200+ Free OCI Architect Associate Practice Questions

Pass your Oracle Cloud Infrastructure 2025 Architect Associate (1Z0-1072-25) exam on the first try — instant access, no signup required.

✓ No registration✓ No credit card✓ No hidden fees✓ Start practicing immediately

200+ Questions

100% Free

1 / 200

Question 1

Score: 0/0

You need to right-size a new OCI VM without changing its shape family. Which option lets you choose custom OCPU and memory values at launch?

A flexible VM shape

A dedicated VM host

A compute capacity reservation

A platform image

to track

2026 Statistics

Key Facts: OCI Architect Associate Exam

68%

Passing Score

Oracle University

Questions

Oracle University

90 min

Exam Duration

Oracle University

$245

Exam Fee

Oracle University blog

35%

Largest Domain

Networking

2026-05-29

Current Exam Retires

Oracle exam page

As of March 11, 2026, the current OCI Architect Associate exam (1Z0-1072-25) is a 50-question, 90-minute multiple-choice exam with a 68% passing score and a $245 USD exam attempt price for Oracle's core OCI associate and professional certifications. Oracle's public 2025 objectives weight Networking at 35%, Storage at 25%, and Compute and IAM at 20% each. Oracle also states that this specific exam retires on May 29, 2026, with a new exam planned for June 2026.

Sample OCI Architect Associate Practice Questions

Try these sample questions to test your OCI Architect Associate exam readiness. Each question includes a detailed explanation. Start the interactive quiz above for the full 200+ question experience with AI tutoring.

1You need to right-size a new OCI VM without changing its shape family. Which option lets you choose custom OCPU and memory values at launch?

A.A flexible VM shape

B.A dedicated VM host

C.A compute capacity reservation

D.A platform image

Explanation: Flexible VM shapes let you customize OCPUs and memory within the supported limits of that shape family. That makes them the standard choice when you want to tune compute size without switching to a different family. Dedicated VM hosts and capacity reservations solve different problems. Images define the software stack, not the hardware sizing model.

2What is the main benefit of placing two OCI instances in different fault domains within the same availability domain?

A.Lower Object Storage costs

B.Isolation from hardware failure or planned maintenance affecting one fault domain

C.Automatic cross-region disaster recovery

D.The ability to assign public IPs in a private subnet

Explanation: Fault domains provide anti-affinity within a single availability domain. Spreading instances across fault domains reduces the chance that a hardware failure or planned maintenance event impacts all instances at once. This improves availability without requiring multiple availability domains. It does not provide cross-region protection.

3A web tier runs in an OCI instance pool. Which feature can automatically add or remove instances based on CPU utilization or a schedule?

A.A load balancer backend set

B.Autoscaling on the instance pool

C.Cloud-init metadata

D.VNIC route tables

Explanation: OCI Autoscaling integrates with instance pools to scale capacity up or down based on metrics or time-based schedules. This is the built-in way to keep the web tier aligned with demand. Backend sets distribute traffic but do not change pool size. Cloud-init and route tables do not provide scaling behavior.

4Which requirement most strongly indicates using dedicated VM hosts instead of compute capacity reservations?

A.Guaranteeing future shape capacity in an availability domain

B.Single-tenant physical host isolation for compliance or host-based licensing

C.Scheduled OS patching across a fleet

D.Distributing instances across fault domains

Explanation: Dedicated VM hosts are for scenarios that require physical host isolation, such as strict compliance controls or host-based licensing. Capacity reservations only reserve capacity and do not provide host exclusivity. OS patching is handled by other services such as OS Management Hub. Fault domain distribution is a placement choice, not a dedicated-host feature.

5In OS Management Hub, what do you assign to an instance at registration time to define software sources, group membership, and lifecycle environment?

A.A profile

B.A security list

C.An image capability schema

D.A DRG attachment

Explanation: OS Management Hub uses profiles to define the initial registration settings for managed instances. A profile can specify software sources, group membership, and lifecycle environment so systems start in the intended state. Security lists and DRGs are networking constructs. Image capability schemas affect instance launch behavior, not ongoing OS management registration.

6What is true about a regional subnet in OCI?

A.It spans all availability domains in the region

B.It can belong to multiple VCNs at the same time

C.It supports only bare metal instances

D.It requires all VNICs to have public IP addresses

Explanation: A regional subnet spans the entire region and can host resources in any availability domain in that region. This makes it more flexible than an availability-domain-specific subnet. A subnet belongs to only one VCN. Public IP assignment depends on the subnet and VNIC settings, not on whether the subnet is regional.

7Private instances need outbound internet access for package updates but must not accept inbound internet connections. Which gateway should you use?

A.Internet gateway

B.Service gateway

C.NAT gateway

D.Local peering gateway

Explanation: A NAT gateway lets resources in a private subnet reach the public internet without allowing unsolicited inbound traffic from the internet. That makes it the standard design for outbound-only updates from private instances. An internet gateway would require public addressing and exposure. A service gateway is only for Oracle services such as Object Storage.

8Instances in a private subnet need to access Object Storage without traversing the public internet. Which gateway should the route table target?

A.Internet gateway

B.NAT gateway

C.Service gateway

D.Remote peering connection

Explanation: A service gateway enables private access from a VCN to supported Oracle services such as Object Storage. Traffic stays on Oracle's network and does not require public internet paths. NAT gateways are for general internet egress. Remote peering connections are for VCN-to-VCN communication across regions.

9Application servers and database servers share the same subnet. Which construct lets you apply security rules only to those specific resources instead of to the entire subnet?

A.DHCP options

B.A security list

C.A network security group

D.A route table

Explanation: Network security groups let you define shared rules for selected VNIC-associated resources, even when they live in the same subnet as other systems. This is the preferred way to microsegment tiers such as application and database servers. Security lists apply to all VNICs in the subnet. Route tables and DHCP options serve different networking purposes.

10Which OCI load balancing option is designed for high-scale Layer 4 TCP/UDP traffic and preserves the original client source IP?

A.Public Load Balancer

B.Network Load Balancer

C.Service gateway

D.Bastion

Explanation: OCI Network Load Balancer operates at Layer 4 and preserves source IP, which is useful for many TCP and UDP workloads. It is a common choice when very low latency and source IP visibility are important. A standard load balancer is proxy-based and supports Layer 7 features. Service gateways and Bastion solve unrelated connectivity problems.

About the OCI Architect Associate Exam

The OCI Architect Associate exam validates your ability to design core Oracle Cloud Infrastructure solutions across IAM, networking, compute, and storage. It is Oracle's current associate-level architect exam for candidates who already have some hands-on OCI experience and need to prove they can make sound service-selection and architecture decisions.

Assessment

50 multiple-choice questions

Time Limit

90 minutes

Passing Score

68%

Exam Fee

$245 USD (Oracle University / Oracle MyLearn)

OCI Architect Associate Exam Content Outline

20%

Compute

Choose the right OCI compute shapes and images, design for availability and fault domains, use instance pools and autoscaling, understand capacity reservations and dedicated hosts, and apply cloud-init metadata and OS Management Hub correctly.

35%

Networking

Design VCNs and subnets, route traffic with internet, NAT, service gateways, use security lists and NSGs, choose the right load balancer, and plan DRG, VPN, FastConnect, peering, DNS, and Bastion access patterns.

25%

Storage

Select between Object Storage, Block Volumes, and File Storage; apply lifecycle and archival rules; use pre-authenticated requests correctly; and design backups, clones, replication, encryption, and data-protection controls.

20%

Identity and Access Management

Build least-privilege policies, use dynamic groups and resource principals, organize environments with compartments and tags, handle federation and MFA, optimize broad policies, and understand Security Zones and Cloud Guard guardrails.

How to Pass the OCI Architect Associate Exam

What You Need to Know

Passing score: 68%
Assessment: 50 multiple-choice questions
Time limit: 90 minutes
Exam fee: $245 USD

Keys to Passing

Complete 500+ practice questions
Score 80%+ consistently before scheduling
Focus on highest-weighted sections
Use our AI tutor for tough concepts

OCI Architect Associate Study Tips from Top Performers

1Start with networking because it carries 35% of the official weight and drives many architecture tradeoffs across the rest of the exam.

2Build one end-to-end OCI lab that includes a public subnet, a private subnet, internet gateway, NAT gateway, service gateway, NSGs, route tables, and a load balancer so the traffic patterns become intuitive.

3Practice gateway and connectivity decisions until they feel automatic: internet gateway vs NAT gateway vs service gateway, LPG vs DRG, and IPSec VPN vs FastConnect.

4Know storage tradeoffs cold. Be able to justify Object Storage tier selection, when to use PARs, and when block or file storage is the better architectural fit.

5Memorize OCI IAM policy verbs and patterns, especially inspect vs read vs use vs manage, plus dynamic groups, resource principals, and compartment scoping.

6Review the 2025 additions Oracle called out for the architect associate path, especially OS Management Hub and IAM Policy Optimization.

Frequently Asked Questions

What is the OCI Architect Associate exam?

OCI Architect Associate is Oracle's current associate-level architecture exam for Oracle Cloud Infrastructure. It tests whether you can design core OCI solutions across identity and access management, networking, compute, and storage by choosing the right service and configuration for each scenario.

How many questions are on the OCI Architect Associate exam and how long do you get?

Oracle's official exam page lists 50 multiple-choice questions and a 90-minute time limit for exam 1Z0-1072-25. The same page lists a 68% passing score.

What changed for OCI Architect Associate in 2026?

The key 2026 change is lifecycle-related, not a new weighting change: Oracle's exam page says 1Z0-1072-25 retires on May 29, 2026, and that a new exam will be available in June 2026. As of March 11, 2026, Oracle had not publicly posted a newer replacement blueprint than the current 2025 weights.

Which domain matters most on the OCI Architect Associate exam?

Networking is the largest domain at 35%, so it deserves the most study time. You need to be comfortable with VCN design, subnet placement, route tables, gateways, DRG patterns, load balancers, peering, DNS, and network security controls.

What experience should you have before taking the exam?

Oracle's 2025 OCI certification update describes the associate level as being aimed at candidates with about six months of experience designing and implementing OCI solutions. There is no formal prerequisite exam published, but hands-on experience makes the scenario questions much easier.

How long should most candidates study for OCI Architect Associate?

Most candidates should plan roughly 60 to 100 hours of study over about four to eight weeks, depending on prior cloud experience. The biggest gains usually come from building one OCI lab that includes VCNs, gateways, NSGs, a load balancer, object storage, block volume backups, and IAM policies instead of only reading docs.