IT Certifications · 1Z0-997-26

Oracle Cloud Infrastructure Architect Professional Exam Practice Test

The Oracle Cloud Infrastructure Architect Professional Exam practice material focuses on designing OCI environments around application needs, resilience, connectivity, security, and operations. Scenario-based questions touch on selecting services for monitoring, shared file storage, private connectivity, network traffic inspection, configuration governance, and workload placement. These decisions reflect architecture work such as matching OCI components to availability, access, and operational requirements.

Exam overview

Exam providerOracle
Exam code1Z0-997-26
CategoryIT Certifications

About the Oracle Cloud Infrastructure Architect Professional Exam

OCI architecture decisions often depend on how resources interact across compartments, virtual cloud networks, subnets, gateways, and availability domains. An architect must distinguish services by their roles: for example, monitoring and alerting for metrics, file versus object or block storage, and private network paths versus internet-based access. Resilience planning includes placement across fault domains and designing persistent storage to tolerate infrastructure failure. Security and governance work can involve routing traffic through inspection, limiting inbound exposure while enabling outbound updates, and detecting configuration drift. Container scenarios may require separating the managed Kubernetes control plane from worker-node operations. Practice with these topics involves identifying the constraint that drives a design, then selecting an OCI service or configuration that satisfies it without adding unnecessary components.

Sample Practice Questions

Review a selection from this exam's published US Practice Tests practice bank.

Question 1

A team wants to collect time-series measurements from applications and OCI resources, then evaluate them against thresholds to trigger alerts. Which OCI service is the most direct fit?

  1. AMonitoring
  2. BLogging
  3. CAudit
  4. DVault
Show answerCorrect answer: A

OCI Monitoring collects metrics and supports alarms based on metric conditions. Logging handles log records, Audit tracks API activity, and Vault manages cryptographic keys and secrets.

Question 2

A team needs a shared file system that multiple Linux compute instances can mount concurrently over the network. Which OCI storage service is the most direct fit?

  1. ABlock Volume
  2. BFile Storage
  3. CObject Storage Archive tier
  4. DBoot Volume
Show answerCorrect answer: B

OCI File Storage provides a managed network file system that multiple clients can mount concurrently. Block Volume provides block devices typically attached to compute instances, Object Storage is accessed through object APIs, and Boot Volume stores an instance's boot disk.

Question 3

An organization wants to ensure that newly created OCI resources meet required configuration standards and receive notifications when a resource drifts from those standards. Which approach is most appropriate?

  1. AUse OCI Resource Manager stacks to automatically enforce every configuration continuously.
  2. BUse OCI Events rules to evaluate resource configurations against compliance policies.
  3. CUse OCI Cloud Guard detector and responder recipes to monitor configuration posture and respond to findings.
  4. DUse OCI Audit retention settings to prevent noncompliant resource creation.
Show answerCorrect answer: C

Cloud Guard evaluates resource configurations against detector recipes and can use responder recipes to recommend or take supported corrective actions. Events and Audit serve different purposes and do not provide this general posture-management function.

Question 4

A company requires a private, dedicated network connection from its data center to OCI, with predictable bandwidth and without using the public internet as the connection path. Which OCI connectivity option is designed for this?

  1. AInternet Gateway
  2. BFastConnect
  3. CService Gateway
  4. DPublic load balancer
Show answerCorrect answer: B

OCI FastConnect provides a private, dedicated connection between an organization's network and OCI. The specific connectivity arrangement and redundancy depend on the chosen FastConnect provider and design.

Question 5

A solution must distribute workloads across multiple fault domains within one OCI Availability Domain so that a localized hardware or power issue is less likely to affect all instances. Which placement strategy is most appropriate?

  1. APlace all instances in one fault domain to simplify coordination
  2. BDistribute instances across multiple fault domains
  3. CPlace all instances in a single subnet
  4. DAssign each instance a different public IP address
Show answerCorrect answer: B

Fault domains are groups of hardware and infrastructure within an Availability Domain. Distributing redundant instances across fault domains reduces the chance that a localized failure will affect every instance. A subnet or public IP assignment does not provide this placement resilience.

Question 6

A service running on an OCI instance must send outbound traffic through a centralized inspection point before reaching external networks. Which design approach best supports this requirement?

  1. ARoute the subnet's applicable outbound traffic through a network virtual appliance acting as a firewall.
  2. BAssign each instance a public IP address and rely only on host-based logging.
  3. CUse a service gateway as a general-purpose internet proxy.
  4. DPlace the instances in separate compartments.
Show answerCorrect answer: A

A network virtual appliance can provide centralized inspection when routing is designed to direct the relevant traffic through it. A service gateway is for access to supported Oracle services, and compartments do not route or inspect packets.

Question 7

A team needs a private subnet's instances to download operating-system updates from the public internet, but those instances must not accept unsolicited inbound internet connections. Which OCI networking component is designed for this?

  1. AInternet Gateway
  2. BNAT Gateway
  3. CService Gateway
  4. DDynamic Routing Gateway
Show answerCorrect answer: B

A NAT Gateway enables resources with private IP addresses to initiate connections to the internet while preventing unsolicited inbound connections from the internet. An Internet Gateway is for public internet connectivity, while a Service Gateway provides private access to supported OCI services.

How to use this practice test

Access is free. A session presents up to 20 random questions from the 50-question practice bank and shows results when the session ends. Use each result to identify which OCI service distinction or architecture decision needs more work, such as choosing a private connectivity path or separating file, block, and object storage use cases.

Preparation tips

  • For each storage scenario, compare the access pattern and durability need before choosing File Storage, Block Volume, or Object Storage.
  • Sketch a private-subnet egress path, including route rules and the gateway or inspection component required by the traffic destination.
  • Practice mapping availability requirements to fault domains, availability domains, and persistent-volume design choices.
  • Review how OCI monitoring, configuration governance, and drift notifications support operational oversight, distinguishing measurement alerts from configuration changes.
  • For Kubernetes scenarios, separate control-plane management responsibilities from worker-node provisioning and operations.
Official sourceOfficial exam page ↗