OCI FOUNDATIONS FINAL PAPER 2025/2026 QUESTIONS
WITH ANSWERS RATED A+
✔✔VCN Address Space - ✔✔Address space 10.0.0.0/16
EVERY RESOURCES GETS A UNIQUE PRIVATE IP ADDRESS
✔✔Gateway - ✔✔Internet gateway connects to internet (IGW)
Public Subnet (DMZ)
✔✔NAT Gateway - ✔✔Blocks inbound connection
✔✔DRG - ✔✔Virtual router providing a path for private traffic between your VCN and
other destinations
Establishes a connection with on premises networks
✔✔Service Gateway - ✔✔Communication to public OCI services
Access without internet
✔✔Peering - ✔✔Process of connecting multiple VCNs
Local Peering (Same Region)
Remote VCN Peering (Different Region)
NO Transitive Peering
✔✔VCN Security - ✔✔Firewall Rules (Subnet Layer)
Network Security Group (VNIC Layer)
✔✔Load Balancer - ✔✔Sits between Client and BackEnd
Preforms tasks like Service Discovery, Health Check.
Benefits: Fault tolerance and HA
Scale
✔✔IAM - ✔✔Identities And Permissions (RBAC)
✔✔Principals - ✔✔IAM entity thats allowed to interact with OCI resources
, IAM users and Instance Principals
✔✔IAM Users and Groups - ✔✔1st IAM user is default ADMIN
Users -> Group -> at least once policy
✔✔Instance Principals - ✔✔Let instances make API calls against other OCI services.
✔✔Network Admin, Storage Admin - ✔✔Policies
✔✔Authentication - ✔✔Deals with user identity
Username/Password
API SignIn Key
Auth Token
✔✔Authorization - ✔✔Actions preformed by Principals
Policies
✔✔Policies - ✔✔Allow <group> to <verb> <resource type> in <location> where
<conditions>
verb: inspect, read, use, manage
resource type: all resources, database family, instance family, object family
✔✔Common Policies - ✔✔Network Admin (Manage Virtual Network family)
Instance Launchers
✔✔OCI Database Options - ✔✔VM- fast provisioning
BareMetal- fast performance
RAC- Managed HA
Exadata DB Systems- Managed Exadata Infra
Autonomous - Shared/Dedicated: Self-driving, self-securing, self-repairing
✔✔DB Systems - ✔✔Managed DB Systems
WITH ANSWERS RATED A+
✔✔VCN Address Space - ✔✔Address space 10.0.0.0/16
EVERY RESOURCES GETS A UNIQUE PRIVATE IP ADDRESS
✔✔Gateway - ✔✔Internet gateway connects to internet (IGW)
Public Subnet (DMZ)
✔✔NAT Gateway - ✔✔Blocks inbound connection
✔✔DRG - ✔✔Virtual router providing a path for private traffic between your VCN and
other destinations
Establishes a connection with on premises networks
✔✔Service Gateway - ✔✔Communication to public OCI services
Access without internet
✔✔Peering - ✔✔Process of connecting multiple VCNs
Local Peering (Same Region)
Remote VCN Peering (Different Region)
NO Transitive Peering
✔✔VCN Security - ✔✔Firewall Rules (Subnet Layer)
Network Security Group (VNIC Layer)
✔✔Load Balancer - ✔✔Sits between Client and BackEnd
Preforms tasks like Service Discovery, Health Check.
Benefits: Fault tolerance and HA
Scale
✔✔IAM - ✔✔Identities And Permissions (RBAC)
✔✔Principals - ✔✔IAM entity thats allowed to interact with OCI resources
, IAM users and Instance Principals
✔✔IAM Users and Groups - ✔✔1st IAM user is default ADMIN
Users -> Group -> at least once policy
✔✔Instance Principals - ✔✔Let instances make API calls against other OCI services.
✔✔Network Admin, Storage Admin - ✔✔Policies
✔✔Authentication - ✔✔Deals with user identity
Username/Password
API SignIn Key
Auth Token
✔✔Authorization - ✔✔Actions preformed by Principals
Policies
✔✔Policies - ✔✔Allow <group> to <verb> <resource type> in <location> where
<conditions>
verb: inspect, read, use, manage
resource type: all resources, database family, instance family, object family
✔✔Common Policies - ✔✔Network Admin (Manage Virtual Network family)
Instance Launchers
✔✔OCI Database Options - ✔✔VM- fast provisioning
BareMetal- fast performance
RAC- Managed HA
Exadata DB Systems- Managed Exadata Infra
Autonomous - Shared/Dedicated: Self-driving, self-securing, self-repairing
✔✔DB Systems - ✔✔Managed DB Systems
