A hardware failure or Compute hardware maintenance event that affects one fault domain does not affect instances in other fault domains. In addition, the physical hardware in a fault domain has independent and redundant power supplies, which prevents a failure in the power supply hardware within one fault domain from affecting other fault domains. According to standard security model which 2 are a customer's responsibilities in OCI? - Physical Security of OCI data center facilities - Object Storage Data Security - Virtual Machine Hypervisor - Customer Data - Local data persistence - correct answer. Customer Data & Object Storage Data Security Which 3 services integrate with OCI Key Management? - File Storage - Auto Scaling - Identity and Access Management - Object Storage - Block Volume - Functions - correct answer. - File Storage - Object Storage - Block Volume Explanation: DATA ENCRYPTIONProtect customer data at-rest and in-transit in a way that allows customers to meet their security and compliance requirements for cryptographic algorithms and key management The Oracle Cloud Infrastructure Block Volume service always encrypts all block volumes, boot volumes, and volume backups at rest by using the Advanced Encryption Standard (AES) algorithm with 256-bit encryption. By default all volumes and their backups are encrypted using the Oracle-provided encryption keys. Each time a volume is cloned or restored from a backup the volume is assigned a new unique encryption key. The File Storage service encrypts all file system and snapshot data at rest. By default all file systems are encrypted using Oracle-managed encryption keys. You have the option to encrypt all of your file systems using the keys that you own and manage using the Vault service. Object Storage employs 256-bit Advanced Encryption Standard (AES-256) to encrypt object data on the server. Each object is encrypted with its own data encryption key. Data encryption keys are always encrypted with a master encryption key that is assigned to the bucket. Encryption is enabled by default and cannot be turned off. By default, Oracle manages the master encryption key. Which OCI service allows you to run code without provisioning any underlying infrastructure resources (such as virtual machines) ? - Compute Service - Storage Gateway - Oracle Container Engine for Kubernetes - Oracle Function - correct answer. - Oracle Function Explanation Oracle Functions is a fully managed, multi-tenant, highly scalable, on-demand, Functions-as- a-Service platform. It is built on enterprise-grade Oracle Cloud Infrastructure and powered by the Fn Project open source engine. Use Oracle Functions (sometimes abbreviated to just Functions) when you want to focus on writing code to meet business needs. The serverless and elastic architecture of Oracle Functions means there's no infrastructure administration or software administration for you to perform. You don't provision or maintain compute instances, and operating system software patches and upgrades are applied automatically. Which 2 OCI resources can be used to group/categorize expenses? - Tags - Users - Policies - Compartments - Groups - correct answer. - Tags - Compartments Which statement about OCI shared security model is true? - You are responsible for managing security control within the physical OCI network. - You are not responsible for any aspect of security in OCI. - You are responsible for securing all data that you place in OCI - You are responsible for securing the hypervisor within OCI Compute Service. - correct answer. You are responsible for securing all data that you place in OCI Which 3 components are part of OCI Identity And Access Management service ? Regional Subnets Rules Users Policies Dynamic Groups Compute Instance Virtual Cloud Networks - correct answer. Users Policies Dynamic Groups What characteristics are defined in an OCI Compute shape? - Number of vCPU, amount of LAN bandwidth. - Public or private visibility of the Compute Instance - Number of OCPU, amount of LAN bandwidth - Availability Domains and Fault Domains locations - correct answer. - Number of OCPU, amount of LAN bandwidth What does compute instance horizontal scaling means? - Backing Up Data to Object Storage - Adding additional compute instance - Cloning compute instance VMs - Stopping/Starting the instance - correct answer. - Adding additional compute instance Cloud __________ Scaling refers to adding more CPU or memory to an existing server, or replacing one server with a more powerful server. Cloud __________ Scaling refers to provisioning additional servers to meet your needs, often splitting workloads between servers to limit the number of requests any individual server is getting. In a cloud-based environment, this would mean adding additional instances instead of moving to a larger instance size. - correct answer. 1. VERTICAL scaling 2. HORIZONTAL scaling