OCI Architect Exam Questions and Answers Already Passed Latest Update 2025-2026
Your VM.Standard 2.16 running a SQL db needs increased disk performance. You want to use
NVMe disks but keep the same number of CPUs. You terminate the instance and preserve the
boot volume. What's the next step? - Answers Create a new instance using VM.DenseIO2.16
shape using the preserved boot volume and move the SQL db to data in NVMe disk.
Your LB is using round robin policy to pass traffic to your back end servers. You notice that one
server is getting more traffic than the others. How can you make sure traffic is evenly
distributed? - Answers Disable cookie-based persistence on your backend set
You're running an AI/ML app on OCI. You need app needs GPU and at least 20gbps network
throughput. You currently are using VM.standard 2.1 compute with no block storage. What two
things can you do to to get the required performance? - Answers Terminate the instance,
preserve boot, create a new instance using BM.GPU2.2 using the preserved boot, no block
volume attached.
Do the same as above but attach block volume.
You must remove users from IAM groups before deleting them T/F? - Answers True
You've been asked to manage updates and patch all Oracle Linux machines in OCI. You need to
apply all the latest kernel security updates. What OCI service will let you do this task? - Answers
OS management
Encryption is enabled by default and cannot be turned off T/F? - Answers True
You need to set up Instance principals so an app can call OCI public services without user
credentials. A developer on your team has already configured the app using OCI SDK to
authenticate. What steps are necessary to complete the set up? - Answers -Create dynamic
group
-Create a policy that grants permissions to the group
-Build the script or application that will run on the instance(already done in this scenario)
-Deploy the application on OCI and SDK to all instances in the group
You must create an IAM user that can authenticate with OCI API endpoints but not log into the
OCI console. What two auth options can you use? - Answers API signing key
Auth Token
You need to retain health records securely for 5 years due to regulatory compliance standards.
They cannot be modified, overwritten or deleted. What can you do to meet this requirement? -
,Answers Create an OCI object storage time-bound retention rule on the bucket for five years.
Enable retention rule lock on the bucket.
You need HA and fault tolerance for a financial trading platform. You're currently using object
storage in us-phoenix-1. The stored financial data must not be effected by outages in AD's or
even a region. How can you avoid any costly disruptions and ensure durability? - Answers Create
a replication policy and send the data to different bucket in another OCI region.
What does Replica Set do in OCI OKE? - Answers It maintains a set of replica pods running at
any given time
By default object versioning is enabled on a bucket T/F - Answers False
You have a public subnet and internet gateway in your VCN on OCI. The public subnet has a
route table and SL. However your instances in the subnet can't reach the internet? What are two
possible reasons for this? - Answers The route table has no default route for routing traffic to
the internet gateway
There is no stateful egress rule in the SL associated with the subnet
You're creating a lab that includes large graphics. The application is unresponsive when
embedding the images so you are using URL paths in object storage for the images. You need
to make sure these graphics are accessible without authentication for an extended period of
time, how can you do this? - Answers Make object storage bucket public and use the URL path
for individual objects
What two methods can you use for migrating on-prem Oracle DB to Oracle ATP? - Answers Load
text files into ATP using SQL developer
Use Oracle Data pump
Object versioning is enabled at the namespace level T/F? - Answers False
You're uploading a log file (5 TIB size) and want to use multipart upload for efficiency and
resiliency. What is the maximum size for an object and how small-large can individual parts be?
- Answers Maximum object size 10 TIB
Individual parts 10 MiB to 50 Gib
You are running VM.standard 2.1 but you're experiencing network throughput as a bottleneck
when uploading user data. You want to observe the demand for a week before adding new
, application instances. Which action is the most efficient way to resolve this? - Answers Change
the shape of the instance to a higher network bandwith instance.
You can't shrink an existing block volume with offline resizing T/F - Answers True
You have a DB on a standard compute instance on OCI. The database require high I/O and you
decided to use OCI block volume to service it. With cost in mind which elastic performance
option should you chose for the block volume? - Answers Higher Performance
You have a VCN with 3 private subnets. Two subnets contain application servers and the third a
DB system. The application requires a shared file systems so you provision it using FSS. You
create a mount target in one of the app subnets. The VCN SL's are properly configured so that
the app servers and DB can access the file system. The security team wants the DB system to
have read-only access to the file system. How do you satisfy this ask? - Answers Create an NFS
export option that allows READ_ONLY access where the source is the CIDR range in the DB
subnet.
Your data science team uses Object storage for large sets of data. They have an IP address of
129.146.31.0/27
What are two ways we can ensure only the data science team can access the object storage
bucket? - Answers Create a pre-authenticated request and email it to ONLY the data science
team
Create a network source named CorpNetwork with a CIDR block of 129.146.31.0/27
What is required to set up Data guard? - Answers -Both DB's in same compartment
-DB's must be the same shape
-DB versions must be identical. Note that Dataguard doesn't support DB standard edition.
What database edition does Active Data Guard require? - Answers Enterprise Edition- Extreme
Performance
What does your LB do when an instance fails a health check? - Answers Stops sending traffic to
that instance
You want to run a POC. Your resources currently exist in the root compartment. What is the best
practice for defining security for the POC? - Answers Create a new compartment for the POC
and grand permissions to create and manage resources in the new compartment
File systems use Oracle Managed keys by default T/F - Answers True
Your VM.Standard 2.16 running a SQL db needs increased disk performance. You want to use
NVMe disks but keep the same number of CPUs. You terminate the instance and preserve the
boot volume. What's the next step? - Answers Create a new instance using VM.DenseIO2.16
shape using the preserved boot volume and move the SQL db to data in NVMe disk.
Your LB is using round robin policy to pass traffic to your back end servers. You notice that one
server is getting more traffic than the others. How can you make sure traffic is evenly
distributed? - Answers Disable cookie-based persistence on your backend set
You're running an AI/ML app on OCI. You need app needs GPU and at least 20gbps network
throughput. You currently are using VM.standard 2.1 compute with no block storage. What two
things can you do to to get the required performance? - Answers Terminate the instance,
preserve boot, create a new instance using BM.GPU2.2 using the preserved boot, no block
volume attached.
Do the same as above but attach block volume.
You must remove users from IAM groups before deleting them T/F? - Answers True
You've been asked to manage updates and patch all Oracle Linux machines in OCI. You need to
apply all the latest kernel security updates. What OCI service will let you do this task? - Answers
OS management
Encryption is enabled by default and cannot be turned off T/F? - Answers True
You need to set up Instance principals so an app can call OCI public services without user
credentials. A developer on your team has already configured the app using OCI SDK to
authenticate. What steps are necessary to complete the set up? - Answers -Create dynamic
group
-Create a policy that grants permissions to the group
-Build the script or application that will run on the instance(already done in this scenario)
-Deploy the application on OCI and SDK to all instances in the group
You must create an IAM user that can authenticate with OCI API endpoints but not log into the
OCI console. What two auth options can you use? - Answers API signing key
Auth Token
You need to retain health records securely for 5 years due to regulatory compliance standards.
They cannot be modified, overwritten or deleted. What can you do to meet this requirement? -
,Answers Create an OCI object storage time-bound retention rule on the bucket for five years.
Enable retention rule lock on the bucket.
You need HA and fault tolerance for a financial trading platform. You're currently using object
storage in us-phoenix-1. The stored financial data must not be effected by outages in AD's or
even a region. How can you avoid any costly disruptions and ensure durability? - Answers Create
a replication policy and send the data to different bucket in another OCI region.
What does Replica Set do in OCI OKE? - Answers It maintains a set of replica pods running at
any given time
By default object versioning is enabled on a bucket T/F - Answers False
You have a public subnet and internet gateway in your VCN on OCI. The public subnet has a
route table and SL. However your instances in the subnet can't reach the internet? What are two
possible reasons for this? - Answers The route table has no default route for routing traffic to
the internet gateway
There is no stateful egress rule in the SL associated with the subnet
You're creating a lab that includes large graphics. The application is unresponsive when
embedding the images so you are using URL paths in object storage for the images. You need
to make sure these graphics are accessible without authentication for an extended period of
time, how can you do this? - Answers Make object storage bucket public and use the URL path
for individual objects
What two methods can you use for migrating on-prem Oracle DB to Oracle ATP? - Answers Load
text files into ATP using SQL developer
Use Oracle Data pump
Object versioning is enabled at the namespace level T/F? - Answers False
You're uploading a log file (5 TIB size) and want to use multipart upload for efficiency and
resiliency. What is the maximum size for an object and how small-large can individual parts be?
- Answers Maximum object size 10 TIB
Individual parts 10 MiB to 50 Gib
You are running VM.standard 2.1 but you're experiencing network throughput as a bottleneck
when uploading user data. You want to observe the demand for a week before adding new
, application instances. Which action is the most efficient way to resolve this? - Answers Change
the shape of the instance to a higher network bandwith instance.
You can't shrink an existing block volume with offline resizing T/F - Answers True
You have a DB on a standard compute instance on OCI. The database require high I/O and you
decided to use OCI block volume to service it. With cost in mind which elastic performance
option should you chose for the block volume? - Answers Higher Performance
You have a VCN with 3 private subnets. Two subnets contain application servers and the third a
DB system. The application requires a shared file systems so you provision it using FSS. You
create a mount target in one of the app subnets. The VCN SL's are properly configured so that
the app servers and DB can access the file system. The security team wants the DB system to
have read-only access to the file system. How do you satisfy this ask? - Answers Create an NFS
export option that allows READ_ONLY access where the source is the CIDR range in the DB
subnet.
Your data science team uses Object storage for large sets of data. They have an IP address of
129.146.31.0/27
What are two ways we can ensure only the data science team can access the object storage
bucket? - Answers Create a pre-authenticated request and email it to ONLY the data science
team
Create a network source named CorpNetwork with a CIDR block of 129.146.31.0/27
What is required to set up Data guard? - Answers -Both DB's in same compartment
-DB's must be the same shape
-DB versions must be identical. Note that Dataguard doesn't support DB standard edition.
What database edition does Active Data Guard require? - Answers Enterprise Edition- Extreme
Performance
What does your LB do when an instance fails a health check? - Answers Stops sending traffic to
that instance
You want to run a POC. Your resources currently exist in the root compartment. What is the best
practice for defining security for the POC? - Answers Create a new compartment for the POC
and grand permissions to create and manage resources in the new compartment
File systems use Oracle Managed keys by default T/F - Answers True
