A global SaaS company needs RTO of 5 minutes and RPO near zero for a stateful Oracle workload across two OCI regions. Which architecture best satisfies these targets?
High Availability Disaster Recovery
Question · Hard
An architect is designing a hub-and-spoke network across multiple VCNs in one OCI region. Which OCI capability is the recommended way to enable transit routing between spokes through a centralized firewall in the hub?
Advanced Networking
Question · Medium
Chapter 1: Exam Overview & Architecture Foundations
1.1 Exam Logistics, the 2026 Blueprint & How to Use This Guide
Study guide
Which OCI service is designed specifically to orchestrate multi-region disaster recovery plans including compute, block volume, file storage, database, and load balancer failover?
Question · Easy
Tech Exam Prep Podcast
Listen on Spotify
Podcast
An enterprise must encrypt sensitive Object Storage buckets using HSM-protected, customer-managed keys that meet FIPS 140-2 Level 3. Which Vault key configuration is required?
Security Architecture
A regulated customer wants to enforce that only approved compute shapes are launched and that public IP addresses cannot be attached to subnets in a compartment. Which OCI capability enforces this at provisioning time?
You need to give an OCI Functions function permission to read secrets from Vault without storing any credentials in code or environment variables. Which IAM mechanism is the correct approach?
1.2 The OCI Well-Architected Framework & Architectural Tradeoffs
An architect is migrating a self-managed Oracle Database 19c on-premises to OCI with the lowest possible downtime and zero data loss. Which Oracle service is designed for this scenario?
Workload Migration
A team running 60 microservices on OKE wants pod-to-pod mTLS, fine-grained authorization, and traffic shifting for canary deployments without modifying application code. Which OCI-supported approach fits best?
Cloud Native Architecture
Which observability service should an architect choose to ingest, parse, and correlate audit logs, VCN flow logs, and OS-level syslog at petabyte scale with built-in parsers?
Observability Operations
An enterprise needs to run Oracle Database close to Azure-hosted analytics workloads for sub-millisecond latency. Which Oracle service is the recommended pattern?
Multicloud Hybrid
Chapter 2: High Availability & Resilient Design
2.1 Availability Domains, Fault Domains, Instance Pools & Load Balancers
You must give a contractor temporary, audited shell access to private compute instances for 4 hours a day for 30 days, with no public IP and no VPN required. Which OCI capability fits best?
An enterprise wants to centralize identity for OCI, Oracle SaaS, and third-party SaaS applications, with SCIM provisioning and SAML/OIDC federation. Which OCI service is the right primary identity layer?
Which database option is best for a workload that requires Oracle Database performance and features in a customer datacenter for data sovereignty, billed and managed as a cloud service?
Databases In Oci
A telco needs 10 Gbps private connectivity between an on-premises datacenter and OCI with a private peering directly to a partner's network already collocated with Oracle. Which FastConnect model fits?
2.2 OCI DNS Traffic Steering, Geolocation & Health Checks
To cost-effectively serve infrequently accessed but always-online media files from Object Storage with single-digit-millisecond first-byte latency when needed, which storage tier should the architect choose?
An architect must replicate transactional changes from an on-premises Oracle Database to an OCI Autonomous Database with bidirectional support, low latency, and minimal application impact for an active-active topology. Which OCI service fits?
An architect is designing OCI VCN peering across two regions for an active-active workload. Which DRG capability is required to enable cross-region transit traffic at scale?
A regulated workload requires that all OCI Audit logs and VCN flow logs be retained for 7 years and exported to a SIEM for continuous correlation. Which OCI pattern best meets this requirement?
2.3 Block Volume Replication, Volume Groups & Backup Policies
Which OCI capability enforces that an Object Storage bucket cannot be deleted or overwritten for a specified retention period, satisfying WORM-style compliance?
A retail platform expects unpredictable traffic spikes 50x baseline during promotions. The team wants serverless event-driven order processing with automatic concurrency scaling and pay-per-invocation billing. Which OCI service is the best fit?
To minimize blast radius for a tenancy that hosts production, staging, and dev workloads for many internal teams, which compartment design pattern is recommended?
Which OCI Database option is best for a 50-TB OLTP workload requiring built-in machine learning, automatic indexing, and self-patching with no DBA intervention?
2.4 Object Storage Replication, Versioning & Retention Rules (WORM)
A multinational must guarantee that data classified as personal stays inside an EU OCI region while still allowing global users to access non-personal application data. Which architecture pattern fits best?
For a global web tier, the architect needs DNS-based routing that sends users to the closest healthy region and automatically removes failed regions from rotation. Which OCI capability fits?
You need to cross-region replicate a Block Volume with crash-consistent point-in-time copies for DR. Which native OCI capability provides this?
Which OCI service ingests time-series metrics and supports custom metric publication for application-defined KPIs with built-in alarms?
Chapter 3: Full Stack Disaster Recovery
3.1 Full Stack Disaster Recovery: Protection Groups, Members & Permissions
An architect needs to share a single read-write file system across many OKE pods on multiple worker nodes for legacy POSIX applications. Which OCI service is the recommended choice?
Cloud Guard reports a CRITICAL problem: a public Object Storage bucket containing PII. The architect wants the bucket to be made private automatically without human intervention. Which Cloud Guard capability achieves this?
A team rehosts a Linux app from on-premises to OCI with minimal change. The app expects a stable POSIX path for shared content. Which migration tool best fits a lift-and-shift VM image into OCI?
Which OCI capability enables federation with an external SAML 2.0 identity provider so users sign into OCI with their corporate credentials and SCIM provisions accounts automatically?
3.2 DR Plans: Switchover, Failover, Prechecks & Plan Execution
A workload has 100 ms tolerance for inter-region replication and must survive an entire OCI region loss. Which database protection topology is the simplest fit?
The architect must design encryption-in-use protection for a sensitive analytical workload running on OCI Compute. Which OCI capability provides confidential computing with hardware-rooted memory encryption?
A high-throughput streaming pipeline must buffer telemetry events with consumer-driven offsets and Kafka API compatibility for existing producers and consumers. Which OCI service should be selected?
An architect needs to protect a public REST API hosted by API Gateway against OWASP Top 10 attacks and bot abuse, with rate limiting and IP reputation. Which OCI services should be combined?
3.3 DR Drills, Plan Customization & Operational Readiness
For a global content platform, the architect wants to terminate TLS, route based on path and header, and offer L7 health checks across many backend sets in one region. Which load balancer choice fits?
To run a deterministic, declarative deployment pipeline that provisions OCI infrastructure across many compartments using shared modules, version pinning, and drift detection, which OCI capability fits best?
A bank requires database activity monitoring, sensitive data discovery, and masking before non-production refreshes for Oracle Databases. Which OCI service is purpose-built for this?
An architect must maintain a multi-region active-active workload's session state with single-digit-millisecond reads. Which OCI option is the closest fit when keeping data within OCI?
Loading more…