Oracle Oracle Certifications 1Z0-1085-24 Questions & Answers

• Question 121:

  Which is NOT a component of an Identity and Access Management (IAM) policy statement in Oracle Cloud Infrastructure?

  A. Location

  B. Resource-type

  C. Action Verb

  D. Data backup frequency

  Correct Answer: D

  IAM policies define access control by specifying who can access which resources and what actions they can perform. Data backup frequency is not a component of IAM policy statements.

• Question 122:

  Which Oracle Cloud Infrastructure service is responsible for securely storing and managing encryption keys and secrets?

  A. Cloud Guard

  B. Security Zones

  C. Security Advisor

  D. Vault

  Correct Answer: D

  Vault is the Oracle Cloud Infrastructure service responsible for securely storing and managing encryption keys and secrets. It provides a centralized and secure location for managing sensitive information such as encryption keys, passwords, and API keys.

• Question 123:

  In Oracle Cloud Infrastructure, what does the Universal Credits pricing model allow customers to do?

  A. Pay only for services they use with no upfront commitment

  B. Use prepaid credits for any eligible cloud service

  C. Receive a fixed amount of resources for a specific price

  D. Pay a fixed price for all services

  Correct Answer: B

  Using prepaid credits for any eligible cloud service is a feature of the Universal Credits pricing model in Oracle Cloud Infrastructure. Customers can allocate their prepaid credits to various services based on their needs and usage.

• Question 124:

  Which feature is NOT provided by Oracle Cloud Infrastructure Security Zones?

  A. Restricting resource creation based on predefined security policies

  B. Automatically enforcing security best practices

  C. Storing and managing encryption keys and secrets

  D. Continuous monitoring of security posture

  Correct Answer: C

  Storing and managing encryption keys and secrets is not a feature provided by Oracle Cloud Infrastructure Security Zones. This functionality is typically handled by other services such as Oracle Key Management Service (KMS) or Vault.

• Question 125:

  In Oracle Cloud Infrastructure Object Storage Service, which storage tier is designed for rarely accessed data that can be restored within hours?

  A. One Zone-Infrequent Access

  B. Archive Storage

  C. Intelligent Tiering

  D. Standard Storage

  Correct Answer: B

  Archive Storage in Oracle Cloud Infrastructure Object Storage Service is designed for rarely accessed data that can be restored within hours. It is the most cost-effective storage tier for long-term data retention and archiving purposes.

• Question 126:

  What is the primary function of a Route Table in the Oracle Cloud Infrastructure Networking service?

  A. To provide a private connection between a VCN and an on-premises network

  B. To connect a VCN to the public Internet

  C. To define rules to route traffic from subnets to destinations outside the VCN

  D. To define rules controlling traffic flow between subnets

  Correct Answer: C

  The primary function of a Route Table is to define routing rules for traffic leaving the Virtual Cloud Network (VCN) subnet. It specifies which gateway or service should be used to route traffic to external destinations.

• Question 127:

  Where are cryptographic operations performed for a Vault Master Encryption Key protected by a Hardware Security Module (HSM)?

  A. On the client

  B. On the HSM

  C. On the cloud

  D. On the server

  Correct Answer: B

  Cryptographic operations for a Vault Master Encryption Key protected by an HSM are performed directly on the HSM. The HSM is a specialized hardware device designed to securely generate, store, and perform cryptographic operations, ensuring the confidentiality and integrity of the encryption keys.

• Question 128:

  Which component of the Oracle Cloud Infrastructure Networking service allows resources in a VCN to access Oracle Cloud services without traversing the public Internet?

  A. Network Address Translation (NAT) Gateway

  B. Dynamic Routing Gateway (DRG)

  C. Service Gateway

  D. Internet Gateway

  Correct Answer: C

  A Service Gateway provides secure access to Oracle Cloud services from within a VCN without the need to traverse the public Internet. It facilitates private and efficient communication between resources and cloud services.

• Question 129:

  Which factor does NOT impact the cost of running a virtual machine instance in Oracle Cloud Infrastructure?

  A. The size of the VM instance

  B. The operating system used by the VM instance

  C. The region used by the VM instance

  D. The number of virtual machines running

  Correct Answer: B

  The operating system used by the VM instance does not impact the cost of running it in Oracle Cloud Infrastructure. The pricing for VM instances is based on factors like size, region, and usage, but not the specific operating system.

• Question 130:

  What is the primary purpose of Oracle Cloud Infrastructure Functions?

  A. To store and manage files

  B. To execute code in response to events or HTTP requests

  C. To provide a managed database service

  D. To deploy and manage virtual machines

  Correct Answer: B

  Oracle Cloud Infrastructure Functions is a serverless computing service that allows developers to run code without managing servers. It is designed to respond to events or HTTP requests and is ideal for event-driven applications.