Oracle Cloud Infrastructure 2025 Cloud Operations Professional Advanced Practice Exam: Hard Questions 2025

After a Terraform-driven rollout, an operations team notices that several Compute instances across multiple availability domains intermittently become unreachable from the internet, but only for new deployments. Existing long-lived instances remain reachable. The VCN uses an Internet Gateway, a NAT Gateway, and separate public and private subnets. Security lists appear permissive. Which is the MOST likely root cause and best corrective action?

A production microservices platform on OKE experiences sporadic latency spikes. Application metrics show CPU is stable, but packet drops rise only on certain nodes. The team suspects a misconfiguration of OCI network security. They use NSGs extensively and recently introduced a new NSG for east-west traffic. Which approach is MOST effective to identify whether NSG rules are causing the packet drops without broadly relaxing security?

An operations team receives an alert that a stateful application’s block volume performance suddenly degraded. They confirm the instance is healthy and the volume is attached. They suspect the volume is attached using an attachment type that is suboptimal for their workload. The application performs heavy random reads/writes and is sensitive to latency. Which attachment type should they validate is in use, and what is the recommended configuration for lowest latency within a single instance?

A shared-services tenancy uses IAM policies with dynamic groups for automated remediation (Functions and OS Management Hub). A new remediation function fails with “NotAuthorizedOrNotFound” only when acting on resources in a specific compartment. The dynamic group matches the function correctly, and the function can read resources but cannot change them. Which is the MOST likely issue and best fix?

Finance reports unexplained cost growth in a tenancy that heavily uses ephemeral OKE workloads and autoscaling. The team already enforces tagging standards but suspects costs are being attributed to the wrong projects due to tag drift and missing tags on new resources. They need a control that prevents creation of resources missing a required cost-center tag, while still allowing a break-glass path for incident response. What is the BEST approach?

A team wants to reduce costs for a fleet of compute instances running batch jobs. Jobs can be interrupted and resumed, but some jobs require local scratch space and frequent reads of input datasets stored in Object Storage. They want the lowest-cost compute approach without redesigning the application significantly. Which strategy is MOST appropriate?

A tenancy uses multiple compartments per environment (dev/test/prod). Cost reports show that network egress is unexpectedly high in dev, but the dev team claims they only access Oracle services. You suspect dev workloads are using public endpoints instead of private service access. Which change MOST directly reduces internet egress while preserving access to OCI public services?

You need an automated remediation workflow: when an alarm detects that a critical instance is out of memory, the system should (1) collect diagnostics, (2) restart a service, and if that fails, (3) scale out by adding an instance to an instance pool. The workflow must be auditable and minimize custom long-running compute. Which solution BEST fits OCI operations best practices?

A platform team uses OCI Resource Manager (Terraform) to manage networking. A new change inadvertently removed an NSG rule, causing an outage. They want guardrails so future changes cannot delete critical security rules unless explicitly approved, while still using IaC. What is the BEST approach?

A regulated enterprise needs evidence that only compliant configurations are deployed across compartments. They must detect and prevent: public buckets, overly permissive security lists (0.0.0.0/0 to sensitive ports), and resources created outside approved regions/compartments. They also need centralized reporting for auditors. Which combination provides the MOST complete governance and compliance posture?