OCI Introduction

1. Which statement accurately describes an OCI Region?

(1) Points
Each Availability Domain has a single Fault Domain.
Each Availability Domain has three Fault Domains. (*)
Each Fault Domain has multiple Availability Domains.
Each region has a single Fault Domain.
 Correct. Each availability domain contains three fault domains for high availability

2. Which OCI construct protects against failures within an availability

domain?
(1) Points
Fault Domain (*)
Tenancy
Regions
Compartments
Load Balancer
 Correct. A fault domain is a grouping of hardware and infrastructure within an availability
domain. Each availability domain contains three fault domains for high availability.

3. You have subscribed to an OCI region, which has one a single availability
domain. You want to deploy a highly- available application with two web
servers and a 2-Node database.

How would you place the components to maintain high- availability of the
application?
(1) Points
Place the servers in one fault domain and the database nodes in another
fault domain.
Place one server and a DB node in one fault domain, and the second server
and DB node in another fault domain. (*)
High availability is not possible because there is only one availability domain
in the region.
Place all the components in the same fault domain.
 Correct. Fault domains provide anti-affinity: they let you distribute your instances so that the
instances are not on the same physical hardware within a single availability domain. A hardware
failure that affects one fault domain does not affect instances in other fault domains.

4. Which statement is true about OCI architecture and its core components?
(1) Points
All OCI regions have three availability domains.
Each fault domain has three availability domains.
Fault domains act as physical data centers within an availability domain.
Each availability domain has three fault domains. (*)
 Correct. Every availability domain has three fault domains for high availability.

5. Which statement is true about OCI?

(1) Points
An OCI region is a localized geographic area. (*)
A single fault domain can be associated with multiple availability domains
within a region.
Availability domains share infrastructure such as power, cooling, or internal
availability domain network within a region.
An availability domain is a logical data center.
 Correct. Oracle Cloud Infrastructure is hosted in regions and availability domains. A region is a
localized geographic area

IAM
(Answer all questions in this section)
1. Which statement is true about OCI Identity and Access Management (IAM)?
(1) Points
It enables bring-your-own-devices.
It enables only authorization for the tenancy.
It enables only authentication for the tenancy.

It is used to control access to resources. (*)

 Correct. IAM lets you control who has access to your cloud resources.

2. How is a resource in OCI identified?

(1) Points
Tenancy ID
Username
Compartment Name
OCID (*)
 Correct. Most types of Oracle Cloud Infrastructure resources have a unique, Oracle-assigned
identifier called an Oracle Cloud ID (OCID).
3. Which feature of OCI Identity and Access Management (IAM) service
specifies authorization for various actions for authenticated Principals?
(1) Points
Policy (*)
Role
Compartment
Group
 Correct. IAM Policies are used to specify authorization.

4. Which is NOT a valid method for authenticating a Principal in OCI Identity and Access
Management (IAM) service?
(1) Points
Console user name, Password
Auth Tokens
OCI Vault Master Encryption Keys (*)
API Signing Key

correct. Vault is not a valid authentication method

5. Which is NOT a valid statement regarding OCI Compartments?

(1) Points
Each resource belongs to a single compartment.
You can give group of users access to compartments by writing policies.
Compartments are restricted to a single region. (*)
Resources can interact with other resources in different compartments.
 Correct. Compartments are global and not tied to a specific region

Networking

1. Which virtual cloud network (VCN) component enables both inbound and
outbound traffic between a VCN and the internet?
(1) Points
Internet Gateway (*)
Dynamic Routing Gateway
Service Gateway
NAT Gateway
 Correct. An internet gateway allows both inbound and outbound traffic.

2. Which virtual cloud network (VCN) component blocks inbound traffic, but
enables outbound traffic to the internet?
(1) Points
Dynamic Routing Gateway
Service Gateway
NAT Gateway (*)
Internet Gateway
 correct. A NAT gateway gives cloud resources without public IP addresses access to the internet
without exposing those resources to incoming internet connections.

3. Which components are created by default with the creation of a virtual

cloud network (VCN)? (Choose three)
(Choose all correct answers)
(1) Points
Default security list, with default security rules (*)
Local Peering Gateway
Dynamic Routing Gateway
Default route table, with no route rules (*)
Default set of DHCP options, with default values (*)
Correct. Each VCN comes with a default set of route tables, security lists and DHCP options
with initial values that you can change.

4. Which statement is true about a virtual cloud network (VCN)?

(1) Points
A VCN can only have one public subnet and only one private subnet.
Each subnet in a VCN can exist in a single availability domain or across an
entire region. (*)
A VCN can be used with only one instance.
A VCN can only have one public subnet and more than one private subnet.

 correct. You can designate a subnet to exist either in a single availability domain or across an
entire region

5. Which statements are true about the Oracle Cloud Infrastructure (OCI)
Load Balancing service?
(1) Points
It can span across OCI regions.
It distributes traffic to different backend servers in a virtual cloud network
(VCN). (*)
It supports TCP and HTTP protocols only.
It works with public IP addresses only.
 Correct. The Load Balancing service provides automated traffic distribution from one entry
point to multiple servers reachable from your VCN.