Courseiva

CCNA Compute Questions

75 of 84 questions · Page 1/2 · Compute · Answers revealed

Practice these questionsDomain overviewAll questions
1
MCQmedium

You have an OCI compute instance configured with an autoscaling policy. The autoscaling configuration scales out your instance pool by 2 instances when CPU exceeds 75%. You notice that during a traffic surge, the pool scales out, but shortly after, it scales right back in, causing flapping. How can you prevent this behavior?

A.Increase the autoscaling cooldown period.
B.Disable instance health checks entirely.
C.Decrease the instance pool maximum limit to 1.
D.Change the VCN route table timeout.
AnswerA

A longer cooldown period prevents rapid oscillation (flapping) between scale-out and scale-in events.

Why this answer

Configuring an appropriate cooldown period (step delay) ensures that autoscaling waits a specified duration after a scaling event before evaluating metrics again.

Practice this question →
2
MCQhard

You have an instance pool with 5 instances. You update the associated instance configuration with a new custom image containing security patches. How do you apply this new configuration to the existing instances in the pool?

A.Delete the instance pool and create a completely new pool, as instance configurations cannot be updated once linked.
B.Use the instance pool update action to trigger a rolling update or instance replacement with the new configuration.
C.Reboot each instance individually via the OS command line.
D.Attach the new custom image directly as a secondary boot volume to all running instances.
AnswerB

Instance pools support updating instances to match a new instance configuration via rolling replacement actions.

Why this answer

To update existing instances in an instance pool with a new instance configuration, you must perform a rolling update or recreate the instances in the pool using the instance pool rollout/update action.

Practice this question →
3
MCQeasy

Which OCI service feature enables you to run software containers without provisioning virtual machines or managing Kubernetes clusters, offering simple container execution?

A.Container Instances
B.Bare Metal Compute
C.Dedicated VM Hosts
D.Instance Pools
AnswerA

Container Instances run containers directly without server management.

Why this answer

OCI Container Instances provide serverless execution for containers without requiring VMs or Kubernetes clusters.

Practice this question →
4
MCQeasy

Which type of compute shape provides the lowest cost per core for general-purpose workloads by utilizing ARM-based Ampere processors?

A.VM.Standard.A1.Flex
B.VM.Standard.E4.Flex
C.BM.DenseIO2.52
D.VM.Standard3.Flex
AnswerA

Ampere A1 shapes use ARM processors, providing high core counts and cost efficiency.

Why this answer

OCI Ampere A1 Compute shapes (VM.Standard.A1.Flex) use ARM processors and offer high power efficiency and cost-effectiveness for scale-out workloads.

Practice this question →
5
Multi-Selectmedium

Which TWO of the following tasks can be performed using the Oracle Cloud Agent on compute instances? (Choose two.)

Select 2 answers
A.Modifying DNS records in external third-party domain registrars
B.Executing remote script commands via Run Command service
C.Configuring VCN security list packet filtering rules
D.Collecting detailed performance monitoring metrics
E.Managing physical data center hardware maintenance and rack replacements
AnswersB, D

Run Command plugin allows executing scripts on instances securely without SSH.

Why this answer

Oracle Cloud Agent enables plugins for collecting monitoring metrics, executing run commands remotely, and managing OS compliance and patching.

Practice this question →
6
MCQmedium

You need to grant an OCI Function permission to read objects from an OCI Object Storage bucket. How should you configure this securely?

A.Make the Object Storage bucket completely public so any function can read from it without authentication.
B.Create a dynamic group for the functions and write an IAM policy granting the dynamic group read access to the bucket.
C.Embed the tenancy administrator API signing key directly in the function's source code.
D.Attach a user credential to the function environment variables.
AnswerB

Dynamic groups and IAM policies provide secure, credential-less resource-to-resource authentication in OCI.

Why this answer

To allow OCI Functions or other services to access other OCI resources securely, you create a dynamic group containing the function(s) and write an IAM policy granting that dynamic group permissions to access the target resource.

Practice this question →
7
Multi-Selectmedium

Which TWO actions should you take to troubleshoot an OCI compute instance that has become completely unresponsive and unreachable over SSH? (Choose two.)

Select 2 answers
A.Delete the VCN and recreate all networking subnets.
B.Log into the physical data center and connect a physical keyboard to the server rack.
C.Reinstall the OCI tenancy IAM security policies.
D.Access the instance via the Serial Console connection to inspect system logs and kernel messages.
E.Check OCI Monitoring metrics to determine if CPU, memory, or network utilization caused a bottleneck or crash.
AnswersD, E

Serial console provides direct text access to troubleshoot unresponsive systems.

Why this answer

When an instance is unreachable over SSH, you can use the Serial Console to view boot logs and interactive terminal prompts, or check instance metrics in OCI Monitoring.

Practice this question →
8
MCQmedium

You are managing a Kubernetes cluster on OCI (OKE) and need to upgrade the Kubernetes control plane version. What happens to the existing worker nodes when you perform a control plane upgrade?

A.The cluster becomes completely inaccessible, and all pods are evicted permanently.
B.Control plane upgrades are blocked until all worker nodes are upgraded first.
C.All worker nodes are automatically terminated and recreated with the new version.
D.Worker nodes continue to run workloads, but you must manually or via node pool upgrades bring them to the matching version.
AnswerD

Control plane and worker node upgrades are decoupled in OKE; worker nodes must be upgraded separately.

Why this answer

When you upgrade the control plane in OKE, the worker nodes continue running workloads normally, but they should eventually be upgraded to remain within supported version skew limits.

Practice this question →
9
MCQeasy

What is the primary benefit of using OCI Container Instances compared to managing containers on OCI Container Engine for Kubernetes (OKE)?

A.Container Instances offer lower pricing for long-running enterprise microservices than OKE.
B.Container Instances allow direct access to bare metal hypervisors.
C.Container Instances support multi-cluster service meshes and advanced ingress controllers.
D.Container Instances allow you to run containers directly without managing servers, clusters, or orchestrators.
AnswerD

Container Instances provide serverless execution for containers, removing infrastructure management overhead.

Why this answer

OCI Container Instances are serverless container execution environments that allow you to run containers instantly without having to provision, manage, or scale underlying virtual machines or Kubernetes control planes.

Practice this question →
10
Multi-Selecthard

Which THREE actions should you take when preparing a custom Linux VM image for export and import across OCI tenancies or regions? (Choose three.)

Select 3 answers
A.Embed tenancy administrator API signing keys in plaintext within `/etc/passwd`.
B.Remove persistent network interface rules (such as udev network interface mapping rules).
C.Format all root partitions using proprietary Windows NTFS file systems.
D.Ensure cloud-init is installed and properly configured to handle first-boot initialization.
E.Verify that the image format is either QCOW2 or RAW before exporting to Object Storage.
AnswersB, D, E

Removing persistent network rules prevents interface naming conflicts when launched on new hardware.

Why this answer

When preparing custom images for export/import, you must ensure cloud-init is installed and configured, clean up persistent network rules (like udev rules), and ensure the image is in a supported format (QCOW2 or RAW).

Practice this question →
11
MCQhard

You are deploying a Container Engine for Kubernetes (OKE) cluster and want to ensure that worker nodes are distributed across separate physical hardware infrastructures to maximize fault tolerance. Which feature should you configure during cluster creation?

A.Node Pool Fault Domains
B.VCN Route Tables
C.Kubernetes Horizontal Pod Autoscaler
D.Pod Security Policies
AnswerA

Configuring node pools across multiple fault domains ensures node distribution on separate physical hardware.

Why this answer

Fault domains ensure that instances are distributed across physical hardware that has independent power and top-of-rack switches. OKE supports specifying fault domains or availability domains for node pools.

Practice this question →
12
Multi-Selecthard

Which THREE components are required when setting up OCI Functions to build, push, and deploy a serverless function? (Choose three.)

Select 3 answers
A.An active File Storage Service mount target attached directly to the function registry
B.A dedicated Bare Metal compute instance running Kubernetes master nodes
C.The Fn Project CLI tool installed on your machine or cloud shell
D.An OCI Functions Application acting as a logical grouping
E.An Oracle Container Registry (OCIR) repository to store container images
AnswersC, D, E

The fn CLI is used to initialize, build, and deploy functions.

Why this answer

To deploy OCI Functions, you need an Application container, an Oracle Container Registry (OCIR) repository to store function images, and the Fn CLI tool to build and deploy.

Practice this question →
13
MCQmedium

You are managing an OKE cluster and need to inspect application container logs that are written to stdout/stderr by pods running on worker nodes. What is the standard kubectl command to view these logs?

A.kubectl get events
B.kubectl logs <pod-name>
C.kubectl describe pod
D.oci compute instance list-logs
AnswerB

`kubectl logs` streams or prints stdout/stderr from container pods.

Why this answer

`kubectl logs <pod-name>` is the standard command to retrieve container logs from stdout/stderr in a Kubernetes cluster.

Practice this question →
14
MCQhard

You are managing a large OKE cluster and notice that pods are failing to schedule because the worker nodes have run out of ephemeral storage. What is the most robust architectural solution to address this?

A.Change the VCN MTU size from 9000 to 1500.
B.Attach a Block Volume to the Kubernetes control plane nodes.
C.Restart the Kubernetes API server.
D.Increase the size of the worker node boot volumes in the node pool configuration or add node pools with larger boot volumes.
AnswerD

Kubernetes ephemeral storage writes to the node's root filesystem (boot volume). Increasing boot volume size provides more ephemeral storage space.

Why this answer

Ephemeral storage on OKE nodes is tied to the boot volume or local storage. To fix ephemeral storage exhaustion, you can resize the worker node boot volumes, add node pools with larger boot volumes, or configure emptyDir volumes to use specific storage mediums.

Practice this question →
15
Multi-Selectmedium

Which TWO of the following metrics are commonly used in OCI Autoscaling configurations for Instance Pools? (Choose two.)

Select 2 answers
A.VCN packet drop error rates
B.Memory utilization percentage
C.CPU utilization percentage
D.Object Storage bucket download count
E.Database transaction commit latency
AnswersB, C

Memory utilization is also supported as a threshold metric for autoscaling.

Why this answer

Autoscaling configurations for instance pools in OCI support CPU utilization and Memory utilization metrics.

Practice this question →
16
MCQhard

You are troubleshooting a custom OCI compute image that fails to boot properly after launching an instance. The instance gets stuck in a pre-boot state. Where can you view serial console logs to diagnose the low-level boot sequence and kernel panic messages?

A.Object Storage boot bucket logs
B.OCI Logging service via custom log agents
C.OCI Compute Instance Serial Console connection
D.OCI Monitoring service under instance metrics
AnswerC

Serial console connections provide direct text-based access to the instance's console output during boot.

Why this answer

OCI provides access to the serial console for compute instances, allowing administrators to view low-level kernel boot messages, GRUB menus, and interactive login prompts even if network access is down.

Practice this question →
17
MCQhard

You manage an instance pool backed by an autoscaling configuration. The pool reaches its maximum limit of 10 instances due to a traffic spike. A hardware maintenance event triggers a retirement notification for one of the instances in the pool. How does OCI Instance Pools with Autoscaling handle this retired instance?

A.The instance is terminated, and a new instance is provisioned to replace it, temporarily exceeding the maximum limit if necessary until scaling rules scale it back down.
B.The instance is terminated and not replaced because the pool is already at its maximum limit.
C.The instance is replaced automatically by the instance pool to maintain the operational state, managing lifecycle events independently of active autoscaling metrics.
D.The autoscaling configuration must be manually edited to increase the max limit before the instance can be replaced.
AnswerC

Instance pools manage the lifecycle of instances to ensure the target number of instances are operational, substituting retired instances seamlessly.

Why this answer

Instance pools automatically replace unhealthy or retired instances to maintain the desired capacity. If an instance is retired, the pool provisions a new instance to replace it, even if autoscaling has reached its maximum size, because minimum/desired capacity rules take precedence over instance retirement recovery.

Practice this question →
18
MCQmedium

You want to deploy an OCI Function and test it locally on your developer workstation before pushing it to Oracle Functions Registry. Which command in the fn CLI initializes a new function project template?

A.fn deploy --local
B.fn build local
C.fn create function
D.fn init
AnswerD

`fn init` creates a boilerplate function template in your local directory.

Why this answer

`fn init` initializes a new function boilerplate with runtime configuration and metadata files (like `func.yaml`).

Practice this question →
19
MCQmedium

You are deploying an application on OCI Functions. The function requires external Python packages that are not part of the standard library. How should you include these dependencies?

A.Install them manually via SSH on the function's underlying compute node after deployment.
B.Include the dependencies in the requirements.txt file within the function directory before building and deploying.
C.Upload the packages as objects to Object Storage and configure the function to download them at runtime.
D.Store them in an OCI Vault and reference them as environment variables.
AnswerB

Dependencies are packaged into the function container image during the build phase using dependency management files like requirements.txt.

Why this answer

When building OCI Functions, dependencies are included in the function's directory (e.g., in a `requirements.txt` file for Python) so that the `fn build` command packages them into the container image.

Practice this question →
20
MCQhard

You need to migrate a Windows Server boot volume containing sensitive application data across regions in OCI. What is the recommended and most secure sequence of steps?

A.Use the OCI Database Migration service to copy the operating system boot sectors.
B.Detach the boot volume, attach it to a secondary compute instance, and use rsync over a VCN remote peering connection.
C.Create a block volume backup, copy the backup directly to the destination region using the native backup copy feature, and restore it as a boot volume.
D.Create a custom image from the instance, export the image to an Object Storage bucket, copy the bucket to the target region, and import the image in the target region.
AnswerD

Custom images can be exported to Object Storage, copied across regions, and imported to provision instances in another region.

Why this answer

To move a boot volume or custom image across regions, you create a custom image from the boot volume, export it to an Object Storage bucket, copy the Object Storage bucket or export the custom image directly across regions, and then import it in the destination region.

Practice this question →
21
Multi-Selectmedium

Which TWO of the following statements are true regarding OCI Compute Flexible Shapes? (Choose two.)

Select 2 answers
A.Flexible shapes are only available for Bare Metal instances and cannot be used with Virtual Machines.
B.Flexible shapes support both AMD EPYC and Ampere ARM processor architectures.
C.Once a flexible compute instance is launched, its OCPU and memory allocations can never be modified.
D.You can independently adjust the number of OCPUs and the amount of memory when launching a flexible instance.
E.Flexible shapes require a fixed ratio of 8 GB of RAM per 1 OCPU.
AnswersB, D

Flexible VM shapes are offered in AMD EPYC (E3/E4/E5) and Ampere ARM (A1) variants.

Why this answer

Flexible shapes allow independent scaling of OCPUs and memory. They are available for both AMD and Ampere processor architectures across VM instances.

Practice this question →
22
MCQmedium

You want to create a custom gold image of a Linux compute instance containing specific security configurations and pre-installed agents. Which OCI feature should you use?

A.Block Volume Backup
B.Custom Image
C.Boot Volume Clone
D.Instance Configuration
AnswerB

Custom images let you create a template from an instance's boot volume for rapid provisioning.

Why this answer

Custom images allow you to capture the boot volume of an existing compute instance to deploy new instances with identical configurations.

Practice this question →
23
MCQeasy

What is the maximum number of Fault Domains typically available within a single OCI Availability Domain?

A.1
B.Unlimited
C.3
D.10
AnswerC

OCI Availability Domains contain three Fault Domains.

Why this answer

OCI Availability Domains are divided into three Fault Domains by default, providing anti-affinity for high availability across physical hardware within an AD.

Practice this question →
24
Multi-Selecthard

Which THREE methods or features are available in OCI to migrate an existing on-premises virtual machine into an OCI Compute instance? (Choose three.)

Select 3 answers
A.Exporting the boot volume as a QCOW2 or RAW formatted virtual disk file
B.Running `scp` from the on-premises hypervisor directly into the OCI hypervisor control plane
C.Uploading the exported disk image to Object Storage and importing it as a custom image
D.Directly plugging physical hard drives into OCI compute bare metal server USB ports
E.Using OCI Migration services or third-party orchestration tools compatible with OCI APIs
AnswersA, C, E

Supported image formats for import/export include QCOW2 and RAW.

Why this answer

Migrating on-premises VMs involves exporting disk images (QCOW2/RAW) to Object Storage and importing as custom images, using Oracle-provided migration tools, or utilizing OCI Full Stack Disaster Recovery / Migration services.

Practice this question →
25
Multi-Selecthard

Which THREE options are available when configuring health checks for an OCI Instance Pool to monitor instance health? (Choose three.)

Select 3 answers
A.Object Storage bucket upload speed health checks
B.Automatic database transaction replication health checks
C.Instance Health (monitoring infrastructure status and Oracle Cloud Agent)
D.Custom TCP health checks
E.Custom HTTP or HTTPS health checks
AnswersC, D, E

Instance health checks monitor underlying VM health and agent heartbeat.

Why this answer

Instance pools support multiple health check types, including Instance Health (checking hypervisor and agent status), Custom HTTP/HTTPS health checks, and Custom VNIC-based TCP health checks.

Practice this question →
26
MCQeasy

Which tool or command-line utility is primarily used to build, test, and push OCI Functions container images to the Oracle Functions Registry?

A.terraform
B.oci-cli
C.fn CLI
D.kubectl
AnswerC

The fn CLI is the tool used for building and deploying OCI Functions.

Why this answer

The Fn Project CLI is the open-source command-line tool used to develop, build, and deploy functions to OCI Functions.

Practice this question →
27
Multi-Selectmedium

Which TWO methods can be used to securely connect to a private OCI compute instance that does not have a public IP address? (Choose two.)

Select 2 answers
A.Accessing the instance via Object Storage pre-authenticated requests
B.OCI Bastion Service
C.A bastion host (jump server) deployed in a public subnet with SSH tunneling
D.Changing the instance subnet to public temporarily while debugging
E.Direct RDP or SSH over the Internet Gateway without any intermediate host
AnswersB, C

OCI Bastion provides secure, zero-public-IP access to private instances.

Why this answer

Private instances can be accessed securely using an OCI Bastion service session or by tunneling through a bastion host/jump box deployed in a public subnet.

Practice this question →
28
MCQhard

You are managing an OKE cluster and need to inspect the logs of the cluster control plane components (such as `kube-apiserver` and `kube-controller-manager`). Where are these logs sent by default in OCI?

A.To the OCI Logging Service under the OKE cluster log categories.
B.To a local file directory `/var/log/kubernetes/` on the worker nodes.
C.Control plane logs are permanently discarded for security reasons.
D.Directly to an Object Storage bucket without enabling any service configuration.
AnswerA

OCI Logging service captures control plane logs when enabled for the OKE cluster.

Why this answer

OKE integrates with OCI Logging service. Control plane logs (audit, API server, controller manager, scheduler) can be enabled and streamed directly to log groups in the OCI Logging service.

Practice this question →
29
MCQmedium

You have created an instance configuration from a running compute instance. You now want to use this instance configuration to create an instance pool. Which parameter must you specify during the creation of the instance pool?

A.The custom OS username and SSH password
B.The external DNS provider settings
C.The placement (subnets and availability domains/fault domains) and the number of instances
D.The new root password for the boot volumes
AnswerC

Instance pools require placement details (subnets and availability/fault domains) and the initial size of the pool.

Why this answer

When creating an instance pool from an instance configuration, you must specify the target availability domains or fault domains and the subnet(s) where the instances will be deployed, along with the desired number of instances.

Practice this question →
30
Multi-Selectmedium

Which TWO of the following statements regarding OCI Instance Configurations and Instance Pools are correct? (Choose two.)

Select 2 answers
A.Instance configurations can only be created from scratch using JSON templates, never from an existing running instance.
B.An instance configuration defines the blueprint (shape, image, metadata) used to provision instances in an instance pool.
C.Instance pools can only contain instances of different shapes and operating systems.
D.Autoscaling policies cannot be attached to instance pools.
E.Instance pools can be resized manually or scaled automatically using autoscaling rules.
AnswersB, E

Instance configurations serve as the template blueprint for instance pools.

Why this answer

Instance configurations act as templates for creating instance pools, and instance pools can be scaled manually or automatically via autoscaling configurations.

Practice this question →
31
MCQmedium

You are troubleshooting a function timeout in OCI Functions. You notice that the function takes 30 seconds to initialize database connections on every cold start. How can you optimize this initialization overhead?

A.Enable instance pool autoscaling on the function application.
B.Place the database connection initialization code outside the main function handler method so it executes during container warm start.
C.Increase the function memory allocation to 32 GB.
D.Migrate the function container to an OKE cluster DaemonSet.
AnswerB

Global scope initialization runs once when the container spins up (cold start) and is reused for subsequent invocations (warm starts).

Why this answer

To avoid connection overhead on every cold start, database connection pools or initialization logic can be placed outside the function handler method so that container warm starts reuse existing connections.

Practice this question →
32
Multi-Selecthard

Which THREE security best practices should be implemented when deploying and managing OCI Functions? (Choose three.)

Select 3 answers
A.Using dynamic groups and IAM policies to grant functions least-privilege access to other OCI resources
B.Attaching function applications to private subnets within a VCN when connecting to private backend services
C.Storing database credentials and API keys in OCI Vault rather than hardcoding them in source code
D.Hardcoding tenancy administrator credentials in environment variables for easy access
E.Disabling authentication on API Gateways triggering functions to allow open public access
AnswersA, B, C

Dynamic groups and IAM policies provide secure resource principals for functions.

Why this answer

Security best practices for functions include using dynamic groups and IAM policies for least-privilege resource access, storing sensitive strings in OCI Vault, and deploying functions in private subnets with VCN integration.

Practice this question →
33
MCQhard

You are designing a disaster recovery strategy for an OCI compute instance. You need to replicate boot volume backups to a secondary region. How should you accomplish this?

A.Configure a local peering gateway between the two regions' boot storage endpoints.
B.Boot volume backups cannot be copied across regions; you must recreate the instance manually.
C.Use the OCI Console or CLI to copy the boot volume backup to the destination region.
D.Attach the boot volume backup as an Object Storage bucket and sync via FTP.
AnswerC

Backups support native cross-region copying for disaster recovery.

Why this answer

Boot volume backups can be copied across regions using the cross-region copy feature in the OCI Console or CLI, allowing you to restore them as boot volumes in another region.

Practice this question →
34
Multi-Selecthard

Which THREE features are associated with OCI Dedicated Virtual Machine Hosts? (Choose three.)

Select 3 answers
A.Visibility into host-level resource capacity and placement control
B.Exclusive physical hardware tenancy isolation where no other tenants share the physical server
C.The ability to place multiple virtual machine instances across the dedicated physical host
D.Automatic multi-cloud replication across AWS and Azure physical datacenters
E.The ability to convert the dedicated host directly into a Kubernetes master node without OS reinstallation
AnswersA, B, C

Dedicated hosts provide visibility into available OCPUs and memory on the physical host.

Why this answer

Dedicated VM hosts provide physical hardware isolation, allow you to run multiple virtual machine instances on a single dedicated server, and give you visibility into host resource capacity.

Practice this question →
35
MCQhard

You are managing an OKE cluster and need to perform a major Kubernetes version upgrade. You want to minimize application downtime during the upgrade process of worker nodes. What feature should you configure on your node pools during upgrade?

A.Node pool rolling update settings with maxSurge and maxUnavailable configured
B.Pausing the Kubernetes API server while upgrading individual node kernels via SSH
C.Simultaneous termination of all worker nodes to force quick cluster recreation
D.Converting all worker nodes to serverless container instances
AnswerA

Configuring rolling update parameters ensures orderly replacement of nodes without interrupting workloads.

Why this answer

When upgrading OKE node pools, you can configure maximum surge and maximum unavailable parameters to perform rolling node upgrades with zero application downtime.

Practice this question →
36
MCQhard

You are running an application on an OKE cluster. You want to ensure that specific pods belonging to a high-priority database caching tier are never scheduled onto the same worker node as each other to avoid a single node failure taking down the entire cache tier. What Kubernetes feature should you configure?

A.Persistent Volume Claims
B.Kubernetes Network Policies
C.Horizontal Pod Autoscaler
D.Pod Anti-Affinity
AnswerD

Pod anti-affinity ensures that specific pods are dispersed across different worker nodes.

Why this answer

Kubernetes pod anti-affinity allows you to specify rules that prevent pods with matching labels from being scheduled on the same node, availability domain, or fault domain.

Practice this question →
37
MCQeasy

Which utility is used to authenticate and push custom container images built for OCI Functions to the Oracle Registry (OCIR)?

A.VCN Management Console
B.Terraform CLI
C.OCI Object Storage CLI
D.Docker CLI
AnswerD

Docker CLI is standard for tagging, logging into registries, and pushing container images.

Why this answer

Docker CLI (or podman) is used to log in to OCIR (`docker login iad.ocir.io`) using an auth token and push container images.

Practice this question →
38
MCQeasy

You need to run a dedicated compute instance where no other tenant's virtual instances can share the underlying physical hardware. Which OCI service or feature should you use?

A.Bare Metal Instances
B.Dedicated Virtual Machine Hosts
C.Instance Pools
D.Protected Compute Shapes
AnswerB

Dedicated VM hosts provide physical hardware isolation for your virtual machine instances.

Why this answer

Dedicated Virtual Machine Hosts provide physical servers dedicated solely to your organization, allowing you to run virtual machines on dedicated hardware.

Practice this question →
39
MCQeasy

Which OCI shape family is optimized for High-Performance Computing (HPC) workloads requiring high core counts and low-latency clustering?

A.Standard Micro Shapes
B.HPC Shapes
C.Burstable Instances
D.General Purpose Standard Shapes
AnswerB

HPC shapes provide high-performance computing capabilities and RDMA networking.

Why this answer

HPC shapes are engineered specifically for demanding computational workloads that require massive parallel processing and ultra-low latency.

Practice this question →
40
MCQeasy

A development team needs to deploy an application that requires exactly 6 OCPUs and 32 GB of memory. Which compute option best satisfies this requirement efficiently without wasting resources?

A.VM.Standard1.16
B.VM.Standard.E4.Flex configured with 6 OCPUs and 32 GB of RAM
C.BM.Standard.E3.128
D.VM.Standard2.8
AnswerB

Flexible shapes allow you to provision exact amounts of OCPUs and memory.

Why this answer

Flexible shapes allow you to independently configure OCPUs and memory to match exact workload requirements.

Practice this question →
41
Multi-Selectmedium

Which TWO of the following capabilities are provided by OCI Container Instances? (Choose two.)

Select 2 answers
A.Automatic multi-master control plane high availability clustering
B.Advanced Kubernetes DaemonSet and StatefulSet orchestration controllers
C.Serverless container execution without managing underlying virtual machines
D.Full administrative SSH access to the underlying hypervisor host
E.Support for attaching block storage volumes for persistent data
AnswersC, E

Container instances are fully managed and serverless.

Why this answer

OCI Container Instances allow you to run containers serverlessly without managing virtual machines, supporting both AMD and ARM architectures and attaching block storage.

Practice this question →
42
MCQhard

You need to run an OCI Function that connects to an Oracle Autonomous Database secured within a private subnet. How should you configure the function to access the database securely without exposing it to the public internet?

A.Attach the function application to a private subnet within your VCN using VCN configuration.
B.Use an API Gateway with a public endpoint and route database queries through HTTP headers.
C.Configure a public IP address on the function execution environment.
D.Functions cannot access private subnets; you must use an internet gateway.
AnswerA

Configuring the function application with VCN details allows functions to run inside your private subnet and reach private resources.

Why this answer

OCI Functions support VCN configuration, allowing you to attach a function application to a specific subnet within a VCN so that functions can access private resources like databases via private IP addresses.

Practice this question →
43
MCQmedium

You are setting up an autoscaling configuration for an instance pool. You want the pool to scale out when CPU utilization exceeds 80% and scale in when CPU utilization drops below 20%. What type of autoscaling policy should you create?

A.Event-driven autoscaling policy
B.Schedule-based autoscaling policy
C.Metric-based autoscaling policy
D.Manual capacity override policy
AnswerC

Metric-based autoscaling evaluates utilization metrics like CPU or memory to trigger scaling actions.

Why this answer

Metric-based autoscaling policies allow you to define rules based on metrics such as CPU or memory utilization to scale out or scale in instances automatically.

Practice this question →
44
MCQhard

Your OKE cluster has a node pool running in a private subnet. A developer needs to troubleshoot a running node via SSH, but direct external SSH access is disabled. What is the recommended secure way to access the node?

A.Use the OCI Bastion service or a bastion host in a public subnet to tunnel SSH traffic to the private worker node.
B.Temporarily attach a public IP address to the worker node and connect via SSH.
C.Modify the VCN security list to allow inbound SSH from 0.0.0.0/0 to the private subnet.
D.Run `kubectl exec` with privileged mode to gain root access to the underlying node's operating system.
AnswerA

Using a bastion service or host provides secure, controlled access to private instances without exposing them directly to the internet.

Why this answer

For private OKE worker nodes, you can access them by deploying a bastion host (or using OCI Bastion service) in a public subnet and tunneling your SSH connection through the bastion host to the private IP of the worker node.

Practice this question →
45
MCQhard

You are implementing automated disaster recovery for your OCI compute instances. You configure automated backups for boot volumes and block volumes using volume groups. What is the primary advantage of using Volume Groups for backups?

A.Volume groups ensure point-in-time, coordinated crash-consistent or application-consistent backups across multiple attached volumes.
B.Volume groups automatically replicate data across different cloud providers.
C.Volume groups convert block volumes into high-performance local NVMe storage.
D.Volume groups eliminate all storage costs associated with snapshots.
AnswerA

Volume groups coordinate backups across multiple volumes to maintain consistency for multi-disk applications.

Why this answer

Volume Groups allow you to group multiple boot and block volumes together and take crash-consistent or application-consistent point-in-time backups simultaneously across all volumes in the group.

Practice this question →
46
MCQmedium

You are migrating an on-premises virtual machine image in QCOW2 format to OCI. Before you can launch compute instances from this image in OCI, what must you do with the file?

A.Convert the file to an ISO and mount it using the OCI Console virtual console.
B.Upload the image to an Object Storage bucket and import it as a custom image.
C.Attach the QCOW2 file to a VCN subnet as a storage gateway resource.
D.Upload the QCOW2 file directly to a compute instance boot volume via SSH.
AnswerB

Importing an image from Object Storage creates a usable custom image in OCI.

Why this answer

Custom images in QCOW2 or RAW format must be uploaded to an OCI Object Storage bucket, and then imported as a custom image using the OCI Console or CLI.

Practice this question →
47
MCQhard

You are troubleshooting a container image pull failure in your OKE cluster. The error message indicates an authentication failure when trying to pull from the Oracle Container Registry (OCIR). What Kubernetes resource must be configured in your cluster namespace to allow pulling images from a private OCIR repository?

A.An OCI IAM Dynamic Group attached to the VCN security list.
B.A Persistent Volume Claim attached to the registry endpoint.
C.An API Gateway route rule with public auth bypass headers.
D.A Kubernetes Secret of type `dockerconfigjson` referenced via `imagePullSecrets` in the pod spec.
AnswerD

Docker registry secrets provide Kubernetes pods with credentials to authenticate against private registries like OCIR.

Why this answer

To pull images from private container registries like OCIR in Kubernetes, you must create an `imagePullSecrets` object referencing a Kubernetes Secret containing your OCIR auth credentials or auth token.

Practice this question →
48
MCQmedium

You are deploying a high-performance database workload on OCI that requires raw, low-latency NVMe drives for transaction logging. Which compute shape should you select?

A.BM.Standard3.64
B.VM.Standard.E4.Flex
C.BM.DenseIO2.52
D.BM.GPU3.8
AnswerC

Dense I/O bare metal shapes provide locally attached NVMe drives optimized for high-performance databases.

Why this answer

Bare Metal Dense I/O shapes include directly attached NVMe SSDs, providing extreme IOPS and low latency suitable for databases and transactional logs.

Practice this question →
49
MCQmedium

You need to resize the boot volume of an existing OCI Linux compute instance to provide more disk space for application logs. What is the correct sequence of actions?

A.Modify the boot volume size in the OCI Console, then use OS-level commands (such as `resizepart` and `xfs_growfs`) to extend the file system.
B.Terminate the instance, detach the boot volume, attach it to another instance, expand it, and reattach it.
C.Reboot the instance; OCI automatically detects the new size and extends the file system partitions automatically.
D.Create a new block volume, mount it as the root directory, and delete the old boot volume.
AnswerA

Resizing requires updating the volume size in the console and then extending the partition and file system inside the OS.

Why this answer

To expand a boot volume, you first update the boot volume size in the OCI Console, and then you must log in to the instance and extend the operating system partition and file system to recognize the new capacity.

Practice this question →
50
MCQeasy

Which OCI compute shape family is designed specifically for general-purpose workloads, balancing CPU, memory, and network resources?

A.Dense I/O Shapes
B.HPC Shapes
C.Standard Shapes
D.GPU Shapes
AnswerC

Standard shapes offer a balanced ratio of cores, memory, and network resources for general workloads.

Why this answer

Standard compute shapes are designed for general-purpose workloads such as web servers, application servers, and small databases.

Practice this question →
51
MCQhard

You are troubleshooting a performance issue on an OCI compute instance. You suspect that the instance is experiencing CPU throttling due to credits being exhausted. Which compute shape type are you most likely using?

A.HPC (High-Performance Computing) Shape
B.Standard AMD Flexible Shape with baseline OCPU performance enabled
C.Bare Metal Standard Shape
D.GPU Shape
AnswerB

Burstable instances use CPU credits to allow temporary bursting above baseline, which can lead to throttling if credits run out.

Why this answer

Burstable instances (such as VM.Standard.E3.Flex or VM.Standard.E4.Flex configured with baseline OCPU utilization or specific micro/standard burstable settings) use CPU credits. If credits are exhausted, performance is throttled to the baseline.

Practice this question →
52
Multi-Selecthard

Which THREE of the following features or actions are supported when managing OCI Custom Images? (Choose three.)

Select 3 answers
A.You can copy a custom image directly to another OCI region using native cross-region image copy features.
B.You can use a custom image as the boot source when creating an instance configuration for an instance pool.
C.Custom images automatically sync operating system patches from Oracle update servers daily.
D.You can export a custom image to an OCI Object Storage bucket.
E.You can directly mount and edit files inside a custom image using the OCI Console file manager.
AnswersA, B, D

OCI allows copying custom images across regions for multi-region deployments.

Why this answer

Custom images can be exported to Object Storage, copied across regions, and used to launch instances. However, they cannot be edited directly as files while inside the image repository.

Practice this question →
53
MCQhard

You are managing an OKE cluster and need to restrict network traffic so that pods in Namespace A cannot communicate with pods in Namespace B. What Kubernetes object should you configure?

A.Kubernetes Horizontal Pod Autoscalers
B.OCI VCN Security Lists
C.OCI API Gateway Access Rules
D.Kubernetes Network Policies
AnswerD

Network Policies enforce pod-level and namespace-level network isolation within the cluster.

Why this answer

Kubernetes NetworkPolicies allow you to define rules controlling network traffic flow between pods and namespaces based on labels and selectors.

Practice this question →
54
MCQhard

You are configuring an autoscaling policy for an instance pool. You choose a schedule-based policy to scale out the pool to 20 instances every Monday at 8:00 AM. What happens if an instance within the pool fails due to hardware degradation during the weekend when the pool size is set to 5?

A.The instance pool automatically replaces the failed instance immediately to maintain the current desired capacity of 5.
B.The failed instance is left in a failed state until Monday at 8:00 AM when the scheduled scaling event runs.
C.The autoscaling configuration disables itself due to a health check failure.
D.The entire instance pool is shut down to prevent data corruption.
AnswerA

Instance pools automatically replace unhealthy instances to maintain the current pool size.

Why this answer

Instance pools continuously monitor the health of instances. If an instance fails or is unhealthy, the instance pool automatically terminates it and provisions a replacement instance to maintain the desired capacity of the pool at that moment.

Practice this question →
55
MCQhard

You are designing a PCI-DSS compliant architecture on OCI. You need to ensure that all data stored on compute instance boot volumes and block volumes is encrypted using customer-managed encryption keys rather than Oracle-managed keys. Where should you configure these keys?

A.Via IAM user password policies.
B.Directly in the guest OS kernel encryption configuration files (`/etc/fstab`).
C.In OCI Vault (Key Management), assigning a master encryption key to the volumes during creation or update.
D.In the VCN Security List encryption settings.
AnswerC

OCI Vault enables customer-managed encryption keys (CMK) for boot and block volumes.

Why this answer

Customer-managed keys are managed in OCI Vault (Key Management Service - KMS), and you can assign a master encryption key to boot volumes and block volumes when provisioning them.

Practice this question →
56
MCQmedium

You have a fleet of compute instances running in a private subnet. You want to patch their operating systems regularly using OCI OS Management service without exposing them to the public internet. What must be configured in your VCN?

A.A NAT Gateway with public IP attachment
B.An Internet Gateway with security list ingress rules
C.A Service Gateway and a route table rule pointing traffic destined for Oracle Services to the Service Gateway
D.A Local Peering Gateway connected to Oracle's internal network
AnswerC

Service Gateways enable private access to Oracle services (such as OS Management) from private subnets.

Why this answer

To allow private instances to access Oracle services like OS Management or Object Storage without public internet access, you must configure a Service Gateway and a corresponding route table entry.

Practice this question →
57
MCQmedium

You are creating an instance configuration from an existing compute instance that has two secondary data block volumes attached in addition to its boot volume. What happens to the data block volumes when you use this instance configuration to create an instance pool?

A.The instance pool creation fails because secondary block volumes are prohibited in instance pools.
B.The block volumes become shared network file systems across all pool members simultaneously in read-write mode.
C.Identical copies of the block volumes are automatically created and attached to every new instance in the pool.
D.Secondary block volumes are excluded from the instance pool configuration template; instance pools manage compute instances and boot volumes.
AnswerD

Secondary block volume attachments are not part of standard instance pool creation templates.

Why this answer

Instance configurations capture the instance metadata, shape, image, and boot volume settings. However, secondary block volume attachments are typically not cloned or automatically attached as independent writable block volumes for every new instance in the pool unless explicitly defined or managed via shared storage like File Storage.

Practice this question →
58
Multi-Selectmedium

Which TWO of the following are valid trigger sources for OCI Functions? (Choose two.)

Select 3 answers
A.Direct attachment to VCN Internet Gateways without any intermediate services
B.OCI Events service reacting to resource state changes
C.Direct HTTP/HTTPS requests routed through an OCI API Gateway
D.Scheduled cron jobs running inside block volume snapshots
E.Direct invocation via OCI SDK or CLI
AnswersB, C, E

OCI Events can trigger functions upon resource lifecycle changes.

Why this answer

OCI Functions can be invoked via OCI Events (e.g. storage object creation), API Gateway HTTP requests, or directly via the OCI SDK/CLI.

Practice this question →
59
MCQmedium

You have an existing compute instance with a standard boot volume size of 47 GB. Your application requires 200 GB. You successfully increase the boot volume size to 200 GB in the OCI Console. However, when you run `df -h` inside the guest OS, it still shows 47 GB. What is the cause?

A.The guest OS partition and file system have not yet been resized to claim the expanded storage.
B.OCI does not support expanding boot volumes online; you must reboot the instance.
C.You must detach the boot volume and reattach it for the OS to notice the change.
D.Boot volumes have a hard cap of 50 GB unless converted to Block Volumes.
AnswerA

The OS file system must be extended after resizing the volume in the console.

Why this answer

While OCI resizes the physical storage block device at the hypervisor level, the guest operating system partition and file system must be manually or automatically extended to utilize the new space.

Practice this question →
60
MCQeasy

What is the minimum OCPU allocation required when configuring an OCI Ampere A1 Compute flexible shape (VM.Standard.A1.Flex)?

A.4 OCPUs
B.2 OCPUs
C.1 OCPU
D.8 OCPUs
AnswerC

Ampere A1 flexible shapes support starting from 1 OCPU.

Why this answer

Ampere A1 flexible shapes allow provisioning starting at 1 OCPU up to maximum limits depending on tenancy quotas.

Practice this question →
61
MCQmedium

You are managing an instance pool and want to ensure that instances are distributed evenly across multiple Availability Domains (ADs) in a multi-AD region to maximize high availability. How should you configure the instance pool placement?

A.Configure VCN route tables to load balance traffic across ADs.
B.Create separate instance pools for each AD and manually scale them.
C.Select multiple Availability Domains in the instance pool placement configuration.
D.Set the fault domain count to 10.
AnswerC

Specifying multiple ADs ensures the instance pool distributes instances across those ADs.

Why this answer

When creating an instance pool in a multi-AD region, you can specify multiple availability domains in the placement configuration, and OCI will distribute the instances across them.

Practice this question →
62
MCQeasy

Which OCI compute feature allows you to group multiple compute instances together into a low-latency, high-bandwidth physical placement group?

A.Dynamic Routing Groups
B.IAM Security Zones
C.Cluster Placement Groups
D.Autonomous Linux Pools
AnswerC

Cluster placement groups ensure instances are placed physically close together for low latency.

Why this answer

Cluster Placement Groups allow you to place compute instances in close physical proximity to each other to achieve low network latency and high-performance interconnects.

Practice this question →
63
MCQmedium

You want to automate the installation of packages and configuration scripts on newly launched compute instances without manual intervention. What OCI feature should you use?

A.Block Volume Attachment scripts
B.VCN Security List rules
C.IAM Instance Principals policy generator
D.Instance User Data (Cloud-init)
AnswerD

User data scripts are executed by cloud-init upon first boot to automate configuration.

Why this answer

Cloud-init (User Data) allows you to pass scripts or configuration directives when launching a compute instance to customize the OS upon first boot.

Practice this question →
64
MCQeasy

Which OCI service allows you to deploy and manage managed Kubernetes clusters without having to administer the underlying control plane nodes?

A.OCI Functions
B.Compute Instance Pools
C.Oracle Container Engine for Kubernetes (OKE)
D.Container Instances
AnswerC

OKE provides managed Kubernetes clusters where Oracle manages the control plane.

Why this answer

OCI Container Engine for Kubernetes (OKE) is a fully managed, scalable, and highly available service that you can use to deploy your containerized applications to the cloud.

Practice this question →
65
Multi-Selecthard

Which THREE factors should you consider when selecting an OCI Compute shape for an enterprise application? (Choose three.)

Select 3 answers
A.Specific workload requirements such as local NVMe storage, GPUs, or high-performance networking
B.The requirement that all compute instances must use public IP addresses by default
C.Whether the compute instance can be converted into an Autonomous Database instance
D.The availability of flexible shape configurations to precisely match CPU and memory needs
E.Processor architecture (Intel, AMD EPYC, or ARM Ampere)
AnswersA, D, E

Specialized workloads require Dense I/O, GPU, or HPC shape types.

Why this answer

When choosing a compute shape, consider processor architecture (AMD, Intel, ARM), workload requirements (GPU, HPC, Dense I/O, general purpose), and whether flexible sizing is needed for exact OCPU/RAM requirements.

Practice this question →
66
MCQmedium

Your serverless application built on OCI Functions needs to process events coming from OCI Object Storage when a new file is uploaded. What is the primary mechanism to trigger the function?

A.OCI Events Service
B.Direct polling of Object Storage buckets by the function container
C.Scheduled Cron Jobs in Compute
D.API Gateway direct integration
AnswerA

OCI Events captures changes in Object Storage and invokes the target OCI Function.

Why this answer

OCI Events service listens to resource state changes and can trigger an OCI Function when an object is created in Object Storage.

Practice this question →
67
MCQhard

You are running a stateful application inside an OKE cluster that requires persistent storage backed by OCI Block Volumes. When a pod is rescheduled to a different worker node due to a node failure, how does the Persistent Volume (PV) behave?

A.The OCI Block Volume CSI driver automatically detaches the volume from the old node and attaches it to the new worker node.
B.You must manually log into the OCI Console, detach the volume, and attach it to the new worker node.
C.The persistent volume is converted to Object Storage automatically.
D.The data is permanently lost because block volumes cannot move across worker nodes.
AnswerA

The CSI driver manages volume attachment lifecycle across nodes during pod rescheduling.

Why this answer

OCI Block Volume CSI (Container Storage Interface) driver dynamically detaches the block volume from the failed worker node and attaches it to the new worker node where the rescheduled pod is running, preserving data persistence.

Practice this question →
68
MCQmedium

You are planning to deploy a high-performance computing (HPC) cluster on OCI requiring extremely high packet per second (PPS) and ultra-low latency between compute nodes. Which feature must you utilize?

A.NAT Gateway with bandwidth throttling disabled
B.Cluster Networks with RDMA (Remote Direct Memory Access)
C.Public IP addresses on all compute nodes
D.OCI Local Peering Gateway
AnswerB

Cluster Networks provide RDMA networking for MPI-based HPC workloads requiring ultra-low latency.

Why this answer

OCI HPC and bare metal clusters support Cluster Networks with RDMA (Remote Direct Memory Access) over RoCE (RDMA over Converged Ethernet) for ultra-low latency and high throughput.

Practice this question →
69
Multi-Selectmedium

Which TWO of the following metrics or conditions can trigger an OCI Autoscaling event for an Instance Pool? (Choose two.)

Select 2 answers
A.CPU utilization crossing a specified threshold percentage
B.Object Storage bucket upload frequency
C.Database backup completion status
D.VCN route table modification events
E.A predefined schedule based on date and time
AnswersA, E

CPU threshold rules are standard metric-based scaling triggers.

Why this answer

Autoscaling configurations support metric-based triggers (CPU and memory) and schedule-based triggers (specific dates and times).

Practice this question →
70
Multi-Selectmedium

Which TWO of the following statements are true regarding OCI Compute Instance Maintenance and Events? (Choose two.)

Select 2 answers
A.Maintenance events cause permanent data loss on attached boot volumes.
B.Instance maintenance events can only be managed using Terraform scripts.
C.Customers have zero visibility into hardware retirement schedules and cannot take preemptive action.
D.OCI sends notifications when underlying infrastructure maintenance is scheduled for a compute instance.
E.For certain maintenance events, customers can choose to reboot the instance to apply maintenance early.
AnswersD, E

Maintenance events generate notifications via OCI Events and Console alerts.

Why this answer

OCI notifies customers of scheduled infrastructure maintenance and provides options such as rebooting or migrating instances before maintenance windows.

Practice this question →
71
MCQeasy

What is the primary function of the OCI Compute Instance Oracle Cloud Agent?

A.To route TCP/IP packets across VCN subnets at the hypervisor level.
B.To provide serverless execution environments for OCI Functions.
C.To manage Kubernetes cluster worker node lifecycles.
D.To perform plugin-based management tasks like monitoring, patching, and run commands on the instance.
AnswerD

Oracle Cloud Agent manages instance monitoring, OS management, and run commands.

Why this answer

Oracle Cloud Agent is a lightweight process that runs on instances to manage administrative tasks such as collecting monitoring metrics, executing run commands, and managing OS patches.

Practice this question →
72
MCQeasy

Which OCI service should you use if you want to store and manage custom VM disk images so that they can be deployed across multiple regions easily?

A.OCI Block Volume Backups
B.OCI Custom Images
C.OCI Object Storage Archival Tier
D.OCI File Storage Service
AnswerB

Custom Images store boot volume templates for cross-region compute deployments.

Why this answer

OCI Custom Images service allows you to store images and copy them across regions for compute deployments.

Practice this question →
73
MCQmedium

An autoscaling configuration is attached to your instance pool. You notice that instances are scaling out correctly based on CPU utilization, but you want to ensure that scaling events do not happen too frequently in response to brief traffic spikes. Which setting should you adjust?

A.The Instance Pool capacity limits
B.The Autoscaling Cooldown Period
C.The VCN DHCP Options timeout value
D.The Monitoring service metric polling interval
AnswerB

The cooldown period dictates how long the autoscaling mechanism waits before evaluating metrics for subsequent scaling actions.

Why this answer

Autoscaling configurations allow you to define a cooldown period (step delay) to prevent rapid scaling oscillations.

Practice this question →
74
MCQeasy

What is the primary purpose of OCI Compute Instance Launch Options?

A.To set up automatic IAM user credential rotation.
B.To schedule automated block volume backup retention policies.
C.To define DNS domain suffix forwarding rules for VCN resolvers.
D.To configure instance network virtualization, firmware type, and boot parameters.
AnswerD

Launch options control hypervisor-level settings like firmware and network paravirtualization.

Why this answer

Launch options allow you to customize settings such as network virtualization type, boot volume firmware (BIOS/UEFI), and secure boot when configuring a custom image or instance.

Practice this question →
75
MCQhard

You are deploying a microservices application on OKE and want to implement zero-downtime rolling deployments for your pods. Which Kubernetes deployment strategy and configuration parameter should you utilize?

A.RollingUpdate strategy with maxSurge and maxUnavailable configured
B.Horizontal Pod Autoscaler with metric-based CPU triggers
C.Static Pod assignment via node selectors
D.Recreate strategy with immediate termination of all old pods
AnswerA

RollingUpdate strategy gradually replaces old pods with new ones while ensuring availability via maxSurge and maxUnavailable settings.

Why this answer

Kubernetes deployments support `RollingUpdate` strategy with parameters like `maxSurge` and `maxUnavailable` to control how pods are replaced during updates without downtime.

Practice this question →
Page 1 of 2 · 84 questions totalNext →

Ready to test yourself?

Try a timed practice session using only Compute questions.

Start 20-question session