Oracle 1Z0-1085-25 Exam Questions 2025

A Dynamic Routing Gateway (DRG) is a virtual router that provides a private traffic path between a Virtual Cloud Network (VCN) and a network outside the VCN, such as an on-premises network. To establish a secure, private connection that does not traverse the public internet, you would use OCI FastConnect. A DRG is a mandatory component for connecting your on-premises network to your VCN using FastConnect. It acts as the single point of entry for this private traffic, ensuring the connection remains isolated from the public internet as required.

A. Service Gateway: Provides private access from a VCN to public Oracle services (like Object Storage), not for connecting to an on-premises network.

C. NAT Gateway: Enables resources in a private subnet to access the public internet for outbound connections, which is the opposite of the stated requirement.

D. Internet Gateway: Provides a path for traffic between a VCN and the public internet, which the question explicitly seeks to avoid.

1. Oracle Cloud Infrastructure Documentation

"Dynamic Routing Gateways".

Section: Overview of Networking

"A DRG is a virtual router that provides a path for private network traffic between your VCN and on-premises network. You can use a DRG to connect your on-premises network to a VCN by using Site-to-Site VPN or Oracle Cloud Infrastructure FastConnect."

2. Oracle Cloud Infrastructure Documentation

"FastConnect".

Section: Overview of FastConnect

"Oracle Cloud Infrastructure FastConnect provides an easy way to create a dedicated

private connection between your data center and Oracle Cloud Infrastructure. FastConnect provides higher-bandwidth options

and a more reliable and consistent networking experience when compared to internet-based connections." This document confirms FastConnect avoids the public internet and requires a DRG.

3. Oracle Cloud Infrastructure Documentation

"Gateways".

Section: Service Gateway

"A service gateway lets resources in your VCN privately access specific Oracle services

without exposing the data to the public internet." This clarifies its purpose is for VCN-to-OCI services

not on-premises connectivity.

4. Oracle Cloud Infrastructure Documentation

"NAT Gateway".

Section: NAT Gateway

"A NAT gateway gives resources in a private subnet access to the internet without exposing them to incoming internet connections." This confirms its function is for outbound internet access.

Oracle Autonomous Data Warehouse (ADW) is specifically engineered for analytics, business intelligence, and data warehousing workloads. It is optimized for complex, long-running queries against large volumes of data from diverse sources. ADW's architecture allows for seamless integration and consolidation of relational, NoSQL, and big data (often stored in OCI Object Storage and accessed via ADW's data lake capabilities). This directly addresses the retail company's need for a unified platform that can handle massive scale, data diversity, and provide real-time analytics for its global inventory management system.

A. OCI Big Data Service: This is a Hadoop/Spark-based service for processing large data sets, not a consolidated analytical database for querying diverse, structured, and unstructured data in real-time.

B. OCI Autonomous Transaction Processing (ATP): ATP is optimized for online transaction processing (OLTP) workloads with high concurrency and low-latency operations, not for the complex analytical queries required for a data warehouse.

C. OCI MySQL Database Service: This is a managed relational database service (OLTP) that is not designed for large-scale data warehousing or for natively integrating and analyzing diverse data types like NoSQL and big data.

1. Oracle Cloud Infrastructure Documentation - Overview of Autonomous Data Warehouse: "Autonomous Data Warehouse is a self-driving

self-securing

self-repairing database service that is optimized for data warehousing workloads. It is designed to support all standard SQL and business intelligence (BI) tools

and it provides all of the performance of the market-leading Oracle Database in an easy-to-use cloud service." (This establishes ADW's primary purpose for analytics and data warehousing).

2. Oracle Cloud Infrastructure Documentation - Use Cases for Autonomous Data Warehouse: "Build a data warehouse or data mart to analyze your enterprise data... Create a data lake in Oracle Cloud Infrastructure to store unlimited amounts of raw data of any format. Use Autonomous Data Warehouse to curate

govern

and analyze that data." (This confirms its ability to consolidate and analyze diverse data

including from a data lake

which is typical for big data).

3. Oracle Cloud Infrastructure Documentation - Autonomous Database for Experienced Oracle DBAs - Workload Differences: "Autonomous Data Warehouse (ADW) is designed to support everything from departmental data marts and simple data-integration projects to large enterprise data warehouses... Autonomous Transaction Processing (ATP) is tuned for transaction processing or mixed workload environments." (This directly contrasts the intended workloads of ADW and ATP).

Oracle Cloud Guard is the most suitable cornerstone service as it provides a unified and comprehensive approach to cloud governance. It continuously monitors the OCI tenancy for security weaknesses, misconfigured resources, and insecure user activities. This directly addresses the need to enforce consistent security policies and ensure compliance by detecting and optionally remediating deviations from best practices. Furthermore, Cloud Guard's detectors can identify idle or oversized resources, contributing to cost management by highlighting potential savings. No other single service listed covers this breadth of security, compliance, and cost-related governance functions.

B. OCI Cost Management: This service is specialized for tracking, analyzing, and optimizing cloud spending. It does not enforce security policies or directly manage compliance posture.

C. OCI Identity and Access Management (IAM): While fundamental for security by controlling access, IAM does not actively monitor resource configurations for security posture or provide cost analysis capabilities.

D. OCI Audit: The Audit service provides immutable logs of API calls, which is crucial for forensic analysis and compliance reporting, but it does not proactively enforce policies or manage costs.

1. Oracle Cloud Infrastructure Documentation

"Overview of Cloud Guard": "Cloud Guard is a cloud native service that helps customers monitor

identify

achieve

and maintain a strong security posture on Oracle Cloud. Use the service to examine your Oracle Cloud Infrastructure resources for security weakness related to configuration

and your operators and users for risky activities." This document establishes Cloud Guard's central role in security and compliance monitoring.

2. Oracle Cloud Infrastructure Documentation

"Detector Recipe Reference": The reference for Cloud Guard detectors includes rules such as "Block volume is unattached" and "DB system is stopped for more than 7 days." These detectors identify unused resources

directly supporting the objective of managing cloud costs by reducing waste.

3. Oracle Cloud Infrastructure Documentation

"Overview of Billing and Cost Management": "The Billing and Cost Management service provides tools to track and manage your costs and usage... Use budgets to set thresholds for your spending..." This source confirms that the Cost Management service is focused exclusively on financial aspects

not security policy enforcement.

4. Oracle Cloud Infrastructure Documentation

"Overview of IAM": "Oracle Cloud Infrastructure Identity and Access Management (IAM) service lets you control who can access your cloud resources." This highlights IAM's primary function as an access control mechanism

which is a component of

but not the entirety of

the required governance framework.

In the Oracle Cloud Infrastructure (OCI) Shared Security Responsibility Model, security is a partnership. Oracle is responsible for the security of the cloud, which includes the physical hardware, software, networking, and facilities that run OCI services. The customer is responsible for security in the cloud. This unequivocally includes securing their own data through measures like identity and access management (IAM) policies, data encryption, and network security configurations. The customer retains full ownership and control over their data, and therefore, the responsibility for its protection.

A. Managing the hardware lifecycle is Oracle's responsibility, as they own and operate the underlying physical infrastructure of the cloud.

C. Ensuring the physical security of global data centers, including access controls and environmental protections, is a core responsibility of Oracle.

D. Oracle is responsible for patching and maintaining the core infrastructure that powers services like Virtual Cloud Network (VCN).

1. Oracle Cloud Infrastructure Documentation

"Shared Security Responsibility Model": "You are responsible for securing your workloads and for configuring your services securely... Your data is your most important asset in the cloud. You control your data. You are responsible for... Data-level security controls (encryption

masking

and access control)." This document explicitly assigns data security to the customer.

2. Oracle Cloud Infrastructure Documentation

"Security Overview": This document outlines Oracle's responsibilities

stating

"Oracle is responsible for all aspects of the physical security of its data centers... Oracle is also responsible for the security of the foundational cloud services

such as the hardware

software

and networking that comprise the OCI environment." This directly refutes options A

C

and D.

Policies are the core component of Oracle Cloud Infrastructure (OCI) Identity and Access Management (IAM) used to control access to resources. They are human-readable statements that specify which users or groups (the "who") can perform what actions (the "what") on which resources (the "where"). By attaching policies to the tenancy (root compartment) or specific compartments, an organization can centrally manage and enforce granular access permissions across its entire cloud environment, fulfilling the requirement described in the question.

A. Compartments: Compartments are a mechanism for organizing and isolating cloud resources, not for defining access permissions. Policies are written to grant access to resources within compartments.

C. Network Security Groups: Network Security Groups (NSGs) are virtual firewalls that control network traffic to and from resources like compute instances. They manage network-level access, not user permissions to OCI services.

D. Dynamic Groups: Dynamic Groups group OCI compute instances as principals based on defined rules. While policies can grant permissions to dynamic groups, the policy itself is the feature that manages the access.

1. Oracle Cloud Infrastructure Documentation

"Overview of IAM": "Policies are the core of the IAM service. A policy is a document that specifies who can access which Oracle Cloud Infrastructure resources that your company has

and how. A policy is comprised of one or more statements." (Section: Core Components

Subsection: Policies)

2. Oracle Cloud Infrastructure Documentation

"How Policies Work": "Access is granted by IAM policies

which are written in a human-readable format... You can attach a policy to a compartment or the tenancy. Where you attach it controls who can then modify it or delete it." (Section: The Basics)

3. Oracle Cloud Infrastructure Documentation

"Managing Compartments": "Compartments are a fundamental component of Oracle Cloud Infrastructure for organizing and isolating your cloud resources... to help you separate and control access to your resources." (Section: About Compartments)

4. Oracle Cloud Infrastructure Documentation

"Network Security Groups": "A network security group (NSG) consists of a set of ingress and egress security rules that apply only to a set of VNICs of your choice in a single VCN." (Section: Overview of Network Security Groups)

This combination provides a complete and scalable architecture for a global video streaming service. OCI Compute instances offer the elastic processing power needed for the application backend, which can be scaled dynamically to meet viewer demand. The OCI Content Delivery Network (CDN) is essential for global distribution; it caches video content at geographically distributed edge locations, ensuring low-latency delivery to viewers worldwide. OCI Block Volume provides the necessary high-performance, persistent storage for the operating systems and application data on the Compute instances, completing the core infrastructure required for a robust streaming platform.

A. Autonomous Database is optimized for structured data management and analytics, not for the storage and high-throughput delivery of large binary video files.

B. OCI FastConnect provides a dedicated, private connection between an on-premises data center and OCI, not for delivering content to public internet end-users.

C. Relying solely on OCI Object Storage would result in higher latency for viewers far from the origin region, as it lacks the global edge caching of a CDN.

1. Oracle Cloud Infrastructure Documentation

"Content Delivery Network": "Content Delivery Network (CDN) is a service that provides high-performance web content delivery... It offers a globally distributed network of servers that work together to provide fast delivery of internet content. The goal of a CDN is to reduce latency..." This directly supports the use of CDN for low-latency global delivery.

2. Oracle Cloud Infrastructure Documentation

"Overview of Compute": "The OCI Compute service lets you provision and manage compute hosts

known as instances... The service offers the flexibility to choose from a variety of instance shapes... and the ability to scale up and scale out." This confirms Compute's role in providing scalable processing.

3. Oracle Cloud Infrastructure Reference Architectures

"Deploy a scalable video-on-demand streaming solution" (Document ID: RA-VOD-STREAMING): This official reference architecture explicitly outlines a solution using OCI Object Storage as the origin

OCI Media Services for processing

and a CDN for distribution to viewers. While the question simplifies the storage aspect to Block Volume (which supports the Compute instances)

the core principle of using Compute and CDN for this use case is validated.

4. Oracle Cloud Infrastructure Documentation

"Overview of Block Volume": "The Oracle Cloud Infrastructure Block Volume service lets you dynamically provision and manage block storage volumes. You can create

attach

connect

and move volumes

as well as change volume performance

as needed

to meet your storage

performance

and application requirements." This confirms its role as essential storage for Compute instances.

Oracle Autonomous Transaction Processing (ATP) is the optimal choice as it is specifically engineered for high-throughput, low-latency, real-time transactional (OLTP) workloads, which are characteristic of a fraud detection system. Its "autonomous" capabilities provide the required dynamic scaling of compute and storage without downtime. Furthermore, ATP includes Oracle Machine Learning (OML), which allows for the development and deployment of machine learning models directly within the database. This satisfies the requirement for integrated ML capabilities for predictive analytics, enabling real-time scoring of transactions against fraud models.

A. OCI NoSQL Database: While excellent for low-latency and high-throughput key-value operations, it lacks the integrated, in-database machine learning and complex transactional capabilities inherent to ATP.

C. OCI MySQL Database Service: This service is suitable for OLTP workloads but does not offer the same level of autonomous scaling or the deeply integrated, in-database machine learning (OML) provided by ATP.

D. OCI Autonomous Data Warehouse (ADW): ADW is optimized for complex analytical queries (OLAP) over large data volumes, not for the high-frequency, low-latency transaction processing (OLTP) required for a real-time system.

1. Oracle Cloud Infrastructure Documentation

"Overview of Autonomous Database": This document distinguishes between the two Autonomous Database types. It states

"Autonomous Transaction Processing is designed to support... a high number of concurrent transactions... Use cases include... real-time fraud detection." It contrasts this with ADW

which is "designed to support all standard data warehouse workloads."

Reference: Oracle Cloud Infrastructure Documentation

E94093-20

"Overview of Autonomous Database

" Section: "Autonomous Database Workload Types."

2. Oracle Cloud Infrastructure Documentation

"Use Cases for Autonomous Transaction Processing": This document explicitly lists "Real-time fraud and intrusion detection" as a primary use case for ATP

highlighting its ability to "analyze streaming data in real time from multiple sources... and apply machine learning to detect anomalies."

Reference: Oracle Cloud Infrastructure Documentation

F32280-01

"Use Cases for Autonomous Transaction Processing

" Section: "Real-time fraud and intrusion detection."

3. Oracle Cloud Infrastructure Documentation

"About Oracle Machine Learning in Autonomous Database": This source details the integrated ML capabilities. It explains

"Oracle Machine Learning (OML) extends Oracle Database

enabling users to build AI models inside the database... This in-database approach eliminates the need to move data

which maintains data security and delivers real-time scoring and predictions." This directly supports the "integrated machine learning" requirement.

Reference: Oracle Cloud Infrastructure Documentation

F31693-06

"Oracle Machine Learning User's Guide

" Chapter 1

"About Oracle Machine Learning in Autonomous Database."

The Pay-As-You-Go (PAYG) model is Oracle Cloud Infrastructure's standard pricing framework for on-demand resource consumption. This model does not require any upfront payment, long-term commitment, or minimum service period. Customers are billed monthly only for the specific resources they have consumed, providing maximum flexibility to provision, scale, or terminate services in direct response to business needs. This aligns perfectly with the principles of cloud elasticity and cost-effectiveness for variable workloads.

A. Prepaid Subscription Model: This model, often called Annual Universal Credits, requires an upfront financial commitment in exchange for discounted rates, which contradicts the "no upfront cost" requirement.

B. Enterprise Agreement Model: This typically involves a negotiated, long-term contract with customized pricing and potential minimum usage commitments, which is different from the on-demand flexibility described.

D. Fixed Discount Model: This is not a standalone pricing model but rather a feature, like Oracle Support Rewards or volume discounts, that can be applied to other models, such as a subscription.

1. Oracle Cloud Infrastructure Documentation

"Oracle PaaS and IaaS Universal Credits Service Descriptions": Section 2.1

"Pay As You Go

" states

"With the Pay As You Go subscription

You will be billed monthly in arrears for all Services consumed... There is no minimum service period; however

some services may have a minimum consumption commitment." This confirms the pay-in-arrears and no-minimum-period nature.

2. Oracle Cloud Pricing

Official Page: The "Pay As You Go" section explicitly states: "Pay only for what you use. With Pay As You Go

you pay only for the services you use with no upfront commitment

and you can stop using services at any time." This directly supports the answer.

3. Oracle Cloud Infrastructure Documentation

"Overview of Billing and Cost Management": This section describes the different ways to pay for OCI

contrasting "Pay As You Go" with "Annual Universal Credits

" where the latter involves an upfront commitment. It details how PAYG billing is based on actual usage.

The scenario requires a solution that provides high computational power for a periodic, intensive workload (end-of-month processing) while remaining cost-effective during off-peak times. OCI Virtual Machine (VM) Instances combined with Auto-Scaling is the ideal solution. Auto-scaling automatically increases the number of VM instances when demand is high, ensuring maximum performance and minimal processing time. Conversely, it scales down the number of instances during non-peak periods, significantly reducing costs by ensuring the firm only pays for the resources it actively uses. This elasticity directly addresses the dual requirements of performance and cost efficiency for a fluctuating workload.

A. OCI Container Engine for Kubernetes (OKE): OKE is a container orchestration service. While it can manage scalable workloads, it is an abstraction layer; the fundamental need for elastic compute resources, which auto-scaling VMs provide directly, still exists underneath.

B. OCI Dedicated Virtual Host Instances: This option provides a single-tenant physical server, which is not elastic. The firm would pay for the entire host's capacity continuously, making it highly cost-inefficient during non-peak times.

D. OCI Bare Metal Instances without Auto-Scaling: While Bare Metal offers the highest performance, the "without Auto-Scaling" clause makes it unsuitable. The firm would have to pay for peak capacity at all times, which violates the cost-efficiency requirement.

1. Oracle Cloud Infrastructure Documentation - Autoscaling: "Autoscaling enables you to automatically adjust the number of Compute instances in an instance pool based on performance metrics such as CPU utilization... This lets you provide consistent performance for your end users during periods of high demand

and helps you reduce your costs during periods of low demand." (Source: Oracle Cloud Infrastructure Documentation

docs.oracle.com/en-us/iaas/Content/Compute/Tasks/autoscalinginstancepools.htm

Section: "Overview of Autoscaling").

2. Oracle Cloud Infrastructure Documentation - Compute Shapes: This document details the various VM shapes available

including high-performance options suitable for complex computations. The flexibility to choose appropriate shapes is a key part of the VM solution. (Source: Oracle Cloud Infrastructure Documentation

docs.oracle.com/en-us/iaas/Content/Compute/References/computeshapes.htm

Section: "VM Standard Shapes").

3. Oracle Cloud Infrastructure Documentation - Dedicated Virtual Machine Hosts: "A dedicated virtual machine host is a physical server that's dedicated to your tenancy... You are billed for the dedicated virtual machine host when you launch it

and billing continues until you terminate it." This confirms the lack of elasticity and cost model unsuitable for the scenario. (Source: Oracle Cloud Infrastructure Documentation

docs.oracle.com/en-us/iaas/Content/Compute/Concepts/dedicatedvmhosts.htm

Section: "Overview of Dedicated Virtual Machine Hosts").

Oracle Cloud Infrastructure (OCI) Exadata Cloud Service is an engineered system specifically designed to run Oracle Database workloads with the highest levels of performance, availability, and scalability. It combines Oracle Database software with purpose-built hardware (database servers, storage servers, and high-speed InfiniBand networking) to provide an optimal environment for demanding applications. This service is the premier platform for deploying multi-node Oracle Real Application Clusters (RAC), which provides fault tolerance and allows for seamless scaling of database resources.

B. OCI Database Cloud Service (DBCS): While DBCS on Virtual Machine and Bare Metal systems supports Oracle RAC, it is a general-purpose service. Exadata Cloud Service is the specialized, high-performance engineered system that best fits the description of massive scalability and clustering.

C. OCI Autonomous Database: This is a fully managed service that runs on Exadata infrastructure and uses RAC internally for high availability. However, users do not directly deploy or manage the RAC cluster themselves; the infrastructure is abstracted.

D. OCI MySQL Database Service: This service is for the MySQL open-source database, not Oracle Database, and therefore does not support Oracle-specific technologies like Real Application Clusters (RAC).

1. Oracle Cloud Infrastructure Documentation - Overview of Exadata Cloud Service: "Exadata Cloud Service is the best platform for running Oracle Database in Oracle Cloud... It is a highly available and scalable service that includes all the Oracle Database options and Exadata-specific software. Each Exadata Cloud Service instance is provisioned with a preconfigured number of compute nodes (database servers) and storage servers

all connected by a high-speed

low-latency RoCE network and intelligent Exadata software. Oracle Real Application Clusters (RAC) is used to provide fault tolerance and high availability."

Source: Oracle Cloud Infrastructure Documentation

"Overview of Exadata Cloud Service".

2. Oracle Cloud Infrastructure Documentation - Overview of DB Systems: "You can provision a 2-node Real Application Clusters (RAC) virtual machine DB system to improve availability... Bare metal DB systems can have a single node or multiple nodes in a RAC configuration."

Source: Oracle Cloud Infrastructure Documentation

"Overview of DB Systems". (This reference clarifies that while DBCS supports RAC

Exadata is the platform specifically engineered for the highest scale and performance

making it the superior answer).

3. Oracle Cloud Infrastructure Documentation - Overview of the Autonomous Database: "Oracle Autonomous Database is a fully managed

preconfigured database environment... The service provides... high availability with Oracle RAC."

Source: Oracle Cloud Infrastructure Documentation

"Overview of the Autonomous Database". (This reference confirms that while it uses RAC

it is a managed service where the user does not deploy the cluster).