50 Oracle Cloud Infrastructure 2025 Foundations Associate Practice Questions: Question Bank 2025

A startup wants to quickly deploy a simple web application in OCI. They need an isolated network where they can place public web servers and private backend services. Which OCI service provides this foundational network isolation?

A team wants to store and serve static images for a public website. The images must be durable and accessible over HTTP/HTTPS. Which OCI service best fits this requirement?

An administrator wants to grant a group of developers permission to manage compute instances, but only within a specific compartment. What is the recommended OCI mechanism to implement this access control?

A cloud operations engineer needs to be notified when a compute instance’s CPU utilization exceeds a threshold. Which OCI service is commonly used to send these alerts to email or other endpoints?

A company wants to ensure only specific subnets can reach an OCI service (such as Object Storage) privately without using the public internet. Which VCN component enables private access to supported OCI services?

A security team must enforce that all newly created block volumes are encrypted, and they want to manage encryption keys centrally. Which OCI service should they use to create and manage customer-managed keys?

A team deployed an application on multiple compute instances behind a public load balancer. Users report intermittent failures, and the team suspects one backend is unhealthy. Which OCI capability should they check first to confirm whether the load balancer is routing traffic only to healthy backends?

A governance team wants to prevent developers from creating resources outside approved compartments and also wants consistent tagging for cost allocation and ownership tracking. Which approach best supports this goal in OCI?

A company needs to connect its on-premises data center to OCI with predictable performance and without traversing the public internet. They also want redundancy to avoid a single point of failure. Which solution best meets these requirements?

A security engineer wants to detect and prioritize risky cloud security issues such as public exposure of sensitive resources and overly permissive IAM policies. They also want to generate targeted recommendations for remediation. Which OCI service is designed for this purpose?

A team wants to deploy two web servers in different Availability Domains within the same region. They need both servers to share the same private IP range and communicate using private IPs. Which OCI networking construct enables this?

A security administrator wants to ensure that only users who are members of a specific group can create Object Storage buckets in a compartment. What is the recommended approach in OCI?

Which OCI service is primarily used to centrally define and enforce rules such as 'resources must have specific tags' or 'restrict creation of certain resource types' across compartments?

A developer can list objects in an Object Storage bucket but receives an authorization error when attempting to delete objects. What is the most likely cause?

A company wants to collect application logs from multiple compute instances and search them centrally without managing servers. Which OCI approach best meets this requirement?

A team needs a managed service to run containerized applications without managing the underlying worker nodes. Which OCI service is the best fit?

A workload in a private subnet must access OCI public services (such as Object Storage) privately without traversing the public internet. Which networking component should be used?

A company wants to automatically remediate certain security findings, such as making a publicly visible bucket private when detected. Which OCI capability best supports detection plus automated response workflows?

A team uses IAM policies that reference a compartment OCID directly. Later, they rename the compartment and notice policies still work. Why?

A solution architect must design a highly available public web application where inbound traffic should be distributed across multiple backend instances and health-checked automatically. Which OCI component is most appropriate?

You need to place a new compute instance in a network so it can reach the internet, while still allowing inbound SSH access from your corporate public IP range only. Which OCI components must you configure to meet this requirement?

A team wants to ensure that all new Object Storage buckets created in a compartment are automatically encrypted with a customer-managed key (CMK) instead of an Oracle-managed key. Which OCI capability should they use to enforce this requirement?

A developer needs to run a short-lived script that reads from Object Storage and writes results to Autonomous Database. The team wants to avoid managing servers and prefers an event-driven approach. Which OCI service is the best fit?

An OCI administrator wants to ensure users can only create compute instances in a specific compartment, but cannot modify networking resources (VCNs, subnets, route tables). Which IAM approach best meets this requirement?

A company has multiple compartments for different teams and wants consistent cost allocation and ownership tracking across all resources, even when teams forget to add tags. What is the recommended OCI feature to help automate this?

Your application in a private subnet must access Object Storage without traversing the public internet. Which networking configuration provides this capability?

A security team wants to automatically detect and remediate public exposure of Object Storage buckets across the tenancy. They need a service that can identify risky configurations and optionally trigger remediation actions. Which OCI service is designed for this?

A production workload requires high IOPS and low latency storage for a database running on OCI Compute. The data must persist independently of the instance lifecycle. Which storage option is most appropriate?

Users report intermittent 500 errors from an application behind an OCI Load Balancer. You need to confirm whether backend servers are failing health checks and correlate errors with backend status over time. Which OCI observability approach best supports this troubleshooting?

A company wants a centralized way to manage and deploy infrastructure consistently across environments (dev/test/prod) using declarative templates, while keeping changes auditable and repeatable. Which OCI service best matches this requirement?

A team wants to centrally track and alert on CPU utilization, memory usage, and custom application metrics for compute instances in OCI. Which OCI service should they use for collecting and querying metrics and creating alarms?

A company must ensure that object data is encrypted using encryption keys that the company controls and can rotate on demand. Which approach best meets this requirement in OCI Object Storage?

A developer needs temporary CLI access to OCI resources without creating a long-lived API key pair. Which authentication method is most appropriate?

A team wants to ensure that new resources are always created in the correct compartment and that access can be delegated per project. Which OCI construct is primarily used to logically organize resources and scope IAM policies?

A workload in a private subnet must download updates from the internet, but the instances must not accept inbound connections from the internet. Which OCI networking design best satisfies this requirement?

An administrator needs to restrict who can create internet gateways and modify route tables in a production VCN, while still allowing developers to manage compute instances in the same compartment. What is the best approach?

A company wants to automatically trigger a function when a new object is uploaded to a specific Object Storage bucket. Which OCI capability provides the event-driven routing to initiate this action?

A governance team wants to enforce tagging standards across multiple compartments and prevent creation of resources that are missing required tags. Which OCI feature best supports this requirement?

A security engineer needs to investigate who changed an IAM policy and what the policy looked like before and after the change. Which OCI capability provides this history for audit and investigation purposes?

A company needs private connectivity from its on-premises network to multiple OCI VCNs in different regions. The design must support transitive routing through a central hub network in OCI. Which OCI networking approach best fits this requirement?

A startup wants to quickly create isolated environments for development and production while keeping billing and resource limits separate. Which OCI construct best meets this requirement?

An administrator needs to ensure that all newly created block volumes in a compartment are automatically protected against accidental deletion. Which feature should be enabled?

Which OCI service provides near-real-time visibility into resource health and performance using metrics such as CPU utilization and network throughput?

A company wants to manage OCI resources using Terraform but needs a managed service that can run Terraform jobs, store state securely, and provide an audit trail of deployments. Which OCI service should they use?

A security team requires that developers authenticate to OCI using their corporate identity provider and enforce MFA centrally. Which approach best meets this requirement?

A team deployed a web application in a private subnet and attached a public load balancer. Users can reach the load balancer but receive timeouts. Instances show as unhealthy. What is the MOST likely misconfiguration?

A governance team wants to enforce a rule that only specific shapes can be used for compute instances in a compartment to control standardization. Which feature should they use?

An operations engineer needs to troubleshoot why a user cannot create a bucket in a specific compartment. The user reports they can create buckets in other compartments. What is the BEST first place to look to identify the cause?

A company must ensure that sensitive data stored in Object Storage cannot be exfiltrated via public internet endpoints and that access stays on the Oracle network when used by resources inside the VCN. Which design best meets this requirement?

A regulated workload requires that administrators can investigate who changed network security rules and what values were changed, even if the change was later reverted. Which OCI capability provides this evidence?