Oracle Cloud Infrastructure 2025 Foundations Associate (1Z0-1085-25) Practice Exam

What the Oracle Cloud Infrastructure 2025 Foundations Associate (1Z0-1085-25) exam covers

• Getting Started with OCI96 questions
• Core OCI Services304 questions
• Security Services150 questions
• Governance and Administration96 questions

Free Oracle Cloud Infrastructure 2025 Foundations Associate (1Z0-1085-25) sample questions

A sample of 10 questions with answers and explanations. Sign up free to practice all 646.

1. Question 1Core OCI Services

   In OCI Compute, what is the key difference between a Virtual Machine (VM) instance and a Bare Metal instance?

   • AA VM instance can only run Windows, while Bare Metal only runs Linux
   • BA VM instance runs on shared, virtualized hardware; Bare Metal is dedicatedCorrect
   • CA VM instance has no boot volume, while Bare Metal always includes one
   • DA VM instance cannot be stopped, while Bare Metal can be stopped anytime
   ✓ Correct answer: B

   OCI Compute offers two instance types. VM instances run on top of a hypervisor that partitions a physical server among multiple tenants, offering flexibility and lower cost. Bare Metal instances give a single customer exclusive control of an entire physical server with no hypervisor layer, which suits workloads needing maximum performance isolation or license terms that forbid virtualization.

   Why the other options are wrong

   • AOS choice is not what separates the two instance types; both VM and Bare Metal support multiple OS options.
   • CBoth VM and Bare Metal instances use a boot volume to store the OS image.
   • DBoth instance types can be stopped and started; that is not a distinguishing factor.
2. Question 2Core OCI Services

   What is OCI Container Engine for Kubernetes (OKE)?

   • AA tool for encrypting container images at rest
   • BA fully managed Kubernetes service; Oracle runs the control planeCorrect
   • CA managed relational database for containerized applications
   • DA billing dashboard for tracking container usage
   ✓ Correct answer: B

   OKE lets customers run Kubernetes clusters on OCI without operating the control plane themselves; Oracle manages the master nodes, while the customer focuses on their worker nodes and workloads.

   Why the other options are wrong

   • AEncrypting images at rest is handled by underlying storage and key management, not OKE itself.
   • CA managed relational database is part of the Database service, unrelated to OKE.
   • DOKE is a container orchestration service, not a billing dashboard.
3. Question 3Core OCI Services

   A company is migrating an existing on-premises Oracle Database and wants to keep the same OS-level control and database version compatibility it has today. Which OCI service best supports this lift-and-shift approach?

   • ANoSQL Database Cloud Service
   • BBase Database ServiceCorrect
   • CMySQL Database Service
   • DAutonomous Data Warehouse Serverless
   ✓ Correct answer: B

   Because VM and Bare Metal DB systems are co-managed, the team retains the same kind of OS and database administration they had on-premises, easing migration compared to fully automated or non-Oracle services.

   Why the other options are wrong

   • ANoSQL Database Cloud Service uses a different, schema-flexible data model, not a fit for migrating an existing Oracle relational database.
   • CMySQL Database Service runs a different database engine and would require rewriting the application, not a direct lift-and-shift.
   • DAutonomous Data Warehouse Serverless abstracts away OS-level control, which does not match the stated need to keep it.
4. Question 4Core OCI Services

   What does it mean for a security rule in OCI to be stateful?

   • AIt applies only during scheduled maintenance windows
   • BIt must be re-entered after every instance restart
   • CPermitted return traffic is automatically allowedCorrect
   • DIt applies only to Object Storage endpoints
   ✓ Correct answer: C

   This connection-tracking behavior reduces the number of rules needed, since only the initiating direction must be explicitly allowed.

   Why the other options are wrong

   • AStatefulness relates to connection tracking, not scheduled timing.
   • BRules persist independently of instance restarts; this is not what stateful means.
   • DStateful behavior is a general rule property, not limited to a single service.
5. Question 5Core OCI Services

   Without versioning enabled on a bucket, what happens when an object with the same name is uploaded again?

   • AOCI automatically renames the new object
   • BThe object is automatically moved to Infrequent Access
   • CThe upload is rejected until the old object is deleted
   • DThe new object overwrites the previous objectCorrect
   ✓ Correct answer: D

   This is the default behavior for any bucket; enabling versioning is what changes this so prior copies are preserved instead of being overwritten.

   Why the other options are wrong

   • AOCI does not auto-rename objects on upload.
   • BTier changes are unrelated to overwriting an object.
   • CUploads are not blocked by an existing object of the same name.
6. Question 6Governance and Administration

   What must a customer do to keep using paid OCI resources after the Free Trial period expires?

   • AContact Oracle legal department
   • BRe-register for a new trial
   • CNo action is needed
   • DUpgrade to a paid accountCorrect
   ✓ Correct answer: D

   Oracle requires an active step from the customer to move from a trial to a billed account. Without this upgrade, paid trial resources are stopped and only Always Free resources remain usable.

   Why the other options are wrong

   • AInvolving a legal department is not part of upgrading a billing account.
   • BA new free trial cannot simply be re-registered to continue existing paid usage.
   • CContinuing paid usage is not automatic, an explicit upgrade action is required.
7. Question 7Governance and Administration

   An OCI Monitoring alarm triggered by a CPU utilization metric is typically used to notify an operator through which service?

   • ASecurity Zones
   • BNotificationsCorrect
   • CVault
   • DBastion
   ✓ Correct answer: B

   Monitoring detects the threshold breach and raises the alarm, while Notifications handles publishing that alert to subscribers such as an email address or a function.

   Why the other options are wrong

   • ASecurity Zones enforces policy compliance, not alert delivery.
   • CVault manages secrets and keys, it does not deliver alerts.
   • DBastion provides secure access to hosts, unrelated to alerting.
8. Question 8Getting Started with OCI

   A multinational company serves customers in both North America and Europe. To reduce latency for both groups, what is the best practice?

   • ADeploy in a single region and rely only on Fault Domains
   • BDeploy everything in one Availability Domain worldwide
   • CServe all customers from a Roving Edge device
   • DDeploy identical stacks in a region near each customer groupCorrect
   ✓ Correct answer: D

   When users are spread across widely separated geographies, the most effective way to minimize latency for everyone is to run the application in multiple regions, each near a concentration of users, rather than serving distant users from one far-away region.

   Why the other options are wrong

   • AFault Domains address hardware resilience within a region, not the network distance to distant users.
   • BA single worldwide Availability Domain concept does not exist, and would not solve the latency problem regardless.
   • CRoving Edge devices are for disconnected or portable scenarios, not general multi-region customer latency.
9. Question 9Security Services

   An employee leaves and console access must be revoked immediately for their local account. What should be done?

   • ADisable or delete the user accountCorrect
   • BDelete the compartment they used
   • CRotate the tenancy's root key
   • DCreate a new dynamic group
   ✓ Correct answer: A

   Because access is tied to the user identity itself, disabling or removing that specific account is the direct way to cut off access, without disturbing shared resources or other users.

   Why the other options are wrong

   • BDeleting a compartment affects resources broadly, not the specific person's access, and may disrupt others.
   • CThere is no 'tenancy root key' to rotate for this purpose.
   • DCreating a dynamic group has no effect on a departed employee's access.
10. Question 10Security Services

    Which term describes a predefined condition Cloud Guard uses to flag a resource as noncompliant, such as a security list open to 0.0.0.0/0?

    • AA responder condition
    • BA vault key policy
    • CA detector ruleCorrect
    • DA bastion session policy
    ✓ Correct answer: C

    Detector rules are grouped into detector recipes and check resource configurations, such as a security list open to all traffic, against expected secure baselines.

    Why the other options are wrong

    • AA responder condition is not the standard term; responders act on detected problems rather than define detection conditions.
    • BA vault key policy governs key usage, unrelated to flagging noncompliant resources.
    • DA bastion session policy governs session access, not detection of noncompliant resources.

Who this Oracle Cloud Infrastructure 2025 Foundations Associate (1Z0-1085-25) practice exam is for

This practice set is for anyone preparing for the Oracle Cloud Infrastructure 2025 Foundations Associate (1Z0-1085-25) exam at the foundational level - from first-time candidates building a foundation to experienced Oracle Cloud practitioners doing a final review before test day. If you learn best by working through realistic questions and reading why each answer is right or wrong, it is built for you.

How to use this Oracle Cloud Infrastructure 2025 Foundations Associate (1Z0-1085-25) practice exam

1. Start with the free sample questions above to gauge your current baseline.
2. Read the full explanation on every question, including why each wrong option is wrong.
3. Track your weak domains and focus your study where you are losing the most marks.
4. Once you are scoring consistently well, take a timed, full-length mock exam.
5. Use your readiness score to decide when you are ready to book the real Oracle Cloud Infrastructure 2025 Foundations Associate (1Z0-1085-25) exam.

Related Oracle Cloud resources

• Oracle Cloud Infrastructure 2025 Foundations Associate (1Z0-1085-25) study guideKey concepts
• Oracle Cloud practice examsAll Oracle Cloud
• Certification pathWhere this fits
• Certification exam guides & tipsBlog
• Plans & pricingFree & paid
• Oracle Cloud Infrastructure 2025 Architect Associate (1Z0-1072-25) practice examRelated

Oracle Cloud Infrastructure 2025 Foundations Associate (1Z0-1085-25) practice exam FAQ