1Z0-1085-25 Sample Questions & Answers
Explores compute, networking and storage services at their core, nearly half the content, plus OCI regions and availability domains, the shared security model and identity management, and pricing structures with cost management tools.
Launch the full 1Z0-1085-25 simulator →Showing 8 of 17 free samples.
- Question 1Advanced
Security Services · Identity and Access Management
A developer needs to automate the provisioning of OCI resources using Terraform. They want to authenticate the Terraform provider without embedding a user's private key or password in the script, and the script will run from an existing OCI Compute instance. What is the most secure method to achieve this?
Show answer & explanation
Correct answer: C
Instance Principals allow instances to be authorized actors (principals) to perform actions on service resources. By placing the instance in a Dynamic Group and writing a policy for that group, the instance can authenticate without storing static credentials, eliminating the risk of key leakage.
- Question 2Intermediate
Core OCI Services · Compute Services
You are migrating a legacy application to OCI. The application requires a specific older version of the operating system that is not available in the standard Oracle images. You have created a custom image of the VM on your on-premises virtualization platform. Which OCI service feature facilitates bringing this image into the cloud?
Show answer & explanation
Correct answer: D
OCI allows you to import custom images from Object Storage. You can upload your QCOW2 or VMDK file to an Object Storage bucket and then use the Compute service to import it as a Custom Image, which can then be used to launch instances.
- Question 3IntermediateSelect 2
Core OCI Services · Networking Services
A customer is setting up a Virtual Cloud Network (VCN) with a CIDR block of 10.0.0.0/16. They need to create a subnet for web servers that will receive traffic directly from the internet. Which two components are MANDATORY for this specific subnet configuration to work as intended? (Select TWO)
Show answer & explanation
Correct answers: A, D
Even with an Internet Gateway attached, the subnet needs a Route Table with a rule explicitly directing traffic destined for the internet (0.0.0.0/0) to the Internet Gateway.
graph LR Subnet[Public Subnet] -->|Route 0.0.0.0/0| RT[Route Table] RT --> IGW[Internet Gateway] IGW --> Internet((Internet))An Internet Gateway is required to provide a path for network traffic between the VCN and the internet. Without it, no resource in the VCN can be reached from the outside world.
- Question 4Beginner
Core OCI Services · Database Services
Your organization requires a database solution for an analytics workload that involves analyzing massive amounts of data from IoT sensors. The workload is unpredictable, and you want to minimize administration tasks like patching, tuning, and scaling. Which OCI Database service is the optimal choice?
Show answer & explanation
Correct answer: C
Autonomous Data Warehouse is specifically optimized for analytics workloads (Columnar format, data summarization). Being 'Autonomous', it self-patches, self-tunes, and supports auto-scaling, meeting the requirement to minimize administration.
- Question 5Beginner
Security Services · Security Services
What is the primary purpose of OCI Cloud Guard?
Show answer & explanation
Correct answer: B
Cloud Guard monitors the tenancy for security weakness (like public buckets or insecure policies) and risky user activities. It provides a dashboard for security posture and can automatically remediate issues using Responders.
- Question 6Beginner
Governance and Administration · Cost Management
You have a budget set for your development compartment. You want to ensure that the team is notified when their spending reaches 80% of the allocated budget. Which OCI feature should you configure?
Show answer & explanation
Correct answer: A
Budget Alert Rules are specifically designed to trigger notifications (via email) when actual or forecasted spending hits a defined percentage threshold of the budget.
- Question 7Beginner
Security Services · Shared Security Model
True or False: In the OCI Shared Security Model, the customer is responsible for physical security of the data center facilities.
Show answer & explanation
Correct answer: B
False. Oracle is solely responsible for the physical security of the data centers (servers, storage, networking hardware). The customer is responsible for security 'in' the cloud (data, IAM, OS patching in IaaS).
- Question 8Intermediate
Core OCI Services · Storage Services
A media company stores petabytes of raw video footage in OCI Object Storage. This footage is rarely accessed after the first 30 days but must be retained for 5 years for legal reasons. To minimize costs, which storage tier should they use for the long-term retention?
Show answer & explanation
Correct answer: D
Archive Storage is the lowest cost tier, designed for data that is rarely accessed and has long retention requirements. It has a retrieval time of hours, which fits the 'retained for legal reasons' scenario.
Ready for the real thing?
The full 1Z0-1085-25 simulator has every exam-style question, timed mode, and instant scoring.