Oracle Cloud Infrastructure Foundations Associate Practice Exam 2025: Latest Questions

An organization wants to isolate resources for its Development, Test, and Production environments while keeping them under a single OCI tenant. Which OCI feature is best suited for this logical isolation and access control?

A team needs storage for VM boot volumes and block devices that can be attached/detached from compute instances. Which OCI storage service should they choose?

A customer wants to improve resiliency by ensuring resources are not all placed in a single physical rack within an Availability Domain. Which construct should they use?

Which statement best describes the shared responsibility model in cloud computing as it applies to OCI?

A company wants all outbound internet traffic from instances in a private subnet to use a fixed public IP address for allowlisting by an external vendor. What is the recommended OCI solution?

A security team requires that object data stored in OCI be encrypted using a key that the team controls and can rotate. Which approach best meets this requirement?

A user can log in to the OCI Console but cannot start or stop instances in a compartment. You confirm the instances exist and the user is in the correct group. What is the most likely cause?

A company wants to ensure new OCI resources are consistently labeled for ownership and environment (for example, Owner=Finance, Env=Prod) to support governance and operational reporting. Which approach is recommended?

A company requires that administrators use multi-factor authentication (MFA) to sign in to OCI. They also want centralized identity management with existing corporate credentials. Which solution best meets these requirements?

An application in a private subnet must access OCI Object Storage without using the public internet, and the organization wants traffic to stay on the Oracle network. What should you implement?

A new OCI user can access the Console but receives an authorization error when trying to view any resources in a compartment. What is the MOST likely reason?

A company needs to place a publicly accessible web server and a private database in OCI. Which network design best follows OCI best practices?

Which statement BEST describes the relationship between a region and an availability domain (AD) in OCI?

A security team wants all new Object Storage buckets in a specific compartment to be created as private by default and to follow a naming standard. Which OCI capability is BEST suited to enforce this?

An application running on an OCI compute instance needs to call OCI APIs without storing an API signing key on disk. What is the RECOMMENDED approach?

A customer wants to securely manage database passwords, API tokens, and other secrets, with access controlled by IAM policies and auditable usage. Which OCI service should they use?

A network administrator adds an ingress rule to a subnet’s security list allowing TCP port 443 from the internet to a compute instance, but users still cannot connect. The instance has a public IP. What is the MOST likely missing configuration?

A team wants to monitor the health of a public HTTP endpoint and be alerted when it becomes unavailable from multiple geographic vantage points. Which OCI capability BEST addresses this requirement?

A company must ensure its OCI tenancy can only be accessed from corporate networks. They want to restrict Console and API access by source IP and enforce it across the tenancy. Which feature should they use?

A customer uses multiple compartments and wants to ensure all API calls are traceable to the user/service that performed them, and to investigate changes to networking and IAM configurations. Which OCI service should they primarily use for this purpose?

A customer wants to ensure a set of compute instances can access OCI Object Storage without sending traffic over the public internet. Which OCI feature best meets this requirement?

A security engineer must ensure that all administrators in a tenancy are required to use multi-factor authentication (MFA) when signing in. Where is this requirement enforced in OCI?

You are reviewing access control design for a new project. The team wants to isolate resources by environment (Dev, Test, Prod) and delegate administration to different groups while keeping billing consolidated under one tenancy. What is the recommended OCI approach?

An application team created a private subnet and launched a compute instance in it. They cannot SSH to the instance from the internet, but they can reach it from a bastion host in a public subnet. The team asks what OCI design principle explains this behavior. What is the best answer?

A company needs to prove who changed network security rules and when the changes occurred, and they want this information retained for auditing. Which OCI service provides this capability out of the box?