OCI FOUNDATIONS REVISION EXAMS 2025/2026
QUESTIONS WITH ANSWERS RATED A+
✔✔Which Identity and Access Management component helps to organize multiple
users into a team?
1) Dynamic Groups
2) Compartments
3) Groups
4) Policies - ✔✔3) Groups
In OCI IAM, groups are used to group users that serve a common purpose or belong to
the same team. This allows policies to be applied at the group level, rather than
individually.
✔✔Which statement about OCI compartments is NOT true?
1) Compartments help to isolate and control access to resources.
2) Compartments can be nested.
3) It is a best practice to create all your resources in the root compartment.
4) A compartment is a logical collection of related resources. - ✔✔3) It is a best practice
to create all your resources in the root compartment. (*)
It is not a best practice to create all resources in the root compartment. Compartments
are used to organize and isolate resources to provide a finer level of access control.
✔✔How is a resource in OCI identified?
1) With OCID
2) With Compartment Name
3) With Username
4) With Tenancy ID - ✔✔1) With OCID (*)
Each resource in OCI is assigned a unique Oracle Cloud Identifier (OCID), which is
used to identify the resource.
✔✔Which statement about Virtual Cloud Network (VCN) peering between two VCNs is
NOT valid?
1) Peered VCNs cannot have overlapping CIDRs.
2) Peered VCNs can exist in different OCI regions.
3) A VCN peering connection is a VPN-based connection.
4) Peered VCNs can exist in the same OCI region. - ✔✔3) A VCN peering connection is
a VPN-based connection. (*)
,VCN peering is a networking connection between two VCNs that enables traffic routing
between the VCNs using private IP addresses.
Peer VCNs must not have overlapping CIDRs. VCNs can be peered in the same region
or different regions through a DRG.
✔✔Which VCN component blocks inbound traffic, but enables outbound traffic to the
internet?
1) Dynamic Routing Gateway
2)Service Gateway
3) NAT Gateway
4) Internet Gateway - ✔✔3) NAT Gateway (*)
A NAT Gateway in a VCN enables instances in a private subnet to initiate connections
to the internet but prevents unsolicited inbound connections from the internet.
✔✔Which OSI layer traffic is supported by the OCI Network Load Balancer?
1) Layer 4 (transport) (*)
2) Layer 7 (application)
3) Layer 5 (session)
4) Layer 2 (data link) - ✔✔1) Layer 4 (transport) (*)
OCI Network Load Balancer operates at layer 4 (transport layer) of the OSI model. It
distributes traffic among instances within its backend set based on TCP or UDP
protocols.
✔✔Which statement about a Virtual Cloud Network (VCN) is true?
1) A VCN can be used with only one instance.
2) A VCN can span OCI regions.
3) A VCN can have only one public subnet and more than one private subnet.
4) A VCN can reside only in a single region but can span multiple availability domains. -
✔✔4) A VCN can reside only in a single region but can span multiple availability
domains. (*)
A VCN is a virtual, private network that you set up in Oracle data centers in a single OCI
region. It resembles a traditional network, with firewall rules and specific types of
communication gateways that you can choose to use. A VCN spans all the availability
domains in the region.
✔✔Which component is NOT created by default with the creation of a Virtual Cloud
Network?
, 1) Default Route Table
2) Default Security List
3) Default DHCP Options
4) Default Local Peering Gateway - ✔✔4) Default Local Peering Gateway (*)
When you create a VCN, a default route table, security list, and DHCP options are
created automatically, but a Local Peering Gateway (LPG) is not created by default.
LPGs are used to connect two VCNs in the same region.
✔✔Which statement about the working of autoscaling in an instance pool is true?
1) It automatically provisions and removes instances in an instance pool.
2) It automatically changes the shape of the compute instance to increase the number
of OCPU count and memory.
3) It can perform only metric-based autoscaling.
4) It can perform only schedule-based autoscaling. - ✔✔1) It automatically provisions
and removes instances in an instance pool.
Autoscaling in an instance pool within the OCI Compute service automatically
provisions and removes instances based on specific conditions or schedules.
It does not change the shape of the compute instance, nor is it limited to only metric-
based or schedule-based autoscaling. Instead, autoscaling can be driven by both
metric-based and schedule-based policies, offering a more dynamic and flexible scaling
solution.
✔✔Which processor type is NOT available for the OCI Compute service?
1) Snapdragon
2) AMD
3) Ampere
4) Intel - ✔✔1) Snapdragon
The OCI Compute service offers instances powered by various processor types,
including AMD, Intel, and Ampere. However, Snapdragon, which is a processor type
commonly used in mobile devices, is not available for OCI Compute.
✔✔What is the primary purpose of Oracle Cloud Infrastructure Functions?
1) To deploy and manage virtual machines
2) To execute code in response to events or HTTP requests
3) To store and manage files
4) To provide a managed database service - ✔✔2) To execute code in response to
events or HTTP requests
QUESTIONS WITH ANSWERS RATED A+
✔✔Which Identity and Access Management component helps to organize multiple
users into a team?
1) Dynamic Groups
2) Compartments
3) Groups
4) Policies - ✔✔3) Groups
In OCI IAM, groups are used to group users that serve a common purpose or belong to
the same team. This allows policies to be applied at the group level, rather than
individually.
✔✔Which statement about OCI compartments is NOT true?
1) Compartments help to isolate and control access to resources.
2) Compartments can be nested.
3) It is a best practice to create all your resources in the root compartment.
4) A compartment is a logical collection of related resources. - ✔✔3) It is a best practice
to create all your resources in the root compartment. (*)
It is not a best practice to create all resources in the root compartment. Compartments
are used to organize and isolate resources to provide a finer level of access control.
✔✔How is a resource in OCI identified?
1) With OCID
2) With Compartment Name
3) With Username
4) With Tenancy ID - ✔✔1) With OCID (*)
Each resource in OCI is assigned a unique Oracle Cloud Identifier (OCID), which is
used to identify the resource.
✔✔Which statement about Virtual Cloud Network (VCN) peering between two VCNs is
NOT valid?
1) Peered VCNs cannot have overlapping CIDRs.
2) Peered VCNs can exist in different OCI regions.
3) A VCN peering connection is a VPN-based connection.
4) Peered VCNs can exist in the same OCI region. - ✔✔3) A VCN peering connection is
a VPN-based connection. (*)
,VCN peering is a networking connection between two VCNs that enables traffic routing
between the VCNs using private IP addresses.
Peer VCNs must not have overlapping CIDRs. VCNs can be peered in the same region
or different regions through a DRG.
✔✔Which VCN component blocks inbound traffic, but enables outbound traffic to the
internet?
1) Dynamic Routing Gateway
2)Service Gateway
3) NAT Gateway
4) Internet Gateway - ✔✔3) NAT Gateway (*)
A NAT Gateway in a VCN enables instances in a private subnet to initiate connections
to the internet but prevents unsolicited inbound connections from the internet.
✔✔Which OSI layer traffic is supported by the OCI Network Load Balancer?
1) Layer 4 (transport) (*)
2) Layer 7 (application)
3) Layer 5 (session)
4) Layer 2 (data link) - ✔✔1) Layer 4 (transport) (*)
OCI Network Load Balancer operates at layer 4 (transport layer) of the OSI model. It
distributes traffic among instances within its backend set based on TCP or UDP
protocols.
✔✔Which statement about a Virtual Cloud Network (VCN) is true?
1) A VCN can be used with only one instance.
2) A VCN can span OCI regions.
3) A VCN can have only one public subnet and more than one private subnet.
4) A VCN can reside only in a single region but can span multiple availability domains. -
✔✔4) A VCN can reside only in a single region but can span multiple availability
domains. (*)
A VCN is a virtual, private network that you set up in Oracle data centers in a single OCI
region. It resembles a traditional network, with firewall rules and specific types of
communication gateways that you can choose to use. A VCN spans all the availability
domains in the region.
✔✔Which component is NOT created by default with the creation of a Virtual Cloud
Network?
, 1) Default Route Table
2) Default Security List
3) Default DHCP Options
4) Default Local Peering Gateway - ✔✔4) Default Local Peering Gateway (*)
When you create a VCN, a default route table, security list, and DHCP options are
created automatically, but a Local Peering Gateway (LPG) is not created by default.
LPGs are used to connect two VCNs in the same region.
✔✔Which statement about the working of autoscaling in an instance pool is true?
1) It automatically provisions and removes instances in an instance pool.
2) It automatically changes the shape of the compute instance to increase the number
of OCPU count and memory.
3) It can perform only metric-based autoscaling.
4) It can perform only schedule-based autoscaling. - ✔✔1) It automatically provisions
and removes instances in an instance pool.
Autoscaling in an instance pool within the OCI Compute service automatically
provisions and removes instances based on specific conditions or schedules.
It does not change the shape of the compute instance, nor is it limited to only metric-
based or schedule-based autoscaling. Instead, autoscaling can be driven by both
metric-based and schedule-based policies, offering a more dynamic and flexible scaling
solution.
✔✔Which processor type is NOT available for the OCI Compute service?
1) Snapdragon
2) AMD
3) Ampere
4) Intel - ✔✔1) Snapdragon
The OCI Compute service offers instances powered by various processor types,
including AMD, Intel, and Ampere. However, Snapdragon, which is a processor type
commonly used in mobile devices, is not available for OCI Compute.
✔✔What is the primary purpose of Oracle Cloud Infrastructure Functions?
1) To deploy and manage virtual machines
2) To execute code in response to events or HTTP requests
3) To store and manage files
4) To provide a managed database service - ✔✔2) To execute code in response to
events or HTTP requests
