OCI FOUNDATIONS 202 ASSOCIATE
CERTIFICATION 1Z0 1085 21 2026 STUDY
GUIDE COMPLETE ORACLE CLOUD
INFRASTRUCTURE CONCEPTS AND PRACTICE
QUESTIONS
◉ Which resource do you manage in IaaS? Answer: Middleware
Operation System
Runtime
Data
Apps
◉ A company has developed a payroll app in OCI. What should they
do to ensure the app has highest level of availability and resilience?
Answer: Deploy across multiple ADs and Regions
◉ Which OCI capability can be used to protect against power failures
within an AD? Answer: Fault Domains
◉ Which statement is NOT true for OCI compartments?
Resources and compartments can be added and deleted anytime
Compartments cannot be nested
,Each OCI resource belongs to a single compartment
Resources can be moved from one compartment to another Answer:
Compartments cannot be nested
◉ Which OCI service would you use to distribute incoming traffic
between a set of web servers? Answer: Public Load Balancer
◉ Which DB service offering provides the best performance for
running OLTP workloads in OCI? Answer: Exadata
◉ Compute instance always gets what kind of IP address Answer:
Private IP address
◉ What purpose does OCI Dynamic Routing Gateway serve? Answer:
Enables Oracle Compute instance to connect to on-prem env.
◉ You have an app that requires a shared file system. Which service
would you choose? Answer: File Storage
◉ Which statement is correct regarding OCI Compute service?
You can attach a max of 1 public IP to each compute instance
Can launch either VMs or BMs
When you stop a compute instance, all data on the boot volume is
lost
,You cannot attach a block volume to a compute instance Answer:
Can launch either VMs or BMs
◉ How is total network throughput allocated to a VM instance?
Answer: Network bandwidth is proportional to the # of OCPUs in the
instance shape
◉ You want to leverage a managed RAC offering in OCI. Which
managed DB service would you choose? Answer: VM DB System
◉ Which security service is offered by OCI? Answer: Key
Management
◉ Which OCI storage service does not provide encryption of data-at-
rest? Answer: Local NVMe
◉ What is Oracle's responsibility according to the OCI shared
security model? Answer: Security of data-center facilities
◉ Which 2 situations incur costs within OCI?
Data ingress from internet
Data egress to the internet
Transferring data from 1 instance to another within the same AD
Transferring data from 1 instance to another across ADs in a region
, Transferring data across Regions Answer: (1) data egress to the
internet
(2) transferring data across regions
◉ Which SLA types are not offered by OCI compute service? Answer:
Service Plane
◉ You run 4 OCI VM's on OCI Dedicated Virtual Host. How will
deployment be billed? Answer: Dedicated VM host & the BV of each
instance will be billed
◉ Which OCI Compute shape does NOT incur instance billing in a
stopped state? Answer: Standard
◉ Which 2 security capabilities are offered by OCI?
- Always On Data Encryption for data at rest
- Managed Active Directory service
- Key Management Service
- Certificate Management Service
- Compute Answer: Always On Data Encryption for data at rest
Key Management Service
CERTIFICATION 1Z0 1085 21 2026 STUDY
GUIDE COMPLETE ORACLE CLOUD
INFRASTRUCTURE CONCEPTS AND PRACTICE
QUESTIONS
◉ Which resource do you manage in IaaS? Answer: Middleware
Operation System
Runtime
Data
Apps
◉ A company has developed a payroll app in OCI. What should they
do to ensure the app has highest level of availability and resilience?
Answer: Deploy across multiple ADs and Regions
◉ Which OCI capability can be used to protect against power failures
within an AD? Answer: Fault Domains
◉ Which statement is NOT true for OCI compartments?
Resources and compartments can be added and deleted anytime
Compartments cannot be nested
,Each OCI resource belongs to a single compartment
Resources can be moved from one compartment to another Answer:
Compartments cannot be nested
◉ Which OCI service would you use to distribute incoming traffic
between a set of web servers? Answer: Public Load Balancer
◉ Which DB service offering provides the best performance for
running OLTP workloads in OCI? Answer: Exadata
◉ Compute instance always gets what kind of IP address Answer:
Private IP address
◉ What purpose does OCI Dynamic Routing Gateway serve? Answer:
Enables Oracle Compute instance to connect to on-prem env.
◉ You have an app that requires a shared file system. Which service
would you choose? Answer: File Storage
◉ Which statement is correct regarding OCI Compute service?
You can attach a max of 1 public IP to each compute instance
Can launch either VMs or BMs
When you stop a compute instance, all data on the boot volume is
lost
,You cannot attach a block volume to a compute instance Answer:
Can launch either VMs or BMs
◉ How is total network throughput allocated to a VM instance?
Answer: Network bandwidth is proportional to the # of OCPUs in the
instance shape
◉ You want to leverage a managed RAC offering in OCI. Which
managed DB service would you choose? Answer: VM DB System
◉ Which security service is offered by OCI? Answer: Key
Management
◉ Which OCI storage service does not provide encryption of data-at-
rest? Answer: Local NVMe
◉ What is Oracle's responsibility according to the OCI shared
security model? Answer: Security of data-center facilities
◉ Which 2 situations incur costs within OCI?
Data ingress from internet
Data egress to the internet
Transferring data from 1 instance to another within the same AD
Transferring data from 1 instance to another across ADs in a region
, Transferring data across Regions Answer: (1) data egress to the
internet
(2) transferring data across regions
◉ Which SLA types are not offered by OCI compute service? Answer:
Service Plane
◉ You run 4 OCI VM's on OCI Dedicated Virtual Host. How will
deployment be billed? Answer: Dedicated VM host & the BV of each
instance will be billed
◉ Which OCI Compute shape does NOT incur instance billing in a
stopped state? Answer: Standard
◉ Which 2 security capabilities are offered by OCI?
- Always On Data Encryption for data at rest
- Managed Active Directory service
- Key Management Service
- Certificate Management Service
- Compute Answer: Always On Data Encryption for data at rest
Key Management Service
