Oracle Cloud Infrastructure Architect Associate Practice Exam 2025: Latest Questions

A team needs a private, low-latency connection from an on-premises data center to OCI for production workloads. The connection must not traverse the public internet. Which OCI connectivity option best meets this requirement?

You launched a VM instance in a public subnet, but users on the internet cannot reach the web server on port 80. The instance has a public IP and the OS firewall is disabled for testing. What is the most likely OCI configuration missing?

An application running on a private subnet must download updates from the public internet, but the instances must not accept inbound connections from the internet. Which gateway should you use to enable this requirement?

A workload requires a persistent block device that can be attached to a compute instance and remain available even if the instance is terminated and recreated. Which OCI storage option best meets this need?

A company wants to enforce that all newly created Object Storage buckets are private by default and that certain networking resources must use a specific tagging standard. Which OCI capability is designed to implement and enforce such rules across compartments?

You need to provide private connectivity between two VCNs in the same region and tenancy. The VCNs must be able to route traffic to each other using private IPs only. Which solution should you implement?

A database team needs a highly available Oracle database on OCI with automated backups and minimal administration overhead. They also want the system to automatically handle patching and upgrades as much as possible. Which service best fits these requirements?

A compute instance in a private subnet must access Object Storage without using the public internet. Which VCN component enables private access to Oracle services such as Object Storage?

Your organization uses a hub-and-spoke network model. Multiple spoke VCNs must connect to on-premises and also exchange traffic between spokes using a central hub. Which OCI networking design best supports scalable routing and centralized connectivity?

A mission-critical application runs on a VM instance and requires fast recovery from accidental boot volume corruption. The team wants to restore the boot volume to a known good state with minimal data loss and minimal manual steps. Which approach is most appropriate?

An administrator needs to quickly give a contractor read-only access to view instances and VCNs in a single compartment. What is the recommended approach?

A compute instance must accept inbound HTTPS traffic from the internet. The network security configuration currently allows TCP 443 in a security list, but connections still fail. Which additional configuration is most likely required?

A team needs to store application logs in a cost-effective way and keep them for one year. The logs are rarely accessed, but must be retrievable when needed. Which OCI storage option best fits?

A web application runs on multiple compute instances behind a public load balancer. The security team requires that backend instances have no public IPs and that only the load balancer can reach them on port 8080. What design meets this requirement?

An application requires a shared POSIX-compliant file system mounted concurrently by several Linux compute instances across multiple availability domains in the same region. Which OCI service should you use?

A company wants to connect its on-premises network to OCI with predictable performance and private connectivity. Which solution best meets this requirement?

A compute instance in a private subnet must download patches from the internet, but it must not accept any inbound connections from the internet. What is the recommended configuration?

A database administrator wants to protect an Oracle database from data loss while also minimizing downtime during a regional outage. Which OCI feature best addresses this requirement for Oracle databases?

A company uses Object Storage for critical artifacts and must ensure objects cannot be deleted or overwritten for a fixed retention period, even by administrators. Which feature should be used?

Two VCNs in the same region need to communicate privately. Each VCN uses the same CIDR block (for example, both are 10.0.0.0/16). The team wants a solution that avoids renumbering if possible. What is the correct statement?

You need to allow an Oracle Cloud Infrastructure (OCI) instance to resolve private DNS names (for example, hostnames in a private zone) while ensuring the instance cannot initiate outbound connections to the public internet. Which design meets this requirement?

A team wants to enforce a best-practice security posture: developers can create compute instances, but they must not be able to create or modify Internet Gateways, route tables, or security lists in production compartments. What is the recommended OCI control to implement this?

A Linux VM in a private subnet needs to download updates from the internet, but it must not accept inbound connections from the internet. The VCN currently has an Internet Gateway attached. Which change should you make?

A database team needs to run heavy read-only analytics against an Autonomous Database without impacting the primary workload. They also want the analytics environment to be refreshed frequently from production data with minimal operational effort. Which Autonomous Database feature best addresses this requirement?

An application writes logs to Object Storage and a downstream system in another region must automatically process each new log object within seconds. The solution must minimize custom polling and be resilient. Which OCI design is most appropriate?