Courseiva

1Z0-997-26 · domain

troubleshooting

Practise Oracle Cloud Infrastructure 2026 Architect Professional (1Z0-997-26) (1Z0-997-26) troubleshooting practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.

274 questions86 easy91 medium97 hard

Focused practice

Practice troubleshooting questions

Scored sessions drawing only from this domain — pick a length below.

Start 20-question practice test →

What this domain covers

What to know about troubleshooting

troubleshooting questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Watch out for

Common troubleshooting exam traps

  • ▸Answering from memory before reading the full scenario.
  • ▸Missing a constraint such as cost, availability, security, scope or command context.
  • ▸Choosing a broad answer when the question asks for the most specific fix.
  • ▸Ignoring why the wrong options are tempting.

Question index

All troubleshooting questions (274)

Click any question to see the full explanation, or start a practice session above.

1

You are implementing distributed tracing across multiple microservices running on OKE. You need to capture trace data from incoming API Gateway requests, through service mesh sidecars, down to the application pods, and export it to an open-standards tracing backend. Which architectural components should you configure?

Hard
2

An enterprise architect is deploying the OCI-Azure Interconnect in the Ashburn region. Which specific Azure networking resource is directly associated with the Azure side of the ExpressRoute circuit created during the onboarding process?

Easy
3

What is the primary architectural advantage of using Exadata Database Service on Dedicated Infrastructure compared to Exadata Database Service on Cloud@Customer?

Easy
4

An organization running an Oracle Exadata Database Service requires compliance auditing where all database administrative actions and sensitive data queries must be logged, tamper-proof, and retained in an isolated repository. Which combination of OCI and Oracle Database features provides this capability?

Hard
5

When configuring OCI Stack Monitoring to discover and monitor an Oracle WebLogic Server environment, which THREE prerequisites or configuration steps are required?

Medium
6

When designing an API Gateway implementation on OCI to expose backend microservices running on OKE, which THREE features or capabilities can you configure directly within the API Gateway deployment? (Choose three.)

Hard
7

When designing high availability for an Oracle RAC (Real Application Clusters) database deployed on OCI Exadata Database Service, which THREE architectural characteristics ensure fault tolerance and uptime? (Choose three.)

Hard
8

You are configuring an Autonomous Database instance and need to restrict incoming database traffic so that only specific corporate subnet CIDR blocks can access the database service endpoints. Which feature should you configure?

Medium
9

Which OCI networking component is required to securely connect a VCN in one OCI region to a VCN in another OCI region for cross-region Data Guard database replication?

Easy
10

You are migrating a custom web application from an on-premises Linux server to OCI Compute. The application is packaged as a standard Docker container. Your management wants to avoid managing underlying operating systems, kernel patching, and VM scaling. Which OCI service should you select for this containerized workload migration?

Medium
11

You need to ensure that database backups stored in OCI Object Storage are protected against accidental deletion or ransomware encryption by administrators. Which feature should you enable on the bucket?

Medium
12

A healthcare company must prove to auditors that no one, including tenancy administrators, could have altered or deleted a specific month of application logs stored in OCI Object Storage. Logs arrive continuously from OCI Logging via Service Connector Hub. Which combination of settings guarantees this?

Hard
13

You are designing a cross-region disaster recovery strategy for an Oracle Exadata Database Service on Dedicated Infrastructure deployment. Which TWO steps or configurations are required to establish an Active Data Guard standby database in a remote OCI region?

Hard
14

You are configuring disaster recovery for an Oracle Base Database system using Oracle Data Guard with Data Guard Broker. You need to perform a role transition where the primary database becomes the standby and the standby becomes the primary with zero data loss. Which Data Guard Broker command should you execute?

Medium
15

Which THREE factors should an architect evaluate when determining Recovery Point Objective (RPO) and Recovery Time Objective (RTO) for an OCI database disaster recovery solution? (Choose three.)

Hard
16

When designing an enterprise-grade disaster recovery architecture on OCI, which THREE practices are recommended to ensure a successful failover and minimize operational risk during a disaster event? (Choose three.)

Hard
17

Which TWO features of OCI Object Storage contribute to its high durability and reliability for disaster recovery workflows? (Choose two.)

Easy
18

Which TWO of the following statements are correct regarding the architecture and capabilities of OCI Application Performance Monitoring (APM)?

Hard
19

Your OKE cluster uses Calico for Kubernetes network policy enforcement. You need to write a network policy that allows Pod A in namespace 'frontend' to communicate with Pod B in namespace 'backend', while blocking all other ingress traffic to Pod B. How should you implement this?

Medium
20

A retail company uses Oracle Autonomous Transaction Processing (ATP) with auto-scaling enabled. During a flash sale, the application observes that performance degrades despite auto-scaling being active. The architect reviews the ATP configuration and finds the base OCPU count is set to 4 with auto-scaling enabled. What is the most likely explanation for the degraded performance?

Medium
21

An OCI architect is setting up a disaster recovery environment where compute instances in the DR region need identical network configurations (private IPs, VNICs, security lists) to the primary region. Which OCI capability assists in deploying reproducible network topologies across regions?

Medium
22

An administrator wants to inspect the operational health and performance metrics of an OCI Exadata Database Service instance using the default platform metrics provided out-of-the-box by OCI. Where should the administrator navigate in the OCI Console to view these metrics?

Easy
23

Your OCI Function needs to write audit logs or custom debugging information that can be easily searched and analyzed alongside other cloud logs. Which OCI service should your function log to?

Easy
24

You are hardening an OCI environment where applications running inside Oracle Kubernetes Engine (OKE) pods require access to OCI Object Storage. To adhere to security best practices, you must avoid storing long-lived user credentials or API keys inside the cluster. What is the recommended solution?

Hard
25

You are setting up FastConnect and need to choose between the FastConnect Provider model and the FastConnect Colocation model. What is the key characteristic of the Provider model?

Medium
26

You are planning the network cutover for a large-scale migration to OCI. The on-premises data center is connected to OCI via an OCI FastConnect circuit configured with private virtual circuits. During cutover, DNS records must be updated so that client traffic resolves to OCI load balancers. Which OCI service should you use to manage internal and external DNS authoritative resolution smoothly?

Medium
27

An enterprise application running on OCI is instrumented with the OCI APM Java agent. Developers notice that certain sensitive header tokens and credit card numbers are appearing in trace spans. How can they prevent sensitive data from being collected by the APM agent?

Hard
28

You are troubleshooting an OCI Functions application that fails to pull container images from a private Oracle Cloud Infrastructure Registry (OCIR) repository during deployment. The function application is configured correctly, but the build/invoke fails with authentication errors. What is the most likely missing configuration?

Medium
29

Which TWO of the following statements are correct regarding OCI Load Balancer features for high availability? (Choose two.)

Easy
30

Which THREE actions can be performed using OCI Cloud Guard to improve your cloud security posture? (Choose three.)

Medium
31

An organization wants to monitor their cloud spend trends and receive a weekly email summary of top spending services without manually logging into the OCI Console. Which OCI feature can accomplish this?

Easy
32

An organization has configured an OCI-Azure Interconnect. Latency measurements between an OCI compute instance and an Azure VM exceed acceptable thresholds for a synchronous database replication application. Which diagnostic step should be taken first within OCI?

Hard
33

You are designing a high-performance computing (HPC) workload migration to OCI. The application consists of tightly coupled MPI (Message Passing Interface) jobs that require extreme low latency and high throughput. Which THREE OCI architecture components must you deploy to satisfy these HPC requirements? (Choose three.)

Hard
34

Your engineering team is troubleshooting an issue where migrated Linux virtual machines in OCI are experiencing severe disk I/O performance bottlenecks. The instances were migrated using raw block-level cloning from on-premises SAN storage. The volumes in OCI are provisioned as Lower Cost (Balanced) block volumes. What action should you take to resolve the performance bottleneck while maintaining data integrity?

Hard
35

You are configuring a Remote Peering Connection (RPC) between two Dynamic Routing Gateways (DRGs) in different OCI regions. What is required to ensure secure, private data transmission between the two VCNs?

Hard
36

A startup wants to move an on-premises Oracle Database to OCI with minimal administration and no need to manage the underlying operating system or perform manual patching. The workload is a mixed OLTP and reporting application with unpredictable demand. Which OCI database service best fits these requirements?

Easy
37

When designing a multi-database architecture with Oracle GoldenGate for high availability and load distribution, which THREE architectural considerations are critical for success? (Choose three.)

Hard
38

During the post-migration validation phase of an application migration to OCI, your team needs to verify security compliance and resource configuration posture. Which TWO OCI services should you use to assess security posture and detect misconfigurations? (Choose two.)

Easy
39

Your organization runs a multi-tier microservices application deployed across multiple OCI regions. You are tasked with implementing OCI Application Performance Monitoring (APM) to trace distributed transactions across different API gateways and containerized services. To correlate user browser sessions with backend database queries, what is the required configuration step on the client-facing application tier?

Hard
40

An administrator needs to configure dynamic groups to authenticate OCI compute instances so they can read secrets from OCI Vault. Which TWO components must be properly configured? (Choose two.)

Hard
41

You are migrating a multi-tier web application to OCI. The web tier consists of Apache HTTP servers that need to be auto-scaled based on CPU utilization. Which combination of OCI services should you configure to achieve automated horizontal scaling?

Medium
42

Your microservices architecture on OKE uses mTLS (Mutual TLS) for secure pod-to-pod communication. You notice that certificate rotation is causing intermittent connection drops because pods are not reloading the new certificates without a restart. Which OCI Service Mesh feature automatically manages certificate issuance and rotation without requiring pod restarts?

Hard
43

Your company is migrating a large PostgreSQL database from AWS RDS to OCI Database with PostgreSQL. The database is 4 TB in size, and write operations continue 24/7. To ensure zero data loss and minimal downtime during cutover, which migration strategy should you employ?

Hard
44

An auditor requests evidence that all API activities across your OCI tenancy are being captured, tamper-proofed, and retained for compliance. Which OCI feature should you configure?

Hard
45

You need to grant a third-party auditor read-only access to view resources in a specific compartment without allowing them to modify anything or access other compartments. Which IAM policy statement achieves this?

Easy
46

You are migrating an Oracle Database 19c on-premises to OCI Exadata Database Service on Dedicated Infrastructure using Oracle Zero Downtime Migration (ZDM) in offline mode. The target database is already provisioned. Which ZDM migration phase configures the target database and initiates the data transfer via Oracle Data Pump?

Medium
47

Your organization has set strict budgets in OCI to monitor cloud expenditure. A finance team member needs to receive an alert when forecasted spending reaches 100% of the monthly budget. How should you configure this alert?

Hard
48

Which OCI identity component allows you to group users who share the same job function and require the same set of security permissions?

Easy
49

You are designing a high availability disaster recovery architecture for an Oracle Base Database Service system deployed on a 2-node Virtual Machine DB System. You need to configure automated backups. Which storage destination is automatically used by OCI to store these automated backups?

Medium
50

Which THREE features are part of OCI Web Application Firewall (WAF) capabilities? (Choose three.)

Medium
51

You are optimizing the cost and performance of an Exadata Database Service on Dedicated Infrastructure environment hosting multiple large databases. Which THREE practices should you implement to achieve optimal resource utilization and cost efficiency?

Hard
52

Which THREE strategies are recommended when planning a large-scale database migration (exceeding 100 TB) from on-premises to Exadata Database Service on Dedicated Infrastructure with minimal downtime? (Choose three.)

Hard
53

When configuring an OCI Network Load Balancer (NLB) for high availability across availability domains, what is a key architectural characteristic of the NLB service?

Easy
54

An architect is designing a multi-cloud application where microservices in OCI need to communicate securely with microservices in Azure. They decide to deploy a service mesh (such as Istio) spanning both OCI and Azure. What network prerequisite is essential across the OCI VCN and Azure VNet for the control plane to communicate?

Hard
55

You are designing an alerting strategy in OCI Monitoring. You want to avoid alert storms by ensuring that if a metric fluctuates above a threshold repeatedly, the alarm notification is sent only once every 30 minutes until the condition clears. How should you configure this?

Hard
56

An administrator needs to implement secure, administrative access to private OCI compute instances without exposing them to the public internet. Which TWO methods can be utilized?

Medium
57

You are planning to migrate an Oracle Database to OCI using Zero Downtime Migration (ZDM). Which underlying Oracle migration technology does ZDM orchestrate behind the scenes for large databases requiring physical migration?

Medium
58

You want to monitor the health and performance of your Oracle Autonomous Database in OCI. Which built-in metric namespace in OCI Monitoring should you query?

Easy
59

Which TWO destinations can receive messages dispatched from an OCI Notifications service topic?

Easy
60

An administrator needs to encrypt sensitive database passwords stored in OCI Object Storage. The company policy requires customer-managed keys with strict rotation schedules. Which service should the administrator use?

Easy
61

You are designing a disaster recovery strategy for a stateful microservices application running on OKE across two OCI regions. Persistent data is stored on OCI Block Volumes. What is the recommended approach to replicate persistent storage data across regions for stateful workloads?

Hard
62

A DevOps engineer wants to monitor custom application metrics (such as active shopping cart count) emitted by microservices running on OCI Container Engine for Kubernetes (OKE). Which OCI service provides the necessary API to ingest and query these custom metrics?

Medium
63

When designing a high-performance hybrid architecture integrating an on-premises data center with OCI, which THREE key factors should be evaluated to optimize network throughput and reliability?

Medium
64

An enterprise is executing a large-scale database migration to OCI using Oracle Data Pump. To ensure optimal performance and minimize the duration of the data load phase, which THREE best practices should the database administrator implement? (Choose three.)

Hard
65

Your organization is performing a zero-downtime database migration from an Oracle Database on-premises to OCI Exadata Database Service using Oracle Zero Downtime Migration (ZDM). During the migration job execution, the workflow pauses during the dataguard broker configuration step. Reviewing the ZDM logs, you find a network timeout error communicating between the ZDM service host and the OCI database listener. What is the most likely cause?

Hard
66

Which TWO methods can developers use to interact with OCI Registry (OCIR) for pushing and pulling container images?

Easy
67

Your development team needs to perform routine maintenance on database compute instances located in a private subnet without exposing SSH ports to the internet or corporate network. Which OCI service should you deploy?

Medium
68

You are designing an automated backup strategy for an Exadata Database Service on Dedicated Infrastructure. You want to ensure that incremental backups are taken daily and full backups weekly, with long-term retention stored in OCI Object Storage. Where are these backup schedules configured?

Medium
69

An application deployed across two OCI regions uses a DNS-based traffic management steering policy. A database failure occurs in the primary region, and the application must failover to the secondary region. What is the primary limitation of relying solely on DNS Traffic Management for disaster recovery failover?

Hard
70

An OCI Function in your serverless architecture needs to process large files (up to 5GB) uploaded to an OCI Object Storage bucket. Due to ephemeral storage limits inside the function container (/tmp), the function crashes when attempting to download the entire file locally. How should you redesign this function processing flow?

Hard
71

An enterprise has an OCI tenancy and an AWS account. They want to enable private connectivity between a VCN in OCI and a VPC in AWS without using the public internet. They have an existing FastConnect circuit in OCI and an AWS Direct Connect circuit in AWS. Which solution should the architect recommend?

Medium
72

Which THREE practices are recommended when hardening OCI VCN network security? (Choose three.)

Medium
73

A security administrator wants to ensure that all virtual machine instances in a specific subnet reject all inbound traffic by default, except for explicitly permitted administrative traffic. Where should this rule be enforced?

Medium
74

Your organization is planning a phased workload migration to OCI. To minimize risk, you decide to use a canary deployment and traffic splitting strategy for web applications. Which TWO OCI services or features can assist in routing fractional traffic percentages between on-premises and OCI environments during migration? (Choose two.)

Medium
75

Your serverless OCI Function written in Python is failing to process payloads because it exceeds the default execution timeout limit when calling a third-party REST API. How should you resolve this issue while adhering to best practices?

Medium
76

When designing a disaster recovery plan using OCI Full Stack Disaster Recovery (FSDR), which THREE resource types can be managed and orchestrated within a DR Protection Group? (Choose three.)

Medium
77

Your organization has deployed an enterprise workload on OCI Exadata Database Service. You are configuring Data Guard with Fast-Start Failover (FSFO). To prevent split-brain scenarios where both primary and standby databases assume primary roles simultaneously, where must the Data Guard Observer be placed?

Hard
78

An architect manages an Autonomous Database on Dedicated Infrastructure (ADB-D) with an Autonomous Container Database (ACD) that hosts several Autonomous Databases. During a maintenance window, the operations team needs to patch the ACD. What happens to the Autonomous Databases running on that ACD during the patching operation?

Hard
79

An Oracle Cloud Infrastructure (OCI) architect is designing a high-availability web tier across multiple Availability Domains (ADs) within a single region. Which component should be used to distribute incoming client traffic evenly across web server instances residing in different ADs?

Easy
80

Which Autonomous Database workload type is specifically optimized for running complex analytical queries, machine learning, and data warehousing workloads?

Easy
81

Your organization uses an external identity provider (IdP), such as Microsoft Entra ID (Azure AD), to authenticate users. You need to map IdP group memberships to OCI IAM groups so that users inherit the correct permissions upon login. How is this integration achieved?

Medium
82

Which OCI service can be used to monitor the health and performance of your load balancers and backend compute instances across multiple availability domains, triggering alarms if health checks fail?

Easy
83

An administrator wants to configure OCI Logging Analytics to parse custom application log formats that do not match out-of-the-box parsers. Which THREE steps or tools are involved in creating a custom parser?

Hard
84

When designing high availability across multiple Availability Domains in an OCI region, how should database or application subnets be configured to ensure fault tolerance?

Easy
85

When designing IAM policies at scale in a large OCI enterprise tenancy, which THREE best practices should be followed? (Choose three.)

Medium
86

Your organization is implementing a multicloud strategy where workloads in OCI must securely communicate with workloads in AWS over a private connection. You decide to set up a third-party software virtual appliance (VPN gateway) inside an OCI VCN. What specific VCN configuration change is required to ensure that return traffic from OCI compute instances correctly routes back through the virtual appliance instance?

Medium
87

Which TWO of the following services are native components of the Oracle Cloud Infrastructure Observability and Management platform?

Easy
88

An enterprise is designing a comprehensive cost observability and governance strategy in OCI. Which THREE practices or features should be implemented?

Hard
89

An enterprise application uses an Oracle Exadata Database Service on Dedicated Infrastructure with Maximum Availability Architecture (MAA). A catastrophic regional disaster occurs, and you must initiate a failover to the standby region. What is the expected behavior of Active Data Guard during this process?

Hard
90

You are designing an OKE-based cloud-native microservices architecture and want to ensure high availability and robust security isolation. Which THREE architectural best practices should you implement?

Hard
91

Which TWO OCI networking features help achieve high availability for applications accessing external services or on-premises datacenters? (Choose two.)

Easy
92

You are tasked with migrating a large enterprise database to OCI Exadata Database Service. To ensure minimal downtime and high reliability during cutover, which TWO Oracle migration tools or features are specifically designed for this purpose? (Choose two.)

Hard
93

Which THREE capabilities are provided by OCI Vault for cryptographic key management? (Choose three.)

Medium
94

An auditor requests a complete historical record of all console sign-ins, IAM policy modifications, and compartment deletions across your OCI tenancy for the past 365 days. Which OCI service provides this data natively?

Medium
95

Which THREE operational tasks should be included in a comprehensive disaster recovery runbook when utilizing OCI Full Stack Disaster Recovery for an enterprise application? (Choose three.)

Hard
96

An enterprise requires a dedicated, private connection between their on-premises data center and Oracle Cloud Infrastructure (OCI). The connection must bypass the public internet and offer high bandwidth, predictable performance. Which OCI networking service should be deployed?

Easy
97

An enterprise is integrating their on-premises network with OCI and requires secure, encrypted hybrid connectivity. Which THREE mechanisms or features can be utilized to secure data in transit between on-premises and OCI? (Choose THREE)

Hard
98

You are designing a defense-in-depth network architecture for a multi-tier application on OCI. Database servers must reside in a private subnet and accept traffic ONLY from application servers running in a separate private subnet within the same VCN. No external traffic should reach the database. How should you configure security controls?

Medium
99

Your organization mandates that any newly created compartment must automatically enforce rigid security baselines (such as blocking public buckets and disallowing open security list rules). Which OCI feature should you configure to enforce these guardrails at creation time?

Hard
100

Which OCI database service provides fully managed Oracle Database instances running on dedicated virtual machines with root access and granular control over operating system parameters?

Easy
101

You are designing a multi-tenant microservices platform on OKE. You need to ensure that tenant workloads are strictly isolated at the kernel level, preventing potential container breakout vulnerabilities from affecting other tenants. Which OCI Container Engine for Kubernetes node configuration should you choose?

Hard
102

An administrator needs to configure DNS resolution between an on-premises datacenter and OCI. On-premises servers must resolve hostnames of compute instances in an OCI VCN. Which OCI service component must be utilized to achieve this?

Hard
103

An administrator needs to track who deleted a critical database instance in OCI last week. Which service provides the exact API event history needed for this forensic investigation?

Medium
104

An Oracle Cloud Infrastructure (OCI) Administrator needs to collect log data from custom applications running on Compute instances. Which OCI service should be configured to ship these logs to OCI Logging?

Easy
105

You are migrating a 50 TB Oracle Database from an on-premises Sun Solaris SPARC server to OCI Exadata Database Service on X9M hardware (Linux x86-64 architecture). Because the source and target platforms have different endianness and operating system architectures, standard RMAN backup restoration is not possible. Which migration strategy should you implement?

Hard
106

An enterprise is designing a cost observability architecture in OCI. They want to attribute cloud spend dynamically to different business units based on resource metadata tags, and they need historical trend analysis with anomaly detection. Which combination of features and tools provides the most robust solution?

Hard
107

Which OCI tool should a cloud architect recommend for automating the lifecycle management, patching, and backing up of a fleet of Oracle Base Database systems across multiple compartments?

Easy
108

You want to quickly visualize CPU utilization across 50 Compute instances on a single pane of glass without creating complex custom dashboards. Which OCI Monitoring feature allows you to view pre-packaged metrics grouped by resource?

Easy
109

Which OCI storage service provides massively scalable, highly durable regional object storage that is ideal for storing database backups and disaster recovery artifacts?

Easy
110

You are migrating an Oracle Database to an Exadata Database Service on Dedicated Infrastructure. You need to ensure that database backups are stored securely with zero public internet exposure. What is the recommended networking architecture for backup transmission?

Medium
111

A financial services company runs its mission-critical application on OCI. The application uses a regional public subnet with a fleet of compute instances behind a flexible load balancer. The architect must ensure the application remains available even if an entire availability domain (AD) fails, without introducing cross-region latency for the primary traffic. What should the architect do to meet this requirement?

Medium
112

When configuring DRG route tables and route distributions in OCI for hybrid connectivity, which TWO routing actions or concepts are supported? (Choose TWO)

Medium
113

Your company requires automated daily backups of block volumes attached to critical production compute instances in OCI. Which OCI service feature should you configure?

Easy
114

An architect is designing a cloud-native application that must remain available if an entire OCI region becomes unavailable. The application uses OCI Object Storage for static assets and an Autonomous Database for transactional data. Which approach best meets the cross-region availability requirement?

Easy
115

What is the primary purpose of configuring Border Gateway Protocol (BGP) Autonomous System Numbers (ASNs) when establishing an OCI FastConnect connection?

Easy
116

You are designing a high-availability architecture for an Oracle Base Database system across two Availability Domains (ADs) within a single OCI region. Which multi-database HA pattern ensures automatic failover with minimal data loss?

Medium
117

Which TWO methods are valid for protecting OCI Compute instance boot volumes against data loss or corruption? (Choose two.)

Easy
118

An internal security audit reveals that database credentials are being passed insecurely in environment variables within OCI Functions. What is the recommended secure pattern to manage these secrets?

Hard
119

Your company maintains a hybrid architecture with an OCI Site-to-Site VPN connecting an on-premises data center to an OCI VCN. Due to compliance requirements, all IPsec tunnel traffic must use robust encryption with a specific hashing algorithm. Which protocol suite and encryption standard are natively supported by OCI Site-to-Site VPN?

Easy
120

Your organization is designing a disaster recovery strategy as part of a workload migration project to OCI. The business requirement states that in the event of a regional outage in OCI region A, workloads must fail over to OCI region B with a Recovery Point Objective (RPO) of zero and a Recovery Time Objective (RTO) of less than 15 minutes. Which OCI networking feature should you deploy to interconnect the two regions for database replication?

Easy
121

When configuring alarms in OCI Monitoring, which THREE parameters or settings must be specified?

Medium
122

You are managing an Oracle Base Database Service instance configured with Data Guard in OCI. Due to a severe networking anomaly, the standby database falls significantly behind in applying redo. You decide to rebuild the standby database from an incremental backup taken on the primary. Which Recovery Manager (RMAN) command or process is used to synchronize the standby with the new incremental backup?

Hard
123

You need to store sensitive configuration data, such as database connection strings and API keys, for your OCI Functions application. Where should you securely store these values so they can be injected as environment variables or retrieved securely?

Easy
124

You are leading a multi-cloud migration project where 200 virtual machines from an on-premises data center are being assessed for migration to OCI. You have deployed the OCI Migration discovery agent, but some Linux VMs are failing inventory collection due to SSH authentication failures and lack of root privileges. How should you resolve this issue without compromising security?

Hard
125

Your security architecture requires segregating production workloads from development workloads using distinct VCNs. However, certain microservices in the development VCN must communicate securely with a database in the production VCN without exposing traffic to the internet. What is the recommended networking construct?

Medium
126

You are planning the final cutover for a critical production database migrating from an on-premises Oracle Real Application Clusters (RAC) database to OCI Base Database Service using Oracle Data Guard for replication. To minimize application downtime during the cutover window, which sequence of steps must be executed?

Medium
127

An administrator needs to transfer 80 TB of unstructured file backup data from an on-premises Network Attached Storage (NAS) device to OCI Object Storage. The available internet bandwidth is only 50 Mbps, which would take months to upload. Which OCI service should be utilized to complete this physical migration efficiently?

Easy
128

When designing high availability for stateless web servers in OCI, which combination of services provides automatic scaling and load distribution across multiple Availability Domains?

Easy
129

Your organization has a strict Recovery Point Objective (RPO) of 5 minutes and Recovery Time Objective (RTO) of 15 minutes for a multi-tier application. The database tier uses Oracle Data Guard. During a test drill, you notice that redo transport lag spikes to 8 minutes. What is the most likely architectural bottleneck causing this issue?

Hard
130

Your security team requires that all data stored in OCI Object Storage must adhere to strict compliance frameworks preventing accidental or malicious deletion. Which TWO features should be configured? (Choose two.)

Hard
131

Your company operates a multi-region OCI deployment. Security policies dictate that encryption keys must never leave their respective home regions. How should you design your OCI Vault deployment?

Medium
132

Which TWO of the following are key architectural benefits of adopting serverless OCI Functions compared to managing traditional container clusters for event-driven tasks?

Easy
133

You are tasked with migrating a mission-critical three-tier enterprise application from an on-premises environment to OCI. The database tier uses Oracle RAC, and the application tier consists of stateless Java applications running on JBoss. Which TWO strategies or tools should be incorporated into the migration plan to ensure high availability and minimal downtime during cutover? (Choose two.)

Hard
134

Your organization uses OCI Full Stack Disaster Recovery to manage failovers between Region A and Region B. During a DR drill, you notice that a custom user-defined step failed because the dependent compute instance in Region B was not yet fully running. How should you resolve this dependency issue in the FSDR plan?

Hard
135

An OCI administrator wants to ingest application logs stored in an Object Storage bucket into OCI Logging Analytics for complex log searching and parsing. What is the recommended way to ingest these logs?

Medium
136

You are configuring an OCI Site-to-Site VPN. Your on-premises firewall requires static routing instead of BGP. Which OCI VPN mode must you select when creating the IPSec connection?

Medium
137

An application running on OCI compute instances requires disaster recovery protection. You want to replicate boot volumes and block volumes to a secondary region. Which OCI Block Volume feature facilitates this?

Medium
138

An enterprise wants to monitor an enterprise application stack consisting of Oracle WebLogic Server and Oracle Database, tracking their deep internal health metrics, resource utilization, and dependency topology. Which OCI service is specifically designed for full-stack enterprise application monitoring?

Medium
139

An organization is implementing a hybrid cloud topology where on-premises applications need to access OCI Autonomous Database privately. Which THREE OCI networking components or services are involved in this private connection architecture? (Choose THREE)

Hard
140

You need to trigger an OCI Function asynchronously whenever an object is uploaded to an OCI Object Storage bucket. Which OCI service acts as the event router between Object Storage and the Function?

Easy
141

An architect is evaluating RTO and RPO requirements for an Oracle Exadata Database Service in OCI. The business demands an RPO of zero and an RTO of less than two minutes. Which configuration meets this requirement?

Hard
142

An enterprise is implementing a multi-database architecture utilizing Oracle GoldenGate microservices on OCI Compute instances to replicate data between an operational Exadata database and an analytical Autonomous Data Warehouse. Which network security construct must be configured to allow communication between the GoldenGate deployment and the Autonomous Database instance?

Hard
143

You are planning the backup retention strategy for critical Oracle Base Database Service instances in OCI. You want to retain weekly backups for 12 months and daily backups for 30 days. Where are these automated backups stored by default?

Easy
144

You need to connect multiple VCNs in different regions to a single on-premises datacenter via FastConnect. Which DRG feature enables you to route traffic efficiently across multiple VCNs and remote connections?

Medium
145

Which TWO of the following are valid methods to trigger an OCI Function execution?

Easy
146

An enterprise has workloads running in OCI and Google Cloud Platform (GCP). They require low-latency, private connectivity between OCI and GCP without traffic traversing the public internet. Which architectural design pattern achieves this?

Hard
147

What is the primary function of OCI Network Security Groups (NSGs)?

Easy
148

Your development team needs to deploy applications into an OCI Security Zone. They attempt to create a compute instance with a public IP address attached, but the operation fails. Why did this happen?

Medium
149

An incident response team needs to automatically isolate a compromised compute instance in OCI by revoking its network access while preserving its storage volumes for forensic analysis. Which sequence of actions should be automated using OCI Events and Functions?

Hard
150

Your OKE cluster is running microservices that require rapid horizontal scaling based on custom application metrics (such as active queue length) rather than standard CPU or memory utilization. Which Kubernetes component should you deploy to achieve this?

Medium
151

An enterprise customer is designing a multi-tenancy Oracle Cloud Infrastructure (OCI) environment. They need to ensure that dynamic groups can properly authenticate workloads across different compartments without granting overly broad permissions. Which approach aligns with OCI IAM best practices?

Medium
152

Your organization is preparing to migrate several large Oracle databases to OCI using Oracle Data Pump. Which THREE best practices should you follow to optimize the export and import performance over network connections? (Choose three.)

Medium
153

You need to secure your OCI API Gateway deployment by ensuring that only authenticated requests containing a valid JSON Web Token (JWT) issued by an identity provider can access your backend microservices. Which API Gateway feature should you implement?

Easy
154

Your company is migrating static web assets and user-uploaded media files from an on-premises web server to OCI. The web application requires high durability, low latency, and global content delivery. Which OCI service should you use to store and serve these assets?

Easy
155

What is the purpose of OCI IAM federation with an external identity provider (IdP)?

Easy
156

Your organization has strict security policies requiring all log data in OCI Logging to be encrypted using a customer-managed encryption key (CMK) stored in OCI Vault. How should you implement this?

Hard
157

You are configuring redundant OCI Site-to-Site VPN tunnels to your on-premises datacenter. OCI automatically provisions how many tunnels per VPN connection by default for high availability?

Medium
158

An enterprise application running on Exadata Database Service on Dedicated Infrastructure experiences severe I/O contention due to a noisy neighbor batch reporting job. Which Exadata storage feature should you configure to isolate and guarantee I/O resources for critical online transaction processing (OLTP) workloads?

Hard
159

Which THREE features are unique or heavily enhanced capabilities of Oracle Exadata Database Service on Dedicated Infrastructure compared to standard OCI Base Database systems? (Choose three.)

Hard
160

You are deploying OCI Full Stack Disaster Recovery (FSDR) to orchestrate a cross-region DR plan for a multi-tier application stack. Which component acts as the primary grouping mechanism for all application assets (databases, compute, load balancers) within a compartment?

Medium
161

You are designing a disaster recovery strategy for an Oracle Autonomous Database (Serverless) instance. You need to ensure the database can failover to a remote region with minimal RPO. Which feature should you configure?

Medium
162

Which OCI construct serves as the central hub for routing traffic between VCNs and hybrid network connections such as FastConnect and IPSec VPN?

Easy
163

You are implementing zero-trust network security for an OKE microservices application using OCI Service Mesh. Which THREE capabilities does OCI Service Mesh provide to secure service-to-service communication?

Hard
164

Which OCI service checks compute instances and container images for known software vulnerabilities and malware?

Easy
165

Which TWO types of logs are natively generated and accessible within OCI Logging without requiring agent installation on compute instances?

Easy
166

An architect is designing a database migration from an on-premises Oracle Database (Non-CDB structure) to an OCI Autonomous Database (Serverless). Which migration method is mandatory because of the architectural constraints of Autonomous Database?

Hard
167

You are deploying a microservices application on Oracle Cloud Infrastructure Container Engine for Kubernetes (OKE). You need to expose multiple internal services externally using a single public IP address and enforce URL path-based routing. Which OCI networking and container component should you use?

Easy
168

Your company operates a hybrid application where frontend servers in Azure need to communicate with backend databases in OCI using private IP addresses via the OCI-Azure Interconnect. Which routing configuration is required on the OCI Dynamic Routing Gateway (DRG) attached to your VCN?

Hard
169

Which OCI service continuously monitors your cloud resources for security misconfigurations and risky operational behaviors, providing a unified security score for your tenancy?

Easy
170

When planning a migration of Oracle databases to Oracle Autonomous Database (Serverless), which THREE migration methods or tools are natively supported or recommended by Oracle?

Medium
171

Which TWO tools or interfaces can administrators use to manage Oracle Autonomous Database instances in OCI? (Choose two.)

Easy
172

Your organization requires the migration of 300 TB of backup archives from an on-premises data center to OCI Object Storage. The local internet connection is limited to 100 Mbps, and corporate compliance mandates that data cannot traverse the public internet unencrypted. Which solution should you select to meet these constraints?

Medium
173

An architect is designing a lift-and-shift migration strategy for an enterprise running diverse workloads on-premises. Which TWO of the following factors should be evaluated when deciding whether to choose a lift-and-shift (rehost) approach versus a re-architect approach? (Choose two.)

Easy
174

You are configuring BGP for an OCI FastConnect virtual circuit. What happens if BGP peering fails between your on-premises router and the OCI Dynamic Routing Gateway?

Medium
175

An enterprise is migrating a legacy Java application that requires sticky sessions and complex path-based routing rules to OCI. The migration plan requires zero dropped connections during backend server updates. Which OCI Load Balancer configuration feature should you implement?

Hard
176

Your organization requires all newly created compartments to automatically enforce security best practices, such as prohibiting public Object Storage buckets and ensuring audit logs are never disabled. Which OCI feature is best suited to achieve this?

Medium
177

An application architect is troubleshooting intermittent latency spikes in a distributed microservices application deployed across multiple OCI regions. Which OCI capability should be used to trace requests end-to-end across service boundaries?

Medium
178

Your finance department requires detailed cost visibility and granular chargeback reporting for multiple cloud environments spanning different business units, departments, and environments (Prod/Dev). Tagging is strictly enforced via OCI Tag Defaults. To analyze historical cost trends and forecast future cloud spend across these business dimensions, which OCI native feature should you use?

Medium
179

You are designing an active-active hybrid architecture between an on-premises datacenter and OCI using two separate FastConnect circuits connected to two different DRG attachments. How does OCI determine path selection when receiving identical BGP route advertisements from both circuits?

Hard
180

Which TWO mechanisms are used to secure data in transit across OCI networking components? (Choose two.)

Hard
181

You are architecting a multi-region cloud-native application where OCI API Gateway is deployed in Region A and Region B. You need to ensure that global users are automatically routed to the closest healthy API Gateway endpoint with automatic failover if an entire OCI region experiences an outage. Which OCI service should you use in front of the API Gateways?

Hard
182

You are managing an enterprise OKE cluster that runs multi-tenant workloads. Certain sensitive pods must run on dedicated worker nodes to comply with strict isolation mandates. Which combination of Kubernetes scheduling features should you configure on OCI to enforce this requirement reliably?

Hard
183

Which TWO characteristics distinguish OCI Container Engine for Kubernetes (OKE) as a managed Kubernetes service?

Easy
184

An architect is configuring an OCI Full Stack Disaster Recovery plan. The plan includes a step to run a custom script on an application server during a failover drill. Which OCI service executes this custom script?

Medium
185

An application tier in a private VCN subnet needs to securely access an Oracle Autonomous Database without traversing the public internet. Which OCI networking feature provides the most secure and performant connection?

Hard
186

What is the primary benefit of using OCI Autonomous Database Serverless compared to Provisioned (Dedicated) infrastructure regarding database administration?

Easy
187

When configuring an OCI Application Load Balancer (Layer 7) for high availability, which THREE settings or components must be properly configured? (Choose three.)

Medium
188

Your organization is implementing strict compliance requirements for log retention and auditing in OCI. Which THREE architectural implementations ensure secure, long-term log governance?

Hard
189

Your security team wants to continuously monitor OCI resources for misconfigurations and automatically remediate security violations without manual intervention. Which OCI native service should you configure?

Easy
190

When configuring OCI Service Connector Hub to move logs from OCI Logging to OCI Object Storage, which THREE components must be defined?

Medium
191

You are designing a hybrid cloud architecture during a phased workload migration to OCI. On-premises applications must securely communicate with migrated OCI workloads over a private, dedicated connection with high throughput and encryption. Which OCI networking service combination provides this capability?

Medium
192

Which OCI security feature provides a centralized view of security recommendations and allows you to remediate misconfigurations with a single click?

Easy
193

A financial services firm runs a three-tier application in OCI. Compliance requires that all audit-relevant log entries be retained for seven years in immutable storage, while the Security team needs near-real-time search across the same logs for the last 30 days. The architect must design a single ingestion path that satisfies both needs without modifying application code. Which approach is correct?

Hard
194

An administrator is designing a hybrid cloud architecture where OCI workloads need to access an Azure SQL Database over the OCI-Azure Interconnect. The OCI VCN and Azure VNet have overlapping IP address spaces (10.0.0.0/16). What is the mandatory architectural requirement to make this cross-cloud communication possible?

Hard
195

Which TWO editions of Oracle Database are available when deploying an Oracle Base Database system on OCI? (Choose two.)

Easy
196

Your development team needs to scale up CPU cores for an Autonomous JSON Database instance dynamically without restarting the application or causing downtime. Which feature should you use?

Easy
197

When configuring OCI API Gateway, which THREE types of backends are natively supported for routing incoming API requests?

Medium
198

You have deployed an OCI Function and want to test its HTTP trigger endpoint without writing custom client code. Which OCI service or feature should you use to invoke the function directly via an HTTP URL?

Easy
199

You are building a high-throughput event-processing pipeline where multiple consumer instances need to read messages from an OCI Stream concurrently. Each consumer instance must maintain its own independent cursor position and process every message in the stream without interfering with other consumer instances. How should you configure your consumers?

Hard
200

You need to export OCI Audit logs to a third-party SIEM tool (such as Splunk or Elastic) in real-time. Which OCI architecture is best suited for this requirement?

Easy
201

An architect is designing a multi-region disaster recovery architecture for an application running on OCI Compute. The database layer uses Oracle Data Guard. For the application tier, what is the recommended approach to handle stateless application servers in the DR region?

Medium
202

An organization is designing a disaster recovery strategy using Exadata Database Service on Dedicated Infrastructure. They require an Recovery Time Objective (RTO) of less than 30 seconds and a Recovery Point Objective (RPO) of zero for an enterprise database handling mission-critical workloads. Which Data Guard configuration should be implemented?

Hard
203

You want to track API calls made by a specific user who deleted a critical production database in OCI. Which OCI service log should you examine?

Easy
204

Which OCI service is primarily used to establish an encrypted site-to-site IPSec VPN connection between an on-premises datacenter and an OCI Virtual Cloud Network?

Easy
205

Your organization's security policy requires that all OCI Block Volume data be encrypted with customer-managed keys that can be rotated, disabled, or deleted independently of the volume lifecycle. You have configured a Vault in OCI Key Management. Which key type must you create and assign to the Block Volume to meet this requirement?

Medium
206

Which THREE strategies can be implemented in OCI to mitigate the impact of a regional availability outage on a multi-tier web application? (Choose three.)

Hard
207

An enterprise is planning to migrate a large on-premises Oracle Database of 15 TB to Oracle Cloud Infrastructure (OCI) Exadata Database Service. The maintenance window for the final cutover is extremely short (less than 2 hours). Which migration method should you recommend to minimize application downtime?

Easy
208

Which TWO actions can you take in OCI to ensure high availability of application data stored in Block Volumes? (Choose two.)

Easy
209

You are configuring a site-to-site IPSec VPN between your on-premises datacenter and an OCI VCN. To ensure data confidentiality and integrity across the public internet, which encryption algorithms should you mandate in the IPSec configuration?

Medium
210

An organization is preparing to migrate 500 virtual machines to OCI. To govern resource creation, budget allocation, and access control effectively, how should the OCI tenancy be structured prior to starting resource migrations?

Easy
211

An OCI Administrator needs to set up proactive alerting when the CPU utilization of a production Compute instance exceeds 90% for a sustained period of 15 minutes. Which OCI service should be configured to evaluate this metric and trigger notifications via an email endpoint?

Easy
212

Your organization is planning to migrate file shares from an on-premises Windows environment (SMB protocol) to OCI. Which THREE factors or options should you consider when selecting the appropriate OCI storage architecture for Windows file shares? (Choose three.)

Medium
213

When designing a container build and deployment pipeline using OCI DevOps and OCI Registry (OCIR), which THREE tasks can be automated within the CI/CD build pipeline stage?

Medium
214

You are troubleshooting a microservice on OKE that is experiencing intermittent 502 Bad Gateway errors when communicating with another internal service. The application uses Kubernetes ClusterIP services for discovery. You suspect DNS resolution failure within the cluster. Which diagnostic tool and approach should you use inside the OKE cluster?

Hard
215

You are configuring the OCI-Azure Interconnect to link an OCI Virtual Cloud Network (VCN) with an Azure Virtual Network (VNet). You have already established the FastConnect and ExpressRoute circuits. What is the mandatory next step to enable cross-cloud routing between the OCI Dynamic Routing Gateway (DRG) and the Azure Virtual Network Gateway?

Medium
216

You are configuring an OCI API Gateway deployment to route requests to backend microservices running on OKE. You need to ensure that if a backend microservice takes longer than 3 seconds to respond, the API Gateway cancels the request and returns a 504 Gateway Timeout error to the client. Where should you configure this timeout?

Medium
217

During a migration cutover weekend, your team encounters unexpected DNS resolution failures preventing users from reaching the newly migrated OCI application endpoints. Which TWO immediate troubleshooting steps should you perform? (Choose two.)

Easy
218

An architect is designing an Oracle Autonomous JSON Database instance to store flexible document workloads. Which feature is automatically enabled on Autonomous JSON Database that distinguishes it from general-purpose Autonomous Transaction Processing instances regarding storage management?

Medium
219

An architect is configuring Oracle Autonomous Database Disaster Recovery with cross-region Data Guard. The primary database is in Ashburn, and the standby is in Phoenix. You execute a switchover operation. What happens to the connection strings (such as tnsnames.ora entries) used by client applications?

Hard
220

An enterprise application running on Oracle Autonomous Transaction Processing (ATP) requires dedicated infrastructure isolation for compliance reasons. You need to provision an Autonomous Database on Dedicated Exadata Infrastructure. Which architectural step is mandatory before you can provision the database instance?

Medium
221

What is the primary function of an OCI Service Gateway?

Easy
222

When designing a high-availability and disaster recovery architecture for an enterprise Oracle Database on OCI, which THREE components or patterns are crucial for achieving optimal recovery and uptime? (Choose three.)

Hard
223

During a lift-and-shift migration planning phase, your team needs to estimate the monthly running costs of various OCI Compute shapes, block storage volumes, and egress data transfer fees before provisioning resources. Which OCI tool should you use to generate this detailed cost breakdown?

Easy
224

Which THREE features are supported within OCI Cost Analysis to help administrators analyze and report on cloud spending?

Medium
225

An enterprise architect is designing a centralized log management solution in Oracle Cloud Infrastructure (OCI) Logging Analytics. The team needs to ingest logs from various heterogeneous sources, including custom applications, Oracle databases, and third-party firewalls, while ensuring that the log data is properly parsed and enriched without requiring custom regex development for every vendor format. Which feature should the architect leverage to meet this requirement?

Medium
226

You are using Fn Project CLI to deploy an OCI Function. Which command is used to build, push, and deploy the function to your application in OCI in a single streamlined step?

Easy
227

An organization has multiple child compartments under a parent compartment. A security architect needs to write an IAM policy that allows a specific developer group to manage compute instances across all child compartments without granting permissions at the root tenancy level. How should this policy be structured?

Hard
228

An enterprise is migrating a cluster of microservices running on Kubernetes from an on-premises data center to OCI Container Engine for Kubernetes (OKE). The cluster uses custom CNI (Container Network Interface) plugins and persistent storage backed by an on-premises Ceph cluster. During migration planning, how should you architect the persistent storage layer in OCI to support OKE stateful workloads?

Hard
229

You need to automate the build, test, and deployment phases of your microservices application whenever developers push code changes to a Git repository on OCI. Which OCI service provides native CI/CD pipelines?

Easy
230

Your organization is migrating a high-throughput transactional database to OCI. During peak business hours, the database experiences massive I/O bursts. You want to ensure the underlying storage configuration can scale its IOPS independently of storage capacity. Which OCI block volume feature should you enable?

Easy
231

Your OKE cluster has autoscaling enabled using the Kubernetes Cluster Autoscaler. However, during peak hours, new pods remain in 'Pending' state for 15 minutes before the cluster autoscaler provisions new worker nodes. How can you reduce this provisioning delay?

Medium
232

Your security team mandates that all traffic entering your OCI VCN from the internet must be inspected by a next-generation firewall before reaching backend web servers. How should you design this architecture?

Hard
233

Which THREE features are provided by OCI Application Performance Monitoring (APM)?

Medium
234

You are provisioning an Autonomous Data Warehouse (ADW) instance and want to configure network access so that only specific corporate IP addresses can connect to the database. Which feature should you enable?

Easy
235

An enterprise application hosted on OCI requires high availability across multiple fault domains within a single availability domain. Which resource placement strategy should you use for your application compute instances?

Medium
236

You are configuring transparent data encryption (TDE) for an Oracle Database on Exadata Database Service using OCI Vault for master encryption key management. What happens if the database loses connectivity to the OCI Vault key management service?

Hard
237

Which TWO architectural best practices should you follow when designing cloud-native microservices on Oracle Container Engine for Kubernetes (OKE) to ensure high availability and resilience? (Choose two.)

Hard
238

You are designing a secure zero-trust architecture for database access in OCI. Developers must authenticate using short-lived tokens rather than long-term database passwords. Which OCI and database feature combination supports token-based authentication?

Hard
239

You are migrating a monolithic application to microservices on OKE and implementing resilient design patterns. Which THREE resiliency patterns should you implement to handle transient failures gracefully?

Hard
240

An enterprise multicloud architect is planning disaster recovery for workloads running across OCI and AWS. Which THREE strategies are commonly employed for cross-cloud disaster recovery architectures? (Choose THREE)

Hard
241

Your development team wants to connect securely to an Autonomous Database (Serverless) instance using mutual TLS (mTLS) authentication. Where must the client application obtain the required credentials to establish this secure connection?

Medium
242

What is the primary purpose of OCI Database Actions (SQL Developer Web) when working with an Oracle Autonomous Database?

Easy
243

When creating an Oracle Base Database system, which database edition options are available for licensing on OCI?

Easy
244

Your operations team needs to receive immediate notifications via PagerDuty and Slack whenever a high-severity alarm is triggered in OCI Monitoring. Which OCI service should be used as the intermediary to dispatch these notifications?

Easy
245

You are migrating a legacy application that relies on hardcoded IP addresses for inter-service communication. During the migration to OCI VCNs, you need to ensure that virtual machines can resolve each other's hostnames dynamically without maintaining manual /etc/hosts files. What OCI networking feature should you configure?

Medium
246

You are configuring a Data Guard association between two Oracle Base Database Systems in different OCI regions. The primary database encounters an unplanned outage, and you perform a manual failover. What action must you take afterward if you wish to restore the original architecture with the old primary as the new standby?

Hard
247

You need to migrate an on-premises Oracle Database to OCI Exadata Database Service using Oracle GoldenGate for zero-downtime migration with bi-directional replication. Which critical design consideration must be addressed regarding table design on both databases?

Medium
248

Which protocol is used by OCI FastConnect and Site-to-Site VPN to dynamically exchange routing information with on-premises routers?

Easy
249

An administrator wants to restrict which on-premises subnets can communicate with an OCI VCN over an IPSec VPN connection. Where should this route filtering be implemented on the OCI side?

Medium
250

An auditor requests a log of all administrative API actions, console logins, and resource modifications performed across your OCI tenancy over the past 365 days. Which OCI service provides this native auditing capability?

Easy
251

You are troubleshooting an issue where an on-premises server cannot reach an OCI compute instance over an IPSec VPN tunnel. The VPN status in the OCI console shows 'Tunnel Up', but ping tests fail. What is the most likely cause?

Medium
252

Your organization has completed migrating a database to OCI Base Database Service. To ensure compliance with corporate data protection policies, you must verify that all database backups stored in OCI Object Storage are automatically encrypted using customer-managed encryption keys. Where should you configure this key management integration?

Easy
253

You are designing a secure network architecture for migrating production workloads into an OCI Virtual Cloud Network (VCN). Compliance standards require strict traffic inspection, isolation, and secure administrative access. Which THREE OCI networking and security features should you incorporate into your design? (Choose three.)

Hard
254

Your OKE cluster is deployed in a private subnet with no direct outbound internet access. However, your pods need to pull container images from OCI Registry (OCIR). How should you enable this secure image pull without exposing worker nodes to the public internet?

Medium
255

Your company is planning to migrate 50 TB of unstructured file data from an on-premises Network Attached Storage (NAS) appliance to OCI File Storage Service (FSS). The target RTO/RPO allows for a phased baseline copy followed by incremental syncs. Which tool should you use to transfer the data efficiently over your dedicated OCI FastConnect link?

Easy
256

An enterprise architect is connecting AWS and OCI using a third-party SD-WAN appliance deployed in both clouds. The appliances are deployed on OCI compute instances and AWS EC2 instances. To ensure high availability across availability domains, where should the OCI SD-WAN instances be placed?

Hard
257

An SRE team is configuring OCI Application Performance Monitoring (APM) synthetic monitoring. They need to run browser-based synthetic scripts periodically from multiple geographic locations to ensure user-facing login workflows function correctly. Which APM feature should they configure?

Hard
258

An administrator wants to analyze log data collected from various OCI resources by running complex SQL-like queries and creating visualization dashboards. Which OCI service is designed for this purpose?

Easy
259

An architect is designing an Oracle Exadata Database Service on Dedicated Infrastructure deployment with multiple VM clusters on a single Exadata rack. Which architectural feature allows secure isolation of CPU, memory, and database workloads between these distinct VM clusters?

Hard
260

What is the primary benefit of using OCI FastConnect over an IPSec VPN connection?

Easy
261

You are performing maintenance on an OCI Load Balancer backend set. You want to temporarily stop sending traffic to a specific backend server without immediately dropping active persistent connections. What feature should you use?

Medium
262

Your security team has discovered that an application running in OCI is susceptible to Cross-Site Scripting (XSS) and SQL injection attacks at the edge. Which OCI service and configuration should you implement to protect the web application without rewriting the core application code?

Hard
263

You are configuring a FastConnect dedicated circuit between your corporate datacenter and OCI. You need to enable dynamic routing where BGP routes are automatically propagated between the Dynamic Routing Gateway (DRG) and your on-premises routers. Which OCI construct must be attached to the DRG to achieve this?

Medium
264

When setting up an OCI Site-to-Site VPN, which on-premises device representation must you create in the OCI Console before configuring the IPSec connection?

Easy
265

Which TWO logging and monitoring features in OCI are essential for maintaining comprehensive security audit trails and threat detection? (Choose two.)

Hard
266

You are troubleshooting a networking issue where virtual machines in a private subnet cannot communicate with an external endpoint over the internet. You suspect security lists or network security groups might be dropping the packets. Which OCI observability feature can help verify whether packets are being accepted or rejected at the VNIC level?

Hard
267

An enterprise requires deploying an Oracle Autonomous Database on Dedicated Infrastructure to meet stringent data isolation and security mandates. Which foundational resource must be provisioned first before creating the Autonomous Container Database?

Easy
268

An SRE team is configuring synthetic monitoring using OCI Application Performance Monitoring (APM). To execute scripts across private corporate networks that cannot be accessed from the public internet, which THREE steps or components must be configured?

Hard
269

An administrator is setting up composite alarms in OCI Monitoring. They want an alarm to trigger ONLY if both Database CPU utilization is above 90% AND Application latency is above 500ms simultaneously. How should this be implemented?

Medium
270

Your organization runs a multi-tenant Oracle Base Database Service and you need to monitor the storage utilization of individual Pluggable Databases (PDBs) within a Container Database (CDB). Which OCI native service and metric should you review?

Medium
271

Your organization is migrating a 3-tier web application running on VMware vSphere to OCI Compute. The application requires exact operating system configurations, strict security policies, and custom kernel modules. You want to automate the migration process while maintaining network consistency. Which migration approach is most suitable?

Medium
272

You have deployed an API on OCI API Gateway and want to protect it from common web attacks such as SQL injection, cross-site scripting (XSS), and bad bots. Which OCI service should you integrate with API Gateway?

Easy
273

During a database migration project using Oracle Zero Downtime Migration (ZDM), the pre-migration validation phase fails with an error indicating that the source database's time zone file version does not match the target OCI Database service time zone file version. How should you resolve this issue?

Hard
274

An enterprise application uses an Oracle Autonomous Transaction Processing database and encounters intermittent application-level timeouts during peak concurrency spikes. Upon investigating, you notice that queued statements are waiting due to resource limits. Which Autonomous Database feature should you adjust to manage concurrency and statement queuing behavior?

Hard

Frequently asked questions

What does the troubleshooting domain cover on the 1Z0-997-26 exam?
troubleshooting questions test whether you can apply the concept in context, not just recognise a definition.
How many questions are in this domain?
This page lists all 274 troubleshooting questions in the 1Z0-997-26 question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
What is the best way to practise this domain?
Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
Can I practise only troubleshooting questions?
Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.