OCI Foundations Associate flashcards
OCI Foundations Associate · Build recall with a focused review session.
32 cards. Read the term and the definition here. The deck at the top of this page is optional.
- Availability domain
- An isolated datacenter group within an OCI region with independent power, cooling, and network, used to build highly available architectures across failure domains.
- Fault domain
- A grouping of hardware within an availability domain that shares a single power and network source, limiting the blast radius of hardware failures.
- RTO vs RPO
- RTO is the maximum acceptable time to restore service after an outage; RPO is the maximum acceptable amount of data loss measured in time.
- IaaS, PaaS, SaaS
- IaaS supplies raw compute, storage, and network; PaaS adds managed runtimes and middleware; SaaS delivers complete applications over the internet.
- Shared responsibility model
- The cloud provider secures physical facilities and underlying infrastructure, while the customer secures data, identities, access policies, and service configuration.
- Tenancy
- The top-level OCI account that owns all resources and contains the root compartment, which is the parent of all other compartments.
- Compartment
- A logical container for OCI resources that enables grouping, isolation, and policy-based access control; compartments can nest up to six levels.
- OCID
- Oracle Cloud Identifier, an Oracle-assigned unique string that identifies every OCI resource such as an instance, compartment, or bucket.
- Home region
- The region selected when a tenancy is created that hosts IAM and cannot be changed; other regions can be subscribed for resources.
- Flexible shape
- A compute shape in which you choose the number of OCPUs and amount of memory within allowed limits and are billed for the configuration.
- Preemptible instance
- A lower-cost compute instance that OCI can reclaim when capacity is needed, intended for fault-tolerant batch or stateless workloads.
- Block Volume
- Network-attached persistent storage for compute instances that can be detached and reattached; performance is set by VPUs per GB.
- Object Storage tier
- A storage class for objects: Standard for frequent access, Infrequent Access for rare access, and Archive for long-term retention at lowest cost.
- Service gateway
- A VCN gateway that lets private subnets reach supported OCI services without traversing the internet or a NAT gateway.
- Security list vs NSG
- Security lists are subnet-level virtual firewalls, while network security groups apply at the VNIC level to instances regardless of subnet.
- Autonomous Database
- A fully managed Oracle database that automates provisioning, tuning, patching, and backups, offered for transaction processing or data warehouse workloads.
- Autonomous Data Guard
- A feature that maintains a standby Autonomous Database in another availability domain or region for disaster recovery and automatic failover.
- DB system
- A virtual machine or bare metal database deployment where the customer manages the operating system and database software, including patching and backups.
- Exadata Database Service
- Oracle's highest-performance database platform, combining scale-out compute with smart storage, available in OCI for demanding enterprise workloads.
- OCI Vault
- A managed key and secret store backed by hardware security modules, used to hold customer-managed encryption keys and credentials.
- Cloud Guard
- A service that detects risky configurations and security threats across a tenancy and can respond automatically using responder recipes.
- Security zone
- A compartment-level policy that denies actions violating a security baseline, such as creating a public object storage bucket.
- OCI Bastion
- A managed service that provides time-limited, audited SSH access to private compute instances without exposing them to the internet.
- Policy statement
- An IAM rule in the form Allow subject to verb resource in compartment, optionally with conditions, attached to the tenancy or a compartment.
- Verbs inspect read use manage
- Increasing access levels: inspect lists resources, read views details, use works with existing resources, and manage creates, updates, and deletes.
- Dynamic group
- A group whose members are compute instances matched by rules, used to grant instance principals access to OCI services.
- Identity federation
- Connecting an external identity provider to OCI IAM with SAML so users sign in using existing corporate credentials.
- Instance principal
- An authorization mechanism that lets a compute instance call OCI APIs as its own identity through membership in a dynamic group.
- Universal Credits
- A prepaid OCI commitment that provides a discount and can be applied to eligible services across regions during the commitment term.
- Cost Analysis
- A console tool that reports actual spend by compartment, tag, or service, used to track and allocate cloud costs.
- OCI support levels
- Basic is free with billing and account help only; Developer, Business, and Premier add technical support, with Premier giving the fastest response.
- Always Free
- A free tier with indefinite resources including two AMD compute VMs, Ampere A1 capacity, block volumes, and an Always Free Autonomous Database.