O R A C L E C E R T I F I C A T I O N
1Z0-1085 Oracle Cloud Infrastructure Foundations 2022 Associate Practice Exam
Exam Number: 4821 | Last updated April 19, 2026 | 700+ questions across 4 vendor-aligned objectives
The 1Z0-1085 Oracle Cloud Infrastructure Foundations 2022 Associate exam is the entry-level credential for anyone starting a career in Oracle Cloud. It targets business stakeholders, new cloud engineers, solution analysts, and sales professionals who need conversational fluency in OCI services, pricing, and the shared responsibility model. Passing signals you can describe core OCI capabilities and steer early architecture conversations toward the right building blocks.
The heaviest content is Core OCI Services (roughly 40%), covering compute, storage, networking, databases, and the identity and access primitives every workload depends on. Cloud Concepts and OCI Architecture contributes another 25% with regions, availability domains, fault domains, and the Console, CLI, and SDK entry points.
Security, Compliance, and Governance sits near 20% and drills into the shared responsibility model, encryption defaults, compartments, and tagging. Pricing, Support, and Operations Tooling rounds out the remaining weight with universal credits, pay-as-you-go, cost estimation, support tiers, and the observability services Oracle offers out of the box.
Every answer links to the source. Each explanation below includes a hyperlink to the exact Oracle documentation page the question was derived from. PowerKram is the only practice platform with source-verified explanations. Learn about our methodology →
810
practice exam users
95.1%
satisfied users
94.2%
passed the exam
5/5
quality rating
Test your 1Z0 1085 OCI Foundations Associate knowledge
10 of 700+ questions
Question #1 - Core OCI Services
A new cloud analyst at a regional bank is evaluating which OCI storage service fits different needs: a web app uploading user avatars, an ERP requiring block-level OS disk, and an HR department wanting a shared folder across Linux VMs.
Which mapping is correct?
A) Object Storage for avatars, Block Volume for ERP OS disk, File Storage for the HR shared folder.
B) Block Volume for avatars, File Storage for ERP OS disk, Object Storage for the HR shared folder.
C) Archive Storage for all three.
D) File Storage for avatars, Archive for ERP OS disk, Object Storage for the HR shared folder.
Show solution
Correct answers: A – Explanation:
Object Storage is designed for user content like avatars (HTTP-accessible, scalable). Block Volume is the OS disk attached to a compute instance. File Storage provides NFS-based shared access for Linux VMs — exactly what HR needs. Option D, Option B, and Option C mismatch the service-to-use-case pairing. Source: Check Source
Question #2 - Cloud Concepts and OCI Architecture
A solutions analyst explains OCI regional design to a customer worried about outages. The customer wants the highest fault isolation for their mission-critical app: a single region is acceptable, but within that region, the app must survive any one physical component failure.
Which OCI construct provides fault isolation within a single region?
A) A single Availability Domain only.
B) Fault Domains within an Availability Domain.
C) A single Virtual Cloud Network.
D) Cross-region replication.
Show solution
Correct answers: B – Explanation:
Fault Domains represent isolated hardware within an Availability Domain; spreading workloads across FDs protects against single-component failure inside the region. Option A is the failure domain itself. Option D is for regional outages, not single-component failures. Option C is a networking boundary, not a fault boundary. Source: Check Source
Question #3 - Security, Compliance, and Governance
A cloud governance lead at a healthcare company wants a tenancy structure that separates production, non-production, and a security operations environment, with per-environment billing reports and IAM policies.
Which OCI construct delivers this separation with consolidated billing?
A) A separate tenancy for each environment.
B) A single flat tenancy with no compartments.
C) Compartments for each environment within a single tenancy.
D) A manual spreadsheet of resources per environment.
Show solution
Correct answers: C – Explanation:
Compartments are the native OCI mechanism for segregating resources within a tenancy, allowing per-compartment IAM policies and cost reports while keeping a single billing relationship. Option A fragments billing. Option B loses structure. Option D is outside the system. Source: Check Source
Question #4 - Core OCI Services
A business stakeholder asks which OCI database service requires the least DBA effort: provisioning, patching, tuning, and backups should all be handled automatically.
Which service best fits this hands-off profile?
A) A Compute instance with Oracle XE manually installed.
B) Base Database Service VM.
C) Exadata Cloud@Customer self-managed.
D) Oracle Autonomous Database.
Show solution
Correct answers: D – Explanation:
Autonomous Database automates provisioning, patching, tuning, and backups, which matches hands-off. Option B is partially managed. Option A is fully self-managed. Option C typically requires more customer involvement. Source: Check Source
Question #5 - Cloud Concepts and OCI Architecture
A pre-sales engineer wants to demonstrate a repeatable infrastructure deployment using Terraform, with state managed by OCI rather than locally.
Which OCI service delivers managed Terraform provisioning?
A) Resource Manager with stacks.
B) Object Storage with .tfstate files uploaded manually.
C) Cloud Shell with kubectl.
D) The Console click-through only.
Show solution
Correct answers: A – Explanation:
Resource Manager runs Terraform, manages state in OCI, and organizes resources as stacks — the managed IaC answer. Option C is for Kubernetes. Option B is not managed. Option D is not repeatable. Source: Check Source
Question #6 - Pricing, Support, and Operations
A procurement lead wants to commit to a cloud spend up front in exchange for discounts, with the ability to use the credits flexibly across services like Compute, Storage, and Autonomous Database.
Which OCI purchasing model fits?
A) Strict per-service contracts for each OCI service.
B) Universal Credits (annual commitment with service flexibility).
C) Free-tier only.
D) Pay-as-you-go with no discounts.
Show solution
Correct answers: B – Explanation:
Universal Credits are an annual commitment used flexibly across OCI services, delivering discounts for the commitment. Option A does not offer flexibility. Option D has no discount. Option C is too small for an enterprise commitment. Source: Check Source
Question #7 - Security, Compliance, and Governance
A customer asks which part of cloud security is Oracle’s responsibility and which is theirs. They run VMs on OCI with Oracle Linux and their own application.
Under the OCI shared responsibility model, who secures what?
A) Security is equally split regardless of the service model.
B) The customer secures everything including physical data center.
C) Oracle secures the physical infrastructure and hypervisor; the customer secures the guest OS, application, data, and IAM configuration.
D) Oracle secures everything end to end.
Show solution
Correct answers: C – Explanation:
For IaaS, Oracle secures the physical facility, hardware, and hypervisor, and the customer is responsible for everything above the hypervisor — OS, app, data, and IAM. Option D understates the customer’s responsibility. Option B overstates it. Option A ignores the IaaS/PaaS/SaaS split. Source: Check Source
Question #8 - Cloud Concepts and OCI Architecture
A developer needs the quickest way to issue OCI commands from her laptop without installing an SDK, while still getting autocomplete and API access.
Which OCI tool fits best?
A) SSH to a random OCI instance without authentication.
B) A custom Python script built from scratch.
C) The Console only, with no terminal access.
D) OCI Cloud Shell, a browser-based terminal with the CLI preinstalled.
Show solution
Correct answers: D – Explanation:
Cloud Shell is a free browser-based terminal with the CLI, SDKs, and credentials pre-provisioned — ideal for quick command-line work. Option B requires setup. Option C is not a terminal. Option A is insecure. Source: Check Source
Question #9 - Core OCI Services
A web team needs to distribute HTTPS traffic across three backend instances with session persistence and SSL termination at the edge.
Which OCI service fits a single-instance 1 TB high-IOPS temporary volume?
A) Flexible Load Balancer with HTTPS listener and session persistence.
B) Network Load Balancer for TCP only.
C) A manual DNS round-robin.
D) Object Storage as a proxy.
Show solution
Correct answers: A – Explanation:
The Flexible (application) Load Balancer supports HTTPS, SSL termination, and session persistence — the exact requirement. Option B is layer 4 and does not support SSL termination. Option C lacks health checks. Option D is storage, not traffic distribution. Source: Check Source
Question #10 - Core OCI Services
A batch processing workload needs 1 TB of temporary storage attached to a single compute instance with high IOPS, deleted when the instance terminates.
Which OCI storage fits best?
A) Archive Object Storage.
B) File Storage mounted from another region.
C) Block Volume with high performance tier, attached to the instance.
D) A shared folder on a different instance.
Show solution
Correct answers: C – Explanation:
Block Volume is instance-attached, supports high IOPS tiers, and can be configured to delete on termination for temporary use. Option A is for cold archive. Option B is cross-region and not performance-oriented. Option D is not a supported pattern. Source: Check Source
Get 700+ more questions with source-linked explanations
Every answer traces to the exact Oracle documentation page — so you learn from the source, not just memorize answers.
Exam mode & learn mode · Score by objective · Updated April 19, 2026
Learn more...
What the 1Z0 1085 OCI Foundations Associate exam measures
- Core OCI services (40%) — describe compute shapes, block and object storage, virtual cloud networks, Oracle Autonomous Database, and the IAM primitives that govern access to every resource.
- Cloud concepts and OCI architecture (25%) — explain regions, availability domains, fault domains, and the Console, CLI, SDK, and Resource Manager entry points.
- Security, compliance, and governance (20%) — apply the shared responsibility model, describe default encryption, and use compartments and tags for tenant-level governance.
- Pricing, support, and operations (15%) — select universal credits or pay-as-you-go, estimate spend with the Cost Estimator, and pick the right support tier and observability service for the scenario.
How to prepare for this exam
- Review the official 1Z0-1085 exam page to capture the current objectives and weights.
- Complete the Oracle University OCI Foundations Associate learning path on MyLearn, which is free and covers every objective.
- Create an OCI always-free tenancy and click through the Console for compute, networking, storage, and Autonomous Database at least once — the visual cues stick.
- Apply the knowledge on real conversations: explain OCI billing to a colleague, draft a one-page architecture for a simple workload, or map a current on-prem stack to OCI services.
- Master one objective at a time, starting with core OCI services since it carries the most weight.
- Run PowerKram learn mode to see feedback after every question with sourced links back to Oracle documentation.
- Finish with PowerKram exam mode across all objectives until you pass three full-length attempts in a row.
Career paths and salary outlook
1Z0-1085 is the starting line for several cloud career tracks:
- Cloud Support Engineer (OCI) — $75,000–$105,000 (Glassdoor).
- Junior Cloud Engineer — $80,000–$110,000 (PayScale).
- Cloud Presales Consultant — $100,000–$140,000 (U.S. Bureau of Labor Statistics).
Official resources
Start with the OCI Foundations Associate Learning Path on Oracle MyLearn. Reinforce with the Oracle Cloud Infrastructure documentation and the Oracle Cloud Free Tier overview.