troubleshooting

What is the purpose of the 'Tags' feature in OCI resource management?

You have an OCI compute instance configured with an autoscaling policy. The autoscaling configuration scales out your instance pool by 2 instances when CPU exceeds 75%. You notice that during a traffic surge, the pool scales out, but shortly after, it scales right back in, causing flapping. How can you prevent this behavior?

You are troubleshooting a connection issue to an OCI Compute instance behind a public Load Balancer. The security list for the load balancer allows traffic on port 443, but clients receive a connection timeout. Upon checking the backend instances, you notice their security lists do not allow incoming traffic from the load balancer subnet. What is the best practice fix?

An administrator is managing an OCI File Storage Service file system and notices that storage consumption has grown significantly. They want to identify which directories and users are consuming the most space. How can this be accomplished?

What is the primary purpose of an OCI Virtual Cloud Network (VCN)?

Which TWO best practices should be followed when designing OCI IAM policies? (Choose two.)

You are setting up OCI Traffic Management Steering Policy with a Failover strategy. You have a primary endpoint in Ashburn and a secondary endpoint in Phoenix. If the primary endpoint fails, how does the steering policy handle incoming DNS queries?

An OCI architect is configuring a DRG to handle multiple VCN attachments. They want to ensure that VCN-1 can communicate with the on-premises network, but VCN-2 cannot. How should this be configured using DRG route tables?

Your company uses Compute instances deployed across various departments to access OCI Object Storage buckets. Instead of storing API keys on the instances, you decide to use Instance Principals. Which of the following components is NOT required to configure Instance Principals for this workflow?

Which THREE statements are true regarding Exadata Cloud Service architecture and capabilities? (Choose three.)

You have an instance pool with 5 instances. You update the associated instance configuration with a new custom image containing security patches. How do you apply this new configuration to the existing instances in the pool?

An administrator needs to write a policy that grants a group read-only access to all databases across the tenancy. Which resource type should be specified in the policy?

Which THREE storage options can be used with OCI Compute instances?

A media company stores millions of video files in an OCI Object Storage bucket. The files are accessed frequently for the first 30 days after upload, then rarely accessed but must remain immediately available for 90 days. After 90 days, the files are archived for compliance and can tolerate hours of retrieval latency. The storage administrator needs to minimize storage costs while meeting these access patterns. What should the administrator do?

Which THREE features are supported by OCI DNS Traffic Management Steering Policies?

Which THREE statements regarding OCI Network Security Groups (NSGs) vs Security Lists are correct?

You are deploying a new web application on OCI. The application experiences unpredictable traffic spikes, and you want to ensure that the compute instances automatically scale based on CPU utilization. You have created an instance pool with a minimum of 2 and maximum of 10 instances. Which OCI service or feature should you use to achieve automatic scaling?

An administrator wants to ensure that a compute instance in a private subnet can communicate with other compute instances in a peered VCN, but cannot initiate outbound connections to the internet. Which combination of components correctly satisfies this requirement?

Which TWO statements regarding OCI FastConnect virtual circuits are correct?

Which THREE actions occur or are required when migrating an OCI compartment containing resources to a new parent compartment? (Choose three.)

Which OCI service feature enables you to run software containers without provisioning virtual machines or managing Kubernetes clusters, offering simple container execution?

Which feature of Autonomous Database allows you to create a point-in-time read-only or read-write copy of your database instantly without duplicating all the underlying physical data blocks?

You are designing a cross-tenancy architecture where Tenancy A needs to allow a specific group from Tenancy B to manage Object Storage buckets in a specific compartment within Tenancy A. What mechanism must be established in Tenancy A to enable this?

Which TWO deployment options are available when provisioning an Oracle Autonomous Database? (Choose two.)

Which type of compute shape provides the lowest cost per core for general-purpose workloads by utilizing ARM-based Ampere processors?

An OCI customer has a VCN with CIDR 10.0.0.0/16. They have deployed a Kubernetes cluster (OKE) where worker nodes are placed in a private subnet. The cluster requires internal service discovery and pod-to-pod communication across different worker subnets. What is required in the subnet route table to support standard OKE cluster networking?

An enterprise architecture spans three VCNs in the same OCI region: VCN-Hub (10.0.0.0/16), VCN-Spoke1 (10.1.0.0/16), and VCN-Spoke2 (10.2.0.0/16). You attach all three VCNs to a single Dynamic Routing Gateway (DRG). You need to route traffic from Spoke1 to Spoke2 via the Hub VCN (service inspection model). Which DRG feature allows you to achieve this transit routing setup?

You are migrating a legacy application to OCI. The application relies heavily on multicast network traffic to synchronize state between backend nodes. Which OCI networking feature should you configure to support multicast?

Which TWO statements are true regarding OCI IP addresses and VNICs?

Which TWO actions should you take to troubleshoot an OCI compute instance that has become completely unresponsive and unreachable over SSH? (Choose two.)

You are managing a Kubernetes cluster on OCI (OKE) and need to upgrade the Kubernetes control plane version. What happens to the existing worker nodes when you perform a control plane upgrade?

Which TWO pieces of information are required when configuring an OCI IAM Identity Provider for SAML federation? (Choose two.)

What is the primary benefit of using OCI Container Instances compared to managing containers on OCI Container Engine for Kubernetes (OKE)?

Which THREE actions should you take when preparing a custom Linux VM image for export and import across OCI tenancies or regions? (Choose three.)

Which THREE components are required when setting up OCI Functions to build, push, and deploy a serverless function? (Choose three.)

Which TWO statements are true regarding the behavior of dynamic groups and instance principals? (Choose two.)

Which TWO networking services or features in OCI can be used to restrict incoming traffic to specific compute instances?

You are managing a large OKE cluster and notice that pods are failing to schedule because the worker nodes have run out of ephemeral storage. What is the most robust architectural solution to address this?

You are troubleshooting a custom OCI compute image that fails to boot properly after launching an instance. The instance gets stuck in a pre-boot state. Where can you view serial console logs to diagnose the low-level boot sequence and kernel panic messages?

Which THREE factors should you evaluate when determining whether to use an Oracle Base Database System versus Exadata Cloud Service?

You need to create a compute instance in OCI that requires a specific custom image. You have already imported the custom image into OCI. Which compute instance launch option allows you to select this custom image?

Which THREE attributes can be evaluated in an OCI dynamic group matching rule for compute instances? (Choose three.)

Which THREE things must be configured to use Logging Analytics?

You manage an instance pool backed by an autoscaling configuration. The pool reaches its maximum limit of 10 instances due to a traffic spike. A hardware maintenance event triggers a retirement notification for one of the instances in the pool. How does OCI Instance Pools with Autoscaling handle this retired instance?

What is the primary function of an OCI NAT Gateway?

Which service should you use to migrate physical data centers to OCI via physical hardware shipping?

An OCI administrator needs to ensure that infrequently accessed data stored in an Object Storage bucket automatically transitions to Archive Storage after 90 days to reduce costs. Which feature should the administrator configure?

What is the function of the OCI IAM 'inspect' verb?

You want to notify an external HTTP endpoint whenever an alarm fires. What should you do?

Your development team needs to access an Autonomous Transaction Processing (ATP) database instance securely over the internet. What artifact must be downloaded and distributed to clients to establish a secure, encrypted connection?

Your development team deployed a three-tier application in an OCI VCN. You need to restrict database instances so they only accept incoming traffic from specific application instances, regardless of which subnet the application instances reside in. Which OCI networking feature should you use?

Which TWO characteristics apply to the OCI File Storage Service (FSS)?

You want to deploy an OCI Function and test it locally on your developer workstation before pushing it to Oracle Functions Registry. Which command in the fn CLI initializes a new function project template?

Which TWO of the following are valid deployment models for Oracle Autonomous Database in OCI?

You are deploying an application on OCI Functions. The function requires external Python packages that are not part of the standard library. How should you include these dependencies?

Your security team has implemented a policy that restricts access to Object Storage to requests originating from a specific dynamic group. However, a developer test script fails with a 403 Forbidden error even though the script runs on an instance in that dynamic group. Upon inspecting audit logs, you find that the API call was made using user credentials rather than instance principals. Why did the authorization fail?

You are managing an OCI VCN and want to monitor all dropped packets due to security list violations across all subnets. Which OCI feature should you enable?

You are configuring security for an Oracle Base Database Service instance in a private subnet. Which OCI networking construct should you configure to allow the database to download software patches from Oracle Object Storage without traversing the public internet?

Which TWO of the following statements are true regarding OCI Compute Flexible Shapes? (Choose two.)

You are managing an Oracle Base Database Service DB system on OCI. The DB system hosts a production database, and you must configure Oracle Data Guard so the standby database can take over automatically with no data loss. The primary and standby must be in different availability domains of the same region, and you want to minimize manual intervention during a switchover. Which TWO configuration choices should you make? (Choose two.)

Which verb grants the most comprehensive set of permissions (inspect, read, use, and manage) on a given resource type in an OCI IAM policy?

Which TWO options are valid ways to organize resources in OCI? (Choose two.)

An administrator needs to back up a critical Oracle Database running on an OCI Block Volume. The database spans across three separate block volumes that must be backed up simultaneously to ensure crash consistency. What is the most efficient feature to use?

Which THREE statements regarding OCI NAT Gateway behavior are correct?

You want to create a custom gold image of a Linux compute instance containing specific security configurations and pre-installed agents. Which OCI feature should you use?

Which THREE components can be attached to an OCI Dynamic Routing Gateway (DRG version 2)?

Which service is best used to monitor a public-facing website endpoint for availability?

Which TWO of the following are valid ways to secure an Object Storage bucket?

You are using File Storage and want to mount it to an instance. What is the necessary network step?

Which THREE of the following are benefits of using OCI Object Storage?

An Oracle Cloud Infrastructure (OCI) architect needs to provision a web application that must be accessible directly from the public internet. Which component must be attached to the Virtual Cloud Network (VCN) to allow inbound traffic from the internet?

An administrator configured a Network Security Group (NSG) and a Security List for a compute instance in a subnet. The Security List denies port 443 inbound, but the NSG associated with the instance's primary VNIC explicitly allows port 443 inbound from any source. What will happen when external traffic attempts to access the instance on port 443?

When creating a volume backup, what is the 'Incremental' option?

You have an Oracle Exadata Database Service on Dedicated Infrastructure. You need to scale the storage server grid independently of the compute servers to accommodate a massive data ingestion project. How should you accomplish this?

Which TWO networking components are required when establishing an OCI Site-to-Site VPN connection using dynamic routing (BGP)?

You have deployed an OCI VCN with a CIDR of 192.168.0.0/16. You want to peer this VCN with another VCN that has a CIDR of 192.168.64.0/18. Will this local peering succeed?

Which THREE statements are true about OCI federation with SAML 2.0 Identity Providers? (Choose three.)

What is the maximum number of Fault Domains typically available within a single OCI Availability Domain?

Which THREE gateways can be attached to a Dynamic Routing Gateway (DRG) in OCI?

You are troubleshooting a web application where users are reporting intermittent connection failures when accessing your OCI Public Load Balancer. You check the load balancer metrics and notice that the `DroppedConnections` metric is spiking. What is the most likely cause?

Your OCI environment requires secure hybrid connectivity using an IPsec VPN over a Dynamic Routing Gateway (DRG). Which THREE parameters or components must be correctly configured to ensure successful IPsec VPN tunnel establishment?

You are configuring an Exadata Cloud Service (ExaCS) instance and need to ensure maximum isolation and security for your database infrastructure. Which architectural layer provides tenant isolation at the hypervisor level in ExaCS?

You need to ensure that a resource's cost can be tracked. What must you do after defining a tag?

An architect needs to perform a point-in-time recovery (PITR) on an Oracle Base Database Service DB system using the OCI Console. What is a prerequisite constraint when selecting a recovery timestamp?

Which THREE options are available when configuring health checks for an OCI Instance Pool to monitor instance health? (Choose three.)

An OCI architect configures a Hub-and-Spoke architecture using DRG version 2. Hub VCN contains security appliances. Spoke VCN-A needs to inspect all outbound internet traffic through the security appliances in the Hub VCN before it hits the Internet Gateway. How should the Spoke VCN route table be configured?

You are designing an OCI VCN and need to allow resources in a private subnet to access Oracle Cloud Infrastructure Object Storage in the same region without traversing the public internet. Which gateway should you create and configure?

An enterprise workload requires a fully managed Oracle Autonomous Data Warehouse with dedicated infrastructure to guarantee isolation from other tenants. Which deployment architecture should you select when provisioning this database?

You are configuring an OCI Load Balancer and want to redirect all incoming HTTP traffic on port 80 to HTTPS on port 443. How should you achieve this?

Which tool or command-line utility is primarily used to build, test, and push OCI Functions container images to the Oracle Functions Registry?

Which THREE aspects of a Terraform stack can you modify in a Resource Manager job?

An enterprise has multiple VCNs peered to a central hub VCN using a DRG. A security auditor notes that Vcn-A can communicate with Vcn-C because transit routing is enabled on the DRG. The security policy dictates that Vcn-A must never communicate with Vcn-C. How can you block this specific inter-VCN traffic while keeping other routes intact?

Your development team wants to automatically trigger a serverless function whenever a new object is uploaded to an OCI Object Storage bucket. Which OCI service acts as the foundational router to capture this object upload event and invoke the function?

Which TWO statements are true regarding OCI VCN subnets?

Which TWO methods can be used to securely connect to a private OCI compute instance that does not have a public IP address? (Choose two.)

An OCI administrator needs to be notified via email whenever CPU utilization on a critical production compute instance exceeds 90% for a sustained period of 5 minutes. Which combination of services should the administrator configure to achieve this?

Which type of storage is required for Boot Volumes?

You are migrating an on-premises Oracle database to an OCI Autonomous Database using Oracle Data Pump. Which wallet-related file must be downloaded and used by the client utility to establish a secure connection to the Autonomous Database?

Which type of Oracle Cloud Infrastructure Database service provides full access to Oracle Database features and root access to the underlying database operating system, while OCI manages the physical hardware and hypervisor?

An OCI administrator creates a subnet route table with a route rule pointing 0.0.0.0/0 to an Internet Gateway. However, compute instances in this subnet cannot reach the internet. Upon checking the instance details, you notice the instances have private IP addresses only and no public IP assigned. What is missing?

When configuring federation with an external Identity Provider (IdP) such as Microsoft Azure AD or Okta using SAML 2.0, which THREE tasks must be completed in Oracle Cloud Infrastructure? (Choose three.)

What is the primary function of OCI IAM federation?

You are configuring an OCI Public Load Balancer to distribute incoming HTTP traffic to backend compute instances. Which backend set configuration is required to verify the health of the instances?

You have created an instance configuration from a running compute instance. You now want to use this instance configuration to create an instance pool. Which parameter must you specify during the creation of the instance pool?

You need to restore an Oracle Base Database System to a specific point in time using incremental backups and archived redo logs. Which tool should you use at the OS level if you are managing the recovery manually?

You are setting up a File Storage mount target. What is required at the subnet level?

An application running on an OCI compute instance needs to share a POSIX-compliant file system concurrently across multiple compute instances residing in different subnets of the same VCN. Which storage service is best suited for this requirement?

What is the primary benefit of using Oracle Autonomous Database's autoscaling feature for CPU and storage?

Which TWO of the following statements regarding OCI Instance Configurations and Instance Pools are correct? (Choose two.)

Which OCI service acts as a centralized dashboard to view health status of all OCI services in your region?

What is the primary function of an OCI Internet Gateway?

Your organization has a requirement to allow users from a trusted partner company to authenticate to your OCI tenancy using Microsoft Entra ID (Azure AD) as the Identity Provider. Which component must be configured first in OCI before setting up the federation trust relationship?

When using File Storage Service, how do you restrict access to the file system to specific instances?

You are configuring a Site-to-Site VPN connection and need to test connectivity between an on-premises host and an OCI compute instance. The ping fails. You check the security lists and notice that ICMP traffic is blocked. Which rule type must you add to the security list to allow incoming ping requests?

Which Autonomous Database deployment model runs on dedicated Exadata infrastructure residing in a customer's OCI tenancy, providing maximum isolation?

Which TWO statements are correct regarding OCI Block Volume backups and clones?

What is the maximum number of Availability Domains (ADs) in a typical multi-AD OCI region?

What is the primary benefit of enabling 'Versioning' on an Object Storage bucket?

Which type of Oracle database deployment provides full administrative privileges (SYS and SYSTEM access) at the operating system and database level in OCI?

An administrator wants to ensure that users belonging to the 'Contractors' group can only access OCI resources during normal business hours (Monday through Friday, 9 AM to 5 PM). Which policy feature should be used?

What is the primary purpose of an OCI API signing key?

Your development team needs to perform automated regression testing against a production copy of an Autonomous Transaction Processing (ATP) database. Which feature allows you to create a point-in-time, space-efficient copy of the production database instantly?

Which TWO statements are true regarding OCI Storage Gateway? (Choose two.)

Which THREE actions are required to successfully set up an Alarm?

You are planning disaster recovery for an Exadata Database Service on Dedicated Infrastructure. You need to configure Oracle Active Data Guard with real-time apply. What unique capability does Active Data Guard provide over standard Data Guard?wirtschaft

Which THREE actions can be performed on compartments in OCI? (Choose three.)

Which TWO types of targets can be specified in an OCI VCN route table rule?

An administrator wishes to enable Autonomous Data Guard for an Autonomous Database on Dedicated Exadata Infrastructure. What is the primary benefit of enabling this feature?

How do you ensure data integrity for uploads to Object Storage?

You need to migrate a 10 TB Oracle Database from an on-premises data center to OCI Base Database Service with minimal downtime. Which migration tool leverages Oracle Data Guard to achieve near-zero downtime?

Which THREE features are core capabilities of the OCI Audit service? (Choose three.)

Which THREE security best practices should be implemented when deploying and managing OCI Functions? (Choose three.)

Which TWO characteristics distinguish Exadata Cloud Service (ExaCS) from standard Oracle Base Database Systems?

You are designing a disaster recovery strategy for an OCI compute instance. You need to replicate boot volume backups to a secondary region. How should you accomplish this?

Which OCI service is best suited for real-time monitoring of CPU and Memory utilization on a Compute instance?

Which TWO actions can be performed on an active OCI Block Volume without detaching it from the compute instance? (Choose two.)

You are using the Events service to trigger a Function. What is a required step before this can work?

Which THREE conditions can be evaluated using conditional clauses in OCI IAM policies? (Choose three.)

Which THREE statements regarding OCI VCN Route Tables are correct?

Which TWO of the following statements regarding OCI Network Security Groups (NSGs) are correct?

Which TWO actions can an OCI administrator perform on user accounts? (Choose two.)

What is the primary way to access an Object Storage bucket via a private endpoint?

Which TWO protocols are supported for OCI Site-to-Site VPN IPSec tunnels?

When provisioning an Oracle Base Database Service DB system, which storage management software is used underneath to provide high performance and reliable storage volumes?

What is required for a human user to authenticate programmatically against OCI using the CLI, SDKs, or API?

Which service is the best choice for storing thousands of small, frequently accessed image files?

Which THREE features are associated with OCI Dedicated Virtual Machine Hosts? (Choose three.)

You are troubleshooting a deployment failure in Resource Manager. Where can you see the detailed Terraform output logs?

What is the maximum number of Route Tables allowed per Virtual Cloud Network (VCN) in OCI?

Which tool provides a graphical way to manage Object Storage lifecycle policies?

You are scaling up an Oracle Base Database System (VM) to add more storage to your existing database data disk group (+DATA). What is the correct procedure in the OCI Console?

What is the primary purpose of OCI compartments?

A database administrator requires a Block Volume attached to an Oracle Linux compute instance to deliver ultra-high IOPS and throughput with minimal latency for a high-transaction workload. Which volume performance level should be selected?

You are configuring an OCI Public Load Balancer and notice that backend instances are marked as unhealthy. Upon inspecting the health check URL on the backend server via curl, it returns HTTP 200. What is the most likely reason the load balancer still reports them as unhealthy?

An OCI administrator creates a subnet and associates a security list with it. An instance in this subnet cannot connect to an external API on HTTPS (port 443). The security list has an ingress rule for port 443, but no egress rules defined. Why is the connection failing?

You are managing an OKE cluster and need to perform a major Kubernetes version upgrade. You want to minimize application downtime during the upgrade process of worker nodes. What feature should you configure on your node pools during upgrade?

Which THREE statements regarding OCI IPv6 implementation in VCNs are correct?

When designing a comprehensive tagging strategy in OCI, which THREE practices or features should you implement for effective governance and cost management? (Choose three.)

You are running an application on an OKE cluster. You want to ensure that specific pods belonging to a high-priority database caching tier are never scheduled onto the same worker node as each other to avoid a single node failure taking down the entire cache tier. What Kubernetes feature should you configure?

What is the primary purpose of OCI Object Storage?

An application requires an Oracle Autonomous Database that supports complex analytical queries, reporting, and high-throughput data warehousing workloads. Which workload type should you select during provisioning?

You are configuring an OCI DNS Traffic Management steering policy with a Load Balancer steering strategy. What is the primary behavior of this policy type?

An OCI customer has an architecture where VCN-A, VCN-B, and VCN-C are connected to a central DRG in a Hub-and-Spoke topology. VCN-A needs to communicate with VCN-B, but VCN-C must be completely isolated from VCN-A. How should the DRG route tables and attachments be configured?

You are managing an Oracle Base Database System and need to configure automated backups. By default, where does OCI store these automated backups?

Your development team needs instances residing in a private subnet to download software patches and updates from the Oracle Cloud Infrastructure (OCI) Object Storage service without exposing those instances to the public internet. Which gateway should you configure?

Which utility is used to authenticate and push custom container images built for OCI Functions to the Oracle Registry (OCIR)?

Which THREE configuration options are available when creating a new OCI Object Storage bucket? (Choose three.)

You are migrating a database that requires a consistent point-in-time snapshot of multiple volumes. What should you use?

An OCI customer has a VCN with CIDR 10.0.0.0/16 and wants to peer it with another VCN having CIDR 10.1.0.0/16. However, they also have an on-premises network connected via FastConnect using the CIDR 10.0.0.0/14. What routing challenge does this create?

You need to configure custom DNS resolution for instances within your OCI VCN so they can resolve hostnames of your on-premises datacenter servers. What should you configure in OCI?

An OCI customer has a primary database in Ashburn and a standby database in Phoenix. They need to replicate database traffic over a dedicated, highly secure private connection between the two regions. Which OCI networking architecture best achieves this requirement?

What is the maximum number of Internet Gateways allowed per Virtual Cloud Network (VCN) in OCI?

Which TWO types of tags are available in OCI?

You are using Storage Gateway to connect on-premises applications to OCI. How are file systems mapped?

Which OCI shape family is optimized for High-Performance Computing (HPC) workloads requiring high core counts and low-latency clustering?

A development team needs to deploy an application that requires exactly 6 OCPUs and 32 GB of memory. Which compute option best satisfies this requirement efficiently without wasting resources?

You are configuring a Data Guard association between a primary Oracle Base Database Service DB system and a standby DB system in a different availability domain. The primary database encounters a catastrophic failure. Which action must you perform to promote the standby database to primary using the OCI Console?

Which THREE options are available for creating a Resource Manager stack?

An administrator needs to grant a group of database administrators the ability to manage Autonomous Databases in a specific compartment named DevComp. Which policy syntax is the most secure and adheres to the principle of least privilege?

Which TWO protocols are supported for health checks by OCI Load Balancer backend sets?

Which THREE security features are enabled by default or configurable on an Oracle Autonomous Database? (Choose three.)

You need to be alerted only when the average CPU utilization of a cluster of instances exceeds 80% for 5 consecutive minutes. Which alarm feature achieves this?

You are designing a secure database architecture on OCI. Instances in a private subnet require outbound internet access to download operating system updates, but malicious actors must not be able to initiate inbound connections to these instances from the internet. Which component fulfills this requirement?

Which TWO statements regarding OCI VCN Local Peering are correct?

Which TWO statements are true about OCI IAM compartments? (Choose two.)

Which TWO of the following capabilities are provided by OCI Container Instances? (Choose two.)

You are configuring a site-to-site VPN connection in OCI. During the tunnel setup, your on-premises firewall administrator asks for the pre-shared key (PSK). Where is the PSK defined or generated in OCI?

When designing network security in OCI, you can use Security Lists and Network Security Groups (NSGs). Which TWO statements accurately compare or contrast them?

A database application requires high-performance block storage with low latency. Which Block Volume performance tier should you select?

Which TWO OCI resources are automatically tracked by the Audit service?

You are designing a secure web application architecture in OCI. You want to terminate TLS connections at the load balancer and inspect HTTP headers before routing traffic to backend web servers. Which OCI Load Balancer listener type should you configure?

You need to run an OCI Function that connects to an Oracle Autonomous Database secured within a private subnet. How should you configure the function to access the database securely without exposing it to the public internet?

Which service allows you to view the audit logs of all API calls made in your tenancy?

What happens if you delete a versioned object in Object Storage?

Which OCI service is responsible for managing users, groups, compartments, and policies?

Which TWO are common use cases for Archive Storage?

You are setting up an autoscaling configuration for an instance pool. You want the pool to scale out when CPU utilization exceeds 80% and scale in when CPU utilization drops below 20%. What type of autoscaling policy should you create?

Two VCNs (VCN-A and Vcn-B) reside in the same OCI region but in different compartments. You need to establish a low-latency, high-bandwidth connection between them using local VCN peering. Which component is NOT required for this setup?

An auditor needs to verify all IAM policies across your entire tenancy to ensure compliance. Which policy statement allows a user in the 'Auditors' group to read all policies in the tenancy root?

Your OKE cluster has a node pool running in a private subnet. A developer needs to troubleshoot a running node via SSH, but direct external SSH access is disabled. What is the recommended secure way to access the node?

Which database edition is required when provisioning an Oracle Base Database System if you want to use advanced features like Oracle Multitenant (up to 3 PDBs without extra cost), Data Guard, and In-Memory?

An OCI administrator needs to store large amounts of unstructured data that is accessed infrequently, but must be retained for compliance purposes for at least 5 years. Data retrieval times of up to 4 hours are acceptable. Which OCI Object Storage tier should be used?

An organization requires that all data uploaded to an Object Storage bucket must be automatically encrypted using a master encryption key managed by them in OCI Key Management (KMS), rather than Oracle-managed keys. How can this be enforced?

You are implementing automated disaster recovery for your OCI compute instances. You configure automated backups for boot volumes and block volumes using volume groups. What is the primary advantage of using Volume Groups for backups?

An administrator needs to create a new root compartment under the tenancy to separate billing and administrative resources for a newly acquired subsidiary. Where must the administrator perform this action in the Oracle Cloud Infrastructure Console?

A company has an OCI VCN with a hub-and-spoke topology. The hub VCN is connected to on-premises through a FastConnect virtual circuit and a DRG. Two spoke VCNs are attached to the same DRG using local peering. Instances in spoke VCN A can reach on-premises, but instances in spoke VCN B cannot reach on-premises even though the DRG attachment exists. Route tables in both spoke VCNs contain a default route to the DRG, and security rules allow all required traffic. What is the most likely cause?

Which TWO are true about cloning a block volume?

What is the primary function of an OCI dynamic group?

An administrator wants to create a point-in-time, space-efficient replica of an existing Block Volume within the same availability domain. Which feature should be used to achieve this instantly?

What is the primary purpose of an OCI Local Peering Gateway (LPG)?

You are migrating an on-premises virtual machine image in QCOW2 format to OCI. Before you can launch compute instances from this image in OCI, what must you do with the file?

You are using Service Connector Hub to move data from Logging to Object Storage. What is the primary benefit of this approach?

Which THREE tools or methods can be used to write and apply OCI IAM policies? (Choose three.)

Which TWO methods can be used to authenticate human users to the OCI Console? (Choose two.)

Which TWO actions can be performed on an OCI Autonomous Database to manage or alter its compute and storage configurations after initial provisioning? (Choose two.)

You are troubleshooting a container image pull failure in your OKE cluster. The error message indicates an authentication failure when trying to pull from the Oracle Container Registry (OCIR). What Kubernetes resource must be configured in your cluster namespace to allow pulling images from a private OCIR repository?

You are managing an Autonomous Database instance on shared infrastructure and need to restrict database access so that only clients connecting from a specific Corporate CIDR block (e.g., 192.168.10.0/24) can connect. How should you implement this?

Which TWO methods can be used to assign public IP addresses to OCI compute instances?

An architect is configuring an OCI Public Load Balancer to handle high volumes of incoming client traffic. Which THREE features or capabilities are supported by OCI Public Load Balancers?

Which TWO items are components of an OCI Alarm?

A security analyst must prove which user deleted a specific Object Storage bucket two weeks ago, including the source IP address and the exact request time. Which OCI service and action should the analyst use?

Which THREE of these are OCI storage services?

You need to perform a backup of a production Block Volume. What is the recommended strategy to ensure data consistency?

You are deploying a high-performance database workload on OCI that requires raw, low-latency NVMe drives for transaction logging. Which compute shape should you select?

Which THREE tools or methods can be used to load data into an Oracle Autonomous Database?

What happens to the resources inside a compartment when you delete the compartment itself?

You are setting up OCI DNS for a private domain `internal.corp`. You want instances within your VCN to query records in this private zone. What needs to be created and associated with the VCN?

An administrator wants to enforce strict access control based on resource metadata. They decide to use Tag-Based Access Control. Which of the following defines the correct prerequisite structure required before you can write a policy using tag values?

Which TWO methods can be used to transfer data from an on-premises data center into OCI Object Storage? (Choose two.)

You need to store infrequently accessed data in Oracle Cloud Infrastructure (OCI) with the lowest possible cost while maintaining data retrieval times within a few hours. Which storage tier should you choose?

Which THREE statements are true regarding OCI IAM groups? (Choose three.)

How can you ensure that data in an Object Storage bucket remains unchanged for a specific period?

Which OCI storage service is best suited for hosting shared configuration files and home directories for hundreds of Linux compute instances simultaneously using the NFSv3 protocol?

You want to use your own encryption keys for Object Storage. What feature should you use?

Which THREE actions can an administrator perform to secure user accounts in OCI IAM? (Choose three.)

Which THREE features are automatically managed by Oracle Autonomous Database without requiring manual DBA intervention?

Which TWO types of traffic can be routed through an OCI Service Gateway?

You are configuring a Public Load Balancer in OCI. You want to ensure that incoming traffic is encrypted using TLS 1.3. Where do you configure the SSL certificate and TLS protocol version?

You are designing an application that requires high availability across two Availability Domains (ADs). You want your OCI Public Load Balancer to span both ADs. Which configuration should you use?

Which TWO types of groups exist in OCI IAM? (Choose two.)

What is the scope of an OCI IAM policy by default when it is created in the root compartment (tenancy)?

You are troubleshooting a connection to a database instance in a private subnet. You need to verify if security list rules are blocking incoming traffic to port 1521. Which tool in OCI can you use to test reachability between an application instance and the database instance?

You need to resize the boot volume of an existing OCI Linux compute instance to provide more disk space for application logs. What is the correct sequence of actions?

Your security policy states that users must enable Multi-Factor Authentication (MFA) to access production compartments. How can you enforce MFA for specific users in OCI IAM?

Which OCI compute shape family is designed specifically for general-purpose workloads, balancing CPU, memory, and network resources?

Which TWO metrics are available for monitoring OCI Public Load Balancers in OCI Monitoring service?

A company uses OCI Resource Manager to manage its cloud infrastructure using Terraform. A developer has modified a Terraform configuration file locally and needs to preview the changes that Resource Manager will make to the cloud environment before actually applying them. Which Resource Manager job type should be executed?

What is the maximum number of VCNs allowed per region in an OCI tenancy by default (subject to service limits)?

A team is using OCI File Storage Service and needs to protect against accidental deletion of files by end users. Which feature should be implemented?

When provisioning an Autonomous Database, what parameter determines the initial compute and storage capacity allocated to the database, which can be scaled independently later?

What is the function of the OCI IAM 'read' verb compared to 'inspect'?

Which OCI service provides authoritative Domain Name System (DNS) management and allows you to host public and private DNS zones?

You have configured an Oracle Data Guard association between a primary Autonomous Database and a standby Autonomous Database. What happens to the standby database if the primary database experiences an unplanned regional outage?

An OCI customer has configured an IPSec VPN tunnel between their on-premises datacenter and an OCI DRG. The tunnel status in the OCI Console shows as 'DOWN'. The customer verifies that the public IP of the CPE is correct and internet connectivity works. What is the most likely cause of the tunnel being down?

You are troubleshooting a performance issue on an OCI compute instance. You suspect that the instance is experiencing CPU throttling due to credits being exhausted. Which compute shape type are you most likely using?

You are configuring a Lifecycle Policy for an Object Storage bucket. You want to automatically move objects older than 30 days to Archive Storage. What is the correct rule configuration?

Which THREE of the following features or actions are supported when managing OCI Custom Images? (Choose three.)

You manage an Autonomous Database instance and want to configure Auto-Scaling for storage. What is the behavior of storage auto-scaling when enabled?

What is the primary function of an OCI Dynamic Routing Gateway (DRG)?

Which THREE features are provided natively by Exadata Cloud Service to deliver high performance and high availability for Oracle databases? (Choose three.)

An OCI architect configures a DRG with transit routing, connecting VCN-A and Vcn-B to the DRG. Both VCNs need to communicate with the on-premises datacenter connected via FastConnect. However, VCN-A instances can reach on-premises, but Vcn-B cannot. What is the most likely misconfiguration in the DRG?

What is the main benefit of using a 'Clone' of a block volume?

You are managing an OKE cluster and need to restrict network traffic so that pods in Namespace A cannot communicate with pods in Namespace B. What Kubernetes object should you configure?

When connecting securely to an Autonomous Database instance, what file must be downloaded from the OCI Console and provided to your database client applications?

You are configuring identity federation with an enterprise SAML 2.0 Identity Provider. After mapping the external IdP groups to OCI IAM groups, users successfully log in via SSO but receive an authorization error (404/Not Authorized) when trying to view any resources. What is the most likely cause?

Which of the following describes an OCI user group?

You are configuring an autoscaling policy for an instance pool. You choose a schedule-based policy to scale out the pool to 20 instances every Monday at 8:00 AM. What happens if an instance within the pool fails due to hardware degradation during the weekend when the pool size is set to 5?

Which THREE characteristics of OCI Security Lists are correct?

You are managing a set of compute instances in OCI. You need to ensure that the instances can be moved to a different compartment without disrupting their operation. Which TWO statements are true regarding moving compute instances between compartments? (Choose two.)

You are designing a high availability architecture for a mission-critical Oracle Exadata Database Service. You need to ensure zero data loss and minimal downtime during planned hardware maintenance. Which Oracle feature should you leverage?

An administrator created a private subnet and attached a route table with a rule pointing 0.0.0.0/0 to a NAT Gateway. However, instances in this subnet cannot download OS updates from external public repositories. What should the administrator check first?

Which TWO statements are true regarding OCI IAM policy syntax scoping rules? (Choose two.)

You need to ingest custom application logs from multiple compute instances into OCI Logging. What is the correct sequence of components you must configure within OCI?

You are configuring an Oracle Autonomous Database on dedicated Exadata infrastructure. The database must be isolated at the network level so that application clients reach it only through a private endpoint inside a VCN, with no public internet exposure at all. Which configuration should you choose when provisioning the Autonomous Database?

You are designing a PCI-DSS compliant architecture on OCI. You need to ensure that all data stored on compute instance boot volumes and block volumes is encrypted using customer-managed encryption keys rather than Oracle-managed keys. Where should you configure these keys?

You have a fleet of compute instances running in a private subnet. You want to patch their operating systems regularly using OCI OS Management service without exposing them to the public internet. What must be configured in your VCN?

You are creating an instance configuration from an existing compute instance that has two secondary data block volumes attached in addition to its boot volume. What happens to the data block volumes when you use this instance configuration to create an instance pool?

An administrator needs to scale up CPU cores for an existing Oracle Autonomous Transaction Processing database without causing application downtime. Which feature of Autonomous Database allows this?

An administrator needs to grant read-only access to all Object Storage buckets within a specific compartment named 'DataLake'. Which policy statement accomplishes this?

Your organization wants to grant an external team of auditors read-only access to a specific compartment named FinanceAudits without creating individual IAM users for each auditor. You decide to use identity federation with a SAML 2.0-compliant Identity Provider (IdP). Which of the following steps is NOT required to achieve this?

What is the primary function of OCI Identity Domains?

You have an existing compute instance with a standard boot volume size of 47 GB. Your application requires 200 GB. You successfully increase the boot volume size to 200 GB in the OCI Console. However, when you run `df -h` inside the guest OS, it still shows 47 GB. What is the cause?

Which encryption method is used by default for all Object Storage buckets?

What is the minimum OCPU allocation required when configuring an OCI Ampere A1 Compute flexible shape (VM.Standard.A1.Flex)?

Which THREE features are supported by OCI Object Storage buckets?

An administrator is planning an Object Storage data archiving strategy. Which THREE characteristics apply to OCI Archive Storage? (Choose three.)

You are managing an instance pool and want to ensure that instances are distributed evenly across multiple Availability Domains (ADs) in a multi-AD region to maximize high availability. How should you configure the instance pool placement?

Which THREE features are provided by File Storage Service?

A network engineer is configuring a site-to-site IPSec VPN between an on-premises CPE and an OCI DRG. The engineer wants to ensure that the VPN connection is highly available and can survive a single CPE or tunnel failure. Which three components or configurations are required to achieve this? (Choose three.)

You are configuring an OCI Load Balancer and need to distribute incoming requests across backend servers based on the client's source IP address so that requests from the same client always go to the same backend server. Which load balancing policy should you choose?

What is the default retention period for audit logs in OCI?

You are planning IP address allocation for a multi-tier application in OCI. You create a VCN with CIDR 172.16.0.0/16. You need three subnets: web (100 hosts), app (200 hosts), and database (50 hosts). Which combination of subnet CIDRs is valid and non-overlapping?

You need to share a file system between multiple OCI Compute instances across different availability domains. Which service should you use?

Which OCI service is most appropriate for storing static website content?

An application running on OCI requires an Autonomous Transaction Processing (ATP) database with the ability to automatically scale compute resources up and down based on workload demand, without manual intervention. Which feature should you enable during or after database provisioning?

You are deploying a Public Load Balancer in OCI to distribute incoming web traffic across multiple backend compute instances in different availability domains. You notice that backend health checks are failing. Which component's configuration should you check first to ensure health check probes can reach the backend instances?

You have a web application behind an OCI Public Load Balancer. You want to restrict access so that only clients coming from a specific corporate external IP address range can access your application. Where should you configure this restriction?

You are deploying an Exadata Cloud Service instance and need to configure separate Virtual Machine clusters on the same Exadata rack. Which architectural feature enables this separation?

You are designing a Disaster Recovery architecture where VCN-1 in the Ashburn region needs to peer with VCN-2 in the Phoenix region. Which OCI networking construct is required to achieve this cross-region peering?

Which OCI compute feature allows you to group multiple compute instances together into a low-latency, high-bandwidth physical placement group?

You want to automate the installation of packages and configuration scripts on newly launched compute instances without manual intervention. What OCI feature should you use?

You have a large dataset in Object Storage that needs to be accessed by an on-premises server. What is the most efficient way to access this data via a local file interface?

You are setting up OCI DNS and want to configure a zone transfer (AXFR) from your on-premises DNS server to OCI Private DNS. Which feature enables secondary DNS functionality in OCI?

You have an OCI alarm that is stuck in the 'Firing' state. What is the most likely cause?

Which storage type offers the highest performance for random I/O operations?

Which THREE components are required when configuring an OCI FastConnect direct peering connection?

Which THREE services can be used as a destination for the Events service?

Which OCI service allows you to deploy and manage managed Kubernetes clusters without having to administer the underlying control plane nodes?

Which THREE factors should you consider when selecting an OCI Compute shape for an enterprise application? (Choose three.)

You are configuring Data Guard between two Exadata Cloud Service instances across different OCI regions. Which network component is mandatory to facilitate redo transport securely across regional boundaries?

Your organization uses Oracle Identity Cloud Service (IDCS) federated with OCI. You need to assign an existing IDCS group named 'NetworkAdmins' to manage Virtual Cloud Networks in OCI. What is the proper workflow to achieve this?

What is the primary purpose of an OCI Service Gateway?

When configuring an alarm, what does the 'suppression' feature do?

What is the maximum MTU (Maximum Transmission Unit) supported on standard OCI VCN virtual network interfaces (VNICs)?

You are troubleshooting a web application where users intermittently experience 504 Gateway Timeout errors when connecting via the OCI Public Load Balancer. What is the most common cause related to the load balancer or backend configuration?

Your serverless application built on OCI Functions needs to process events coming from OCI Object Storage when a new file is uploaded. What is the primary mechanism to trigger the function?

You are planning a Disaster Recovery strategy for an Oracle Base Database System using Oracle Data Guard on OCI. You need the standby database to be open in read-only mode for reporting queries while simultaneously applying redo data from the primary database. Which Data Guard mode should you configure?

Which THREE of the following are valid lifecycle policy actions?

What is the primary difference between a public subnet and a private subnet in an OCI Virtual Cloud Network?

Which TWO features are supported by OCI File Storage Service (FSS)? (Choose two.)

Which TWO methods can be used to connect your on-premises datacenter to an OCI Virtual Cloud Network?

You are running a stateful application inside an OKE cluster that requires persistent storage backed by OCI Block Volumes. When a pod is rescheduled to a different worker node due to a node failure, how does the Persistent Volume (PV) behave?

You are planning to deploy a high-performance computing (HPC) cluster on OCI requiring extremely high packet per second (PPS) and ultra-low latency between compute nodes. Which feature must you utilize?

Your organization requires that all database traffic originating from OCI subnets to Oracle Autonomous Database bypass the public internet and use private IP paths. You have configured a Service Gateway. What additional configuration is mandatory in the subnet route table?

Which TWO storage options are available when provisioning an Oracle Base Database System?

Which TWO of the following metrics or conditions can trigger an OCI Autoscaling event for an Instance Pool? (Choose two.)

Which TWO of the following statements are true regarding OCI Compute Instance Maintenance and Events? (Choose two.)

What is the primary function of the OCI Compute Instance Oracle Cloud Agent?

Which OCI service should you use if you want to store and manage custom VM disk images so that they can be deployed across multiple regions easily?

An Oracle Cloud Infrastructure (OCI) architect needs to configure a Virtual Cloud Network (VCN) with a public subnet and a private subnet. Which configuration is required for resources in the private subnet to reach the public internet through a NAT Gateway?

Which TWO tasks can an administrator perform when managing database homes in Oracle Base Database Service? (Choose two.)

You are troubleshooting a connectivity issue where an on-premises server is trying to reach an OCI compute instance via an IPsec VPN attached to a Dynamic Routing Gateway (DRG). The VPN tunnels are up, but traffic is dropped. Upon checking the VCN route table, you see a route pointing to the DRG, but the on-premises subnet CIDR is missing. What specific OCI construct must be updated to ensure return traffic from the VCN successfully routes back to the on-premises network?

An autoscaling configuration is attached to your instance pool. You notice that instances are scaling out correctly based on CPU utilization, but you want to ensure that scaling events do not happen too frequently in response to brief traffic spikes. Which setting should you adjust?

You are planning to restore an Oracle Base Database Service DB system from an object storage backup. Which backup types are supported by OCI for creating a new DB system?

An administrator wants to delegate compartment creation to a group of team leads named 'TeamLeads' without granting them full tenancy administrator privileges. Which policy statement achieves this?

Which TWO mechanisms are used by OCI Database backup services to ensure data consistency and integrity during backups of Oracle Base Database Systems?

You are designing an architecture where instances in a private subnet need to send log data to an OCI Logging analytics endpoint, but must not have access to the general public internet. Which service should you leverage?

Which TWO of the following can prevent a bucket from being deleted?

What is the primary purpose of OCI Compute Instance Launch Options?

What is the default replication method for Object Storage buckets?

Which TWO actions can be performed using OCI Resource Manager stacks? (Choose two.)

Which THREE components are required when configuring OCI VCN Remote Peering between two regions?

What is the main advantage of the OCI Block Volume performance tier selection?

You are deploying a microservices application on OKE and want to implement zero-downtime rolling deployments for your pods. Which Kubernetes deployment strategy and configuration parameter should you utilize?

Which THREE actions occur when you terminate an OCI compute instance? (Choose three.)

What is the primary function of an OCI IAM policy statement?

Which TWO components are involved when routing traffic from an OCI private subnet to an on-premises datacenter via FastConnect?

Which TWO default resource types are available in every new OCI tenancy? (Choose two.)

You are configuring a Site-to-Site VPN connection in OCI. Your on-premises firewall requires you to specify the Oracle VPN IP address and configure IPSec tunnel parameters. Where do you find the Oracle VPN public IP addresses in the OCI Console?

A platform team runs a compute cluster in a single OCI region. They need a dashboard that charts CPU utilization for every instance in a specific compartment and automatically includes new instances launched into that compartment next week, without anyone editing the widget later. Which OCI Monitoring feature should they use for the metric widget?

You are configuring an Object Storage bucket and want to ensure that if an object is accidentally overwritten or deleted, previous versions can still be retrieved. Which feature should you enable?

Which TWO of the following are valid Object Storage tiers in OCI?

Which OCI Object Storage feature enables users without an OCI account to securely download or upload a specific object via a generated URL with a defined expiration time?

Which TWO components are required to configure an OCI Site-to-Site VPN with redundant tunnels?

Which TWO resource types can be managed using OCI IAM policies? (Choose two.)

You are troubleshooting a slow-running query on an Exadata Cloud Service database. You suspect that smart scan is not being utilized by the storage cells. Which Exadata feature enables offloading SQL processing operations like filtering and projections directly to the storage servers?

Which OCI service provides a POSIX-compliant file system?

Which OCI networking component acts as a virtual firewall at the subnet level?

Which TWO editions of Oracle Database are generally available for provisioning when creating an Oracle Base Database System in OCI?

An administrator wants to allow a group of developers to view and manage Event Service rules and notifications. Which resource types should be used in the IAM policy?

Which THREE components are involved in OCI File Storage Service?

When creating an OCI Function application, you must select one or more subnets. What type of subnets should you choose if your function needs to call external public APIs over the internet?

Which THREE actions can you perform on a block volume?

You want to deploy a Windows compute instance in OCI using your own custom software pre-installed. What is the recommended workflow to achieve this?

Which file system protocol does OCI File Storage Service support?

You are managing an Oracle Base Database System (DB System) on OCI and need to minimize downtime during a planned operating system patching cycle. Which action should you perform to achieve this for a 2-node RAC DB System?

You have configured a FastConnect dedicated circuit using a Provider model, but your on-premises routers cannot reach OCI VCN instances. BGP status is showing as 'Idle'. What is the most likely cause?

You are migrating workloads to OCI and need to route traffic between two VCNs that reside in the same tenancy but in different regions (Ashburn and Phoenix). Which OCI component is required to establish this cross-region connection?

You are troubleshooting a federated user login issue where users authenticate successfully through your corporate SAML IdP, but upon redirection to OCI, they encounter an error stating that no matching user account or group mapping exists. What is the most likely misconfiguration?

An operations team wants a single OCI alarm to notify them when average CPU utilization across a compartment's web tier exceeds 80 percent for a sustained period, and to stop notifying once the condition clears. The team also wants to avoid duplicate pages during short spikes. Which two configurations satisfy these requirements? (Choose two.)

Which THREE operations can be performed on an Oracle Base Database System from the OCI Console?

Which TWO actions can you perform on an OCI Virtual Cloud Network (VCN) after it has been created?

Which TWO statements are true regarding OCI Identity Domains? (Choose two.)

Which THREE factors influence Block Volume performance?

Which TWO statements are true regarding OCI VCN Flow Logs?

You are configuring a FastConnect virtual circuit using the Oracle provider model. You have completed the setup in the OCI Console and received an Oracle Industry Partner token (OCID). What is the next step you must take?

When you create a new OCI tenancy, what is the name of the default top-level compartment created automatically by Oracle?

Which TWO of the following are valid verbs used in OCI IAM policy statements? (Choose two.)

Which THREE features are supported by OCI Load Balancer?

You need to increase the size of an existing Block Volume. What is the correct procedure?

Which THREE protocols are supported for Notifications subscriptions?

Which THREE of the following actions can be performed using OCI Container Engine for Kubernetes (OKE)? (Choose three.)

Which THREE of the following operations are supported by OCI Vault in the context of storage?

You have deployed an OCI Function and invoked it, but it returns a timeout error. What is the maximum execution timeout limit supported by OCI Functions?

Which THREE network components must be correctly configured in a VCN to allow an application instance in a private subnet to connect to an Autonomous Database with a private endpoint?

Which TWO statements are true regarding OCI IAM policy evaluation behavior? (Choose two.)

Which TWO components are required when defining an OCI dynamic group matching rule for compute instances? (Choose two.)

An enterprise customer has a Hybrid cloud architecture. They need to connect their on-premises datacenter to multiple VCNs in different OCI regions using a single dedicated connection. Which OCI component must be used as the central transit hub?

Which THREE statements regarding OCI VCN DNS and Hostname resolution are correct?

If you detach a Block Volume, what happens to the data?

You are managing an Oracle Base Database System and need to configure automated backups to retain backups for a custom period (e.g., 60 days). Where can you configure this retention period?

Which OCI service feature enables you to automatically create identical compute instances based on an instance configuration and adjust the pool size based on demand?

You have an OKE cluster and want to expose multiple HTTP and HTTPS microservices running in your cluster externally using a single public IP address and path-based routing. Which OCI native component should you deploy?

You are managing an Oracle Base Database System and need to secure data at rest by using your own encryption keys rather than Oracle-managed keys. Which OCI service must you integrate with the database?

Your team needs to allow a group of developers to read logs in the Logging service across all compartments, but you want to ensure they cannot modify or delete any logging resources. Which of the following IAM policy verbs should you use?

Which THREE are characteristics of Object Storage lifecycle rules?

You are managing an Oracle Base Database System (Virtual Machine) and need to scale up the compute shape to a higher number of OCPUs to handle an upcoming month-end processing spike. Which action should you perform?

You are designing an OCI VCN and need to configure DNS so that instances can resolve custom internal domain names as well as internet domain names. Which OCI VCN Resolver feature should you utilize?

Which command-line interface tool is used for managing core OCI infrastructure such as compute instances, VCNs, and block volumes?

Which THREE components are required when establishing a Site-to-Site VPN connection between your on-premises datacenter and an OCI VCN?

An administrator needs to allow a group of developers to create and manage File Storage Service (FSS) file systems and mount targets in a compartment named 'FSCompartment'. Which policy statement is correct?

You are troubleshooting a complex policy evaluation in your tenancy. There are multiple overlapping policies defined at both the tenancy root and various compartment levels. Which principle does OCI IAM follow when evaluating conflicting or overlapping policy statements?

You are designing an OCI VCN and need to ensure that database instances in a private subnet can communicate with backend storage endpoints over the Oracle network backbone. Which gateway should you ensure is attached and routed to?

You are migrating a legacy application to OCI. The application requires a specific network interface card (NIC) virtualization mode and custom UEFI boot parameters that are not standard. Where should you configure these custom launch options?