OCI Multicloud Architect Associate study plan

Define multicloud, hybrid cloud, and distributed cloud in your own words and contrast them with single-cloud multi-region designs

Map the OCI regions and Azure interconnected regions and explain how region pairing affects latency and data residency

Diagram the physical path of a packet from an Azure VNet to an OCI VCN, labeling the interconnect, FastConnect, and ExpressRoute hops

List the shared responsibility split for compute, network, and identity across Oracle and Microsoft control planes

Provision an OCI VCN with public and private subnets, route tables, and a NAT gateway sized for a three-tier workload

Configure security lists and network security groups and justify each rule against a least-privilege model

Trace how CIDR ranges must be non-overlapping across the Azure VNet and OCI VCN and resolve one deliberate overlap

Compare FastConnect, ExpressRoute, and site-to-site VPN for cost, latency, and failover behavior

Set up an OCI-Azure interconnection and validate bidirectional traffic with ping and traceroute between test instances

Configure DNS resolution across both clouds so a hostname in one resolves from the other

Create OCI IAM users, groups, and dynamic groups and attach policies scoped to a compartment

Federate an identity provider so a single user sign-in reaches both OCI and Azure resources

Design a role mapping table that translates Azure RBAC roles to OCI policies for a shared application team

Write OCI policies that grant least privilege for a specific workload and prove they deny an out-of-scope action

Explain how instance principals and dynamic groups remove stored credentials from cross-cloud automation

Audit an existing policy set and remove at least two over-broad statements

Design a data architecture that keeps the system of record in one cloud and serves reads from the other, stating the consistency tradeoff

Choose between replication, change data capture, and API-based sync for a given latency and volume profile

Model the cost of cross-cloud egress for a workload moving 2 TB per month and identify the break-even point for a caching tier

Deploy a stateless application tier in one cloud backed by a managed database in the other and document the failure modes

Implement a retry and circuit-breaker pattern for a cross-cloud API call and demonstrate behavior under induced latency

Define RTO and RPO targets for the workload and map each to a concrete replication or backup mechanism

Configure centralized logging so events from both clouds land in one queryable store

Set up budget alerts and cost tags that attribute spend to the correct cloud and team

Write an encryption and key management plan covering data at rest and in transit across both clouds

Define a secrets management approach and rotate one credential end to end

Draft an incident response runbook for loss of the cross-cloud link, including escalation and communication steps

Map the workload against a compliance framework and list the controls that span both providers

Re-answer missed practice questions from weeks 1 through 7 and write the reason each wrong answer was tempting

Build a one-page decision cheat sheet for interconnect choice, identity federation, and data placement

Walk through a full architecture scenario end to end within a 30-minute time box

Identify your two weakest domains by scored practice and schedule targeted review of each