Oracle Cloud Infrastructure Networking Professional Exam Practice Test
This practice page covers OCI networking decisions for connecting VCNs, controlling subnet traffic, and exposing application services safely. The question bank uses scenarios involving local peering, routing, network security groups, private addressing, DNS, load balancer TLS, and Web Application Firewall placement. These concepts relate to designing and troubleshooting network paths across cloud workloads and connected environments.
Exam overview
About the Oracle Cloud Infrastructure Networking Professional Exam
Networking work in OCI includes planning address space and subnet placement, then defining routes and security rules that permit intended flows without unnecessarily broad access. Scenarios in this practice bank ask you to distinguish subnet security rules from network security group rules, express access between security groups, and identify stable private endpoints for appliances. Other questions address private DNS record management, IPv6 enablement, and local peering requirements for communication between VCNs. Service-selection decisions also include choosing a managed hub-and-spoke option for connections among on-premises sites and VCNs, configuring TLS between a load balancer and its backends, and placing a WAF policy in front of a public application. These topics are useful when reviewing packet paths, isolating connectivity failures, and translating application access needs into OCI network configurations.
Sample Practice Questions
Review a selection from this exam's published US Practice Tests practice bank.
Two VCNs in the same OCI region must communicate privately using local peering. What must be configured for traffic to pass between their subnets?
Show answer
Correct answer: BLocal VCN peering uses a Local Peering Gateway in each VCN. The gateways must be peered, and route tables and security controls on both sides must permit the desired traffic.
A team is configuring an OCI load balancer backend set and wants the service to use TLS when communicating from the load balancer to backend servers. What should it configure?
Show answer
Correct answer: ATLS between the load balancer and backend servers is configured on the backend set using the relevant TLS settings and certificates. Route rules, DHCP options, and security rules do not perform TLS encryption or conversion.
An administrator wants to allow TCP connections to a database on port 1521 only from one application subnet. Which security configuration best expresses this intent?
Show answer
Correct answer: BAn ingress security rule can restrict the database listener to the application subnet's source CIDR and required TCP destination port. A route rule controls next-hop forwarding, not whether a protocol or port is permitted.
A workload is deployed in an availability domain and must remain within that availability domain's network placement scope. Which subnet type is designed for this placement?
Show answer
Correct answer: CAn availability-domain-specific subnet is associated with a particular availability domain, so its resources are placed in that domain. A regional subnet, by contrast, can span availability domains in a region.
An application team wants a single private DNS name to resolve to the current private IP address of a service inside a VCN. Which OCI DNS capability is intended for creating and managing private DNS records?
Show answer
Correct answer: AA private DNS zone supports DNS records for names intended to be resolved within private network contexts, such as VCNs. The other choices do not provide private DNS record management.
A network team needs to connect multiple on-premises locations to OCI through a managed hub-and-spoke design, with centralized routing between those locations and VCNs. Which OCI service is designed for this role?
Show answer
Correct answer: AA Dynamic Routing Gateway (DRG) is a virtual router that can attach to VCNs and connect them to external networks. With appropriate attachments and route configuration, it supports centralized transit-style routing designs.
A company wants to reduce exposure of its public application by accepting web requests only through an OCI Web Application Firewall policy. Where is the WAF policy commonly attached for this design?
Show answer
Correct answer: AAn OCI WAF policy can be associated with a supported public-facing load balancer, allowing web traffic to be inspected at the application entry point before it reaches backend servers.
How to use this practice test
Access is free. Each session presents up to 20 random questions from the 50-question bank, with results shown after the session. Use the scenarios to check how well you can identify OCI networking constructs and map access requirements to routing, security, DNS, and traffic-management choices.
Preparation tips
- Sketch the route tables and subnet security controls needed for local peering, then trace a request in both directions between the VCNs.
- Compare network security groups with subnet security lists; practice expressing TCP access to a database port from a specific application subnet and access between NSGs.
- Review how private IPs and private DNS records provide stable internal service endpoints, and what must be enabled before assigning IPv6 addresses to a subnet.
- Trace traffic through a load balancer to its backend servers, noting where backend TLS settings apply and where a WAF policy can filter public web requests.
- Map a hub-and-spoke connectivity requirement involving several on-premises locations and VCNs to OCI's managed networking services.