Courseiva

1Z0-997-26 · topic practice

Cloud Native Architecture practice questions

Practise 1Z0-997-26 NAT and PAT questions covering address translation types, inside/outside interface roles, static vs dynamic vs PAT, and troubleshooting missing or incorrect translations.

Courseiva uses original exam-style practice questions designed for learning and revision. The goal is to understand the concepts, recognise exam patterns, and improve through explanations — not memorise copied exam dumps.

Reviewed byJohnson Ajibi· MSc IT Security
20 questionsDomain: Cloud Native Architecture
Practice 10 questionsBrowse domain →

What the exam tests

What to know about Cloud Native Architecture

Cloud concepts questions usually test the service model (IaaS/PaaS/SaaS) and deployment model (public/private/hybrid/community) appropriate for a given scenario.

IaaS, PaaS and SaaS responsibilities and examples.

Public, private, hybrid and community cloud deployment models.

On-premises vs cloud trade-offs: cost, control, scalability.

How cloud connectivity options (VPN, Direct Connect, ExpressRoute) work.

Why learners struggle

Why Cloud Native Architecture questions are commonly missed

NAT questions are missed when learners confuse the four address types (inside local, inside global, outside local, outside global) or misapply the interface direction. A translation rule can look correct but still fail if the ACL, interface, or direction is wrong.

  • ·Inside local vs inside global — inside local is the private source, inside global is the translated public address
  • ·PAT overloads — many sources share one public IP using unique port numbers
  • ·Interface direction — ip nat inside and ip nat outside must be on the correct interfaces
  • ·Static NAT vs dynamic NAT vs PAT — each serves a different use case
  • ·The NAT ACL identifies traffic to translate, not traffic to permit or deny
  • ·A missing translation can look like a routing problem if the interfaces are misconfigured

Watch out for

Common Cloud Native Architecture exam traps

  • ▸IaaS gives you infrastructure control; SaaS gives you only the application.
  • ▸Hybrid cloud combines on-premises and public cloud — not two public clouds.
  • ▸Cloud does not automatically mean cheaper or more secure.
  • ▸Management responsibility shifts with each service model (IaaS → PaaS → SaaS).

Practice set

Cloud Native Architecture questions

20 questions · select your answer, then reveal the explanation

Question 1easymultiple choice
Read the full Cloud Native Architecture explanation →

Your development team has built a serverless application consisting of multiple OCI Functions. They want to orchestrate these functions into a coherent, server-side workflow that handles parallel execution, error retries, and branching logic. Which OCI service should you use?

Question 2easymultiple choice
Read the full Cloud Native Architecture explanation →

You need to secure your OCI API Gateway deployment by ensuring that only authenticated requests containing a valid JSON Web Token (JWT) issued by an identity provider can access your backend microservices. Which API Gateway feature should you implement?

Question 3mediummultiple choice
Study the full Python automation breakdown →

Your serverless OCI Function written in Python is failing to process payloads because it exceeds the default execution timeout limit when calling a third-party REST API. How should you resolve this issue while adhering to best practices?

Question 4hardmultiple choice
Read the full Cloud Native Architecture explanation →

You are designing an event-driven architecture on OCI where events from Object Storage bucket creations need to trigger an OCI Function. However, you require guaranteed at-least-once delivery, event filtering based on object name prefixes, and a dead-letter queue mechanism for failed function invocations. Which OCI service combination meets these requirements?

Question 5easymultiple choice
Read the full Cloud Native Architecture explanation →

You have deployed an OCI Function and want to test its HTTP trigger endpoint without writing custom client code. Which OCI service or feature should you use to invoke the function directly via an HTTP URL?

Question 6mediummultiple choice
Read the full Cloud Native Architecture explanation →

Your containerized microservices running on OKE need to securely connect to an Oracle Autonomous Database without embedding plain-text database credentials inside Kubernetes Secrets. Which OCI feature integrates OKE service accounts with OCI IAM to provide secure, credential-less access?

Question 7mediummultiple choice
Read the full Cloud Native Architecture explanation →

Your OKE cluster is running microservices that require rapid horizontal scaling based on custom application metrics (such as active queue length) rather than standard CPU or memory utilization. Which Kubernetes component should you deploy to achieve this?

Question 8hardmultiple choice
Read the full Cloud Native Architecture explanation →

You are building a high-throughput event-processing pipeline where multiple consumer instances need to read messages from an OCI Stream concurrently. Each consumer instance must maintain its own independent cursor position and process every message in the stream without interfering with other consumer instances. How should you configure your consumers?

Question 9easymultiple choice
Review the full routing breakdown →

You are deploying a microservices application on Oracle Cloud Infrastructure Container Engine for Kubernetes (OKE). You need to expose multiple internal services externally using a single public IP address and enforce URL path-based routing. Which OCI networking and container component should you use?

Question 10mediummultiple choice
Review the full routing breakdown →

You are managing an OKE cluster where developer teams frequently deploy new microservice versions. You need to implement a canary deployment strategy where 10% of production traffic is automatically routed to the new version while 90% goes to the stable version, without rewriting your application code. Which tool or pattern should you use?

Question 11easymultiple choice
Read the full Cloud Native Architecture explanation →

Your development team needs to build and push container images to a secure, private registry hosted on OCI before deploying them to OKE. Which OCI service should they use?

Question 12hardmultiple choice
Read the full Cloud Native Architecture explanation →

An OCI Function in your serverless architecture needs to process large files (up to 5GB) uploaded to an OCI Object Storage bucket. Due to ephemeral storage limits inside the function container (/tmp), the function crashes when attempting to download the entire file locally. How should you redesign this function processing flow?

Question 13easymultiple choice
Read the full Cloud Native Architecture explanation →

You need to store sensitive configuration data, such as database connection strings and API keys, for your OCI Functions application. Where should you securely store these values so they can be injected as environment variables or retrieved securely?

Question 14hardmultiple choice
Read the full Cloud Native Architecture explanation →

You are designing a multi-tenant microservices platform on OKE. You need to ensure that tenant workloads are strictly isolated at the kernel level, preventing potential container breakout vulnerabilities from affecting other tenants. Which OCI Container Engine for Kubernetes node configuration should you choose?

Question 15mediummultiple choice
Review the full routing breakdown →

You are configuring an OCI API Gateway deployment to route requests to backend microservices running on OKE. You need to ensure that if a backend microservice takes longer than 3 seconds to respond, the API Gateway cancels the request and returns a 504 Gateway Timeout error to the client. Where should you configure this timeout?

Question 16easymultiple choice
Read the full Cloud Native Architecture explanation →

You are using Fn Project CLI to deploy an OCI Function. Which command is used to build, push, and deploy the function to your application in OCI in a single streamlined step?

Question 17hardmultiple choice
Read the full Cloud Native Architecture explanation →

Your microservices architecture on OKE uses mTLS (Mutual TLS) for secure pod-to-pod communication. You notice that certificate rotation is causing intermittent connection drops because pods are not reloading the new certificates without a restart. Which OCI Service Mesh feature automatically manages certificate issuance and rotation without requiring pod restarts?

Question 18mediummultiple choice
Read the full Cloud Native Architecture explanation →

Your OKE cluster has multiple worker node pools. You want to ensure that a specific set of resource-intensive machine learning microservices pods are scheduled *only* on dedicated GPU worker nodes, preventing them from running on standard CPU worker nodes. Which Kubernetes feature should you apply to your pods and node pools?

Question 19hardmultiple choice
Read the full Cloud Native Architecture explanation →

You are implementing distributed tracing across multiple microservices running on OKE. You need to capture trace data from incoming API Gateway requests, through service mesh sidecars, down to the application pods, and export it to an open-standards tracing backend. Which architectural components should you configure?

Question 20easymultiple choice
Read the full Cloud Native Architecture explanation →

You need to automate the build, test, and deployment phases of your microservices application whenever developers push code changes to a Git repository on OCI. Which OCI service provides native CI/CD pipelines?

Continue with 20-question session →

Free account

Track your progress over time

Create a free account to save your results and see which topics improve across sessions.

Sign up freeLog in

Focused Cloud Native Architecture sessions

Start a Cloud Native Architecture only practice session

Every question in these sessions is drawn from the Cloud Native Architecture domain — nothing else.

10 questions20 questions30 questions50 questions
Browse all Cloud Native Architecture questions →Mixed 1Z0-997-26 session

Related practice questions

Related 1Z0-997-26 topic practice pages

Move into related areas when this topic feels solid.

Cloud Native Architecture practice questions

Practise 1Z0-997-26 questions linked to Cloud Native Architecture.

Multicloud And Hybrid practice questions

Targeted 1Z0-997-26 practice covering Multicloud And Hybrid.

Observability practice questions

Observability practice questions for 1Z0-997-26.

High Availability And Disaster Recovery practice questions

Work through 1Z0-997-26 questions on High Availability And Disaster Recovery.

Databases practice questions

Targeted 1Z0-997-26 practice covering Databases.

Workload Migration practice questions

Targeted 1Z0-997-26 practice covering Workload Migration.

Security practice questions

Work through 1Z0-997-26 questions on Security.

1Z0-997-26 fundamentals practice questions

1Z0-997-26 fundamentals practice questions for 1Z0-997-26.

1Z0-997-26 scenario practice questions

1Z0-997-26 scenario practice questions for 1Z0-997-26.

1Z0-997-26 troubleshooting practice questions

Practise 1Z0-997-26 questions linked to 1Z0-997-26 troubleshooting.

Frequently asked questions

What does the 1Z0-997-26 exam test about Cloud Native Architecture?
Cloud concepts questions usually test the service model (IaaS/PaaS/SaaS) and deployment model (public/private/hybrid/community) appropriate for a given scenario.
How should I use these practice questions?
Select your answer before revealing the explanation. Then read why each option is right or wrong — this active recall approach builds retention far faster than re-reading notes.
Can I practise just Cloud Native Architecture questions in a focused session?
Yes — the session launcher on this page draws every question from the Cloud Native Architecture domain. Use a 10-question session first to gauge your baseline, then move to 20 or 30 once the weak spots are clear.
Where can I practise other 1Z0-997-26 topics?
Use the topic links above to move to related areas, or go back to the 1Z0-997-26 question bank to see all topics.
Are these real exam questions or dumps?
These are original practice questions written to test the same concepts the 1Z0-997-26 exam covers. They are not copied from any real exam or dump site.