50 Oracle Cloud Infrastructure 2025 Migration Architect Professional Practice Questions: Question Bank 2025

An enterprise is beginning an OCI migration program with dozens of applications. Leadership wants a consistent way to decide which workloads to rehost, refactor, retire, or retain, and to identify top migration risks early. What is the BEST first step?

A customer needs to migrate 50 TB of file data from an on-premises NAS to OCI. The network link is limited and the migration must be completed as quickly as possible with minimal operational complexity. Which OCI service is MOST appropriate?

You are designing connectivity for a migration where on-premises applications must communicate privately with OCI workloads during a multi-month transition. The customer requires predictable latency and avoids internet exposure. Which connectivity option BEST meets this requirement?

After migrating to OCI, an operations team wants automated notifications when compute instances become unhealthy or when key metrics exceed thresholds, without building custom monitoring agents. Which OCI capability should they use?

A critical application uses a three-tier architecture. During migration, the customer wants to minimize downtime and ensure database consistency when cutting over from on-premises to OCI. Which approach is MOST appropriate?

You are building an OCI landing zone for a migration. Security requires that application teams can create resources only in their own environments, network admins control shared network components, and audit must have read-only access across the tenancy. Which design BEST aligns with OCI best practices?

During a phased migration, on-premises users must resolve both on-prem and OCI private hostnames seamlessly. The customer already runs an internal DNS on-premises. What is the MOST appropriate DNS approach in OCI?

After cutover, an application in OCI shows intermittent timeouts to a backend service hosted on-premises over FastConnect. Other workloads on the same VCN do not have the issue. Which is the MOST likely cause to investigate first?

A regulated customer is migrating workloads to OCI and requires that no administrator (including cloud admins) can read application data stored in Object Storage, while still allowing services to encrypt/decrypt as needed. They also require key lifecycle control and auditability. Which architecture BEST meets these requirements?

A business-critical application is migrated to OCI across two Availability Domains (ADs). The post-migration goal is to withstand an entire AD failure with minimal manual intervention. Which design is MOST appropriate?

A project team is drafting an OCI landing zone for a migration program. They want to ensure that only approved regions can be used for any future resources and that violations are blocked at create time. Which OCI capability best meets this requirement?

During discovery, you identify several on-premises applications that share the same database and exchange files through a common NFS export. The business requires these applications to migrate with minimal risk and predictable cutover. What is the MOST appropriate migration planning approach?

You are preparing for a large-scale migration and want to reduce the risk of accidental public exposure of compute instances. Which OCI design choice is the BEST default for migrated workloads that do not require direct internet access?

A customer is migrating an application to OCI and must meet a requirement for high availability across fault domains within a single region. The application is stateful and runs on multiple compute instances behind a load balancer. What architecture best supports this requirement?

A migration requires connectivity from OCI to multiple on-premises sites. The customer wants dynamic routing, automated failover between links, and the ability to scale bandwidth over time. Which connectivity approach best matches these needs?

After migrating a multi-tier application, users report intermittent timeouts. Metrics show the backend instances are healthy, but the Load Balancer reports a high rate of failed health checks. Which is the MOST likely cause in OCI networking configuration?

A team wants to migrate 200 VMs from an on-prem virtualization platform to OCI with minimal re-architecture. They require automated replication, test cutovers without impacting production, and an orchestrated final cutover. Which OCI service is best suited?

A database migration uses continuous replication. During a planned cutover, the application team switches the connection string to the new database in OCI, but the application starts failing with authentication errors. The database is reachable over the network and the credentials are correct. What is the MOST likely overlooked item in a typical OCI migration scenario?

Post-migration, you need to reduce compute costs while ensuring performance stays within agreed SLOs. Which is the MOST effective operational approach on OCI?

A regulated enterprise migrates workloads into OCI and must prove that only approved container images are deployed and that images are continuously scanned for vulnerabilities. They also need an audit trail showing who deployed what and when. Which design best satisfies these requirements?

A migration team is starting discovery for a portfolio of 200 on-premises applications. They need a consistent way to prioritize which applications migrate first based on business criticality, technical complexity, and dependencies. What is the BEST approach to establish the migration order?

After migrating a web application to OCI, users report they can reach the public load balancer but some API calls intermittently fail with timeouts. The backend instances are in private subnets. Security lists appear open for the required ports. What is the MOST likely OCI network configuration issue?

A team is migrating a stateless application tier to OCI and wants to ensure compute instances are evenly distributed across fault domains within a single availability domain to reduce the impact of hardware failures. Which OCI feature should they use?

A company is migrating an on-premises Oracle database to OCI. The database is 12 TB, network latency is moderate, and the business requires minimal downtime. The team can run a longer initial data copy but must keep the cutover outage small. Which migration approach is MOST appropriate?

A migration architect must design network connectivity from on-premises to OCI for a phased migration. Requirements: predictable performance, private connectivity, and the ability to advertise multiple on-premises CIDR blocks. Which design best meets these requirements?

During a lift-and-shift of several Linux servers, the team observes that some instances in OCI cannot reach internal services hosted on-premises over a VPN, while others can. All instances are in the same subnet. What is the MOST likely cause?

A migrated application is running on multiple OCI compute instances behind a load balancer. After cutover, the operations team wants to reduce cost without impacting availability. Metrics show CPU utilization is consistently below 10% across all instances, but traffic has predictable peaks daily. What is the BEST operational optimization?

A regulated enterprise requires that migrated workloads in OCI cannot create public IP addresses, cannot expose Object Storage buckets publicly, and must use customer-managed encryption keys. They want guardrails enforced continuously with remediation where possible. Which approach BEST meets these requirements?

A company is migrating a multi-tier application that uses hard-coded IP addresses for east-west communication. They cannot refactor the application before migration. They also must support blue/green cutover with the ability to quickly roll back. Which design is MOST appropriate in OCI?

A migration includes hundreds of VMs and databases. The program requires auditable evidence that each migration wave met validation criteria (functional tests, performance baselines, security checks) before proceeding. The process must be repeatable and minimize manual steps. What is the BEST solution approach?

A migration program requires a consistent way to tag all OCI resources for cost allocation, application ownership, and environment (dev/test/prod). Multiple teams will provision resources during the migration. What is the BEST approach to enforce tagging standards at scale?

You are designing connectivity for an on-premises to OCI migration. The customer requires private access to OCI services (such as Object Storage) without traversing the public internet. Which OCI capability best meets this requirement?

A team migrates a legacy application to OCI Compute. After cutover, application logins intermittently fail because the system clock drifts on several instances. What is the MOST appropriate remediation in OCI?

You need to migrate a virtual machine from VMware to OCI with minimal changes and want to maintain the same OS and application stack. Which OCI service is MOST appropriate for lifting and shifting VMware workloads into OCI?

A company is migrating a multi-tier application to OCI. They want only the public load balancer to be internet-facing, while application and database tiers must not have public IP addresses. Which network design is the BEST fit?

During a migration, large datasets must be transferred from on-premises to OCI Object Storage. The network link is reliable but throughput is insufficient to meet the migration window. Which approach is MOST likely to reduce transfer time without changing the dataset?

A customer plans to use OCI for a regulated workload. Security requires that instances are not accessible via SSH from the internet and that administrative access is audited. Which design best meets these requirements?

After migrating a web application to OCI, users report intermittent 502 errors from the load balancer. You observe that backend instances are marked unhealthy at times, even though the application responds on the expected port. Which is the MOST likely configuration issue to check first?

A bank requires an active-active architecture across two OCI regions for a customer-facing application. They need automatic regional failover, health-based traffic steering, and minimal disruption to clients. Which design is MOST appropriate?

A migration team moved an Oracle database to OCI and enabled backups. The business now requires proof that backups are recoverable and that RPO/RTO targets are met. Which is the BEST operational practice to satisfy this requirement?

A team is creating a migration runbook and wants an OCI-native way to validate network and IAM prerequisites before cutover (for example, required subnets, security lists/NSGs, policies, and service endpoints). Which approach best fits this requirement?

During migration planning, a company wants to reduce risk by performing an initial discovery and dependency mapping of on-premises workloads, including server inventory and application relationships, before designing the OCI target architecture. Which OCI service is most appropriate?

After a successful cutover, an operations team wants to ensure compute instances remain patched and configuration drift is tracked consistently across multiple compartments. Which OCI capability best addresses this requirement?

A business requires a highly available web tier across multiple Availability Domains in a region. The application uses session state stored locally on the web servers today. Which design change is most appropriate to enable resilience and support scaling on OCI?

A company is migrating an on-premises Oracle database to OCI. They require near-zero downtime cutover and continuous replication until switchover, with the ability to validate the target before final cutover. Which approach best meets the requirement?

An application is migrated to private subnets in OCI with no public IPs. The team needs the instances to access OS package repositories and OCI public services without exposing inbound internet access. What is the recommended network design?

During a migration rehearsal, instances in OCI can reach on-premises subnets over FastConnect, but on-premises hosts cannot initiate connections to OCI private subnets. Security lists and NSGs appear correct. What is the most likely cause?

A company is migrating multiple applications into OCI and wants to enforce consistent tagging, network baselines, and IAM policies across dozens of compartments, while allowing application teams autonomy within their own compartments. Which governance approach is most appropriate?

A regulatory workload requires customer-managed encryption keys and strict separation of duties. Security mandates that key administrators must not have permissions to manage databases, and database administrators must not have permissions to manage keys. Which OCI design best meets this requirement?

After migrating a three-tier application, users report intermittent latency spikes. Metrics show the application servers are healthy, but database calls occasionally take much longer. The database is in a different VCN connected via local peering. The team wants to minimize latency and operational complexity while keeping network segmentation. Which change is most likely to improve performance and simplify operations?