VendorsExamsEnterprise
Support
Request an ExamContact UsFAQ

Oracle Cloud Infrastructure 2025 Architect Professional Free Sample Questions

Description

Covers architecting cloud-native solutions with microservices and IaC, high availability and disaster recovery design, OCI security and secrets management, database implementation, and migration.

17 free sample questions250 in the full practice test Other version: 1z0-997-20(48)

Try simulator

1Z0-997-25 Sample Questions

  1. Question 1

    Advanced

    Architecting Cloud-Native Solutions · Design OCI cloud native solutions using Microservices Architecture, Containerization, and DevOps practices

    A global retail enterprise is designing a cloud-native e-commerce platform on Oracle Cloud Infrastructure (OCI). The application utilizes microservices deployed on Oracle Container Engine for Kubernetes (OKE). The architecture requires that pods have direct visibility of the client source IP addresses for geo-fencing and audit logging purposes without using X-Forwarded-For headers. The solution must also support mixed-protocol traffic (TCP and UDP) on the same load balancer IP. Which OCI Load Balancer configuration meets these strict networking requirements?

    Answer and explanation

    Correct answer: D

    The OCI Network Load Balancer (NLB) operates at Layer 4 and is non-proxying by design, which inherently preserves the client source IP address when traffic is forwarded to the backend. It also supports both TCP and UDP protocols. Setting externalTrafficPolicy: Local on the Kubernetes Service ensures that traffic is only routed to nodes running the specific pod, preventing SNAT (Source Network Address Translation) that would obscure the source IP.

  2. Question 2

    Intermediate

    Implementing and Operating Databases in OCI · Evaluate and implement databases, including Autonomous and Base Databases

    You are the lead architect for a financial institution migrating a legacy high-frequency trading application to OCI. The application requires a database with single-digit millisecond latency, automated failover with zero data loss (RPO=0), and the ability to scale CPU resources up to 3x during market opening hours automatically. Which database solution and configuration should you select?

    Answer and explanation

    Correct answer: C

    ATP on Shared Infrastructure provides the required performance. Auto Scaling allows the CPU count to scale up to 3x the base count automatically based on workload. Autonomous Data Guard in the same region (synchronous replication) ensures RPO=0 and automated failover for high availability.

  3. Question 3

    AdvancedMultiple answers

    Implementing Security Solutions · Design a secure architecture using OCI Security Services for a multi-tier application deployment

    A multinational corporation is implementing a hub-and-spoke network topology in OCI. They require a centralized inspection point for all North-South (Internet) and East-West (Spoke-to-Spoke) traffic. They have chosen OCI Network Firewall for this purpose. You need to configure the routing to ensure traffic flows correctly through the firewall in the Hub VCN.

    Which THREE routing configurations are required to achieve this? (Select THREE)

    Answer and explanation

    Correct answers: C, D, E

    Traffic leaving the Spoke must be directed to the Hub VCN via the DRG attachment to reach the firewall.

    When traffic arrives at the Hub VCN from a Spoke (via DRG), the VCN Ingress Route Table intercepts it and forwards it to the Firewall's private IP for inspection before it can be routed elsewhere.

    After the firewall inspects and allows the traffic, the traffic must be routed from the firewall's subnet back to the DRG to reach the destination Spoke VCN.

  4. Question 4

    Beginner

    Designing High Availability and Disaster Recovery Solutions · Design scalable and resilient solutions for high availability and disaster recovery

    You are creating a disaster recovery plan for a critical application running on OCI Compute instances with attached Block Volumes. The business requirement states that in the event of a region-wide outage, data must be recoverable in the destination region with a Recovery Point Objective (RPO) of less than 1 hour. You decide to use Cross-Region Replication for Block Volumes.

    What is a mandatory prerequisite for enabling this feature?

    Answer and explanation

    Correct answer: B

    Cross-Region Replication requires explicit IAM authorization. You must write a policy that allows the volume service (specifically the source volume) to create volume backups in the destination region (e.g., Allow service blockstorage to manage volume-backups in tenancy).

  5. Question 5

    Intermediate

    Implementing Security Solutions · Implement and automate secrets management solution using OCI Vault

    A developer is building a serverless application using OCI Functions. The function requires access to a legacy database that runs on a Compute instance in a private subnet. The function code needs the database credentials, but security policy strictly prohibits hardcoding secrets in the code or environment variables.

    Which sequence of steps implements the most secure and compliant solution?

    Answer and explanation

    Correct answer: C

    This approach uses Resource Principals (authentication provided by the OCI platform to the function resource) to authenticate against the Vault service. It avoids managing any static credentials or configuration files. The Dynamic Group logically groups the function instances.

  6. Question 6

    Advanced

    Implementing Security Solutions · Implement and automate secrets management solution using OCI Vault

    Case Study:

    Company Background:
    TechFin Global is migrating its core banking platform to OCI. The platform consists of a Web Tier (OCI Container Engine for Kubernetes), an App Tier (OCI Functions), and a Database Tier (Autonomous Transaction Processing).

    Requirement:
    The security team mandates that all application secrets (API keys, DB passwords) must be automatically rotated every 60 days. The rotation process must be fully automated without human intervention. The database password rotation must update the Autonomous Database user password and the secret stored in OCI Vault simultaneously to avoid downtime.

    Current Status:
    You have configured OCI Vault to store the DB password. You have a function code ready to perform the rotation logic.

    Question:
    Which architectural component should you configure to trigger and execute this secret rotation securely according to OCI best practices?

    Answer and explanation

    Correct answer: D

    OCI Vault supports native Secret Rotation by invoking an OCI Function. The Vault service triggers the function according to the schedule. The function, authenticated via Resource Principal, performs the dual update (Database user and Vault Secret) to ensure consistency. This is the managed, cloud-native way to handle rotation.

  7. Question 7

    Intermediate

    Designing and Evaluating Multicloud and Hybrid Solutions · Implement Oracle Interconnect for Azure and Oracle Database@Azure

    Your organization is deploying a multi-cloud solution using Oracle Database@Azure. The application tier runs in an Azure VNet in the East US region, and the database service is an Oracle Exadata Database Service hosted in the OCI East US region, physically co-located in the Azure data center. You need to ensure the lowest possible latency between the Azure application and the Oracle database.

    Which networking component is automatically provisioned and utilized to facilitate this direct connectivity?

    Answer and explanation

    Correct answer: D

    In the Oracle Database@Azure architecture, the Oracle Database resources are injected directly into the customer's Azure VNet using an Azure Delegated Subnet. This allows the Azure application resources to communicate with the Oracle Database using local Azure VNet networking speeds, achieving single-digit millisecond latency without traversing a standard public internet or traditional VPN path.

  8. Question 8

    Intermediate

    Implementing and Operating Databases in OCI · Optimize application performance and scalability using OCI Cache

    True or False: When configuring OCI Cache with Redis, you can distribute the primary and replica nodes across different OCI regions to achieve active-active cross-region read/write consistency.

    Answer and explanation

    Correct answer: B

    OCI Cache with Redis is a regional service. While it supports high availability within a region (using Availability Domains or Fault Domains), it does not currently support active-active cross-region clustering where a single cluster spans multiple regions for synchronous writes.

Register free for 9 more questions

Or unlock all 250 1Z0-997-25 questions with explanations, timed mode and flashcards.

Related practice tests

All Oracle practice exams