CCNA Observability Questions

Multi-Selectmedium

When configuring OCI Stack Monitoring to discover and monitor an Oracle WebLogic Server environment, which THREE prerequisites or configuration steps are required?

Select 3 answers

A.Attach a public IP address directly to the WebLogic administration console port.

B.Install OCI Management Agent on the host running the WebLogic Server.

C.Configure a BGP peering session between WebLogic and the OCI Control Plane.

D.Provide valid WebLogic administrator credentials and JMX connection details.

E.Run the Stack Monitoring discovery wizard via the OCI Console or CLI.

AnswersB, D, E

Correct. Management agents collect telemetry for Stack Monitoring.

Why this answer

Stack Monitoring requires installing Management Agents on the host, granting necessary JMX/admin credentials, and running the discovery wizard.

Practice this question →

MCQhard

Your enterprise tenancy has hundreds of compartments. You need to ensure that any newly created compute instance across any compartment automatically has the OCI Logging Agent configured to ship system logs. Which feature should you implement?

A.Configure a Service Connector Hub rule to push agent binaries to new instances upon creation.

B.Enable the Management Agent plugin via OCI Compute Instance Configurations and IAM tenancy-level policies.

C.Rely on default OCI Monitoring service metric collection, which automatically collects guest OS log files without agents.

D.Create an OCI Events rule for instance creation that triggers a Resource Manager stack to install the agent via SSH.

AnswerB

Correct. Management Agent and Cloud Agent plugins can be enabled automatically to ensure agents are active on newly provisioned instances.

Why this answer

OCI Agent Management and Cloud Agent framework, combined with Dynamic Groups and IAM policies, can automatically manage and enable plugins like the Logging Agent across compute instances.

Practice this question →

MCQhard

You are managing a multi-tenancy OCI architecture where cost allocation is critical. Certain shared infrastructure resources (such as shared VCN NAT Gateways and Object Storage transfer buckets) generate shared costs. How can you allocate these shared costs across different child compartments using OCI Cost Analysis?

A.Attach IAM permission tags to shared resources to automatically split charges at the bank level.

B.Use OCI Cost Analysis Cost Distribution Rules to proportionally allocate shared costs based on defined tags.

C.Write custom OCI Monitoring metric alarms that automatically credit compartments when shared resources are used.

D.Manually split CSV invoice files in Excel after downloading monthly Cost Reports.

AnswerB

Correct. Cost Distribution Rules allow administrators to redistribute shared costs across compartments or tags.

Why this answer

OCI Cost Analysis supports cost distribution rules (or proportional splitting based on defined tags or consumption metrics) to allocate shared costs across compartments.

Practice this question →

Multi-Selecthard

Which TWO of the following statements are correct regarding the architecture and capabilities of OCI Application Performance Monitoring (APM)?

Select 2 answers

A.OCI APM can only monitor applications deployed inside OCI Compute instances and cannot trace traffic originating from API Gateways.

B.OCI APM supports ingestion of standard OpenTelemetry traces from applications running on-premises, in OCI, or in other clouds.

C.OCI APM alerting is strictly limited to SMS notifications and cannot integrate with external incident management systems like PagerDuty.

D.OCI APM provides Real User Monitoring (RUM) capabilities to track end-user performance, page load times, and browser errors.

E.OCI APM requires the user to manually provision and manage an underlying Autonomous Transaction Processing database to store trace spans.

AnswersB, D

Correct. APM supports OpenTelemetry protocol (OTLP) ingestion for distributed tracing across multi-cloud and on-premises environments.

Why this answer

OCI APM supports both server-side tracing (Java, Node.js, Python, etc.) and real user monitoring (RUM) via browser agents. It ingests OpenTelemetry standard traces and does not require dedicated database storage to be provisioned manually by the user.

Practice this question →

MCQeasy

An administrator wants to inspect the operational health and performance metrics of an OCI Exadata Database Service instance using the default platform metrics provided out-of-the-box by OCI. Where should the administrator navigate in the OCI Console to view these metrics?

A.Navigate to Compute > Instances, select the Exadata VM cluster, and open the Performance tab.

B.Navigate to Observability and Management > Monitoring, then select the Database service namespace.

C.Navigate to Governance and Administration > Audit, then select the Database compartment.

D.Navigate to Identity & Security > Policies to enable the DB telemetry poller.

AnswerB

Correct. The Monitoring service consolidates metrics by service namespace, including database metrics.

Why this answer

Database metrics emitted by Oracle Databases and Exadata instances are viewed directly under the Database details page in the Console under 'Metrics', or via the Monitoring service dashboard.

Practice this question →

MCQhard

An enterprise application running on OCI is instrumented with the OCI APM Java agent. Developers notice that certain sensitive header tokens and credit card numbers are appearing in trace spans. How can they prevent sensitive data from being collected by the APM agent?

A.Set up an OCI Vault encryption key to automatically encrypt span attribute strings in transit.

B.Configure IAM policies to redact payload strings at the APM domain boundary.

C.Modify the OCI Monitoring alarm expression to filter out PII strings.

D.Configure APM Data Masking rules or agent configuration properties to exclude or scrub sensitive attributes.

AnswerD

Correct. APM provides data masking and filtering features to redact sensitive attributes from spans.

Why this answer

OCI APM supports data masking and filtering rules to scrub sensitive information such as passwords, tokens, and PII from trace spans before they are sent to the APM domain.

Practice this question →

MCQeasy

An organization wants to monitor their cloud spend trends and receive a weekly email summary of top spending services without manually logging into the OCI Console. Which OCI feature can accomplish this?

A.OCI Cost Analysis Scheduled Reports

B.OCI Events service scheduled triggers

C.OCI Audit log exports

D.OCI Monitoring service billing alarms

AnswerA

Correct. Scheduled reports in Cost Analysis allow automated generation and delivery of cost data.

Why this answer

OCI Cost Analysis supports scheduled reports that can be exported or emailed regularly to stakeholders.

Practice this question →

MCQhard

Your organization runs a multi-tier microservices application deployed across multiple OCI regions. You are tasked with implementing OCI Application Performance Monitoring (APM) to trace distributed transactions across different API gateways and containerized services. To correlate user browser sessions with backend database queries, what is the required configuration step on the client-facing application tier?

A.Inject the APM Browser Agent (JavaScript tracer) into the web pages and ensure trace context propagation headers are enabled.

B.Deploy the APM Java asynchronous agent to the client browser using a browser extension.

C.Enable OCI Audit logs on the client subnets and stream the audit records into the APM Data Domain.

D.Configure the OCI API Gateway to natively intercept and inject synthetic monitoring payloads into the user cookies.

AnswerA

Correct. The APM Browser Agent collects RUM data and propagates trace headers to tie frontend and backend metrics together.

Why this answer

To correlate browser-level real user monitoring (RUM) with server-side APM traces, the APM JavaScript agent must be injected into the HTML pages, and it must propagate trace context headers (such as 'oracle-apm-trace-header') across HTTP boundaries to the backend services.

Practice this question →

MCQmedium

An administrator wants to set up automated remediation when an OCI Monitoring alarm is triggered for high CPU utilization on a database. Specifically, they want a serverless function to execute to scale up resources. Which OCI service acts as the bridge to trigger the function upon alarm firing?

A.OCI Service Connector Hub

B.OCI API Gateway

C.OCI Events Service

D.OCI Notifications Service

AnswerD

Correct. Notifications service supports OCI Functions as an endpoint to execute automated remediation workflows.

Why this answer

OCI Notifications service can invoke OCI Functions as a subscriber to an alert topic, enabling serverless event-driven remediation.

Practice this question →

Multi-Selecteasy

Which TWO protocols or formats are natively supported for publishing custom metrics to the OCI Monitoring service?

Select 2 answers

A.SQL*Net protocol

B.Syslog RFC 5424

C.OCI Monitoring REST API

D.IMAP email protocol

E.StatsD protocol

AnswersC, E

Correct. Custom metrics can be pushed directly via the Monitoring API.

Why this answer

OCI Monitoring service supports publishing custom metrics via the OCI Monitoring API and the StatsD protocol.

Practice this question →

MCQhard

Your organization has set strict budgets in OCI to monitor cloud expenditure. A finance team member needs to receive an alert when forecasted spending reaches 100% of the monthly budget. How should you configure this alert?

A.Create an OCI Monitoring alarm on the Billing namespace with a metric expression for forecasted cost.

B.Use OCI Cost Analysis scheduled reports with an integrated SMTP relay.

C.Set up an OCI Events rule listening for billing threshold exceedance events.

D.Configure an OCI Budget alert rule with threshold type set to 'FORECASTED' and threshold value set to 100.

AnswerD

Correct. Budgets support forecasting thresholds to alert administrators before actual budget overruns occur.

Why this answer

OCI Budgets support alerts based on actual spend or forecasted spend. You can configure a threshold type of 'FORECASTED' with a percentage of 100.

Practice this question →

Multi-Selecthard

When designing an advanced alerting and monitoring strategy using OCI Monitoring Metric Query Language (MQL), which THREE practices or syntax rules should an architect follow?

Select 3 answers

A.An alarm in OCI Monitoring can only be in one of two states: Active or Inactive.

B.MQL does not support mathematical functions or aggregations; all calculations must be performed prior to ingestion.

C.Alarms can be configured to evaluate multiple metric streams using compound expressions or grouped dimensions.

D.MQL queries must always start by specifying the metric namespace, metric name, and optionally dimensions.

E.Metric interval specifications in MQL (such as [1m] or [5m]) define the aggregation window for evaluating data points.

AnswersC, D, E

Correct. MQL allows grouping and multi-stream evaluation in a single alarm definition.

Why this answer

MQL queries specify a metric namespace, metric name, optional interval, and functions (e.g., .mean()). Alarms can evaluate multiple metric streams or aggregate across dimensions, and alarms support transitioning states between OK, FIRING, and SUSPENDED.

Practice this question →

MCQhard

You are designing an alerting strategy in OCI Monitoring. You want to avoid alert storms by ensuring that if a metric fluctuates above a threshold repeatedly, the alarm notification is sent only once every 30 minutes until the condition clears. How should you configure this?

A.Set the alarm evaluation window to 30 minutes and enable metric smoothing.

B.Create an OCI Events rule with a batch window of 30 minutes.

C.Configure the 'Repeat Notification' setting in the OCI Monitoring alarm definition to 30 minutes.

D.Configure a notification suppression window in the Notifications service topic settings.

AnswerC

Correct. The repeat notification feature in OCI alarms allows specifying how often to resend notifications while an alarm remains in the firing state.

Why this answer

OCI Monitoring alarms support configuring the 'Repeat notification' interval or suppression/cooldown configurations to control how often alerts are re-sent.

Practice this question →

MCQeasy

You want to monitor the health and performance of your Oracle Autonomous Database in OCI. Which built-in metric namespace in OCI Monitoring should you query?

A.oci_autonomous_metrics

B.oci_database

C.oci_apm_metrics

D.oci_compute_infra

AnswerB

Correct. Autonomous Database and other database services publish metrics under oci_database.

Why this answer

Oracle Database services in OCI publish their metrics to the oci_database namespace in the OCI Monitoring service.

Practice this question →

Multi-Selecteasy

Which TWO destinations can receive messages dispatched from an OCI Notifications service topic?

Select 2 answers

A.OCI Internet Gateway route tables

B.OCI Dynamic Routing Gateway (DRG)

C.HTTPS / Webhook endpoints (e.g., Slack, PagerDuty)

D.Email endpoints and SMS

E.OCI Block Volume backup policies

AnswersC, D

Correct. Notifications can dispatch alerts to HTTPS webhooks.

Why this answer

OCI Notifications service supports delivering messages to Email endpoints, HTTPS endpoints (such as webhooks, Slack, PagerDuty), SMS, and OCI Functions.

Practice this question →

MCQmedium

A DevOps engineer wants to monitor custom application metrics (such as active shopping cart count) emitted by microservices running on OCI Container Engine for Kubernetes (OKE). Which OCI service provides the necessary API to ingest and query these custom metrics?

A.Events Service

B.OCI Monitoring Service

C.OCI Logging Analytics

D.Application Performance Monitoring (APM)

AnswerB

Correct. The Monitoring service allows publishing and querying custom time-series metrics via its published APIs.

Why this answer

OCI Monitoring service provides metrics ingestion and querying APIs that allow developers to publish custom metrics using the Monitoring API or StatsD protocols.

Practice this question →

MCQhard

You are designing an enterprise observability architecture where logs from hundreds of Virtual Cloud Networks (VCNs) and various OCI services must be centrally aggregated. Security mandates that log data must be retained in an immutable, write-once-read-many (WORM) storage bucket for compliance purposes while simultaneously being indexed for rapid search and analysis. Which architectural pattern satisfies these requirements?

A.Configure OCI Logging to export logs to an Object Storage bucket with a Retention Rule in Compliance mode, while retaining logs in the Log Group for search.

B.Configure OCI Logging to stream logs to an OCI Streaming topic, which then writes to a Block Volume with hardware-enforced encryption.

C.Route all logs through an OCI API Gateway, enforce a WORM storage policy via IAM JSON syntax, and query via Logging Analytics.

D.Use Oracle Database Vault to ingest log data into autonomous JSON databases configured with immutable tables.

AnswerA

Correct. Object Storage retention rules in compliance mode provide WORM storage, while the native Log Group allows search and analytics.

Why this answer

OCI Logging allows you to configure log archiving to an OCI Object Storage bucket which can have a Retention Rule in compliance mode (WORM storage). Simultaneously, the logs are ingested into OCI Logging Analytics or retained in the native log group for searching.

Practice this question →

MCQeasy

You want to monitor the availability of a public-facing corporate web application from multiple global locations outside of OCI. Which OCI service provides this capability?

A.OCI Health Checks

B.OCI Logging Analytics

C.OCI Network Firewall

D.OCI APM Synthetic Monitoring

AnswerA

Correct. Health Checks monitor public-facing endpoints globally.

Why this answer

OCI Health Checks service provides ping and HTTP/HTTPS monitors to check the availability and performance of public endpoints from external vantage points.

Practice this question →

Multi-Selecthard

An administrator wants to configure OCI Logging Analytics to parse custom application log formats that do not match out-of-the-box parsers. Which THREE steps or tools are involved in creating a custom parser?

Select 3 answers

A.Associate the newly created custom parser with a custom Log Source in Logging Analytics.

B.Provide a sample log message to test and validate pattern matching.

C.Define extraction rules using regular expressions or parser builder tools to map fields (e.g., timestamp, severity, message).

D.Modify the hypervisor kernel parameters on all compute instances.

E.Compile a C++ binary package and upload it to an OCI Function.

AnswersA, B, C

Correct. Parsers are assigned to Log Sources which are then applied to incoming log data.

Why this answer

Creating a custom parser in Logging Analytics involves defining the log format sample, setting up parser rules (regex or grok patterns), and associating the parser with a defined log source.

Practice this question →

MCQmedium

Your organization is implementing an alerting strategy in OCI Monitoring to avoid alert fatigue caused by transient network blips. You need to configure an alarm so that it only fires when a high CPU utilization condition persists for at least 3 consecutive evaluation periods of 5 minutes each. Which parameter in the Alarm definition should you modify?

A.Modify the OCI Events service emission frequency to throttle metric collection to once every 15 minutes.

B.Apply a smoothing function like 'Moving Average' directly within the OCI Notifications topic subscription settings.

C.Configure the Alarm evaluation window and set the trigger condition based on consecutive evaluation periods exceeding the threshold.

D.Set the Repetition Interval to 15 minutes.

AnswerC

Correct. Configuring the trigger rule with evaluation periods prevents transient metric spikes from triggering false alarms.

Why this answer

In OCI Monitoring alarms, the 'Trigger rule' configuration includes the metric evaluation window and the time interval/repetition settings that control how many consecutive evaluation periods must breach the threshold before the alarm transitions to FIRING.

Practice this question →

Multi-Selecteasy

Which TWO of the following services are native components of the Oracle Cloud Infrastructure Observability and Management platform?

Select 2 answers

A.OCI Autonomous Database

B.OCI Container Engine for Kubernetes

C.OCI Application Performance Monitoring (APM)

D.OCI File Storage Service

E.OCI Logging Analytics

AnswersC, E

Correct. APM is part of the O&M portfolio.

Why this answer

OCI Logging Analytics and OCI Application Performance Monitoring (APM) are core services within the OCI Observability and Management suite.

Practice this question →

Multi-Selecthard

An enterprise is designing a comprehensive cost observability and governance strategy in OCI. Which THREE practices or features should be implemented?

Select 3 answers

A.Route all VCN flow logs through OCI Logging Analytics to calculate cloud infrastructure billing.

B.Enforce defined tags for resource creation using IAM policy conditions or tag defaults.

C.Analyze spending patterns and spot cost anomalies using OCI Cost Analysis dashboards.

D.Configure OCI Budgets with both actual and forecasted spending alert thresholds.

E.Install APM Java agents on all block storage volumes to track storage encryption costs.

AnswersB, C, D

Correct. Defined tags ensure proper cost attribution by business unit, project, or owner.

Why this answer

Effective OCI cost governance involves enforcing defined tags for attribution, using Budgets with forecast alerts, and leveraging Cost Analysis for trend monitoring.

Practice this question →

MCQmedium

An auditor requests a complete historical record of all console sign-ins, IAM policy modifications, and compartment deletions across your OCI tenancy for the past 365 days. Which OCI service provides this data natively?

A.OCI Events Service

B.OCI Audit Service

C.OCI Cloud Guard Activity Tracking

D.OCI Logging Analytics

AnswerB

Correct. Audit service tracks all control plane API activities and management events across the tenancy.

Why this answer

OCI Audit service records API calls for all OCI services. To retain logs beyond the default retention, they should be archived to Object Storage via Service Connector Hub.

Practice this question →

MCQeasy

An Oracle Cloud Infrastructure (OCI) Administrator needs to collect log data from custom applications running on Compute instances. Which OCI service should be configured to ship these logs to OCI Logging?

A.OS Management Hub

B.OCI Service Connector Hub

C.OCI Logging Agent

D.OCI Streaming Service

AnswerC

Correct. The OCI Logging Agent runs on instances to ingest custom logs and system logs.

Why this answer

The OCI Logging Agent is a unified agent that can be installed on Compute instances (both Linux and Windows) to collect custom log files and OS logs and forward them to OCI Logging.

Practice this question →

MCQhard

An enterprise is designing a cost observability architecture in OCI. They want to attribute cloud spend dynamically to different business units based on resource metadata tags, and they need historical trend analysis with anomaly detection. Which combination of features and tools provides the most robust solution?

A.Use Logging Analytics custom parsers on generated invoice PDFs stored in Object Storage.

B.Use native OCI Tag Defaults and OCI Monitoring alarms on the 'Billing' metric namespace.

C.Deploy OCI APM Java agents to every compute node and query the JVM memory usage to estimate spend.

D.Use OCI Cost Analysis with defined tags, export Cost Reports to Object Storage, and configure Budgets with alert rules.

AnswerD

Correct. Defined tags allow cost grouping in Cost Analysis, Cost Reports offer deep historical exports, and Budgets provide proactive alerting.

Why this answer

OCI Cost Analysis, Cost Reports, and Budgets combined with Defined Tags provide the best mechanism for tracking, forecasting, and attributing costs across business units.

Practice this question →

MCQeasy

You want to quickly visualize CPU utilization across 50 Compute instances on a single pane of glass without creating complex custom dashboards. Which OCI Monitoring feature allows you to view pre-packaged metrics grouped by resource?

A.OCI Logging Analytics Dashboards

B.OCI APM Dashboards

C.OCI Stack Monitoring

D.OCI Metrics Explorer

AnswerD

Correct. Metrics Explorer provides an interactive query and charting interface for immediate metric visualization.

Why this answer

OCI Monitoring provides Metrics Explorer, allowing users to query, filter, and visualize metrics across compartments and resources instantly.

Practice this question →

Multi-Selectmedium

When configuring alarms in OCI Monitoring, which THREE parameters or settings must be specified?

Select 3 answers

A.Evaluation window (time interval and period)

B.Metric namespace and metric name

C.OCI Vault Master Encryption Key OCID

D.Virtual Cloud Network (VCN) CIDR block

E.Threshold value and trigger operator (e.g., greater than)

AnswersA, B, E

Correct. The evaluation window defines how long a condition must persist before triggering.

Why this answer

Creating an OCI Monitoring alarm requires defining the metric namespace and name, the evaluation window/period, and the threshold condition.

Practice this question →

MCQmedium

Your company requires all logs generated within the root compartment to be automatically archived to a centralized OCI Object Storage bucket in a different security tenancy for compliance purposes. Which OCI feature facilitates this serverless data pipeline?

A.OCI Service Connector Hub

B.OCI Data Flow

C.OCI GoldenGate

D.OCI Archive Storage lifecycle rules

AnswerA

Correct. Service Connector Hub orchestrates data movement between OCI services like Logging and Object Storage.

Why this answer

OCI Service Connector Hub enables seamless, serverless movement of data between OCI services, such as streaming logs from OCI Logging to Object Storage or Streaming.

Practice this question →

MCQmedium

An OCI administrator wants to ingest application logs stored in an Object Storage bucket into OCI Logging Analytics for complex log searching and parsing. What is the recommended way to ingest these logs?

A.Write a custom Python script using OCI SDK to read the bucket and insert logs into Logging Analytics via REST API.

B.Mount the Object Storage bucket as a file system using OCI File Storage Service and install the Logging Agent.

C.Configure an Object Storage source in OCI Logging Analytics to automatically discover and ingest log files from the bucket.

D.Use OCI Streaming to stream bucket objects directly to the Logging Analytics console.

AnswerC

Correct. Logging Analytics supports configuring Object Storage as a log source for automated ingestion.

Why this answer

OCI Logging Analytics provides native Object Storage log ingestion capabilities where you can configure ingestion rules to pull and parse logs from designated Object Storage buckets.

Practice this question →

MCQmedium

An enterprise wants to monitor an enterprise application stack consisting of Oracle WebLogic Server and Oracle Database, tracking their deep internal health metrics, resource utilization, and dependency topology. Which OCI service is specifically designed for full-stack enterprise application monitoring?

A.OCI Application Performance Monitoring (APM)

B.OCI Logging Analytics

C.OCI Stack Monitoring

D.OCI Monitoring Service

AnswerC

Correct. Stack Monitoring discovers and monitors enterprise software stacks like WebLogic and Oracle Database.

Why this answer

OCI Stack Monitoring provides out-of-the-box discovery and monitoring of enterprise application stacks, including Oracle databases, WebLogic servers, and underlying host infrastructure.

Practice this question →

MCQhard

Your organization has strict security policies requiring all log data in OCI Logging to be encrypted using a customer-managed encryption key (CMK) stored in OCI Vault. How should you implement this?

A.Configure the OCI Logging Agent on compute instances with local disk encryption enabled via IAM policies.

B.Attach the master encryption key directly to each individual log object stored in Object Storage.

C.Assign a customer-managed master encryption key from OCI Vault to the Log Group in OCI Logging.

D.Use OCI Streaming to intercept logs and apply customer-managed keys before writing to OCI Logging.

AnswerC

Correct. Log groups support encryption via customer-managed keys in OCI Vault for enhanced data protection.

Why this answer

OCI Logging supports encrypting log groups using Customer-Managed Keys (CMK) from OCI Vault.

Practice this question →

Multi-Selecteasy

Which TWO types of logs are natively generated and accessible within OCI Logging without requiring agent installation on compute instances?

Select 2 answers

A.Custom database trace files generated inside a self-managed MySQL database on a VM

B.Custom application log files stored in /var/log/app.log inside a compute instance

C.OCI Audit logs

D.Third-party firewall logs running on local virtual appliances

E.OCI VCN Flow logs

AnswersC, E

Correct. Audit logs are generated natively for all tenancies.

Why this answer

OCI Audit logs and OCI Service logs (such as VCN flow logs, load balancer access logs, and API gateway logs) are generated natively by OCI services without installing agents.

Practice this question →

Multi-Selectmedium

An administrator is planning an enterprise cost optimization and observability strategy in OCI. Which THREE native tools or reports can be utilized to analyze cloud spend, allocate costs, and optimize resource utilization?

Select 3 answers

A.OCI Cost Analysis dashboards

B.OCI Streaming Service Cost Estimator

C.OCI Detailed Usage Reports (downloadable CSVs in Object Storage)

D.OCI Logging Analytics Cost Module

E.OCI Budgets

AnswersA, C, E

Correct. Cost Analysis provides visual charts and filters to analyze spending trends.

Why this answer

OCI Cost Analysis, OCI Budgets, and Detailed Usage Reports (delivered as CSV files to Object Storage) are the primary tools used for cost observability, tracking, and budgeting in OCI.

Practice this question →

MCQmedium

An application architect is troubleshooting intermittent latency spikes in a distributed microservices application deployed across multiple OCI regions. Which OCI capability should be used to trace requests end-to-end across service boundaries?

A.OCI Application Performance Monitoring (APM) Distributed Tracing

B.OCI Network Visualizer

C.OCI Logging Analytics with out-of-the-box system parsers

D.OCI Monitoring service anomaly detection

AnswerA

Correct. APM Distributed Tracing tracks transactions across microservices and regions using trace context propagation.

Why this answer

OCI Application Performance Monitoring (APM) provides distributed tracing, capturing the end-to-end journey of requests across complex microservice architectures.

Practice this question →

MCQmedium

Your finance department requires detailed cost visibility and granular chargeback reporting for multiple cloud environments spanning different business units, departments, and environments (Prod/Dev). Tagging is strictly enforced via OCI Tag Defaults. To analyze historical cost trends and forecast future cloud spend across these business dimensions, which OCI native feature should you use?

A.OCI Logging Analytics custom dashboards querying the Usage Report log stream.

B.OCI Budgets with scheduled CSV report exports sent to an Object Storage bucket.

C.OCI Cost Analysis dashboards filtered by Cost-Tracking Tags.

D.OCI Resource Manager stack drift reports mapped against IAM compartment hierarchies.

AnswerC

Correct. Cost Analysis allows filtering and grouping by cost-tracking tags for chargeback and granular tracking.

Why this answer

OCI Cost Analysis provides interactive dashboards, filtering by compartment, cost-tracking tags, and forecast capabilities to analyze and report on cloud expenditures.

Practice this question →

MCQmedium

Your security operations team wants to identify log anomalies, such as sudden spikes in failed SSH login attempts across your OCI Compute fleet, without manually writing complex regex queries. Which Logging Analytics feature leverages machine learning to automatically group and identify patterns in logs?

A.Logging Analytics Cluster and Link commands

B.OCI Service Connector Hub pattern matching

C.OCI Cloud Guard Threat Detector rules

D.OCI APM Anomaly Detection agent

AnswerA

Correct. The Cluster feature uses machine learning to group log messages by structure, making anomalies and patterns immediately visible.

Why this answer

OCI Logging Analytics features ML-driven cluster analysis, which automatically groups similar log records together to highlight patterns and anomalies.

Practice this question →

Multi-Selecthard

Your organization is implementing strict compliance requirements for log retention and auditing in OCI. Which THREE architectural implementations ensure secure, long-term log governance?

Select 3 answers

A.Store unencrypted log backups on public Object Storage buckets for easy developer access.

B.Encrypt log groups in OCI Logging using Customer-Managed Keys (CMK) from OCI Vault.

C.Apply IAM least-privilege policies to restrict who can read, modify, or delete log groups and archival buckets.

D.Use Service Connector Hub to archive logs from OCI Logging to Object Storage buckets configured with Object Lock (WORM).

E.Disable OCI Audit service logging to prevent unauthorized users from viewing API history.

AnswersB, C, D

Correct. CMKs ensure customer control over encryption keys used for log data at rest.

Why this answer

Log governance involves using Service Connector Hub to archive logs to Object Storage, leveraging Object Storage bucket immutability (Object Lock) for compliance, and encrypting log groups with customer-managed keys in OCI Vault.

Practice this question →

Multi-Selectmedium

When configuring OCI Service Connector Hub to move logs from OCI Logging to OCI Object Storage, which THREE components must be defined?

Select 3 answers

A.Target (e.g., OCI Object Storage bucket)

B.A manual SSH tunnel between the source and target regions

C.An active Kubernetes cluster in OKE to host the connector daemon

D.Source (e.g., OCI Logging service)

E.IAM policies granting the service connector permission to read from source and write to target

AnswersA, D, E

Correct. You must specify where the data is delivered.

Why this answer

A Service Connector requires a source (e.g., OCI Logging), an optional task (e.g., log filter), and a target (e.g., Object Storage).

Practice this question →

MCQeasy

You need to export OCI Audit logs to a third-party SIEM tool (such as Splunk or Elastic) in real-time. Which OCI architecture is best suited for this requirement?

A.Schedule an OCI Resource Manager job to FTP log files every night.

B.Install the OCI Logging Agent directly on the OCI Audit service control plane.

C.Configure OCI Health Checks to poll the Audit API.

D.Use OCI Service Connector Hub to route logs from OCI Audit to OCI Streaming or Object Storage for SIEM consumption.

AnswerD

Correct. Service Connector Hub connects Audit logs to Streaming or Object Storage for external SIEM integration.

Why this answer

OCI Service Connector Hub can stream Audit logs directly to OCI Streaming, which can then be consumed by third-party SIEM integrations.

Practice this question →

MCQeasy

You want to track API calls made by a specific user who deleted a critical production database in OCI. Which OCI service log should you examine?

A.OCI Audit Log

B.OCI VCN Flow Log

C.OCI APM Transaction Log

D.OCI Database Alert Log

AnswerA

Correct. Audit logs track all control-plane API actions across the tenancy.

Why this answer

OCI Audit service logs all API calls, recording who did what, when, and from which IP address.

Practice this question →

MCQeasy

An OCI Administrator needs to set up proactive alerting when the CPU utilization of a production Compute instance exceeds 90% for a sustained period of 15 minutes. Which OCI service should be configured to evaluate this metric and trigger notifications via an email endpoint?

A.OCI Health Checks configured with custom ICMP ping probes targeting the private IP of the instance.

B.OCI Events Service configured with a rule filtering for Compute metric threshold violations.

C.OCI Logging Analytics with scheduled saved search alerts.

D.OCI Monitoring Service Alarms combined with OCI Notifications Service topics.

AnswerD

Correct. Monitoring Alarms evaluate metric expressions and send notifications through OCI Notifications topics.

Why this answer

OCI Monitoring service allows the creation of alarms based on metrics emitted by resources (like Compute CPU utilization). When thresholds are breached, it triggers messages to OCI Notifications service, which then dispatches emails.

Practice this question →

Multi-Selectmedium

Which THREE features are supported within OCI Cost Analysis to help administrators analyze and report on cloud spending?

Select 3 answers

A.Directly modifying customer credit card billing details without contacting Oracle Support

B.Grouping and filtering costs using OCI Defined Tags

C.Visualizing cumulative cost trends over customizable time ranges (e.g., daily, monthly)

D.Automatically executing database SQL queries against Autonomous Database instances

E.Exporting cost charts and tabular data to CSV format

AnswersB, C, E

Correct. Defined tags allow slicing costs by department or project.

Why this answer

Cost Analysis features include filtering and grouping by defined tags, exporting cost data as CSV files, and viewing historical cost trends across compartments.

Practice this question →

MCQmedium

An enterprise architect is designing a centralized log management solution in Oracle Cloud Infrastructure (OCI) Logging Analytics. The team needs to ingest logs from various heterogeneous sources, including custom applications, Oracle databases, and third-party firewalls, while ensuring that the log data is properly parsed and enriched without requiring custom regex development for every vendor format. Which feature should the architect leverage to meet this requirement?

A.OCI Telemetry Data Plane auto-extractors that automatically normalize all logs into a unified OpenTelemetry schema.

B.OCI Object Storage lifecycle rules configured with transformation policies to convert raw text logs into structured JSON formats.

C.OCI Logging Analytics out-of-the-box parsers and source configurations along with custom parsers built via the Log Parser Workbench.

D.OCI Streaming Service combined with Oracle Functions to manually parse every raw log payload prior to storage.

AnswerC

Correct. Logging Analytics provides pre-built parsers and an interactive workbench for defining custom parsing rules.

Why this answer

OCI Logging Analytics provides out-of-the-box parsers for a wide variety of standard log types (Oracle databases, firewalls, etc.) as well as the Log Parser Workbench to create and test custom parsers using Grok or regular expressions without writing manual ingestion scripts.

Practice this question →

Multi-Selectmedium

Which THREE features are provided by OCI Application Performance Monitoring (APM)?

Select 3 answers

A.Distributed Tracing across microservices

B.Automatic provisioning of bare metal database backups

C.Real User Monitoring (RUM) to track end-user browser performance

D.Management of BGP routing tables for FastConnect

E.Synthetic Monitoring using browser and script-based tests

AnswersA, C, E

Correct. APM traces transactions across services.

Why this answer

OCI APM provides distributed tracing, synthetic monitoring (browser and script tests), and Real User Monitoring (RUM).

Practice this question →

MCQeasy

Your operations team needs to receive immediate notifications via PagerDuty and Slack whenever a high-severity alarm is triggered in OCI Monitoring. Which OCI service should be used as the intermediary to dispatch these notifications?

A.OCI API Gateway

B.OCI Streaming Service

C.OCI Events Service

D.OCI Notifications Service

AnswerD

Correct. Notifications service manages subscriptions to deliver alarm alerts to email, SMS, PagerDuty, and HTTPS endpoints.

Why this answer

OCI Notifications service broadcasts messages to distributed endpoints such as HTTPS endpoints, PagerDuty, Slack, email, and SMS.

Practice this question →

MCQhard

An SRE team is configuring OCI Application Performance Monitoring (APM) synthetic monitoring. They need to run browser-based synthetic scripts periodically from multiple geographic locations to ensure user-facing login workflows function correctly. Which APM feature should they configure?

A.OCI Health Checks Ping Monitors

B.APM Synthetic Monitoring Browser Monitors using Dedicated Vantage Points

C.Logging Analytics synthetic agent extensions

D.OCI Monitoring service Synthetic Probes

AnswerB

Correct. Browser monitors execute scripts to simulate user interactions from various geographic vantage points.

Why this answer

APM Synthetic Monitoring supports browser monitors that execute Selenium-based scripts from public or dedicated Vantage Points globally.

Practice this question →

Multi-Selecthard

An observability architect is designing a high-availability alerting and incident response strategy in OCI. Which THREE best practices should be incorporated?

Select 3 answers

A.Set appropriate evaluation periods and repeat intervals to prevent alarm flapping.

B.Use composite alarms to combine multiple conditions and reduce alert fatigue from cascading failures.

C.Rely exclusively on manual polling of the OCI Metrics Explorer console by the on-call engineer.

D.Configure multiple notification endpoints (e.g., PagerDuty, Email, HTTPS) on OCI Notifications topics for redundancy.

E.Disable all IAM security policies during alarm firing to allow unrestricted troubleshooting access.

AnswersA, B, D

Correct. Tuning evaluation windows avoids rapid state-switching (flapping).

Why this answer

Good alerting strategies include using composite alarms to reduce noise, routing alerts through Notifications to multiple endpoints (like PagerDuty or email), and setting appropriate evaluation windows to prevent flapping.

Practice this question →

MCQeasy

An administrator wants to analyze log data collected from various OCI resources by running complex SQL-like queries and creating visualization dashboards. Which OCI service is designed for this purpose?

A.OCI Logging Analytics

B.OCI Audit Service

C.OCI Health Checks

D.OCI Object Storage

AnswerA

Correct. Logging Analytics enables searching, parsing, and running advanced analytics queries on log data.

Why this answer

OCI Logging Analytics provides powerful log exploration, parsing, ML-driven clustering, and SQL-like query capabilities for deep log analysis.

Practice this question →

MCQhard

You are troubleshooting a networking issue where virtual machines in a private subnet cannot communicate with an external endpoint over the internet. You suspect security lists or network security groups might be dropping the packets. Which OCI observability feature can help verify whether packets are being accepted or rejected at the VNIC level?

A.OCI Health Checks ping monitors

B.OCI VCN Flow Logs

C.OCI Monitoring service VNIC packet counters

D.OCI Network Firewall system logs

AnswerB

Correct. VCN Flow Logs capture metadata about traffic flowing to and from VNICs, including whether packets were accepted or rejected.

Why this answer

OCI VCN Flow Logs record accepted and rejected traffic flowing through VNICs, helping troubleshoot security list and NSG rules.

Practice this question →

Multi-Selecthard

An SRE team is configuring synthetic monitoring using OCI Application Performance Monitoring (APM). To execute scripts across private corporate networks that cannot be accessed from the public internet, which THREE steps or components must be configured?

Select 3 answers

A.Attach a public load balancer directly to the internal database to route synthetic traffic.

B.Deploy APM Dedicated Vantage Points (DVPs) on Compute instances inside the private OCI VCN.

C.Disable all VCN security lists to allow inbound SSH from public APM nodes.

D.Ensure network connectivity (such as service gateways or NAT gateways) allows DVPs to communicate with the APM service endpoint.

E.Configure synthetic monitors in APM to target the Dedicated Vantage Point instead of public locations.

AnswersB, D, E

Correct. DVPs execute synthetic scripts from within private subnets.

Why this answer

Running private synthetic monitors requires deploying APM Dedicated Vantage Points (DVPs) inside the private VCN, configuring appropriate routing/firewall rules, and creating private synthetic monitors assigned to those DVPs.

Practice this question →

MCQmedium

An administrator is setting up composite alarms in OCI Monitoring. They want an alarm to trigger ONLY if both Database CPU utilization is above 90% AND Application latency is above 500ms simultaneously. How should this be implemented?

A.Configure an OCI Notifications service topic subscription with a logical filter rule.

B.Create two separate alarms and define an OCI Monitoring Composite Alarm using the logical AND operator.

C.Use OCI Events service with a custom JSON payload condition.

D.Create a single standard alarm with a compound mathematical metric expression joining CPU and latency.

AnswerB

Correct. Composite alarms allow combining individual alarms using boolean logic such as AND and OR.

Why this answer

OCI Monitoring supports Composite Alarms, which allow combining multiple individual metric alarms using boolean operators (AND, OR, NOT).

Practice this question →