OCI Foundations

Which statement best describes OCI's distributed cloud approach?

• AOCI services are available only in Oracle-owned public regions
• BOCI delivers consistent cloud services across public regions, customer locations, and spe…
• COCI requires all workloads to run in a single global control plane
• DOCI supports only SaaS applications, not infrastructure services

In OCI, what is a region?

• AA logical boundary inside a subnet
• BA localized geographic area that contains one or more availability domains
• CA single physical server rack
• DA billing container for related services

What is an availability domain in OCI?

• AA set of IAM policies applied to a compartment
• BOne or more data centers within a region that are isolated from each other
• CA private IP range inside a VCN
• DA grouping of resources that share a tag namespace

Why would you place compute instances in different fault domains within the same availability domain?

• ATo give them public IP addresses automatically
• BTo reduce the impact of hardware or maintenance failures on all instances at once
• CTo avoid paying for block volumes
• DTo enable cross-region replication

Which OCI construct represents your organization's secure top-level cloud account?

• ACompartment
• BAvailability domain
• CTenancy
• DFault domain

What is the main reason to use compartments in OCI?

• ATo increase internet bandwidth for a VCN
• BTo organize resources and apply access controls to separate teams or projects
• CTo replace identity groups for user management
• DTo convert a private subnet into a public subnet

Which statement about OCI Free Tier is correct?

• AAlways Free resources expire when the initial trial credits end
• BFree Trial provides time-limited credits, while Always Free includes eligible services wi…
• CAlways Free includes every OCI service at full capacity
• DFree Trial can be used only after purchasing annual commitment

An application must continue running even if an entire OCI region becomes unavailable. Which design choice best meets this requirement?

• ADeploy across two fault domains in one availability domain
• BDeploy across two subnets in one VCN
• CDeploy across multiple availability domains in one region
• DDeploy in more than one region

Which OCI service provides virtual machine and bare metal servers?

• ACompute
• BObject Storage
• CDNS
• DBudgets

When choosing a shape for an OCI compute instance, what are you primarily selecting?

• AThe number of OCPUs, memory, and sometimes local storage or networking characteristics
• BThe number of IAM policies attached to the instance
• CThe durability level of Object Storage
• DThe compartment hierarchy for the instance

Why create a custom image in OCI?

• ATo standardize new instances from a preconfigured OS and software stack
• BTo increase the CIDR range of a VCN
• CTo store archival backups more cheaply than Object Storage
• DTo encrypt a subnet automatically

Which OCI feature combination helps a web tier automatically grow or shrink by adding or removing identical compute instances?

• ARoute tables and security lists
• BInstance pools and autoscaling
• CCompartments and quotas
• DVault and Cloud Guard

A batch processing workload can tolerate interruptions and should minimize compute cost. Which instance option is often the best fit?

• ADedicated VM hosts
• BPreemptible instances
• CLoad balancer backends
• DBlock volumes

What does Oracle Container Engine for Kubernetes (OKE) provide?

• AManaged Kubernetes for deploying and operating containerized applications
• BOnly a container registry
• COnly a serverless platform
• DOnly bare metal provisioning

Which OCI service is best for running event-driven code without provisioning or managing servers?

• AFunctions
• BBastion
• CFastConnect
• DFile Storage

What is a Virtual Cloud Network (VCN) in OCI?

• AA private virtual network you define in OCI
• BAn Oracle-managed DNS zone
• CA physical data center
• DAn IAM identity store

Which statement about a private subnet in OCI is correct?

• AResources in it must have public IP addresses
• BResources in it cannot communicate outside the VCN at all
• CResources in it normally do not have public IP addresses and typically use a NAT gateway…
• DIt is used only for Object Storage

Which gateway allows internet traffic to and from resources that have public IP addresses in a VCN?

• AService gateway
• BNAT gateway
• CInternet gateway
• DLocal peering gateway

A private application server must download OS updates from the internet without accepting inbound internet connections. Which OCI component is designed for this?

• ANAT gateway
• BInternet gateway
• CService gateway
• DDNS zone

Your instances need private access to Object Storage without sending traffic over the public internet. Which networking component should you use?

• AService gateway
• BInternet gateway
• CNAT gateway
• DDynamic routing gateway

Which OCI networking component is required when connecting a VCN to an on-premises network using IPSec VPN or FastConnect?

• ANetwork security group
• BDynamic routing gateway
• CInternet gateway
• DService gateway

What is the primary job of a route table in OCI networking?

• AIt stores user credentials for subnets
• BIt determines where traffic from a subnet is forwarded
• CIt encrypts block volumes
• DIt balances traffic across backend servers

Which statement correctly compares OCI network security groups (NSGs) and security lists?

• ABoth apply only at the tenancy level
• BNSGs apply to selected VNICs, while security lists apply at the subnet level
• CSecurity lists can be used only with public subnets
• DNSGs replace route tables

What is the main purpose of an OCI Load Balancer?

• ATo store unstructured files
• BTo distribute incoming application traffic across multiple backends
• CTo manage IAM users
• DTo create compartments

What does OCI DNS primarily help you do?

• ADefine domain records that map names to IP addresses and other targets
• BEncrypt block volumes with customer-managed keys
• CLaunch Kubernetes clusters
• DCreate budget alerts

How does OCI Content Delivery Network improve user experience for static web content?

• ABy moving the database into a private subnet
• BBy caching content closer to users at edge locations
• CBy automatically resizing compute shapes
• DBy replacing the need for DNS

Which OCI storage service is designed for durable storage of unstructured data such as backups, logs, images, and media files?

• AObject Storage
• BBlock Volume
• CFile Storage
• DCompute

You have data that is rarely accessed but still needs immediate retrieval when requested. Which Object Storage tier is the better fit than Archive Storage?

• AStandard
• BInfrequent Access
• CBoot Volume
• DFile Storage

Which OCI storage service is best for attaching persistent block devices to a compute instance for boot or database volumes?

• AObject Storage
• BBlock Volume
• CDNS
• DBudgets

Several Linux instances need shared, scalable network file storage mounted over NFS. Which OCI service fits this need?

• AArchive Storage
• BBlock Volume
• CFile Storage
• DLoad Balancer

Which storage choice is most cost-effective for long-term retention when retrieval can take hours and access is very rare?

• AObject Storage Standard
• BFile Storage
• CArchive Storage
• DBoot Volume

Which OCI database service is designed to automate patching, backups, tuning, and much of the routine administration for Oracle databases?

• AAutonomous Database
• BOCI DNS
• CLoad Balancer
• DFile Storage

A team wants to run an Oracle database in OCI but keep more administrative control over configuration than Autonomous Database provides. Which service is the better fit?

• ABase Database Service
• BOCI Functions
• CObject Storage
• DCloud Guard

Under OCI's shared security model, who is responsible for patching and securing the guest operating system on a customer-managed compute instance?

• AOracle only
• BThe customer
• CThe load balancer service
• DThe region administrator

What is the recommended way to grant the same OCI permissions to multiple users?

• ACreate a separate tenancy for each user
• BPlace users in a group and write policies for the group
• CAssign a public IP to every user
• DStore the permissions in a route table

An OCI compute instance needs permission to read objects from a bucket without storing user API keys on the server. What should you use?

• AA dynamic group with an IAM policy
• BA public subnet and internet gateway
• CA load balancer and a DNS zone
• DA free-form tag