PracticeVideosBlogFlashcards
All Practice Exams

Free Practice Questions for OCI Architect Professional

Exam-style questions and explanations by OpenExamPrep.

✓ No registration✓ No credit card
100+ Questions
100% Free
Exam Review

Key Facts: OCI Architect Professional Exam

68%

Passing Score

Oracle University

50

Questions

Oracle University

90 min

Exam Duration

Oracle University

$245

Exam Fee

Oracle University

5

Weighted Objectives

Oracle MyLearn 1Z0-997-26 exam page

Professional

Tier (above 1Z0-1072 Associate)

Oracle Certification

OCI 2026 Architect Professional (1Z0-997-26) is a 50-question, 90-minute multiple-choice exam with a 68% passing score and a US$245 attempt price. The blueprint has five weighted objectives: security 25%, cloud-native solutions 20%, databases 20%, observability 20%, and high availability and disaster recovery 15%. Multicloud and migration design are covered by other Oracle professional exams, not as separate objectives here.

Sample OCI Architect Professional Practice Questions

Try these sample questions to review concepts for the OCI Architect Professional exam. Each question includes a detailed explanation. Start the interactive quiz above for the full 100+ question experience with AI tutoring.

1A global SaaS company needs RTO of 5 minutes and RPO near zero for a stateful Oracle workload across two OCI regions. Which architecture best satisfies these targets?
A.Active-passive deployment with manual failover and weekly snapshot copy
B.Active-active deployment with Oracle Data Guard in maximum availability mode and traffic-managed DNS steering
C.Single-region deployment with multiple availability domains and cross-AD block volume replication
D.Cold standby region rebuilt from Object Storage backups using Resource Manager
Explanation: For a 5-minute RTO and near-zero RPO across regions, you need an active-active topology with synchronous-leaning data protection. Oracle Data Guard in maximum availability mode (SYNC + ASYNC fallback) keeps the standby transactionally current, and Traffic Management Steering Policies route users to the healthy region quickly enough to meet the RTO.
2An architect is designing a hub-and-spoke network across multiple VCNs in one OCI region. Which OCI capability is the recommended way to enable transit routing between spokes through a centralized firewall in the hub?
A.Local peering gateway between every spoke pair
B.Dynamic Routing Gateway (DRG) v2 with route tables and policy-based routing through the hub VCN
C.Internet Gateway in each spoke pointing to the hub
D.Service Gateway peered to a Network Load Balancer
Explanation: DRG v2 supports attaching multiple VCNs and configuring DRG route tables and import/export route distributions to force spoke-to-spoke traffic through a central hub VCN that hosts the firewall. This is Oracle's recommended hub-and-spoke transit pattern.
3Which OCI service is designed specifically to orchestrate multi-region disaster recovery plans including compute, block volume, file storage, database, and load balancer failover?
A.OCI Resource Manager
B.OCI Full Stack Disaster Recovery
C.OCI Operations Insights
D.OCI Application Migration
Explanation: Full Stack Disaster Recovery (Full Stack DR) is OCI's dedicated DR orchestration service. It coordinates application, compute, networking, storage, and database failover steps across regions in a single declarative DR plan, with switchover and failover automation.
4An enterprise must encrypt sensitive Object Storage buckets using HSM-protected, customer-managed keys that meet FIPS 140-2 Level 3. Which Vault key configuration is required?
A.A software-protected key in the OCI default Vault
B.A virtual private vault with HSM-protected master encryption keys assigned to the buckets
C.A bring-your-own-key (BYOK) PEM file uploaded to Resource Manager
D.A symmetric key stored in OCI Secrets only
Explanation: OCI virtual private vaults are backed by FIPS 140-2 Level 3 HSMs. Creating an HSM-protected master encryption key in a virtual private vault and assigning it to the bucket gives FIPS 140-2 Level 3 customer-managed encryption.
5A regulated customer wants to enforce that only approved compute shapes are launched and that public IP addresses cannot be attached to subnets in a compartment. Which OCI capability enforces this at provisioning time?
A.Cloud Guard responder recipes
B.OCI Security Zone with a maximum-security recipe applied to the compartment
C.OCI Bastion service
D.Vulnerability Scanning Service custom rules
Explanation: Security Zones enforce policy at provisioning time by blocking resource creations that violate the attached recipe. A maximum-security recipe can deny public subnets, public IPs, and non-approved shapes before they are ever created.
6You need to give an OCI Functions function permission to read secrets from Vault without storing any credentials in code or environment variables. Which IAM mechanism is the correct approach?
A.Create an OCI user, generate API keys, and store them in the function
B.Define a dynamic group that matches the function and grant a policy referencing the dynamic group
C.Use the tenancy administrator account credentials
D.Use an instance principal on a separate compute instance
Explanation: OCI Functions support resource principals through dynamic groups. Define a dynamic group whose matching rule selects the function (for example by compartment and resource type), then write a policy granting that dynamic group access to the secret. The function authenticates without any stored credentials.
7An architect is migrating a self-managed Oracle Database 19c on-premises to OCI with the lowest possible downtime and zero data loss. Which Oracle service is designed for this scenario?
A.OCI Database Migration Service using physical (offline) mode
B.Zero Downtime Migration (ZDM) using logical online migration with GoldenGate
C.OCI Storage Gateway
D.OCI Application Migration
Explanation: Zero Downtime Migration (ZDM) is Oracle's purpose-built tool for migrating Oracle databases to OCI. Using its logical online migration mode with Oracle GoldenGate replication keeps the source live until cutover, achieving near-zero downtime and no data loss.
8A team running 60 microservices on OKE wants pod-to-pod mTLS, fine-grained authorization, and traffic shifting for canary deployments without modifying application code. Which OCI-supported approach fits best?
A.Deploy a service mesh (such as Istio or Linkerd) on OKE alongside workloads
B.Configure NSG rules between pods
C.Use OCI WAF for east-west traffic
D.Move all microservices to OCI Functions
Explanation: A service mesh deployed on OKE is the standard pattern to deliver pod mTLS, traffic policy, and progressive delivery (canary, weighted routing) without changing application code. OKE supports running Istio, Linkerd, and similar service meshes.
9Which observability service should an architect choose to ingest, parse, and correlate audit logs, VCN flow logs, and OS-level syslog at petabyte scale with built-in parsers?
A.OCI Monitoring
B.OCI Logging Analytics
C.OCI APM
D.OCI Notifications
Explanation: OCI Logging Analytics is purpose-built for large-scale log ingestion, parsing, correlation, and search across many sources, including audit logs, VCN flow logs, and OS-level logs. It ships with hundreds of pre-built parsers and dashboards.
10An enterprise needs to run Oracle Database close to Azure-hosted analytics workloads for sub-millisecond latency. Which Oracle service is the recommended pattern?
A.OCI-Azure Interconnect with FastConnect cross-connect
B.Oracle Database@Azure deployed in Azure availability zones
C.Oracle Database@Google Cloud
D.Self-managed Oracle Database on Azure VMs with Object Storage replication
Explanation: Oracle Database@Azure runs Oracle Exadata Database Service inside Azure datacenters with native Azure networking. This places Oracle Database physically next to Azure analytics workloads for sub-millisecond latency and a single-vendor support model.

About the OCI Architect Professional Exam

The OCI Architect Professional exam (1Z0-997-26) is Oracle's professional-level Oracle Cloud Infrastructure architecture exam. Its 2026 blueprint has five objectives: high availability and disaster recovery with Full Stack DR (15%), cloud-native solutions (20%), security (25%), databases (20%), and observability (20%). It sits above the Architect Associate exam, which covers core OCI fundamentals.

Exam sponsor: Oracle University / Oracle MyLearn. The requirements and fees below concern the certification or admission exam, separate from our free practice resources.

Assessment

50 multiple-choice questions

Time Limit

90 minutes

Passing Score

68%

Exam / Certification Fees

$245 USD

Exam sponsor website

Fees, eligibility, and exam policies can change. Confirm them with the exam sponsor before applying or paying.

Our practice resources: topics covered

We aim to reflect publicly available exam outlines and topic information in our study resources. Coverage, format, and difficulty may differ from the actual exam, and we cannot guarantee that every detail is accurate or current. Confirm exam requirements, fees, and policies with the official exam sponsor.

15%

Architect High Availability and Disaster Recovery Solutions

Design scalable, resilient, highly available architectures and plan disaster recovery with OCI Full Stack Disaster Recovery.

20%

Architect Cloud-Native Solutions

Build microservices and container solutions with OKE, Container Instances, and OCI DevOps; manage images with OCIR and OKE; use OCI Functions and Resource Manager for serverless and Infrastructure as Code.

25%

Architect Security Solutions

Apply layered security and governance with Bastion, Zero Trust Packet Routing, Network Firewall, WAF, Certificates, Vault key management, and Organizations Management.

20%

Architecting, Implementing, and Operating Databases in OCI

Deploy and operate Base Database Service and Autonomous AI Database, protect databases with Autonomous Recovery Service, and use Globally Distributed Autonomous AI Database and OCI Cache.

20%

Implementing Observability Solutions

Use Monitoring, Alarms, Notifications, and metric queries; Logging with custom logs, logging queries, and Audit; and Connector Hub with OCI Search.

Preparing for the OCI Architect Professional Exam

What You Need to Know

  • Passing score: 68%
  • Assessment: 50 multiple-choice questions
  • Time limit: 90 minutes
  • Exam / certification fees: $245 USD Official sources

Using Our Practice Resources

  • Work through all 100 available questions
  • Review every answer and explanation
  • Track weak areas and revisit them
  • Use our AI tutor for tough concepts

OCI Architect Professional: Suggested Study Strategy

1Start with security because it carries 25% of the exam: practice IAM policy design, Cloud Guard, Security Zones, Bastion, ZPR, Network Firewall, WAF, Certificates, and Vault keys.
2Build a Full Stack DR lab with DR protection groups, a Switchover plan, prechecks, and a drill, and know how plan groups run in sequence while steps inside a group run in parallel.
3Know OKE basic versus enhanced clusters, VCN-native pod networking, workload identity, OCIR image signing, and OCI DevOps deployment strategies.
4Separate Base Database Service responsibilities from Autonomous AI Database automation, and memorize Autonomous Data Guard RTO and RPO figures for local and cross-region standbys.
5Practice MQL queries, alarm trigger delays, absence alarms, Logging queries, and Connector Hub source-target combinations.
6Read each scenario for its constraint, such as cost, RTO, RPO, compliance, or operational simplicity; the constraint usually picks the answer.

Frequently Asked Questions

What is the OCI 2026 Architect Professional exam?

OCI 2026 Architect Professional (1Z0-997-26) is Oracle's professional-level architect certification for Oracle Cloud Infrastructure. It tests how you design and operate OCI solutions across five objectives: high availability and disaster recovery, cloud-native solutions, security, databases, and observability.

How many questions are on the OCI Architect Professional exam and how long do you get?

The exam consists of 50 multiple-choice questions with a 90-minute time limit. The passing score is 68%, consistent with Oracle's other professional-level Cloud certifications, and the exam fee is $245 USD.

What is the difference between OCI Architect Associate and Architect Professional?

Architect Associate covers core OCI fundamentals such as compute, networking, storage, and IAM. Architect Professional (1Z0-997-26) tests advanced design across five objectives: HA/DR with Full Stack DR, cloud-native solutions with OKE, Functions, DevOps, and Resource Manager, layered security, Base Database and Autonomous AI Database operations, and observability.

Which domain matters most on the OCI Architect Professional exam?

Architect Security Solutions is the heaviest objective at 25% of the 2026 exam. Cloud-native solutions, databases, and observability are each 20%, and high availability and disaster recovery is 15%.

Do I need to take the Architect Associate exam first?

Oracle does not require the Associate exam as a formal prerequisite, but the Professional exam assumes Associate-level OCI knowledge and hands-on experience implementing and operating OCI solutions.

How long should most candidates study for OCI Architect Professional?

Plan roughly 100-160 hours over 8-14 weeks beyond Associate-level knowledge, as an OpenExamPrep estimate. The biggest gains come from hands-on labs with Full Stack DR plans, OKE, Vault keys, Autonomous AI Database disaster recovery, alarms, and Connector Hub.