I85PREP
⌘ K
OCI Foundations Associate study materials
OCI Foundations Associate study resources

OCI Foundations Associate practice questions

One question at a time. Build your OCI Foundations Associate understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Cloud Concepts

Which cloud characteristic lets a user provision computing resources automatically, without requiring human interaction with the provider?

  1. Measured service with metering
  2. Broad network access over the internet
  3. Resource pooling across tenants
  4. On-demand self-service Correct answer.

Explanation

On-demand self-service means a consumer can provision computing capabilities, such as server time and storage, automatically as needed without human interaction with each service provider. The other characteristics describe network availability, metering, and multi-tenant pooling rather than automatic provisioning.

Question 2Cloud Concepts

In the IaaS service model, which layer is the customer responsible for managing?

  1. Physical data center facilities
  2. Hypervisor and server hardware
  3. Guest operating system and applications Correct answer.
  4. Provider's global network backbone

Explanation

IaaS provides virtualized compute, storage, and networking, while the provider manages the physical infrastructure and hypervisor. The customer remains responsible for the guest operating system, middleware, applications, and data.

Question 3Cloud Concepts

Which offering is best classified as Platform as a Service?

  1. OCI Block Volume storage
  2. Oracle Fusion Cloud ERP
  3. OCI Compute virtual machine
  4. Autonomous Database Correct answer.

Explanation

PaaS provides a managed platform on which customers can develop, run, and manage applications without managing the underlying infrastructure. Autonomous Database is a managed database platform, while Fusion ERP is SaaS and compute and block storage are IaaS building blocks.

Question 4Cloud Concepts

Which Oracle product is an example of Software as a Service?

  1. OCI Block Volume
  2. Oracle Fusion Cloud ERP Correct answer.
  3. OCI Virtual Cloud Network
  4. OCI Compute

Explanation

SaaS delivers a complete application managed by the provider and used by customers, typically through a browser. Oracle Fusion Cloud ERP is a business application delivered as a service, while compute, block storage, and networking are infrastructure services.

Question 5Cloud Concepts

Which statement describes a public cloud deployment?

  1. Dedicated exclusively to one organization
  2. Combines private and public environments
  3. Shared over the internet by a provider Correct answer.
  4. Hosted only inside a customer data center

Explanation

A public cloud is owned and operated by a provider and made available to multiple customers over the internet. Resources are shared among tenants, although logical isolation is maintained.

Question 6Cloud Concepts

A company runs its database in a private data center while using OCI for web applications. Which deployment model is this?

  1. Hybrid cloud Correct answer.
  2. Public cloud only
  3. Private cloud only
  4. Community cloud

Explanation

A hybrid cloud combines private infrastructure with public cloud services, allowing data and workloads to move between them. Here the private database and public OCI applications form a hybrid deployment.

Question 7Cloud Concepts

What does multicloud mean?

  1. Using multiple public cloud providers Correct answer.
  2. Using a private cloud with no public services
  3. Using two availability domains in one region
  4. Using one provider across several regions

Explanation

Multicloud is the practice of using services from two or more public cloud providers. It is different from using multiple regions or availability domains of a single provider.

Question 8Cloud Concepts

What financial shift occurs when a company moves workloads from owned data centers to OCI?

  1. Costs become independent of resource consumption
  2. Capital expenses become variable operating expenses Correct answer.
  3. Capital expenses disappear without any replacement
  4. Operating expenses become fixed capital expenses

Explanation

Cloud computing converts large upfront capital expenditure for hardware and facilities into operating expenditure based on consumption. This pay-as-you-go model aligns cost more closely with actual usage.

Question 9Cloud Concepts

Which term describes automatically adding or removing resources to match current demand?

  1. Durability
  2. Colocation
  3. Elasticity Correct answer.
  4. Federation

Explanation

Elasticity is the ability to scale resources up or down automatically as demand changes. Durability concerns data persistence, federation concerns identity trust, and colocation concerns physical hosting.

Question 10Cloud Concepts

What is an OCI region?

  1. A geographic area with one or more ADs Correct answer.
  2. A billing unit for a tenancy
  3. A single server rack located inside a data center
  4. A logical grouping of compartments

Explanation

An OCI region is a localized geographic area that contains one or more availability domains. Regions are the top-level geographic units in which OCI services are offered.

Question 11Cloud Concepts

What is an availability domain?

  1. Isolated data centers within a region Correct answer.
  2. A logical partition used for access control
  3. A grouping of hardware within a region
  4. A dedicated private network connection to OCI

Explanation

An availability domain consists of one or more isolated data centers within a region. Availability domains are physically separated and connected by a low-latency network, which supports high availability designs.

Question 12Cloud Concepts

What is the primary purpose of a fault domain in OCI?

  1. To provide billing reports for a tenancy
  2. To replicate data across geographic regions
  3. To connect a region to the public internet
  4. To isolate hardware failures in an AD Correct answer.

Explanation

Fault domains group hardware within an availability domain so that a failure in one fault domain does not affect the others. Distributing instances across fault domains reduces the impact of hardware failures inside a single availability domain.

Question 13Cloud Concepts

What is an OCI realm?

  1. A billing account shared by several tenants
  2. A private network dedicated to one customer
  3. A single data center with three fault domains
  4. The top-level collection of regions Correct answer.

Explanation

A realm is the highest-level logical collection of regions and is isolated from other realms. OCI uses realms to separate environments such as commercial and government cloud regions.

Question 14Cloud Concepts

Which approach best protects an application from the complete loss of a single data center in a region?

  1. Keep backups in the same data center
  2. Spread instances across availability domains Correct answer.
  3. Use one large bare metal server
  4. Place every instance in a single fault domain

Explanation

Availability domains are physically isolated from one another within a region, so spreading instances across them allows the application to survive the loss of one data center. Fault domains protect against hardware failures within an availability domain but do not address loss of an entire data center.

Question 15Cloud Concepts

What is true of OCI Always Free resources?

  1. They require a prepaid annual commitment
  2. They are available only during a 30-day trial
  3. They are limited to government regions
  4. They are available indefinitely at no cost Correct answer.

Explanation

Always Free resources are available at no cost for an unlimited time, subject to the published service limits. They are distinct from time-limited trial credits.

Question 16Cloud Concepts

How much outbound data transfer does OCI generally provide free each month?

  1. Unlimited
  2. 10 TB Correct answer.
  3. 100 GB
  4. 1 TB

Explanation

OCI generally includes 10 TB per month of free outbound data transfer across services, which can reduce egress costs for many workloads. Amounts above that allowance are billed according to the published pricing.

Question 17Cloud Concepts

Under the shared responsibility model for OCI IaaS, who patches the guest operating system?

  1. Neither party, because patching is automatic
  2. Oracle, because it manages the hypervisor
  3. The customer, who controls the guest OS Correct answer.
  4. Oracle, because it owns the data center

Explanation

In IaaS, Oracle secures the physical infrastructure, network, and hypervisor, while the customer secures and patches everything from the guest operating system upward. This includes the OS, middleware, applications, and data.

Question 18Cloud Concepts

In a SaaS deployment, which responsibility remains with the customer?

  1. Upgrading the application code
  2. Patching the application server OS
  3. Managing user access and data Correct answer.
  4. Maintaining the physical network

Explanation

In SaaS, the provider manages the application, runtime, operating system, and infrastructure. The customer remains responsible for its own data and for controlling who can access the service.

Question 19Cloud Concepts

What is OCI Dedicated Region?

  1. A single availability domain for small firms
  2. A free tier available in every country
  3. A full OCI cloud in the customer's data center Correct answer.
  4. A backup region used only for disaster recovery

Explanation

OCI Dedicated Region brings a full set of OCI cloud services into a customer's own data center. It provides public-cloud capabilities while meeting dedicated-location and data-residency requirements.

Question 20Cloud Concepts

What distinguishes OCI FastConnect from a site-to-site VPN?

  1. It encrypts all traffic by default
  2. It works only within one availability domain
  3. It uses a dedicated private connection Correct answer.
  4. It requires no network configuration

Explanation

FastConnect provides a dedicated private network connection between a customer network and OCI, bypassing the public internet. A site-to-site VPN carries traffic over the internet and relies on encryption for confidentiality.

Question 21Cloud Concepts

What does recovery time objective (RTO) measure?

  1. The number of backups retained per year
  2. The maximum acceptable data loss in minutes
  3. The cost of replicating data to a second region
  4. The maximum acceptable time to restore service Correct answer.

Explanation

RTO is the target maximum time allowed to restore a service after a disruption. It is paired with recovery point objective, which measures acceptable data loss rather than restoration time.

Question 22Cloud Concepts

Which statement best distinguishes high availability from fault tolerance?

  1. High availability uses backups only; fault tolerance uses replication
  2. High availability eliminates all downtime; fault tolerance reduces it
  3. High availability is only for databases; fault tolerance is for networks
  4. HA minimizes downtime; FT continues without interruption Correct answer.

Explanation

High availability uses redundancy and failover to minimize downtime, but a brief interruption may occur during failover. Fault tolerance keeps a system operating without interruption when a component fails, typically through more extensive redundancy.

Question 23Cloud Concepts

What is an OCI compartment used for?

  1. Physical isolation of server racks
  2. Encryption of data at rest
  3. Automatic scaling of compute instances
  4. Logical grouping for access control Correct answer.

Explanation

Compartments provide logical grouping of OCI resources so that access can be controlled and costs can be organized. They are logical boundaries, not physical isolation boundaries.

Question 24Cloud Concepts

Which cloud characteristic means usage is metered and billed based on consumption?

  1. Rapid elasticity
  2. Broad network access
  3. Resource pooling
  4. Measured service Correct answer.

Explanation

Measured service means the provider meters resource usage and bills accordingly, enabling pay-as-you-go pricing. Rapid elasticity concerns scaling, resource pooling concerns shared capacity, and broad network access concerns connectivity.

Question 25Cloud Concepts

What is cloud bursting?

  1. Replicating data to every OCI region by default
  2. Spilling peak load from private to public cloud Correct answer.
  3. Deleting unused resources to reduce cloud spending
  4. Running the same workload in two availability domains

Explanation

Cloud bursting is a hybrid deployment pattern in which an application runs in a private environment and expands into a public cloud when demand exceeds private capacity. It allows organizations to handle temporary peaks without permanently overprovisioning private infrastructure.

Question 26Cloud Concepts

A team replaces a server that has 8 GB of RAM with a single server that has 64 GB of RAM, keeping the same number of servers. Which scaling approach does this describe?

  1. Scaling out by adding more server instances
  2. Scaling up by increasing the size of one server Correct answer.
  3. Auto-scaling based on a traffic schedule
  4. Load balancing across identical servers

Explanation

Vertical scaling, or scaling up, increases the capacity of an existing machine, such as adding CPU, memory, or storage to one server. It does not change the number of instances running the workload.

Question 27Cloud Concepts

Which cloud service model gives the customer virtualized compute, storage, and networking resources to configure, while the provider manages the physical data center?

  1. Function as a service (FaaS)
  2. Infrastructure as a service (IaaS) Correct answer.
  3. Software as a service (SaaS)
  4. Platform as a service (PaaS)

Explanation

In IaaS the provider supplies fundamental infrastructure such as virtual machines, block storage, and virtual networks, and the customer configures and manages the guest operating systems and applications. The provider remains responsible for the physical hardware and facilities.

Question 28Cloud Concepts

A developer uploads a small piece of code that the cloud provider runs only when an event occurs, with no servers to provision or patch. Which model is being used?

  1. A managed relational database
  2. Function as a service Correct answer.
  3. A container orchestrator
  4. A virtual machine scale set

Explanation

Function as a service (serverless computing) executes code in response to events and handles all server provisioning and scaling behind the scenes. The developer pays only for the compute time consumed by each invocation.

Question 29Cloud Concepts

A public cloud provider runs many customers' workloads on shared physical servers while keeping each customer's data isolated from the others. Which cloud characteristic does this describe?

  1. Cloud bursting
  2. Elasticity
  3. Multitenancy Correct answer.
  4. Fault tolerance

Explanation

Multitenancy is the practice of serving multiple independent customers from shared physical infrastructure while logically isolating their resources and data. It is a core reason public cloud providers can achieve economies of scale.

Question 30Cloud Concepts

A development team wants to deploy application code without patching operating systems, installing runtimes, or configuring middleware. Which service model best fits this requirement?

  1. Bare metal IaaS
  2. Platform as a service Correct answer.
  3. Desktop as a service
  4. Software as a service

Explanation

PaaS provides a managed runtime and middleware so developers focus on code and data while the provider handles the operating system, runtime, and platform updates. IaaS would leave those patching duties with the customer.

Question 31Cloud Concepts

What is the role of a hypervisor in a cloud computing environment?

  1. It abstracts physical hardware and runs multiple virtual machines on one host Correct answer.
  2. It meters customer usage for billing purposes
  3. It balances incoming traffic across web servers
  4. It encrypts data traveling between regions

Explanation

A hypervisor sits between the physical hardware and virtual machines, allocating CPU, memory, and devices to each guest while keeping guests isolated from one another. This abstraction is what allows many virtual servers to share one physical host.

Question 32Cloud Concepts

What does a cloud service level agreement (SLA) primarily commit the provider to?

  1. A fixed monthly price for the next several years
  2. The physical address of each data center used
  3. The customer's obligation to patch guest operating systems
  4. Measured service levels and remedies if they are missed Correct answer.

Explanation

An SLA states the service levels the provider promises, such as uptime percentages, and the credits or remedies available if those levels are not met. It does not set prices or transfer customer responsibilities.

Question 33Cloud Concepts

A company wants to minimize vendor lock-in for an application it is designing for the cloud. Which design practice best supports that goal?

  1. Abstract provider-specific services behind standard interfaces and portable formats Correct answer.
  2. Store all data in a proprietary managed service with no export path
  3. Rely on one region and one availability domain for all components
  4. Hard-code the provider's proprietary APIs throughout the application code

Explanation

Vendor lock-in is reduced by keeping provider-specific dependencies behind abstraction layers and by using open standards and exportable data formats. That way components can be replaced or moved with limited rework.

Question 34Cloud Concepts

Why does a stateless, loosely coupled application design make it easier to scale on demand in the cloud?

  1. It allows instances to be added or removed without relying on local session state Correct answer.
  2. It guarantees a lower monthly bill than any other architecture
  3. It eliminates the need to replicate data across availability domains
  4. It removes the need for any network security controls

Explanation

When application instances hold no local session state, any instance can serve any request, so capacity can be added or removed freely behind a load balancer. Session data is externalized to a shared store, which keeps scaling and recovery simple.

Question 35Getting Started with Oracle Cloud Infrastructure

Which statement best describes an Oracle Cloud Infrastructure region?

  1. A localized geographic area containing one or more availability domains Correct answer.
  2. A single physical data center that hosts compute and storage hardware
  3. A global network of points of presence that caches content close to end users
  4. A logical grouping of compartments used to separate teams and control spending

Explanation

A region is a geographic area in which OCI hosts one or more availability domains that are physically isolated from each other. A tenancy subscribes to the regions it needs, and resources are created in a specific region.

Question 36Getting Started with Oracle Cloud Infrastructure

How is an availability domain best described in Oracle Cloud Infrastructure?

  1. A rack of compute hardware that shares a single network switch
  2. A logical container that holds all identity resources of a tenancy
  3. A copy of a block volume that is kept in a different tenancy
  4. One or more isolated data centers located within a single region Correct answer.

Explanation

Availability domains are physically separate, isolated data centers inside a region that do not share infrastructure such as power or cooling. Distributing resources across availability domains in a region is the basis for highly available designs.

Question 37Getting Started with Oracle Cloud Infrastructure

Within an availability domain, what is a fault domain?

  1. A backup copy of a block volume stored in another availability domain
  2. A region that is geographically distant from the primary region
  3. A logical partition of the Console used to group administrators
  4. A grouping of hardware that lets you spread instances to avoid correlated failures Correct answer.

Explanation

Each availability domain contains three fault domains, and each fault domain groups hardware sharing a single power source and network switch. Placing instances in different fault domains protects an application from a hardware failure in one grouping.

Question 38Getting Started with Oracle Cloud Infrastructure

What is the purpose of a compartment in Oracle Cloud Infrastructure?

  1. To convert free tier resources into paid resources automatically
  2. To group resources for access control and cost tracking Correct answer.
  3. To cache content at edge locations close to the end user
  4. To physically separate the data centers inside an availability domain

Explanation

A compartment is a logical container used to organize resources, scope IAM policies, and view costs per team or project. Resources can be created in and moved between compartments, subject to policy permissions.

Question 39Getting Started with Oracle Cloud Infrastructure

The tenancy in Oracle Cloud Infrastructure is which of the following?

  1. A temporary sandbox that exists only during the free trial period
  2. The root compartment that holds all of an organization's resources Correct answer.
  3. A regional data center where compute instances are launched
  4. A set of users who share the same external identity provider

Explanation

When an organization signs up, OCI creates a tenancy that acts as the root compartment for every compartment and resource it will own. The tenancy has a unique name and an Oracle Cloud Identifier, and its subscription and identity settings govern the account.

Question 40Getting Started with Oracle Cloud Infrastructure

Which statement about an Oracle Cloud Infrastructure realm is accurate?

  1. It is a billing construct that combines several tenancies on one invoice
  2. It is the set of availability domains contained inside a single region
  3. It is an isolated collection of regions that share no data Correct answer.
  4. It is the network perimeter that protects a customer's virtual cloud network

Explanation

A realm is a logical collection of regions that is isolated from other realms, and data is never shared across realms. For example, commercial regions reside in the OC1 realm, while government regions are placed in separate realms with their own tenancies.

Question 41Getting Started with Oracle Cloud Infrastructure

An administrator asks where IAM resources such as users, groups, and policies are mastered for a tenancy. What is the correct answer?

  1. In the region where the first compartment was created
  2. In the region currently chosen in the Console region menu
  3. In every subscribed region, replicated automatically and equally
  4. In the home region of the tenancy Correct answer.

Explanation

Identity and Access Management is a global service whose resources are created and mastered in the tenancy's home region, the region selected when the tenancy was created. Those policy changes are then visible across all regions in which the tenancy operates.

Question 42Getting Started with Oracle Cloud Infrastructure

Which policy statement allows members of the group SalesAdmins to create, update, and delete compute instances in compartment Sales?

  1. Allow group SalesAdmins to manage instances in tenancy Sales
  2. Allow group SalesAdmins to manage instances in compartment Sales Correct answer.
  3. Allow group SalesAdmins to inspect instances in compartment Sales
  4. Allow group SalesAdmins to read instances in compartment Sales

Explanation

A policy statement follows the pattern Allow group <group> to <verb> <resource-type> in <location>. The verb manage includes create, update, and delete, and the location must name the compartment that holds the instances.

Question 43Getting Started with Oracle Cloud Infrastructure

Which statement about IAM groups is true?

  1. Groups replace compartments as the container for resources
  2. A user may belong to only one group at a time in a tenancy
  3. Policies grant permissions to groups rather than to individual users Correct answer.
  4. Groups are created separately inside each availability domain

Explanation

Users obtain access through group membership, and policies are written against groups, dynamic groups, or special principals. A single user can be a member of several groups, and the resulting permissions are the union of those grants.

Question 44Getting Started with Oracle Cloud Infrastructure

A compute instance must read objects from an Object Storage bucket without storing any credentials on the instance. Which OCI feature makes this possible?

  1. A dynamic group whose matching rule includes the instance, plus a policy Correct answer.
  2. An auth token that the instance rotates automatically every 24 hours
  3. A compartment policy that lets any-user read objects in the tenancy
  4. A user account whose password is written into the instance metadata

Explanation

Dynamic groups use rules that match attributes of resources, so an instance that satisfies the rule becomes a group member automatically. A policy granting that dynamic group access lets the instance authenticate with instance principals, with no secrets stored on the instance.

Question 45Getting Started with Oracle Cloud Infrastructure

What is the purpose of federation in OCI identity and access management?

  1. To let users sign in with credentials from an external identity provider Correct answer.
  2. To replicate a tenancy's resources into a second region automatically
  3. To synchronize object storage buckets across availability domains
  4. To merge two tenancies into a single billing account

Explanation

Federation uses a standard such as SAML 2.0 so that users authenticate against an external identity provider, such as Microsoft Active Directory, and are mapped to OCI groups. This means users keep their existing corporate credentials instead of needing separate local accounts.

Question 46Getting Started with Oracle Cloud Infrastructure

What does multi-factor authentication add to a Console sign-in?

  1. A second tenancy that acts as a backup if the primary fails
  2. A second password that is stored in the user's compartment
  3. A second verification step beyond the password Correct answer.
  4. Automatic rotation of the user's API signing keys

Explanation

Multi-factor authentication combines something the user knows, such as a password, with something the user possesses, typically a time-based code from an authenticator application. An administrator can require it for local users, and each user enrols a device.

Question 47Getting Started with Oracle Cloud Infrastructure

Which statement about Cloud Shell is correct?

  1. It is a command-line tool that must be installed on your laptop first
  2. It is a free browser-based terminal already authenticated to your tenancy Correct answer.
  3. It is a paid add-on that an administrator must enable per compartment
  4. It is a Windows remote desktop session hosted in your home region

Explanation

Cloud Shell is launched from the Console and opens a Linux terminal in the browser that is already authenticated with your Console session. It includes the OCI CLI and common developer tools, and each user gets persistent storage in the home directory at no extra cost.

Question 48Getting Started with Oracle Cloud Infrastructure

Which statement describes the OCI Command Line Interface?

  1. It is a tool for managing OCI resources from a terminal Correct answer.
  2. It is a service that monitors the health of a tenancy's regions
  3. It can be used only from Cloud Shell and never from a local machine
  4. It is a graphical console for creating compartments and users

Explanation

The CLI is built on the OCI SDK for Python and exposes the platform's APIs as terminal commands. It runs on Windows, macOS, and Linux as well as in Cloud Shell, authenticating with an API signing key or the Cloud Shell session.

Question 49Getting Started with Oracle Cloud Infrastructure

Which of the following is a characteristic of the OCI Always Free tier?

  1. It expires 30 days after the account is created
  2. It requires a minimum monthly spend to keep the resources running
  3. It is available only to customers with a paid support contract
  4. It provides a fixed set of resources at no cost for an unlimited period Correct answer.

Explanation

Always Free resources are available to any OCI account for as long as the account exists, within published limits such as a small number of compute instances and autonomous databases. They are separate from the time-limited trial credits offered to new accounts.

Question 50Getting Started with Oracle Cloud Infrastructure

What must be configured in your user profile before the OCI CLI can be used from your laptop?

  1. A federation trust with the CLI binary
  2. An instance principal
  3. A compartment named CLI-Users
  4. An API signing key pair Correct answer.

Explanation

Programmatic access from a local machine requires an API signing key whose public half is uploaded to your user profile. The CLI stores the key fingerprint and the private key in a configuration file to sign each request.