OCI Foundations 2025

How does OCI ensure data encryption for stoned and transmitted data?. Data is encrypted only in transit but not at rest. OCI provides default encryption for data at rest and in transit. Only customers can manage encryption keys through third-party services. Encryption must be manually enabled for each storage bucket.

Which Oracle Cloud Infrastructure service is responsible for securely storing and managing encryption keys and secrets?. Security Advisor. Security Zones. Vault. Cloud Guard.

What is the advantage of storing secrets in a vault in Oracle Cloud Infrastructure?. It makes secrets easier to access in code. It eliminates the need for authentication tokens. It automatically generates new secrets. It provides greater security than storing them in code or configuration files.

Which feature is NOT provided by Oracle Cloud Infrastructure Security Zones?. Storing and managing encryption keys and secrets. Continuous monitoring of security posture. Automatically enforcing security best practices. Restricting resource creation based on predefined security policies.

Where are cryptographic operations performed for a Vault Master Encryption Key protected by a Hardware Security Module (HSM)?. On the client. On the cloud. On the HSM. On the server.

Which is NOT a component of an Identity and Access Management (IAM) policy statement in Oracle Cloud Infrastructure?. Location. Data backup frequency. Resource-type. Action Verb.

Which statement is NOT true about compartments in Oracle Cloud Infrastructure?. Compartments can be nested to create a hierarchy. Identity and Access Management (IAM) policies can be written to grant access to resources in specific compartments. Compartments provide a way to store and manage encryption keys and secrets. Compartments are a global resource.

What is the recommended best practice for OCI Tenancy Administrators?. Avoid creating multiple compartments to simplify resource management. Allow all users to manage policies without restrictions. Use the Tenancy Administrator account for all daily operations. Always enforce Multi-Factor Authentication (MFA) for added security.

Which statement best describes the default AuthZ behavior for users and groups in OCI Identity and Access Management?. Users and groups are automatically granted access to all resources. Users and groups are granted access based on their roles without the need for policies. Access to resources is explicitly granted in policies; otherwise, it is denied by default. Users and groups must request access from the administrator for each resource.

In Oracle Cloud Infrastructure, what does the Universal Credits pricing model allow customers to do?. Pay a fixed price for all services. Pay only for services they use with no upfront commitment. Use prepaid credits for any eligible cloud service. Receive a fixed amount of resources for a specific price.

Which factor does NOT impact the cost of running a virtual machine instance in Oracle Cloud Infrastructure?. The operating system used by the VM instance. The number of virtual machines running. The region used by the VM instance. The size of the VM instance.

How are compartment quotas applied in Oracle Cloud Infrastructure?. On a per-compartment basis. Globally, across all compartments. On a per-region basis. On a per-tenancy basis.

What does Oracle Cloud Advisor help you with?. Automatically fixing problems. Only security resolutions. Cost management, performance, and high-availability recommendations. Only cost management.

In the Oracle Cloud Shared Security Model, what is Oracle responsible for?. Securing customer data stored in Object Storage. Configuring IAM policies for all customers automatically. Controlling user access policies within customer accounts. Managing and securing the physical infrastructure and underlying cloud services.

What is an availability domain in Oracle Cloud Infrastructure?. A localized geographical area. One or more data centers located within a region. A set of virtual cloud networks. A type of encrypted traffic.

Why are availability domains within the same OCI region connected by a low-latency, high-bandwidth network?. To reduce the need for encryption between domains. To increase the likelihood of simultaneous failures. To ensure all domains share the same infrastructure. To allow for high-availability connectivity and building replicated systems.

What is the primary purpose of fault domains in Oracle Cloud Infrastructure?. To connect availability domains with low latency. To handle encryption of traffic between instances. To ensure all instances are on the same physical hardware. To distribute instances across different physical hardware within an availability domain.

Why is it important to choose an OCI Region close to your users?. To ensure that only one Availability Domain is used. To reduce the cost of cloud storage. To enable automatic resource scaling. To minimize latency and improve application performance.

In Oracle Cloud Infrastructure Object Storage Service, which storage tier is designed for rarely accessed data that can be restored within hours?. Standard Storage. Archive Storage. One Zone-Infrequent Access. Intelligent Tiering.

How many copies of data does OCI typically maintain for durability in Object Storage?. Multiple copies stored redundantly across an entire region. Two copies across two availability domains. No redundant copies stored unless versioning is enabled manually. Only one copy in the same availability domain.

Which type of workload is NOT suitable for using the Oracle Cloud Infrastructure File Storage service?. Big data and analytics. Content management. Running small personal websites. Media processing.

In Oracle Cloud Infrastructure Block Volume Service, which feature enables you to increase the size of a block volume without any downtime?. Dynamic Volume Resizing. Volume Bursting. Volume Elasticity. Online Resizing.

What is the main purpose of OCI's Data Transfer Service?. Encrypting database backups in Block Volumes. Facilitating offline bulk data transfer to OCI using disks or appliances. Creating multiple copies of objects across different regions automatically. Migrating Container Engine (OKE) clusters between regions.

Which feature of Oracle Cloud Infrastructure Object Storage Service enables users to automatically move objects between storage tiers based on predefined rules?. Pre-Authenticated Requests. Object Versioning. Cross-Region Replication. Object Lifecycle Management.

Which Oracle Cloud Infrastructure Object Storage tier is suitable for data that needs to be accessed quickly and frequently, with a high level of data accessibility and performance?. Standard Storage. Auto-Tiering. Archive Storage. Infrequent Access Storage.

Which component of the Oracle Cloud Infrastructure Networking service allows resources in a VCN to access Oracle Cloud services without traversing the public Internet?. Dynamic Routing Gateway (DRG). Internet Gateway. Service Gateway. Network Address Translation (NAT) Gateway.

Which networking component of OCI Virtual Cloud Network provides compute instances in a private subnet with outbound Internet access?. Internet Gateway. Dynamic Routing Gateway (DRG). Network Address Translation (NAT) Gateway. Service Gateway.

In OCI, what is one key reason to choose a Network Load Balancer over the Standard Load Balancer (HTTP/HTTPS)?. The Network Load Balancer is used only for database traffic inside a private subnet. The Network Load Balancer can perform complex Layer 7 routing decisions. The Network Load Balancer operates at Layer 4, offering lower latency for TCP and UDP traffic. The Network Load Balancer exclusively supports web (HTTP/HTTPS) protocols.

What is the primary difference between a public subnet and a private subnet in an OCI VCN?. Private subnets can be created only in a separate region from the VCN. Public subnets require a /24 CIDR block, whereas private subnets do not. Public subnets allow resources to have public IP addresses and direct internet access, whereas private subnets do not. Public subnets can host only load balancers, whereas private subnets host databases.

Which type of load balancing policy is supported by Oracle Cloud Infrastructure Load Balancer?. Weighted Round Robin. Random. Round Weighted. Weighted Least Connection.

What is the primary function of a Route Table in the Oracle Cloud Infrastructure Networking service?. To define rules controlling traffic flow between subnets. To define rules to route traffic from subnets to destinations outside the VCN. To provide a private connection between a VCN and an on-premises network. To connect a VCN to the public Internet.

What is a key feature of Oracle Cloud Infrastructure Functions?. It requires extensive infrastructure administration. It automatically applies operating system software patches and upgrades. It is limited to running only Java applications. It requires manual provisioning of compute instances.

What is the primary purpose of Oracle Cloud Infrastructure Functions?. To store and manage files. To execute code in response to events or HTTP requests. To provide a managed database service. To deploy and manage virtual machines.

What does the term "Flexible Shapes" refer to in OCI Compute?. The name for Oracle's serverless compute option. A container orchestration service built on Kubernetes. The ability to run OCI Compute without defining CPU or memory. The capability to customize the number of OCPUs and the amount of memory for certain VM shapes.

Why might you choose to use containers instead of virtual machines?. Containers allow for faster startup time and more efficient resource usage. Containers are less flexible in terms of resource allocation. Containers provide better isolation than virtual machines. Containers require more resources to run.

Which is NOT a type of instance offered by the Oracle Cloud Infrastructure Compute service?. Nano instance. Dedicated Virtual Machine Host. Virtual Machine. Bare Metal.

Which feature does the Oracle Cloud Infrastructure Compute service leverage for ensuring high availability of applications?. Real Application Clusters (RAC). Fault Domains. Golden Gate. Data Guard.

Which statement best describes Preemptible VMs in OCI?. They provide a dedicated physical server with no interruption. They automatically upgrade their operating systems without user action. They are permanent instances that cannot be shut down by OCI. They are short-lived instances offered at lower cost, which can be reclaimed by OCI.

Which Oracle Cloud Infrastructure (OCI) offering allows you to run cloud services in your own data center while maintaining regulatory compliance?. Oracle Database@Azure. OCI Dedicated Region. MySQL HeatWave Database Service. Oracle Database Service for Azure.

Which Oracle Cloud Infrastructure service is not designed for use with multiple cloud providers?. Oracle Database@Azure. Oracle Roving Edge Infrastructure. MySQL HeatWave Database Service. Oracle Interconnect for Azure.