I85PREP
⌘ K
Oracle Database@AWS Architect Professional study materials
Oracle Database@AWS Architect Professional study resources

Oracle Database@AWS Architect Professional practice questions

One question at a time. Build your Oracle Database@AWS Architect Professional understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Oracle Database@AWS Architecture and Solution Design

In an Oracle Database@AWS deployment, which AWS construct hosts the Oracle Exadata infrastructure that the customer consumes as a managed service?

  1. An AWS Availability Zone within an AWS Region Correct answer.
  2. An AWS Wavelength Zone at a telecom edge
  3. An AWS Outposts rack in the customer data center
  4. An AWS Local Zone in a metro area

Explanation

Oracle Database@AWS is offered in specific AWS Availability Zones inside supported AWS Regions, and the Exadata infrastructure is co-located in those zones so that Oracle-managed database resources sit next to the customer's AWS workloads. Local Zones, Wavelength Zones, and Outposts are different edge and on-premises offerings and are not the placement model for this service.

Question 2Oracle Database@AWS Architecture and Solution Design

A solutions architect wants application servers in a private subnet to reach an Oracle Database@AWS database without traversing the public internet. Which connectivity approach is the intended design?

  1. Rely on a site-to-site VPN to the Oracle Cloud Infrastructure region
  2. Use a VPC peering or AWS PrivateLink-style private connection within the same AWS Region Correct answer.
  3. Route traffic through an internet gateway with a public IP on the database
  4. Publish the database through an Application Load Balancer

Explanation

Oracle Database@AWS is designed for private, low-latency connectivity from customer VPCs in the same AWS Region, using VPC networking constructs such as peering rather than internet exposure. Keeping database traffic on private addressing is the core network design rule for this architecture.

Question 3Oracle Database@AWS Architecture and Solution Design

Which statement best describes the division of responsibility between AWS and Oracle for Oracle Database@AWS?

  1. The customer operates both the Exadata hardware and the database software
  2. A third-party managed service provider operates all layers on the customer's behalf
  3. Oracle operates the database and Exadata infrastructure while AWS provides the cloud Region, networking, and billing integration Correct answer.
  4. AWS operates the database software and Oracle operates the physical data center

Explanation

In this co-managed model Oracle runs the Exadata and database platform, while AWS supplies the underlying cloud Region, network fabric, and marketplace/billing integration. Customers still own their schemas, data, and access policies but not the infrastructure operations.

Question 4Oracle Database@AWS Architecture and Solution Design

A team needs to provision an Oracle Database@AWS Exadata infrastructure and then create container databases on it. Which sequence reflects the intended provisioning order?

  1. Create an Autonomous Database first, then convert it to Exadata
  2. Create the pluggable databases first, then attach an Exadata infrastructure
  3. Create the VM cluster, then create the Exadata infrastructure, then create the databases
  4. Create the Exadata infrastructure, then create a VM cluster, then create container and pluggable databases Correct answer.

Explanation

Provisioning proceeds bottom-up: the Exadata infrastructure is created first, a VM cluster is placed on it, and then container databases and pluggable databases are created within that cluster. Each layer depends on the one below it.

Question 5Oracle Database@AWS Architecture and Solution Design

Which AWS capability lets an Oracle Database@AWS customer consolidate procurement and billing for the service alongside other AWS spend?

  1. AWS Marketplace private offers with consolidated AWS invoicing Correct answer.
  2. AWS Organizations service control policies
  3. AWS Cost Explorer budget alerts only
  4. AWS Savings Plans applied to Oracle licenses

Explanation

Oracle Database@AWS is available through AWS Marketplace, and private offers let customers commit to terms while receiving a consolidated AWS bill. Cost Explorer, Savings Plans, and SCPs are cost and governance tools but do not themselves consolidate the purchase.

Question 6Oracle Database@AWS Architecture and Solution Design

An architect must place application servers in the same AWS Availability Zone as the Oracle Database@AWS Exadata infrastructure to minimize latency. What is the primary reason this co-location matters?

  1. Oracle requires all applications to run on the same physical host
  2. Database listener traffic stays on local, low-latency network paths within the zone Correct answer.
  3. Cross-AZ connections cannot use private IP addressing
  4. Cross-AZ traffic is billed at a higher data transfer rate for database protocols

Explanation

Placing clients in the same Availability Zone keeps database round trips on short intra-zone network paths, which matters for chatty database protocols. Cross-AZ private addressing still works, but it adds latency and inter-AZ data transfer charges.

Question 7Oracle Database@AWS Architecture and Solution Design

Which Oracle Database@AWS capability allows an existing on-premises Oracle database to be moved to the service with minimal downtime using Oracle-native replication?

  1. AWS DataSync file transfer
  2. Oracle GoldenGate replication Correct answer.
  3. AWS Database Migration Service homogeneous conversion
  4. Oracle Recovery Manager duplicate from an S3 backup

Explanation

Oracle GoldenGate provides logical replication that keeps a source database synchronized with a target during cutover, which supports near-zero-downtime migrations. AWS DMS, DataSync, and RMAN restore are useful tools but do not provide the same continuous replication cutover pattern.

Question 8Oracle Database@AWS Architecture and Solution Design

Which statement accurately describes how Oracle Database@AWS resources appear to an AWS administrator?

  1. They are AWS resources discoverable through AWS APIs and consoles, with Oracle managing the underlying platform Correct answer.
  2. They appear as standard EC2 instances managed by the customer
  3. They are visible only in the OCI console and never in AWS
  4. They are represented only as AWS Marketplace subscriptions with no runtime visibility

Explanation

Oracle Database@AWS exposes its infrastructure and databases as AWS resources that administrators can discover and manage through AWS tooling, while Oracle retains operational control of the Exadata and database platform. This dual visibility is what enables integrated IAM, networking, and monitoring.

Question 9Oracle Database@AWS Architecture and Solution Design

A security architect wants database administrators to authenticate to Oracle Database@AWS using their existing corporate identities without separate database passwords. Which integration should be designed?

  1. Oracle Cloud Infrastructure Identity and Access Management federation with the corporate identity provider
  2. AWS Directory Service for Microsoft Active Directory with Oracle Centrally Managed Users Correct answer.
  3. AWS IAM roles assumed directly by the database listener
  4. A shared SYS password stored in AWS Secrets Manager

Explanation

Oracle Centrally Managed Users integrates the database with Microsoft Active Directory so DBAs authenticate with directory credentials, and AWS Directory Service provides managed AD in AWS. OCI IAM federation governs cloud control-plane access, not database logins.

Question 10Oracle Database@AWS Architecture and Solution Design

Which Oracle Database@AWS feature provides the strongest availability posture for a production container database within a single AWS Region?

  1. A read-only replica created with AWS DMS
  2. A single-instance database with daily RMAN backups to S3
  3. An Exadata VM cluster with Data Guard standby databases in a second Availability Zone Correct answer.
  4. A snapshot schedule on the underlying EBS volumes

Explanation

Data Guard with a standby in a separate Availability Zone provides automatic failover and protection against zone-level failures, which is the standard high-availability design for production Oracle databases. Backups and snapshots aid recovery but do not deliver automatic failover.

Question 11Oracle Database@AWS Architecture and Solution Design

How does Oracle Database@AWS relate to Oracle Cloud Infrastructure in terms of the database platform?

  1. It runs the same Oracle Exadata and Oracle Database software as OCI, hosted in AWS data centers Correct answer.
  2. It runs a different, AWS-only database engine
  3. It runs Oracle Database only in Autonomous mode
  4. It runs Oracle Database on AWS-managed RDS engine binaries

Explanation

The service delivers genuine Oracle Exadata and Oracle Database software inside AWS facilities, so features, patches, and tooling match the OCI experience. It is not a re-platformed or RDS-style engine.

Question 12Oracle Database@AWS Architecture and Solution Design

An architect needs to isolate database traffic so that only a specific application subnet can reach the database listener port. Which control should be applied?

  1. An IAM policy denying access to other subnets
  2. A route table entry that blackholes the database subnet
  3. A security group rule allowing the listener port only from the application subnet's CIDR Correct answer.
  4. A network ACL that permits all inbound traffic

Explanation

Security groups provide stateful, source-scoped filtering, so restricting the listener port to the application subnet's CIDR enforces least-privilege network access. IAM policies govern API actions, not packet-level reachability.

Question 13Oracle Database@AWS Architecture and Solution Design

Which consideration most strongly favors choosing Oracle Database@AWS over running Oracle Database on self-managed EC2 instances?

  1. It removes the need for any database schema design
  2. It eliminates the need for a disaster recovery strategy
  3. The customer retains full control of the Exadata firmware
  4. Oracle operates patching, backup infrastructure, and Exadata maintenance under the service Correct answer.

Explanation

The managed service shifts Exadata and database platform operations such as patching and infrastructure maintenance to Oracle, reducing operational burden. It does not remove customer responsibilities for schema design or disaster recovery planning.

Question 14Oracle Database@AWS Architecture and Solution Design

A company wants its Oracle Database@AWS deployment to use a dedicated, non-overlapping IP range that it also uses on-premises. Which design element must be planned?

  1. An Elastic IP per database node for stable addressing
  2. A CIDR plan for the VPC and database subnets that avoids overlap with on-premises ranges Correct answer.
  3. A single shared public subnet for all database nodes
  4. A NAT gateway in front of the database listener

Explanation

Because connectivity often extends to on-premises networks through VPN or Direct Connect, the VPC and database subnet CIDRs must not overlap with existing corporate ranges. Careful IP address management avoids routing ambiguity and failed peering.

Question 15Oracle Database@AWS Architecture and Solution Design

Which monitoring approach gives an operations team both AWS-level infrastructure metrics and Oracle database performance data for Oracle Database@AWS?

  1. Only Oracle Enterprise Manager metrics collected on-premises
  2. AWS CloudTrail alone, since it records all database queries
  3. Only Amazon CloudWatch metrics for the Exadata hosts
  4. Amazon CloudWatch for AWS resource metrics combined with Oracle database performance tooling such as Enterprise Manager or Automatic Workload Repository reports Correct answer.

Explanation

A complete observability design pairs AWS-native metrics from CloudWatch with Oracle's own performance diagnostics such as Enterprise Manager and AWR. CloudTrail records API activity, not query-level performance.

Question 16Oracle Database@AWS Architecture and Solution Design

What is the role of a VM cluster in an Oracle Database@AWS deployment?

  1. It is the network gateway that connects the VPC to the Exadata infrastructure
  2. It is the set of database servers and storage servers carved from Exadata infrastructure that hosts Oracle databases Correct answer.
  3. It is the AWS billing unit for Oracle license consumption
  4. It is the logical grouping of pluggable databases within a container database

Explanation

A VM cluster allocates compute and storage from the Exadata infrastructure and provides the environment where container and pluggable databases run. It sits between the infrastructure layer and the database layer in the provisioning hierarchy.

Question 17Oracle Database@AWS Architecture and Solution Design

A regulated customer must ensure that data at rest for Oracle Database@AWS is encrypted with customer-managed keys. Which design choice is most appropriate?

  1. Use AWS KMS to encrypt the VPC flow logs
  2. Encrypt only RMAN backups and leave datafiles unencrypted
  3. Configure Oracle Transparent Data Encryption with a customer-managed keystore or cloud key management service Correct answer.
  4. Rely on default Oracle Transparent Data Encryption with Oracle-managed keystore

Explanation

Transparent Data Encryption protects datafiles and requires a keystore; using a customer-managed keystore or cloud key service satisfies requirements for customer-controlled encryption keys. Default Oracle-managed keystores and backup-only encryption do not meet that control objective.

Question 18Oracle Database@AWS Architecture and Solution Design

Which statement correctly characterizes the relationship between Oracle Database@AWS and AWS Regions?

  1. It is available only in selected AWS Regions and Availability Zones that Oracle and AWS have enabled Correct answer.
  2. It is available in every AWS Region by default
  3. It is available only outside the United States
  4. It is available only in Regions that have no other AWS database services

Explanation

Oracle Database@AWS rolls out to specific AWS Regions and Availability Zones as capacity is enabled, so architects must verify regional availability before committing to a design. It is not universally available in every Region.

Question 19Oracle Database@AWS Architecture and Solution Design

An architect is comparing Oracle Database@AWS with running Oracle Database on Amazon RDS. Which distinction is accurate?

  1. Oracle Database@AWS provides full Oracle Database and Exadata capabilities, while RDS for Oracle is a managed service with a more limited feature surface Correct answer.
  2. RDS for Oracle supports Exadata-specific features such as Smart Scan
  3. Both offerings are operated by Oracle
  4. RDS for Oracle runs on Exadata hardware inside AWS

Explanation

Oracle Database@AWS delivers the complete Oracle Database on Exadata, including Exadata-specific optimizations, whereas RDS for Oracle is an AWS-operated managed service with a narrower set of supported options. This feature depth is a common reason to choose the co-managed offering.

Question 20Oracle Database@AWS Architecture and Solution Design

Which AWS networking service should be used to provide a dedicated private connection between an on-premises data center and an Oracle Database@AWS VPC?

  1. Amazon CloudFront
  2. AWS Direct Connect Correct answer.
  3. AWS Global Accelerator
  4. AWS Transit Gateway peering with an internet gateway

Explanation

AWS Direct Connect provides a dedicated private circuit from on-premises networks into AWS, which is the preferred path for predictable latency and private database connectivity. Global Accelerator and CloudFront are edge acceleration services, not private circuits.

Question 21Oracle Database@AWS Architecture and Solution Design

A team plans a disaster recovery strategy for Oracle Database@AWS across two AWS Regions. Which approach best matches Oracle best practice?

  1. Rely on cross-Region S3 replication of RMAN backups only
  2. Use Data Guard with a far-sync or async standby in a second Region and validate switchover procedures Correct answer.
  3. Use AWS Backup cross-Region copies as the primary failover mechanism
  4. Use Amazon Route 53 failover routing to a read-only replica

Explanation

Data Guard with a remote standby in a second Region provides a running, recoverable copy with a defined switchover process, which is the standard Oracle cross-Region DR pattern. Backup replication and DNS failover are supporting elements but do not replace a standby database.

Question 22Oracle Database@AWS Architecture and Solution Design

An architect must grant a team permission to create Oracle Database@AWS resources while denying the ability to delete Exadata infrastructure. Which AWS mechanism enforces this?

  1. IAM policies with explicit Allow for create actions and Deny for delete actions on the relevant resource ARNs Correct answer.
  2. An AWS Budgets action
  3. Oracle Database Vault realm rules
  4. A security group egress rule

Explanation

AWS IAM policies authorize or deny API actions on resource ARNs, so an explicit Deny for delete operations while allowing create operations enforces the separation of duties. Database Vault, security groups, and Budgets act on different layers.

Question 23Oracle Database@AWS Architecture and Solution Design

A customer needs to run a large analytics workload against an Oracle Database@AWS database and wants to offload reporting from the primary. Which design is most appropriate?

  1. Create a second container database and copy data nightly with export/import
  2. Route analytics queries through an Application Load Balancer
  3. Point the analytics tool at the primary and rely on the buffer cache
  4. Create a Data Guard read-only standby or an Active Data Guard configuration and direct reporting queries there Correct answer.

Explanation

Active Data Guard or a read-only standby lets reporting queries run on a synchronized copy, isolating the primary from analytical load. Manual export/import copies introduce staleness and operational overhead.

Question 24Oracle Database@AWS Architecture and Solution Design

Which statement about the network path between the customer VPC and Oracle Database@AWS is correct?

  1. Traffic must traverse the public internet because the database is in an Oracle data center
  2. Traffic requires a VPN tunnel for every database connection
  3. Traffic must be routed through an OCI region's service gateway
  4. Traffic stays within the AWS Region's private network fabric, with no internet traversal required Correct answer.

Explanation

Because the Exadata infrastructure is provisioned inside AWS Availability Zones, connectivity from the customer VPC stays on private AWS networking. No internet traversal or per-connection VPN is required for in-Region access.

Question 25Oracle Database@AWS Architecture and Solution Design

A migration team must move a 40 TB on-premises Oracle database to Oracle Database@AWS with a tight cutover window. Which combination best supports the cutover?

  1. GoldenGate continuous replication established in advance, followed by a brief switchover Correct answer.
  2. Data Pump export to a local disk followed by a full import during the cutover window
  3. AWS Snowball Edge transfer of datafiles followed by an import
  4. RMAN full backup restored over Direct Connect during the cutover window

Explanation

Establishing GoldenGate replication ahead of the cutover keeps the target synchronized so only a short final switchover is needed, which fits a tight window for a large database. Bulk export, restore, or physical shipment all require long outage windows.

Question 26Oracle Database@AWS Architecture and Solution Design

Which Oracle Database@AWS deployment model provides a fully Oracle-managed Exadata infrastructure hosted inside an AWS Availability Zone and consumed through the AWS Marketplace?

  1. Oracle Autonomous Database Serverless running in a customer VPC subnet
  2. Self-managed Oracle Database on Amazon EC2 with customer-operated Exadata hardware
  3. Oracle Database@AWS with Exadata infrastructure managed by Oracle Correct answer.
  4. Oracle Database on Amazon RDS Custom for Oracle with BYOL licensing

Explanation

Oracle Database@AWS is a co-managed offering in which Oracle operates the Exadata infrastructure inside AWS Availability Zones while customers consume it through AWS Marketplace billing and AWS-native controls. The other choices either place operational responsibility on the customer or describe a different managed service.

Question 27Oracle Database@AWS Architecture and Solution Design

An architect is sizing an Oracle Database@AWS Exadata infrastructure for a mixed OLTP and reporting workload. Which two capacity dimensions must be planned together when choosing the Exadata shape?

  1. Route 53 hosted zone count and the number of NAT gateways
  2. Amazon S3 storage class and the number of VPC endpoint policies
  3. Database compute (ECPU or OCPU) and storage capacity in the associated Exadata storage servers Correct answer.
  4. AWS Lambda concurrency and provisioned IOPS on the boot volume

Explanation

Exadata shapes define both database server compute and the attached Exadata storage capacity, so both must be sized against the workload profile. The other pairs describe unrelated AWS services that do not determine Exadata capacity.

Question 28Oracle Database@AWS Architecture and Solution Design

How is an Oracle Database@AWS Exadata infrastructure made visible to the AWS account that consumes it?

  1. As an OCI tenancy resource that cannot be referenced in AWS IAM policies
  2. As an AWS resource that is associated with the customer VPC and billed through the AWS account Correct answer.
  3. As an on-premises system reachable only through a VPN tunnel managed by Oracle Support
  4. As an AWS Marketplace subscription that creates no VPC-visible network interface

Explanation

Oracle Database@AWS resources are surfaced as AWS resources tied to the customer VPC, so they can be governed with AWS identity, networking, and billing constructs. This is the core integration value of the offering.

Question 29Oracle Database@AWS Architecture and Solution Design

A team must give an application running in a private subnet access to an Oracle Database@AWS listener without traversing the public internet. What should the architect configure?

  1. Assign public IP addresses to the database nodes and restrict access with a network ACL
  2. Place the client and database in the same VPC, attach security groups that allow the listener port, and keep the subnets private Correct answer.
  3. Create an internet gateway and route database traffic through it with a firewall appliance
  4. Publish the listener through an Application Load Balancer with a public-facing scheme

Explanation

The client and database should communicate over the private VPC network, with security groups permitting only the required listener port. This keeps database traffic off the public internet and avoids exposing the listener.

Question 30Oracle Database@AWS Architecture and Solution Design

Which AWS construct is used to attach an Oracle Database@AWS Exadata infrastructure to the customer's network so that database clients in selected subnets can reach it?

  1. A VPC endpoint service powered by AWS PrivateLink
  2. A VPC association that binds the Exadata infrastructure to specific subnets in the VPC Correct answer.
  3. A Transit Gateway peering attachment to an Oracle-owned VPC
  4. An AWS Direct Connect gateway with a private virtual interface per database node

Explanation

Exadata infrastructure is associated with the customer VPC and specific subnets, which defines the network path used by database clients. Security groups then refine which sources may reach the listener.

Question 31Oracle Database@AWS Architecture and Solution Design

An architect must decide between Oracle Database@AWS and Oracle Database on Amazon RDS. Which distinction is accurate?

  1. RDS is billed exclusively through Oracle and Oracle Database@AWS exclusively through AWS
  2. RDS provides Exadata storage cells, while Oracle Database@AWS runs on general-purpose EBS volumes
  3. Oracle Database@AWS does not support Oracle Real Application Clusters, while RDS does
  4. Oracle Database@AWS provides Exadata-based infrastructure with Oracle-managed operations inside AWS, while RDS runs Oracle Database on standard AWS-managed instances Correct answer.

Explanation

The defining difference is the underlying platform: Oracle Database@AWS delivers Exadata infrastructure operated by Oracle inside AWS Availability Zones, whereas RDS offers Oracle Database on AWS-managed instance types without Exadata. Licensing and billing models also differ accordingly.

Question 32Oracle Database@AWS Architecture and Solution Design

What is the purpose of the Oracle Database@AWS network link between the customer VPC and the OCI region that backs the service?

  1. It synchronizes AWS IAM users into the Oracle database automatically
  2. It exposes the database listener directly to the public internet
  3. It carries control-plane and management traffic between AWS and OCI while customer database traffic stays on the VPC network Correct answer.
  4. It replaces the need for any VPC subnets in the customer account

Explanation

Oracle Database@AWS uses a managed interconnect between AWS and the backing OCI region for service management, while application database traffic uses the VPC network path. The link does not remove the need for VPC design or expose the listener publicly.

Question 33Oracle Database@AWS Architecture and Solution Design

Which statement best describes the availability posture of a production Oracle Database@AWS deployment spanning multiple Availability Zones?

  1. Exadata infrastructure and database nodes can be spread across Availability Zones so that a single AZ failure does not stop the database Correct answer.
  2. Exadata infrastructure is confined to one Availability Zone, so AZ resilience must come from a second independent deployment
  3. Multi-AZ resilience requires converting the database to Amazon RDS Multi-AZ
  4. Availability Zone resilience is provided automatically by Amazon S3 cross-region replication

Explanation

Oracle Database@AWS supports placing Exadata infrastructure and database nodes across Availability Zones, allowing the database to survive an AZ failure. This is a key design reason to choose the service for production workloads.

Question 34Oracle Database@AWS Architecture and Solution Design

A customer wants database administrators to sign in to Oracle Database@AWS with their existing AWS Identity and Access Management identities. Which integration should the architect design?

  1. Disable database authentication and rely solely on security group membership
  2. Federate AWS IAM Identity Center with the Oracle database directory so DBAs authenticate with their corporate credentials Correct answer.
  3. Store DBA passwords in AWS Secrets Manager and distribute them by email
  4. Create a shared local database account whose password is rotated by a Lambda function

Explanation

Federating AWS identity with the Oracle database directory lets administrators use their existing corporate credentials and centralizes access control. Shared local accounts and password distribution by email weaken accountability.

Question 35Oracle Database@AWS Architecture and Solution Design

An architect must ensure that Oracle Database@AWS audit records and database logs are retained centrally for compliance review. Which approach fits the service design?

  1. Enable Exadata cell alerting and treat it as the audit trail
  2. Enable Oracle database auditing and ship audit and alert logs to a centralized logging destination such as Amazon CloudWatch Logs Correct answer.
  3. Disable auditing to reduce storage cost and rely on periodic manual review
  4. Rely on VPC Flow Logs alone to capture SQL statements executed by users

Explanation

Database-level auditing must be enabled in Oracle and the resulting audit and alert logs forwarded to a central destination such as CloudWatch Logs for retention and review. VPC Flow Logs capture network metadata, not SQL activity.

Question 36Oracle Database@AWS Architecture and Solution Design

Which AWS service should an architect use to provide a dedicated private connection between an on-premises data center and an Oracle Database@AWS deployment in a VPC?

  1. AWS Site-to-Site VPN using a public internet gateway only
  2. AWS Direct Connect with a virtual interface attached to the VPC Correct answer.
  3. Amazon CloudFront with an origin access control
  4. AWS Global Accelerator with an anycast IP address

Explanation

Direct Connect provides a dedicated private circuit, and a virtual interface attaches it to the VPC hosting the Oracle Database@AWS resources. This gives predictable latency and avoids public internet paths.

Question 37Oracle Database@AWS Architecture and Solution Design

A team wants to run reporting queries against an Oracle Database@AWS database without impacting the primary OLTP workload. Which design uses Exadata capabilities most directly?

  1. Route reporting queries through an Application Load Balancer to the primary node
  2. Clone the database nightly to Amazon S3 and query the exported files
  3. Increase the number of NAT gateways in the VPC to absorb query load
  4. Create an Active Data Guard standby and direct read-only reporting to it Correct answer.

Explanation

Active Data Guard offloads read-only reporting to a synchronized standby, isolating analytics from the primary OLTP workload. This uses Oracle data replication rather than storage exports or network scaling.

Question 38Oracle Database@AWS Architecture and Solution Design

Which statement about Oracle Database@AWS regional availability is correct?

  1. It is available only in the AWS GovCloud Regions
  2. It is available in every AWS Region without exception
  3. It is offered in selected AWS Regions where a paired OCI region provides the underlying Exadata capacity Correct answer.
  4. It is available in any Region provided the customer supplies their own Exadata hardware

Explanation

Oracle Database@AWS is rolled out Region by Region where Oracle has a paired OCI presence to supply Exadata capacity. Architects must confirm regional availability before committing to a design.

Question 39Oracle Database@AWS Architecture and Solution Design

An architect must design disaster recovery for Oracle Database@AWS across two AWS Regions. Which approach aligns with Oracle's replication technologies?

  1. Use AWS Backup cross-region copies as the only DR strategy with no standby database
  2. Deploy a standby environment in the second Region and replicate with Oracle Data Guard or GoldenGate Correct answer.
  3. Rely on Amazon S3 cross-region replication of database data files as the sole DR mechanism
  4. Rebuild the database from binary logs shipped by the Exadata storage cells

Explanation

Cross-region DR for Oracle Database@AWS uses Oracle replication such as Data Guard or GoldenGate to maintain a standby in the second Region. Backup copies alone cannot meet low recovery time objectives for critical databases.

Question 40Oracle Database@AWS Architecture and Solution Design

A security architect wants all data at rest for Oracle Database@AWS encrypted with keys the customer controls and can audit. Which configuration should be designed?

  1. Enable Transparent Data Encryption with customer-managed keys held in a key management service the customer administers Correct answer.
  2. Encrypt only database backups and leave data files unencrypted
  3. Rely on default storage encryption with Oracle-held keys and no customer visibility
  4. Use application-level column encryption exclusively and disable TDE

Explanation

Customer-controlled encryption requires Transparent Data Encryption configured with customer-managed keys in a key management service the customer administers, allowing rotation and audit. Default provider-managed keys do not give the customer that control.

Question 41Oracle Database@AWS Architecture and Solution Design

An architect must grant a team the ability to create Oracle Database@AWS resources while preventing them from deleting Exadata infrastructure. Which mechanism enforces this?

  1. Oracle database profiles that restrict SQL statements on the Exadata storage cells
  2. A VPC network ACL that denies outbound traffic to the control plane
  3. AWS Identity and Access Management policies that allow creation actions and explicitly deny deletion actions Correct answer.
  4. Security group rules that block the deletion API port

Explanation

AWS IAM policies control which control-plane actions a principal may perform, so an explicit deny on deletion actions enforces the restriction. Database profiles and network controls do not govern AWS resource lifecycle operations.

Question 42Oracle Database@AWS Architecture and Solution Design

Which monitoring combination gives an operations team both AWS infrastructure health and Oracle database performance for Oracle Database@AWS?

  1. Oracle Enterprise Manager alone, since it captures VPC flow data
  2. Amazon CloudWatch metrics for AWS-level health combined with Oracle Enterprise Manager or database performance views Correct answer.
  3. AWS Trusted Advisor alone, since it reports Exadata cell temperature
  4. Amazon CloudWatch alone, since it captures SQL execution plans

Explanation

AWS-level signals come from CloudWatch, while Oracle performance data comes from Oracle Enterprise Manager or database views such as AWR. Using both gives complete coverage of infrastructure and database behavior.

Question 43Oracle Database@AWS Architecture and Solution Design

What role does a VM cluster play in an Oracle Database@AWS deployment?

  1. It groups the database compute nodes and Exadata storage that host one or more Oracle databases Correct answer.
  2. It defines the CIDR range used by the customer VPC
  3. It provides the AWS Marketplace billing record for the subscription
  4. It acts as the DNS resolver for the database listener

Explanation

A VM cluster represents the group of database compute nodes and associated Exadata storage on which databases are created. It is the unit that hosts database instances within the Exadata infrastructure.

Question 44Oracle Database@AWS Architecture and Solution Design

A customer needs a non-overlapping IP range for Oracle Database@AWS that does not conflict with on-premises address space. Which design decision addresses this?

  1. Assign public IP addresses to the database nodes to avoid overlap
  2. Use the default VPC CIDR and extend it with a second internet gateway
  3. Reuse the on-premises CIDR range and rely on NAT to translate addresses
  4. Choose VPC and subnet CIDR blocks that do not overlap with the on-premises ranges before associating the Exadata infrastructure Correct answer.

Explanation

Address planning must happen before association so that VPC and subnet ranges do not collide with on-premises networks reachable over Direct Connect or VPN. Overlapping ranges break routing and are difficult to remediate later.

Question 45Oracle Database@AWS Architecture and Solution Design

Which consideration most strongly favors Oracle Database@AWS over running Oracle Database on self-managed Amazon EC2 instances?

  1. Self-managed EC2 offers Exadata storage cells that Oracle Database@AWS lacks
  2. Oracle operates the Exadata infrastructure and database platform while the customer retains AWS-native governance and billing Correct answer.
  3. Oracle Database@AWS removes the need for any database schema design
  4. Self-managed EC2 provides automatic Oracle patching by Oracle Support

Explanation

The main advantage is that Oracle operates the Exadata platform, reducing operational burden, while the customer keeps AWS-native identity, networking, and billing integration. Self-managed EC2 places patching and platform operations on the customer.

Question 46Oracle Database@AWS Architecture and Solution Design

An architect is designing network isolation so that only a specific application subnet can reach the Oracle Database@AWS listener. Which control combination achieves this?

  1. A Route 53 private hosted zone that resolves the listener only for the application subnet
  2. An IAM policy that denies database connections from other subnets
  3. A network ACL that allows all inbound traffic and a route table entry to the internet gateway
  4. A security group on the database network interfaces that allows the listener port only from the application subnet CIDR Correct answer.

Explanation

Security groups provide stateful, source-specific filtering, so allowing the listener port only from the application subnet CIDR restricts access to that source. Route tables and DNS do not enforce source-based access control by themselves.

Question 47Oracle Database@AWS Architecture and Solution Design

A migration team must move a 40 TB on-premises Oracle database to Oracle Database@AWS with a minimal cutover window. Which approach best fits?

  1. Rebuild the schema manually and reload data from spreadsheets
  2. Use Oracle Data Guard or GoldenGate to replicate continuously and perform a short switchover at cutover Correct answer.
  3. Export the database to dump files and transfer them over the public internet during the cutover window
  4. Take a cold backup and ship physical tapes to AWS for restore

Explanation

Continuous replication keeps the target synchronized so that only a brief switchover is needed at cutover, which suits large databases and tight windows. Bulk export over the internet or physical media shipping cannot meet a short cutover requirement.

Question 48Oracle Database@AWS Architecture and Solution Design

Which statement about how Oracle Database@AWS charges appear on the AWS bill is correct?

  1. Charges appear only as Amazon EC2 reserved instance line items
  2. Charges bypass AWS entirely and are invoiced only by Oracle as a separate paper bill
  3. Charges are billed as Amazon S3 storage fees based on database size
  4. Charges are presented through the AWS Marketplace subscription so they appear on the consolidated AWS invoice Correct answer.

Explanation

Oracle Database@AWS is purchased through AWS Marketplace, so consumption appears on the AWS invoice alongside other AWS spend. This simplifies procurement and cost allocation for the customer.

Question 49Oracle Database@AWS Architecture and Solution Design

A workload requires Oracle Real Application Clusters for active-active database availability inside a single AWS Region. How should the architect design the Oracle Database@AWS deployment?

  1. Deploy a single-node VM cluster and rely on EC2 auto scaling for database failover
  2. Deploy two independent single-node databases and synchronize them with S3 replication
  3. Use Amazon RDS for Oracle with the Multi-AZ option to obtain RAC
  4. Create a multi-node VM cluster on Exadata infrastructure with nodes distributed across Availability Zones and configure RAC Correct answer.

Explanation

RAC requires a multi-node VM cluster on Exadata infrastructure, with nodes placed across Availability Zones for resilience. Single-node clusters, RDS, and S3-based synchronization do not deliver RAC.

Question 50Oracle Database@AWS Architecture and Solution Design

Which AWS networking component lets an architect connect multiple VPCs, including the one hosting Oracle Database@AWS, to a shared on-premises connection?

  1. A single NAT gateway placed in the database subnet
  2. AWS Transit Gateway with attachments for each VPC and the Direct Connect gateway Correct answer.
  3. An internet gateway shared across all VPCs
  4. A Route 53 Resolver endpoint in each VPC

Explanation

Transit Gateway acts as a regional hub that attaches multiple VPCs and connects them to a Direct Connect gateway for shared on-premises reachability. This avoids building a full mesh of VPC peerings.