OCI 2025 Architect Associate Free Sample Questions

A Service Gateway provides a private connection path to supported Oracle services within the same region. However, connectivity is controlled by routing, not IAM policies. The essential configuration step is to add a route rule to the private subnet's route table that directs traffic destined for the Oracle Services Network (represented by a service CIDR label like 'All Services in Oracle Services Network') to the Service Gateway. IAM policies control what actions a principal can perform on resources, not the network path itself.

Objects stored in the Archive tier are offline and cannot be accessed directly. They must first be restored, which makes a temporary copy available in the Standard tier for a specified duration. The lifecycle policy moved the 6-month-old file to the Archive tier after 90 days. The inability to access it directly is expected behavior for objects in this tier. The user must initiate a restore operation before they can download the object.

Network Sources allow you to define a set of allowed IP addresses, such as the public IP range of a corporate network. This is the first required component.

An IAM policy is needed to grant permissions. To enforce the location constraint, you must add a 'where' clause to the policy that references the created Network Source (e.g., 'where request.networkSource.name = 'corp_network'').

By default, compute instances are assigned ephemeral public IPs, which are released when the instance is stopped. To maintain a consistent IP address, you should use a reserved public IP. OCI allows you to convert an existing ephemeral public IP to a reserved one, which can then be unassigned and reassigned to instances as needed, persisting through reboots. This is the most direct and efficient solution.

The OCI File Storage service is a fully managed, enterprise-grade NFS service that provides a durable, scalable, and secure shared file system. It is designed for use cases where multiple clients need concurrent access to a common file system, which perfectly matches the requirements of the legacy application. It also supports automated snapshots for backups.

A Remote Peering Connection (RPC) is the specific OCI component used to connect two VCNs in different regions. It allows resources in the VCNs to communicate using private IP addresses over Oracle's private network backbone, providing a secure and reliable connection suitable for disaster recovery scenarios.

This is the most secure and recommended method. By creating a dynamic group with a matching rule for the instance pool's OCID, all instances in that pool become members. You can then write an IAM policy that grants this dynamic group permission to manage objects in the target bucket. Applications on the instances can then use instance principals to be authenticated and authorized to call OCI services without needing to handle credentials.

For an instance to be managed by the OS Management service, the Oracle Cloud Agent must be installed and running, and specifically, the OS Management Service Agent plugin must be enabled. While Oracle Linux images typically include the agent, it must be active and able to communicate with the OCI services. Connectivity via a Service Gateway (for private subnets) or Internet Gateway is also required, but the agent itself is the primary prerequisite for visibility in the console.

This statement is false. Unlike Security Lists which apply to all VNICs in a subnet, Network Security Groups (NSGs) must be explicitly associated with a VNIC. An NSG acts as a virtual firewall for a chosen set of VNICs, allowing you to define security rules based on application tier or workload rather than subnet boundaries.

A Volume Group is designed for this exact purpose. It allows you to group multiple Block Volumes together and perform coordinated, time-consistent operations on them. Creating a backup of the Volume Group ensures that a crash-consistent backup of all member volumes is taken at the same point in time, which is critical for database recovery.