Skip to content

Oracle Cloud Infrastructure Foundations (1Z0-1085) - Practice Questions

15 questions for OCI Foundations prep, weighted toward OCI architecture and core services (30%), security and identity (20%), then compute, storage, and networking (15% each).

Cert page: exams/oracle/oci-foundations/

Question 1

Scenario: What is an OCI availability domain?

A. A geographic region B. One or more data centers within a region, isolated from other availability domains in that region C. A subnet D. A compartment

Answer **Correct: B** **Why:** A region contains one or more availability domains, and each AD has independent power, cooling, and network. Some regions have a single AD, which is why fault domains matter: they provide isolation within an AD when only one exists.

Question 2

Scenario: What is a fault domain?

A. A separate region B. A grouping of hardware and infrastructure within an availability domain, so instances in different fault domains do not share a single point of failure C. A network gateway D. A billing unit

Answer **Correct: B** **Why:** Each AD has three fault domains, and distributing instances across them protects against hardware failure and maintenance within the AD. In a single-AD region, fault domains are the only intra-region isolation available.

Question 3

Scenario: Resources must be organized for access control and cost tracking.

A. Tags only B. Compartments, which are logical containers with their own IAM policies and cost reporting C. Regions D. Separate tenancies

Answer **Correct: B** **Why:** Compartments are OCI's distinctive organizing construct: a resource lives in exactly one compartment, policies are written against compartments, and cost can be reported per compartment. They can nest, which supports an organizational hierarchy.

Question 4

Scenario: An OCI IAM policy statement's structure.

A. allow <subject> to <verb> <resource-type> in <location> [where <conditions>] B. A JSON document C. A role assignment only D. A tag

Answer **Correct: A** **Why:** OCI policies are human-readable statements, for example `Allow group Admins to manage all-resources in compartment Dev`. The verbs escalate as inspect, read, use, and manage, which is the granularity you tune for least privilege.

Question 5

Scenario: Which storage type suits large volumes of unstructured data such as backups and media?

A. Block Volume B. Object Storage, with standard and archive tiers C. File Storage D. Local NVMe

Answer **Correct: B** **Why:** Object Storage is durable, effectively unlimited, and accessed by API. Block Volume attaches to a single instance like a disk, File Storage provides shared NFS access, and local NVMe is ephemeral and disappears with the instance.

Question 6

Scenario: Instances in a private subnet must reach the internet for updates.

A. An internet gateway B. A NAT gateway C. A service gateway D. A dynamic routing gateway

Answer **Correct: B** **Why:** NAT allows outbound-initiated traffic and blocks inbound. The internet gateway is for public subnets in both directions, the service gateway reaches OCI services privately, and the DRG connects to on-premises or other VCNs.

Question 7

Scenario: A VCN must reach Object Storage without traversing the internet.

A. An internet gateway B. A service gateway with the appropriate service CIDR label C. A NAT gateway D. A local peering gateway

Answer **Correct: B** **Why:** The service gateway keeps traffic to OCI services on the Oracle network and avoids NAT charges. Distinguishing the four gateway types by purpose is one of the most reliably examined topics on OCI Foundations.

Question 8

Scenario: A database should require no manual patching, tuning, or backup configuration.

A. A VM DB System B. Autonomous Database, which self-patches, self-tunes, and self-repairs C. A database on a compute instance D. NoSQL Database

Answer **Correct: B** **Why:** Autonomous Database comes in transaction processing and data warehouse flavors and removes the routine DBA work. A DB System is managed infrastructure where you still control patching windows and configuration.

Question 9

Scenario: OCI security posture must be monitored for misconfiguration automatically.

A. Manual review B. Cloud Guard, which detects problems against detector recipes and can take responder actions C. Audit logs only D. Vault

Answer **Correct: B** **Why:** Cloud Guard is the posture management service, and Security Zones go further by preventing non-compliant resources from being created in the first place. Audit logs record what happened but do not evaluate configuration.

Question 10

Scenario: Encryption keys must be managed by the customer.

A. Oracle-managed keys only B. OCI Vault, holding customer-managed keys and secrets, optionally in a dedicated HSM partition C. No encryption D. Local key files

Answer **Correct: B** **Why:** All OCI storage is encrypted by default with Oracle-managed keys; Vault lets you own the key lifecycle instead, which is what a compliance requirement usually means by customer-managed. Vault also stores secrets, which keeps credentials out of code.

Question 11

Scenario: OCI pricing is described as consistent across regions.

A. Prices vary widely by region B. Oracle prices the same across commercial regions, which simplifies multi-region cost planning C. Pricing is negotiated only D. All services are free

Answer **Correct: B** **Why:** Uniform global pricing is one of OCI's stated commercial differentiators, alongside relatively low egress charges. This is examinable because the exam covers the business case for OCI as well as the technology.

Question 12

Scenario: Compute shapes must match a workload's needs precisely.

A. Fixed shapes only B. Flexible shapes, where OCPU count and memory are chosen independently within a range C. One size D. Bare metal only

Answer **Correct: B** **Why:** Flexible shapes avoid paying for memory you do not need because you needed the cores. Note that an OCPU corresponds to a physical core with hyperthreading, so it is not directly comparable to a vCPU on other clouds.

Question 13

Scenario: Support is needed to understand the shared responsibility model on OCI.

A. Oracle secures everything B. Oracle secures the infrastructure and physical layer; the customer secures their data, identities, access configuration, and workloads, with the split shifting by service type C. The customer secures everything D. Neither party

Answer **Correct: B** **Why:** Data and identity remain the customer's responsibility across every service model, which is consistent across all cloud providers. What changes with Autonomous Database or another managed service is who patches the software layer.

Question 14

Scenario: A budget must alert when spend approaches a threshold.

A. Check the invoice B. Budgets scoped to a compartment or tag, with alert rules on actual or forecast spend C. Nothing exists D. Cost is fixed

Answer **Correct: B** **Why:** Scoping budgets to compartments is why compartment design and cost management are related decisions. Forecast-based alerts warn before the money is spent rather than after, which is the difference between a control and a report.

Question 15

Scenario: High availability within a region for a web tier.

A. One instance B. Instances across multiple fault domains (and availability domains where the region has several), behind a load balancer with health checks C. A larger instance D. Backups

Answer **Correct: B** **Why:** The pattern is distribution plus health checking. Which isolation unit to spread across depends on the region: multiple ADs where available, fault domains where the region has a single AD.

Where to go deeper