Oracle Cloud Infrastructure Architect Associate Intermediate Practice Exam: Medium Difficulty 2025

A team is deploying a public-facing web application on two compute instances across different Availability Domains (ADs) in the same region. They want HTTPS access from the internet, and only the web tier should be reachable publicly. The application tier must only accept traffic from the web tier on TCP 8080. Which design best meets these requirements with least privilege?

A company has a private subnet with application servers that must download OS updates from the internet, but no inbound connections from the internet are allowed. The subnet already uses a Service Gateway for access to OCI services. What should you add to enable secure outbound internet access for patching?

Your organization needs private access from on-premises networks to multiple OCI VCNs in the same region. They want centralized connectivity and the ability to control which VCNs can communicate with each other. Which approach best meets this requirement?

A compute instance in a private subnet must access Object Storage without traversing the public internet. The security team also wants to ensure only Object Storage is reachable via this private path. What should you implement?

An operations team needs to quickly scale a stateless API tier horizontally and keep instances consistent. They want new instances to launch with the same OS configuration and application dependencies. Which approach is most appropriate in OCI?

A company wants to migrate an on-premises Oracle database to OCI with minimal downtime and use a managed database service. They also require automated backups and the ability to scale CPU resources with minimal operational effort. Which option best fits?

A workload uses an Oracle database that must remain available if an Availability Domain fails. The application has an RTO of minutes and can tolerate minimal data loss. Which OCI database architecture is most appropriate?

A team needs to store frequently accessed shared files (user uploads) that will be mounted concurrently by multiple compute instances across subnets in the same region. The solution should be POSIX-like and managed, without requiring the team to build a clustered file system. Which OCI storage service should they choose?

A compliance requirement states that backups must be protected from accidental deletion and retained for a defined period. The team uses Object Storage for database backup files. Which feature best helps meet this requirement with minimal operational overhead?

A company is designing a production workload in OCI and wants to follow best practices for blast-radius reduction and access control. They need separate environments (dev, test, prod) and want to ensure administrators in dev cannot modify prod resources, while still allowing centralized billing. What is the best approach?