Oracle Cloud Infrastructure 2026 Architect Professional (1Z0-997-26) (1Z0-997-26) (1Z0-997-26) — Questions 226–300

An application architect is troubleshooting intermittent latency spikes in a distributed microservices application deployed across multiple OCI regions. Which OCI capability should be used to trace requests end-to-end across service boundaries?

Your finance department requires detailed cost visibility and granular chargeback reporting for multiple cloud environments spanning different business units, departments, and environments (Prod/Dev). Tagging is strictly enforced via OCI Tag Defaults. To analyze historical cost trends and forecast future cloud spend across these business dimensions, which OCI native feature should you use?

You are designing an active-active hybrid architecture between an on-premises datacenter and OCI using two separate FastConnect circuits connected to two different DRG attachments. How does OCI determine path selection when receiving identical BGP route advertisements from both circuits?

Your team is executing a cutover plan for migrating a production Microsoft SQL Server database from an on-premises environment to OCI Compute running Windows Server. To ensure data integrity, you decide to use Always On Availability Groups with the on-premises primary and the OCI replica. After completing the initial seed and syncing the databases, you perform the failover. However, application servers in OCI cannot connect to the new primary database. What is the most likely root cause?

Which TWO mechanisms are used to secure data in transit across OCI networking components? (Choose two.)

You are architecting a multi-region cloud-native application where OCI API Gateway is deployed in Region A and Region B. You need to ensure that global users are automatically routed to the closest healthy API Gateway endpoint with automatic failover if an entire OCI region experiences an outage. Which OCI service should you use in front of the API Gateways?

You are managing an enterprise OKE cluster that runs multi-tenant workloads. Certain sensitive pods must run on dedicated worker nodes to comply with strict isolation mandates. Which combination of Kubernetes scheduling features should you configure on OCI to enforce this requirement reliably?

Which TWO factors should be evaluated when choosing between an OCI FastConnect Colocation model and a Provider model? (Choose TWO)

Your security operations team wants to identify log anomalies, such as sudden spikes in failed SSH login attempts across your OCI Compute fleet, without manually writing complex regex queries. Which Logging Analytics feature leverages machine learning to automatically group and identify patterns in logs?

Which TWO characteristics distinguish OCI Container Engine for Kubernetes (OKE) as a managed Kubernetes service?

An architect is configuring an OCI Full Stack Disaster Recovery plan. The plan includes a step to run a custom script on an application server during a failover drill. Which OCI service executes this custom script?

An application tier in a private VCN subnet needs to securely access an Oracle Autonomous Database without traversing the public internet. Which OCI networking feature provides the most secure and performant connection?

What is the primary benefit of using OCI Autonomous Database Serverless compared to Provisioned (Dedicated) infrastructure regarding database administration?

When configuring an OCI Application Load Balancer (Layer 7) for high availability, which THREE settings or components must be properly configured? (Choose three.)

Your organization is implementing strict compliance requirements for log retention and auditing in OCI. Which THREE architectural implementations ensure secure, long-term log governance?

An architect is designing a multi-cloud disaster recovery strategy between OCI and AWS. Production data resides in an Oracle Autonomous Database on OCI, and application servers run in AWS EC2. To secure the network traffic between AWS and OCI without routing over the public internet, which approach should be implemented?

Your security team wants to continuously monitor OCI resources for misconfigurations and automatically remediate security violations without manual intervention. Which OCI native service should you configure?

When configuring OCI Service Connector Hub to move logs from OCI Logging to OCI Object Storage, which THREE components must be defined?

You are designing a hybrid cloud architecture during a phased workload migration to OCI. On-premises applications must securely communicate with migrated OCI workloads over a private, dedicated connection with high throughput and encryption. Which OCI networking service combination provides this capability?

Which OCI security feature provides a centralized view of security recommendations and allows you to remediate misconfigurations with a single click?

An administrator is designing a hybrid cloud architecture where OCI workloads need to access an Azure SQL Database over the OCI-Azure Interconnect. The OCI VCN and Azure VNet have overlapping IP address spaces (10.0.0.0/16). What is the mandatory architectural requirement to make this cross-cloud communication possible?

Which TWO network security features can be applied to an Oracle Base Database system on OCI to protect database traffic and restrict access? (Choose two.)

Which TWO editions of Oracle Database are available when deploying an Oracle Base Database system on OCI? (Choose two.)

Your development team needs to scale up CPU cores for an Autonomous JSON Database instance dynamically without restarting the application or causing downtime. Which feature should you use?

When configuring OCI API Gateway, which THREE types of backends are natively supported for routing incoming API requests?

You have deployed an OCI Function and want to test its HTTP trigger endpoint without writing custom client code. Which OCI service or feature should you use to invoke the function directly via an HTTP URL?

You are building a high-throughput event-processing pipeline where multiple consumer instances need to read messages from an OCI Stream concurrently. Each consumer instance must maintain its own independent cursor position and process every message in the stream without interfering with other consumer instances. How should you configure your consumers?

You need to export OCI Audit logs to a third-party SIEM tool (such as Splunk or Elastic) in real-time. Which OCI architecture is best suited for this requirement?

An architect is designing a multi-region disaster recovery architecture for an application running on OCI Compute. The database layer uses Oracle Data Guard. For the application tier, what is the recommended approach to handle stateless application servers in the DR region?

An organization is designing a disaster recovery strategy using Exadata Database Service on Dedicated Infrastructure. They require an Recovery Time Objective (RTO) of less than 30 seconds and a Recovery Point Objective (RPO) of zero for an enterprise database handling mission-critical workloads. Which Data Guard configuration should be implemented?

You want to track API calls made by a specific user who deleted a critical production database in OCI. Which OCI service log should you examine?

Which OCI service is primarily used to establish an encrypted site-to-site IPSec VPN connection between an on-premises datacenter and an OCI Virtual Cloud Network?

Your team is planning to migrate virtual machines from an on-premises hypervisor to OCI Compute. You want to generate an automated report detailing resource utilization (CPU, memory, storage IOPS) over the past 30 days to right-size the target OCI instance shapes. Which OCI tool supports this discovery phase?

Which THREE strategies can be implemented in OCI to mitigate the impact of a regional availability outage on a multi-tier web application? (Choose three.)

An enterprise is planning to migrate a large on-premises Oracle Database of 15 TB to Oracle Cloud Infrastructure (OCI) Exadata Database Service. The maintenance window for the final cutover is extremely short (less than 2 hours). Which migration method should you recommend to minimize application downtime?

Which TWO of the following are valid deployment models or connection types supported by OCI FastConnect?

Which TWO actions can you take in OCI to ensure high availability of application data stored in Block Volumes? (Choose two.)

You are configuring a site-to-site IPSec VPN between your on-premises datacenter and an OCI VCN. To ensure data confidentiality and integrity across the public internet, which encryption algorithms should you mandate in the IPSec configuration?

Which TWO methods can be used to achieve high availability for an OCI Site-to-Site VPN connection to an on-premises datacenter? (Choose TWO)

You are deploying an application on OKE using Helm charts. You need to ensure that Helm release secrets and deployment state are stored securely and persistently within the cluster so that failed tiller/helm operations do not corrupt deployment tracking. Where does Helm v3 store its release state in OKE by default?

An organization is preparing to migrate 500 virtual machines to OCI. To govern resource creation, budget allocation, and access control effectively, how should the OCI tenancy be structured prior to starting resource migrations?

An OCI Administrator needs to set up proactive alerting when the CPU utilization of a production Compute instance exceeds 90% for a sustained period of 15 minutes. Which OCI service should be configured to evaluate this metric and trigger notifications via an email endpoint?

Your organization is planning to migrate file shares from an on-premises Windows environment (SMB protocol) to OCI. Which THREE factors or options should you consider when selecting the appropriate OCI storage architecture for Windows file shares? (Choose three.)

When designing a container build and deployment pipeline using OCI DevOps and OCI Registry (OCIR), which THREE tasks can be automated within the CI/CD build pipeline stage?

You are troubleshooting a microservice on OKE that is experiencing intermittent 502 Bad Gateway errors when communicating with another internal service. The application uses Kubernetes ClusterIP services for discovery. You suspect DNS resolution failure within the cluster. Which diagnostic tool and approach should you use inside the OKE cluster?

You are configuring the OCI-Azure Interconnect to link an OCI Virtual Cloud Network (VCN) with an Azure Virtual Network (VNet). You have already established the FastConnect and ExpressRoute circuits. What is the mandatory next step to enable cross-cloud routing between the OCI Dynamic Routing Gateway (DRG) and the Azure Virtual Network Gateway?

You are configuring an OCI API Gateway deployment to route requests to backend microservices running on OKE. You need to ensure that if a backend microservice takes longer than 3 seconds to respond, the API Gateway cancels the request and returns a 504 Gateway Timeout error to the client. Where should you configure this timeout?

During a migration cutover weekend, your team encounters unexpected DNS resolution failures preventing users from reaching the newly migrated OCI application endpoints. Which TWO immediate troubleshooting steps should you perform? (Choose two.)

An architect is designing an Oracle Autonomous JSON Database instance to store flexible document workloads. Which feature is automatically enabled on Autonomous JSON Database that distinguishes it from general-purpose Autonomous Transaction Processing instances regarding storage management?

An architect is configuring Oracle Autonomous Database Disaster Recovery with cross-region Data Guard. The primary database is in Ashburn, and the standby is in Phoenix. You execute a switchover operation. What happens to the connection strings (such as tnsnames.ora entries) used by client applications?

An enterprise application running on Oracle Autonomous Transaction Processing (ATP) requires dedicated infrastructure isolation for compliance reasons. You need to provision an Autonomous Database on Dedicated Exadata Infrastructure. Which architectural step is mandatory before you can provision the database instance?

What is the primary function of an OCI Service Gateway?

When designing a high-availability and disaster recovery architecture for an enterprise Oracle Database on OCI, which THREE components or patterns are crucial for achieving optimal recovery and uptime? (Choose three.)

During a lift-and-shift migration planning phase, your team needs to estimate the monthly running costs of various OCI Compute shapes, block storage volumes, and egress data transfer fees before provisioning resources. Which OCI tool should you use to generate this detailed cost breakdown?

An enterprise application deployed on Oracle Container Engine for Kubernetes (OKE) requires low-latency, secure, private connectivity between microservices residing in different Virtual Cloud Network (VCN) subnets without exposing traffic to the public internet. Which OKE add-on or feature should a Solutions Architect implement?

Which THREE features are supported within OCI Cost Analysis to help administrators analyze and report on cloud spending?

An enterprise architect is designing a centralized log management solution in Oracle Cloud Infrastructure (OCI) Logging Analytics. The team needs to ingest logs from various heterogeneous sources, including custom applications, Oracle databases, and third-party firewalls, while ensuring that the log data is properly parsed and enriched without requiring custom regex development for every vendor format. Which feature should the architect leverage to meet this requirement?

You are using Fn Project CLI to deploy an OCI Function. Which command is used to build, push, and deploy the function to your application in OCI in a single streamlined step?

An organization has multiple child compartments under a parent compartment. A security architect needs to write an IAM policy that allows a specific developer group to manage compute instances across all child compartments without granting permissions at the root tenancy level. How should this policy be structured?

An enterprise is migrating a cluster of microservices running on Kubernetes from an on-premises data center to OCI Container Engine for Kubernetes (OKE). The cluster uses custom CNI (Container Network Interface) plugins and persistent storage backed by an on-premises Ceph cluster. During migration planning, how should you architect the persistent storage layer in OCI to support OKE stateful workloads?

You are configuring an OCI API Gateway deployment to secure a backend microservice running on OKE. You need to implement token-based authentication where the API Gateway validates a JSON Web Token (JWT) issued by an external identity provider before routing the request. Where should you configure this validation?

You need to automate the build, test, and deployment phases of your microservices application whenever developers push code changes to a Git repository on OCI. Which OCI service provides native CI/CD pipelines?

Your organization is migrating a high-throughput transactional database to OCI. During peak business hours, the database experiences massive I/O bursts. You want to ensure the underlying storage configuration can scale its IOPS independently of storage capacity. Which OCI block volume feature should you enable?

An architect is migrating a multi-tier enterprise web application from an on-premises data center to OCI using the Lift and Shift Migration tool. During the migration assessment phase, the migration agent reports that several source VMs have unsupported guest operating system kernels and specific block device partitioning that cannot be directly converted by the OCI Image Builder. What is the recommended remediation strategy before initiating the bulk instance migration?

Your OKE cluster has autoscaling enabled using the Kubernetes Cluster Autoscaler. However, during peak hours, new pods remain in 'Pending' state for 15 minutes before the cluster autoscaler provisions new worker nodes. How can you reduce this provisioning delay?

Your security team mandates that all traffic entering your OCI VCN from the internet must be inspected by a next-generation firewall before reaching backend web servers. How should you design this architecture?

You need to migrate a 50 TB Oracle Database from on-premises to Exadata Database Service on Dedicated Infrastructure with minimal downtime. The source database is operating on AIX and uses big-endian architecture, while OCI Exadata runs on little-endian Linux. Which migration method handles cross-platform endian conversion most efficiently?

Which THREE features are provided by OCI Application Performance Monitoring (APM)?

You are provisioning an Autonomous Data Warehouse (ADW) instance and want to configure network access so that only specific corporate IP addresses can connect to the database. Which feature should you enable?

An enterprise application hosted on OCI requires high availability across multiple fault domains within a single availability domain. Which resource placement strategy should you use for your application compute instances?

You are configuring transparent data encryption (TDE) for an Oracle Database on Exadata Database Service using OCI Vault for master encryption key management. What happens if the database loses connectivity to the OCI Vault key management service?

Which TWO architectural best practices should you follow when designing cloud-native microservices on Oracle Container Engine for Kubernetes (OKE) to ensure high availability and resilience? (Choose two.)

You are designing a secure zero-trust architecture for database access in OCI. Developers must authenticate using short-lived tokens rather than long-term database passwords. Which OCI and database feature combination supports token-based authentication?

You are migrating a monolithic application to microservices on OKE and implementing resilient design patterns. Which THREE resiliency patterns should you implement to handle transient failures gracefully?

An enterprise multicloud architect is planning disaster recovery for workloads running across OCI and AWS. Which THREE strategies are commonly employed for cross-cloud disaster recovery architectures? (Choose THREE)