All Practice Exams

100+ Free OCI Architect Professional Practice Questions

Pass your Oracle Cloud Infrastructure 2026 Architect Professional (1Z0-997-26) exam on the first try — instant access, no signup required.

✓ No registration✓ No credit card✓ No hidden fees✓ Start practicing immediately
100+ Questions
100% Free
1 / 100
Question 1
Score: 0/0

A high-throughput streaming pipeline must buffer telemetry events with consumer-driven offsets and Kafka API compatibility for existing producers and consumers. Which OCI service should be selected?

A
B
C
D
to track
Same family resources

Explore More Oracle Certifications

Continue into nearby exams from the same family. Each card keeps practice questions, study guides, flashcards, videos, and articles in one place.

2026 Statistics

Key Facts: OCI Architect Professional Exam

68%

Passing Score

Oracle University

50

Questions

Oracle University

90 min

Exam Duration

Oracle University

$245

Exam Fee

Oracle University

7

Domain Areas

OCI 2026 Architect Professional blueprint

Professional

Tier (above 1Z0-1072 Associate)

Oracle Certification

OCI 2026 Architect Professional (1Z0-997-26) is a 50-question, 90-minute multiple-choice exam with a 68% passing score and a $245 USD attempt price. The exam blueprint covers seven senior-level domains: cloud-native architecture, high availability and disaster recovery, security, databases, multicloud and hybrid, workload migration, and observability. This is the Professional tier above the Architect Associate (1Z0-1072), which Architect Professional candidates should have already mastered.

Sample OCI Architect Professional Practice Questions

Try these sample questions to test your OCI Architect Professional exam readiness. Each question includes a detailed explanation. Start the interactive quiz above for the full 100+ question experience with AI tutoring.

1A global SaaS company needs RTO of 5 minutes and RPO near zero for a stateful Oracle workload across two OCI regions. Which architecture best satisfies these targets?
A.Active-passive deployment with manual failover and weekly snapshot copy
B.Active-active deployment with Oracle Data Guard in maximum availability mode and traffic-managed DNS steering
C.Single-region deployment with multiple availability domains and cross-AD block volume replication
D.Cold standby region rebuilt from Object Storage backups using Resource Manager
Explanation: For a 5-minute RTO and near-zero RPO across regions, you need an active-active topology with synchronous-leaning data protection. Oracle Data Guard in maximum availability mode (SYNC + ASYNC fallback) keeps the standby transactionally current, and Traffic Management Steering Policies route users to the healthy region quickly enough to meet the RTO.
2An architect is designing a hub-and-spoke network across multiple VCNs in one OCI region. Which OCI capability is the recommended way to enable transit routing between spokes through a centralized firewall in the hub?
A.Local peering gateway between every spoke pair
B.Dynamic Routing Gateway (DRG) v2 with route tables and policy-based routing through the hub VCN
C.Internet Gateway in each spoke pointing to the hub
D.Service Gateway peered to a Network Load Balancer
Explanation: DRG v2 supports attaching multiple VCNs and configuring DRG route tables and import/export route distributions to force spoke-to-spoke traffic through a central hub VCN that hosts the firewall. This is Oracle's recommended hub-and-spoke transit pattern.
3Which OCI service is designed specifically to orchestrate multi-region disaster recovery plans including compute, block volume, file storage, database, and load balancer failover?
A.OCI Resource Manager
B.OCI Full Stack Disaster Recovery
C.OCI Operations Insights
D.OCI Application Migration
Explanation: Full Stack Disaster Recovery (Full Stack DR) is OCI's dedicated DR orchestration service. It coordinates application, compute, networking, storage, and database failover steps across regions in a single declarative DR plan, with switchover and failover automation.
4An enterprise must encrypt sensitive Object Storage buckets using HSM-protected, customer-managed keys that meet FIPS 140-2 Level 3. Which Vault key configuration is required?
A.A software-protected key in the OCI default Vault
B.A virtual private vault with HSM-protected master encryption keys assigned to the buckets
C.A bring-your-own-key (BYOK) PEM file uploaded to Resource Manager
D.A symmetric key stored in OCI Secrets only
Explanation: OCI virtual private vaults are backed by FIPS 140-2 Level 3 HSMs. Creating an HSM-protected master encryption key in a virtual private vault and assigning it to the bucket gives FIPS 140-2 Level 3 customer-managed encryption.
5A regulated customer wants to enforce that only approved compute shapes are launched and that public IP addresses cannot be attached to subnets in a compartment. Which OCI capability enforces this at provisioning time?
A.Cloud Guard responder recipes
B.OCI Security Zone with a maximum-security recipe applied to the compartment
C.OCI Bastion service
D.Vulnerability Scanning Service custom rules
Explanation: Security Zones enforce policy at provisioning time by blocking resource creations that violate the attached recipe. A maximum-security recipe can deny public subnets, public IPs, and non-approved shapes before they are ever created.
6You need to give an OCI Functions function permission to read secrets from Vault without storing any credentials in code or environment variables. Which IAM mechanism is the correct approach?
A.Create an OCI user, generate API keys, and store them in the function
B.Define a dynamic group that matches the function and grant a policy referencing the dynamic group
C.Use the tenancy administrator account credentials
D.Use an instance principal on a separate compute instance
Explanation: OCI Functions support resource principals through dynamic groups. Define a dynamic group whose matching rule selects the function (for example by compartment and resource type), then write a policy granting that dynamic group access to the secret. The function authenticates without any stored credentials.
7An architect is migrating a self-managed Oracle Database 19c on-premises to OCI with the lowest possible downtime and zero data loss. Which Oracle service is designed for this scenario?
A.OCI Database Migration Service using physical (offline) mode
B.Zero Downtime Migration (ZDM) using logical online migration with GoldenGate
C.OCI Storage Gateway
D.OCI Application Migration
Explanation: Zero Downtime Migration (ZDM) is Oracle's purpose-built tool for migrating Oracle databases to OCI. Using its logical online migration mode with Oracle GoldenGate replication keeps the source live until cutover, achieving near-zero downtime and no data loss.
8A team running 60 microservices on OKE wants pod-to-pod mTLS, fine-grained authorization, and traffic shifting for canary deployments without modifying application code. Which OCI-supported approach fits best?
A.Deploy a service mesh (such as Istio or Linkerd) on OKE alongside workloads
B.Configure NSG rules between pods
C.Use OCI WAF for east-west traffic
D.Move all microservices to OCI Functions
Explanation: A service mesh deployed on OKE is the standard pattern to deliver pod mTLS, traffic policy, and progressive delivery (canary, weighted routing) without changing application code. OKE supports running Istio, Linkerd, and similar service meshes.
9Which observability service should an architect choose to ingest, parse, and correlate audit logs, VCN flow logs, and OS-level syslog at petabyte scale with built-in parsers?
A.OCI Monitoring
B.OCI Logging Analytics
C.OCI APM
D.OCI Notifications
Explanation: OCI Logging Analytics is purpose-built for large-scale log ingestion, parsing, correlation, and search across many sources, including audit logs, VCN flow logs, and OS-level logs. It ships with hundreds of pre-built parsers and dashboards.
10An enterprise needs to run Oracle Database close to Azure-hosted analytics workloads for sub-millisecond latency. Which Oracle service is the recommended pattern?
A.OCI-Azure Interconnect with FastConnect cross-connect
B.Oracle Database@Azure deployed in Azure availability zones
C.Oracle Database@Google Cloud
D.Self-managed Oracle Database on Azure VMs with Object Storage replication
Explanation: Oracle Database@Azure runs Oracle Exadata Database Service inside Azure datacenters with native Azure networking. This places Oracle Database physically next to Azure analytics workloads for sub-millisecond latency and a single-vendor support model.

About the OCI Architect Professional Exam

The OCI Architect Professional exam (1Z0-997-26) is Oracle's senior-level Oracle Cloud Infrastructure architecture exam. It validates the ability to design and operate enterprise OCI solutions including high availability, disaster recovery, security architecture, databases, multicloud, hybrid, workload migration, and observability at scale. This is the Professional tier, distinct from the Architect Associate (1Z0-1072) which covers core OCI fundamentals.

Assessment

50 multiple-choice questions

Time Limit

90 minutes

Passing Score

68%

Exam Fee

$245 USD (Oracle University / Oracle MyLearn)

OCI Architect Professional Exam Content Outline

~15%

Architecting Cloud-Native Solutions

Design event-driven and serverless architectures, choose between OKE, Functions, API Gateway, Streaming, Queue, Events, and Notifications, and apply 12-factor patterns at scale.

~18%

High Availability and Disaster Recovery

Design multi-region active-active and active-passive topologies, define RTO/RPO targets, use OCI Full Stack DR, cross-region object storage replication, block volume cross-region replication, and global load balancing patterns.

~15%

Security Architecture

Architect Cloud Guard advanced recipes, Security Zones, Vault HSM-backed keys, customer-managed encryption, Vulnerability Scanning, Data Safe, Bastion, identity domains, federation, and just-in-time access.

~15%

Databases in OCI

Design Autonomous Database, Exadata Cloud@Customer, MySQL HeatWave, sharding, Data Guard, GoldenGate replication, and database security and lifecycle automation.

~12%

Multicloud and Hybrid Solutions

Architect Oracle Database@Azure, @Google, @AWS, OCI-Azure Interconnect, hybrid identity federation, hybrid DNS, and cross-cloud networking patterns.

~12%

Workload Migration

Plan and execute rehost, replatform, and refactor migrations using Application Migration, Database Migration Service, Zero Downtime Migration, and Storage Gateway.

~13%

Observability and Operations

Design Logging, Logging Analytics, Monitoring, APM, Service Connector Hub, Operations Insights, alarms, and large-scale notification routing.

How to Pass the OCI Architect Professional Exam

What You Need to Know

  • Passing score: 68%
  • Assessment: 50 multiple-choice questions
  • Time limit: 90 minutes
  • Exam fee: $245 USD

Keys to Passing

  • Complete 500+ practice questions
  • Score 80%+ consistently before scheduling
  • Focus on highest-weighted sections
  • Use our AI tutor for tough concepts

OCI Architect Professional Study Tips from Top Performers

1Master HA and DR first because senior architects own multi-region tradeoffs: practice with OCI Full Stack DR plans, RTO and RPO targets, and active-active vs active-passive design choices.
2Build a Vault HSM-backed encryption flow end-to-end, including customer-managed keys, key rotation, and integration with Object Storage and Block Volume.
3Drill Autonomous Database advanced features: Data Guard, sharding, GoldenGate replication, and Exadata Cloud@Customer placement decisions.
4Know multicloud connectivity cold: Oracle Database@Azure, OCI-Azure Interconnect, FastConnect partner vs cross-connect, BGP, and IPSec VPN failover patterns.
5Practice migration tool selection: Application Migration, Database Migration Service, Zero Downtime Migration, Storage Gateway, and rehost vs replatform vs refactor decisions.
6Get comfortable with observability at scale: Service Connector Hub, Logging Analytics, APM, Operations Insights, and large-fleet alarm strategy.
7Always read scenario questions for the constraint: cost, RTO, RPO, compliance (HIPAA, PCI-DSS, FedRAMP, SOC), or operational simplicity. The constraint usually picks the answer.

Frequently Asked Questions

What is the OCI 2026 Architect Professional exam?

OCI 2026 Architect Professional (1Z0-997-26) is Oracle's senior-level architect certification for Oracle Cloud Infrastructure. It validates the ability to design and operate enterprise OCI solutions across high availability, disaster recovery, security, databases, multicloud, hybrid, migration, and observability at production scale.

How many questions are on the OCI Architect Professional exam and how long do you get?

The exam consists of 50 multiple-choice questions with a 90-minute time limit. The passing score is 68%, consistent with Oracle's other professional-level Cloud certifications, and the exam fee is $245 USD.

What is the difference between OCI Architect Associate and Architect Professional?

Architect Associate (1Z0-1072) covers core OCI fundamentals: compute, networking, storage, and IAM. Architect Professional (1Z0-997-26) is the senior tier and tests advanced design topics: multi-region HA and DR, security architecture, databases at scale, multicloud and hybrid, workload migration, and enterprise observability. Candidates should hold Associate-level knowledge before attempting Professional.

Which domain matters most on the OCI Architect Professional exam?

High Availability and Disaster Recovery is the heaviest single domain on the Professional exam. Senior architect questions weight multi-region design, RTO/RPO tradeoffs, Full Stack DR, and cross-region replication patterns more heavily than any other topic.

Do I need to take the Architect Associate exam first?

Oracle does not require the Associate as a formal prerequisite, but the Professional exam assumes you already know Associate-level material cold. Most candidates pass the Associate first, then build 6-12 months of OCI hands-on time before sitting for the Professional.

How long should most candidates study for OCI Architect Professional?

Plan 100-160 hours over 8-14 weeks beyond Associate-level knowledge. The biggest gains usually come from building a multi-region OCI lab that exercises Full Stack DR, Vault HSM-backed keys, Autonomous Database with Data Guard, and at least one Oracle Database@Azure or hybrid scenario.