Oracle Cloud Infrastructure Architect Professional (1Z0-997-26) - Practice Exam 1

1. A batch workload is restartable and can tolerate interruptions. Which option may reduce compute costs if its operational constraints are satisfied?
2. A company is onboarding six business units into OCI. Each unit must operate its applications while a central team controls networking and security. Which foundation best supports this requirement?
3. A compute application reads one secret from Vault. Which identity design best avoids embedding a user's API key in the image?
4. A cost report cannot attribute shared infrastructure to product teams. Which design improvement is most useful?
5. A database has an asynchronous remote standby. Which statement about its RPO is correct?
6. A database migration passes connection tests but critical reports return different results. What should determine acceptance?
7. A DR team wants to reduce failures before an actual switchover. What should it do regularly with Full Stack DR?
8. A hub inspection appliance sees only client-to-server packets while responses bypass it. What design property should be addressed?
9. A hybrid application experiences high latency between its OCI application tier and an on-premises database. What should guide the next design decision?
10. A legacy application migration has a strict maintenance window and several undocumented database dependencies. What should happen before choosing the migration method?
11. A migration rehearsal shows data copy takes ten hours, but the allowed outage is one hour. Which approach should be evaluated?
12. A network design relies on a firewall VM as a transit next hop. Which additional concern is essential for production readiness?
13. A new workload is added to an OCI Core Landing Zone through a Terraform extension. Its team cannot manage a newly introduced service. What should the architect check first?
14. A payment service has an RPO of five minutes and an RTO of thirty minutes. Which validation is most meaningful?
15. A planned regional maintenance event allows coordinated role changes while both sites are healthy. Which operation best fits that situation?
16. A platform team uses shared Terraform modules for production and development. What most effectively prevents accidental production changes during development deployments?
17. A platform team wants consistent foundations while allowing workload-specific extensions. Which approach fits OCI landing zones?
18. A platform uses a private subnet and assumes its database is protected from all unauthorized access. What is missing from this reasoning?
19. A primary-region incident requires failover to a recovery region. Which dependency can prevent an otherwise healthy replica from serving users?
20. A private FastConnect circuit has an established BGP session, but an on-premises client cannot reach a private OCI server. Which TWO areas should be checked? Select TWO.
21. A recovery exercise succeeds for the database but fails for recently uploaded documents. What should change?
22. A regulated application requires customer-managed encryption keys. Which TWO design questions are essential? Select TWO.
23. A regulated workload needs a repeatable OCI foundation. Which TWO activities belong in its landing-zone design? Select TWO.
24. A security incident involves a compromised workload identity. Which response best limits damage while preserving investigation evidence?
25. A security team must prevent resource operations that violate a compartment's mandatory security recipe. Which OCI capability best fits?
26. A stateful application is placed across fault domains in one availability domain. Which failure is still outside that protection boundary?
27. A team adds a new VCN attachment to a DRG but its prefixes are absent from another attachment's route table. What should be checked?
28. A team copied a landing-zone template last year and now has manual production changes. What is the best approach to improve governance?
29. A team gives a CI pipeline permission to manage all resources in the tenancy for a single application deployment. What should the architect recommend?
30. A team needs continuous detection of risky configurations and supported response workflows across its tenancy. Which service should it evaluate?
31. A team needs predictable OCI connectivity but also mandates encryption in transit. What must the architect establish about a proposed FastConnect solution?
32. A team plans to send production logs to an external SIEM. What should be reviewed before enabling the export?
33. A team uses synchronous database replication over a long-distance link. Which tradeoff must the architect assess?
34. A team wants to reduce disaster-recovery costs by shutting down recovery compute. Which constraint must be checked first?
35. A vulnerability scan reports an exposed package on a customer-managed compute instance. Who should plan the guest-level remediation?
36. A workload must remain in an approved jurisdiction. Which design check is required beyond selecting a primary region there?
37. A workload reads archival objects frequently and now incurs retrieval overhead. What should be reassessed?
38. A workload requires access to supported Oracle regional services without sending that traffic through the public internet. Which VCN component is appropriate?
39. After a regional failover, the original primary becomes available again. What should happen before directing writes back to it?
40. After a successful cutover, the team wants to decommission the source environment. What is the appropriate gate?
41. An application requires private administration but no standing public SSH exposure. Which combination best fits the requirement?
42. An architect connects remote-region VCNs through DRGs. The application can resolve remote hosts but connections time out. What is the strongest initial hypothesis to test?
43. An architect must justify active-active deployment across regions for a stateful application. Which assessment is essential before selecting it?
44. An enterprise wants private access from on-premises systems to VCN resources. Which FastConnect peering option is appropriate?
45. An OCI application must recover compute, databases, and application startup in a defined sequence. Which service is designed to orchestrate that recovery?
46. An OCI application runs oversized VMs with consistently low utilization. What is the best first cost-optimization step?
47. Security responders need evidence of who changed a network configuration. Which OCI record is most directly relevant?
48. Three spoke VCNs attach to an upgraded DRG. A security team requires selected spoke-to-spoke traffic to traverse a network appliance in a hub. What must the design control?
49. Two acquired companies have overlapping private address ranges and separate regulatory boundaries. What should be resolved before choosing a single connected OCI topology?
50. Two redundant FastConnect circuits use the same customer router, carrier path, and building entry. What is the principal resilience concern?

Comments — 0