Oracle Cloud Infrastructure 2025 Foundations Associate Practice Exam 2025: Latest Questions

A team wants to move from managing physical servers to a model where they can quickly provision resources and pay only for what they consume. Which cloud concept best describes this benefit?

Which OCI service is specifically designed to store and manage secrets such as API keys, passwords, and certificates securely?

An administrator wants to organize OCI resources into logical groups for access control and cost tracking. Which OCI construct is used for this purpose?

A developer needs to run a small piece of code in response to an event (for example, a new object uploaded to Object Storage) without managing servers. Which OCI service is the best fit?

A company needs to allow a compute instance in a private subnet to access the public internet for OS updates, but the instance must not accept inbound connections from the internet. Which OCI component should be used?

A security engineer must ensure that only users in the group "NetAdmins" can create and manage subnets in a specific compartment. What is the recommended OCI mechanism to enforce this requirement?

An operations team wants to be notified when a compute instance's CPU utilization exceeds a threshold for 5 minutes. Which OCI services/features should they use?

A team wants to standardize deployments so they can consistently create a VCN, subnets, route tables, and instances from a version-controlled template. Which OCI service is best suited for this?

A company requires that all objects stored in an Object Storage bucket be encrypted with customer-managed keys, and they need the ability to disable access to the key if a breach is suspected. Which approach best meets this requirement?

A workload must remain available even if an entire availability domain becomes unavailable. The application tier is stateless and can run on multiple compute instances. Which architecture choice best addresses this requirement?

A new OCI user can successfully sign in to the Console but cannot see any compartments or resources. The user is in a group that was created, but no other changes were made. What is the MOST likely reason?

Which OCI service is primarily used to centrally define and enforce rules such as "only allow specific resource configurations" across compartments?

A team wants an OCI-native way to receive an email when the CPU utilization of a compute instance exceeds a threshold for 5 minutes. Which combination best meets this requirement?

A company wants to grant a third-party auditor read-only access to view resources across the tenancy, but they must NOT be able to see sensitive data in Object Storage. Which access approach is MOST appropriate?

An application running on Compute needs to call OCI APIs without storing user passwords or long-lived API keys on the instance. What is the recommended method?

A company runs a public web application on OCI. They want to protect it from common web attacks (for example, SQL injection) and control HTTP/HTTPS traffic with security rules at the edge. Which OCI service best fits?

A team needs a fully managed service to run containerized microservices without managing worker nodes or control planes. They want OCI to handle scaling and infrastructure management as much as possible. Which service should they choose?

A company wants to automatically forward VCN Flow Logs and Audit logs to Object Storage for long-term retention and later analysis. What is the most appropriate OCI feature to implement this routing with minimal code?

A security team must ensure that only approved OCI regions are used and prevent accidental creation of resources in non-approved regions. Which tenancy-level control best addresses this requirement?

A company needs to enforce that all new Object Storage buckets in a sensitive compartment must be private and must have customer-managed encryption keys. They also want noncompliant create/update operations to be blocked. Which approach best meets the requirement?

A team created multiple IAM policies, but users still cannot list objects in an Object Storage bucket. The policy includes the correct group and compartment, but the bucket is in a different compartment than expected. What is the most likely reason access is denied?

An application on a Compute instance in a private subnet must call an Oracle Cloud Infrastructure public API endpoint. There is no internet gateway attached to the VCN. Which VCN component should be configured to allow this outbound access while keeping the instance private?

Your organization wants to prevent administrators from accidentally creating resources outside approved compartments. Which OCI governance feature helps enforce this by limiting the compartments where resources can be created or moved?

A developer cannot SSH to a Linux Compute instance using its public IP. The instance is in a public subnet. Which combination of checks is MOST likely to identify the issue? (Choose the best single answer.)

A security team wants automatic detection of publicly exposed Object Storage buckets and risky IAM policies, with recommended actions and the ability to trigger responses. Which OCI service best fits this requirement?