Question bank
Oracle Cloud Infrastructure 2026 Architect Associate
42 Oracle Cloud Infrastructure 2026 Architect Associate questions with the correct answer and a written explanation, organised across 6 exam domains.
- 42 questions
- 6 domains
- Foundation level
certilumQuestion index
Jump straight to any question. Answers and explanations are inline.
Compute
6 questions in this domain
- Question 1Single Choice
In Oracle Cloud Infrastructure, what is the primary purpose of the Identity and Access Management service?
- AControlling access to OCI resourcesCorrect answer
- BLaunching compute instances
- CMonitoring network traffic
- DCreating block volume backups
Why this is the answer
OCI IAM controls who can access resources and what actions they can perform, across users, groups, and compartments.
- Question 2Multiple Select
Which of the following items are core components of the Oracle Cloud Infrastructure Identity and Access Management service?
- AIAM usersCorrect answer
- BIAM policiesCorrect answer
- CCompartmentsCorrect answer
- DSubnets
Why this is the answer
IAM includes users, groups, compartments, and policies as core elements; subnets are networking components, not IAM elements.
- Question 3Interactive
Review the IAM policy statement shown in the code block. What level of access is granted to the InstanceAdmins group?
- AManage compute resources in the Development compartmentCorrect answer
- BRead-only access to compute resources
- CManage all resources in the tenancy
- DDelete compute resources only
Why this is the answer
The policy allows the group to manage compute-family resources inside the Development compartment, granting full management permissions.
- Question 4Single Choice
Within the OCI Identity and Access Management model, what exactly is a compartment used for?
- AA logical container for organizing and isolating resourcesCorrect answer
- BA physical server in an OCI data center
- CA collection of IAM users
- DA network security rule
Why this is the answer
A compartment is a logical partition used to organize and isolate OCI resources and control access through policies.
- Question 5Multiple Select
Which of the following statements about Oracle Cloud Infrastructure IAM access policies are generally correct?
- AThey use a declarative policy language.Correct answer
- BThey define access rules for resources.Correct answer
- CThey are created in compartments.Correct answer
- DThey automatically encrypt data.
Why this is the answer
OCI IAM policies are declarative, define access rules for principals and resources, and are stored in compartments. They do not encrypt data.
- Question 6Interactive
Review the IAM policy statements in the code block. Which OCI resource families are granted to the AppDevs group? Select all that apply.
- AInstance familyCorrect answer
- BVolume familyCorrect answer
- CVirtual network family
- DAutonomous database family
Why this is the answer
The policy grants manage on instance-family and use on volume-family, so the group can access compute and block storage resources.
Database
6 questions in this domain
- Question 7Single Choice
What does IAM stand for in Oracle Cloud Infrastructure?
- AIdentity and Access ManagementCorrect answer
- BIntegrated Application Monitoring
- CInternet Access Management
- DInformation Asset Management
Why this is the answer
IAM stands for Identity and Access Management, the OCI service that controls access to resources.
- Question 8Multiple Select
Which two components are fundamental elements of OCI Identity and Access Management?
- AUsers and groupsCorrect answer
- BAccess policiesCorrect answer
- CVirtual cloud networks
- DBlock volumes
Why this is the answer
OCI IAM manages principals such as users and groups, and uses policies to grant access. Networks and block volumes are resources, not IAM constructs.
- Question 9Interactive
Review the IAM policy in the code block. What access does it grant?
- AManage virtual network resources in Network compartmentCorrect answer
- BManage all resources in the tenancy
- CRead virtual network resources in Network compartment
- DCreate users in Network compartment
Why this is the answer
The statement uses 'manage virtual-network-family in compartment Network', which grants management of virtual network resources in that compartment.
- Question 10Single Choice
Which statement about an OCI IAM user is true?
- AAn entity that can be granted access through policiesCorrect answer
- BAnother name for an IAM group
- CA resource that can only exist in the root compartment
- DA service that monitors user activity
Why this is the answer
A user is a principal in OCI IAM; policies define the access that the user has to resources.
- Question 11Multiple Select
Which two tasks can you perform with OCI IAM?
- ACreate users and groupsCorrect answer
- BDefine resource access policiesCorrect answer
- CLaunch compute instances
- DCreate object storage buckets
Why this is the answer
IAM is responsible for identity administration and policy-based access control. Launching instances and creating buckets are resource operations, not IAM functions.
- Question 12Interactive
Analyze the code block and identify the two correct conclusions.
- AAuditors can read all resources in tenancyCorrect answer
- BNetworkAdmins can manage virtual network resources in Network compartmentCorrect answer
- CAuditors can manage all resources in tenancy
- DNetworkAdmins can manage database resources in Network compartment
Why this is the answer
The first statement grants read access to all resources in the tenancy; the second grants management of virtual-network-family within the Network compartment, not database resources.
Identity and Access Management
8 questions in this domain
- Question 13Single Choice
What is the main purpose of a compartment in OCI IAM?
- AOrganizing and isolating cloud resourcesCorrect answer
- BStoring user passwords
- CEncrypting network traffic
- DCreating backup policies
Why this is the answer
A compartment is a logical container that helps you organize and control access to OCI resources while providing isolation between workloads.
- Question 14Multiple Select
Which two elements must be present to create an OCI IAM policy?
- AA policy statementCorrect answer
- BA compartmentCorrect answer
- CA dynamic group
- DAn API key
Why this is the answer
An OCI IAM policy is composed of one or more policy statements, and it must be placed in a compartment such as the tenancy root compartment.
- Question 15Interactive
Given this IAM policy statement, what access do members of the NetworkAdmins group receive?
- AFull management of virtual network resourcesCorrect answer
- BRead-only access to virtual networks
- COnly permission to view compartments
- DAdministrative access to all tenancy resources
Why this is the answer
The policy grants the manage verb for the virtual-network-family, allowing full management of virtual network resources in the specified compartment.
- Question 16Single Choice
Which IAM resource is a collection of users that can be assigned permissions through policies?
- AGroupCorrect answer
- BCompartment
- CPolicy
- DFault domain
Why this is the answer
An IAM group is a collection of users that can be referenced together in policies to grant the same permissions to all members.
- Question 17Multiple Select
Which two credentials are commonly used by OCI IAM users to authenticate API requests?
- AAPI signing keysCorrect answer
- BAuth tokensCorrect answer
- CCIDR blocks
- DAvailability domains
Why this is the answer
API signing keys and auth tokens are both IAM credentials used to authenticate API requests. CIDR blocks and availability domains are not credentials.
- Question 18Interactive
Given this dynamic group matching rule, which statements are true?
- AIt applies only to instances in the specified compartmentCorrect answer
- BIt is evaluated automatically based on resource attributesCorrect answer
- CIt assigns users to the dynamic group manually
- DIt directly grants network access privileges
Why this is the answer
A dynamic group rule is evaluated automatically using matching criteria based on resource attributes. The rule shown includes only instances in the specified compartment.
- Question 19Single Choice
Where can an OCI IAM policy be attached so it applies to resources?
- ATo a compartment or the tenancyCorrect answer
- BTo an individual user
- CTo a network security group
- DTo an object storage bucket
Why this is the answer
IAM policies are attached to a compartment or to the tenancy itself, and their permissions apply to resources within that scope.
- Question 20Multiple Select
Which two actions are IAM security best practices in OCI?
- AUse the principle of least privilegeCorrect answer
- BAvoid routine use of the administrator accountCorrect answer
- CGrant all users access to all compartments
- DEmbed credentials in application source code
Why this is the answer
Least privilege and avoiding routine administrator account use are key IAM best practices. Granting broad access or storing credentials in code is unsafe.
Networking
10 questions in this domain
- Question 21Single Choice
In Oracle Cloud Infrastructure, what is the primary purpose of IAM?
- AControlling access to cloud resourcesCorrect answer
- BProviding network connectivity
- CStoring backup data
- DMonitoring server performance
Why this is the answer
OCI IAM controls who can access cloud resources and what actions they can perform.
- Question 22Multiple Select
Which two resources are managed by IAM to grant access to Oracle Cloud Infrastructure resources?
- AUsersCorrect answer
- BGroupsCorrect answer
- CVCNs
- DSubnets
Why this is the answer
IAM uses users and groups as principals, then policies grant access to resources.
- Question 23Interactive
Review the policy in the code block. Which action is explicitly allowed?
- Ainspect virtual-network-familyCorrect answer
- Bmanage virtual-network-family
- Cuse virtual-network-family
- Dread virtual-network-family
Why this is the answer
The policy says that the group can inspect, not manage, the virtual network family.
- Question 24Single Choice
Which IAM resource groups multiple users together for access management?
- AGroupCorrect answer
- BPolicy
- CCompartment
- DRegion
Why this is the answer
A group is an IAM resource that contains users so that policies can be applied more efficiently.
- Question 25Multiple Select
Which two statements about OCI IAM policies are correct?
- AThey are written using Allow statementsCorrect answer
- BThey are automatically created for every user
- CThey specify what resources a principal can accessCorrect answer
- DThey encrypt all network traffic
Why this is the answer
IAM policies use Allow statements to grant access to resources; they are not auto-created per user.
- Question 26Interactive
Review the code block. Which group is granted the manage permission?
- ANetworkAdminsCorrect answer
- BNetworkAuditors
- CNetworkViewers
- DNetworkUsers
Why this is the answer
The policy begins with 'Allow group NetworkAdmins', so NetworkAdmins is the principal.
- Question 27Single Choice
An OCI IAM policy statement that begins with 'Allow' is mainly used to do what?
- AGrant permissionsCorrect answer
- BDeny all actions
- CAssign tags
- DCreate users
Why this is the answer
An Allow statement grants a principal permission to perform actions on specified cloud resources.
- Question 28Multiple Select
Which two elements are typically part of an OCI IAM policy statement?
- APrincipalCorrect answer
- BResource typeCorrect answer
- CPacket size
- DSubnet mask
Why this is the answer
IAM policy statements identify a principal and a resource type, along with what actions are allowed.
- Question 29Interactive
Based on the code block, what action verb is set for the group?
- AinspectCorrect answer
- Bmanage
- Cuse
- Dallow
Why this is the answer
The policy clearly identifies 'inspect' as the action that members of NetworkViewers can perform.
- Question 30Single Choice
In Oracle Cloud Infrastructure, which type of user typically has the authority to create IAM policies?
- ATenancy administratorCorrect answer
- BNetwork viewer
- CStorage operator
- DCompute user
Why this is the answer
Tenancy administrators have high-level permissions and are typically responsible for managing IAM policies.
Observability and Management
4 questions in this domain
- Question 31Single Choice
What is the primary function of OCI Identity and Access Management (IAM)?
- ADefining which users and groups can access which OCI resourcesCorrect answer
- BManaging physical hardware installation
- CCreating virtual machines automatically
- DMonitoring application performance only
Why this is the answer
IAM controls access to OCI resources by managing users, groups, policies, and permissions.
- Question 32Multiple Select
Which two items are core components of OCI IAM? (Choose two.)
- ACompartmentsCorrect answer
- BPoliciesCorrect answer
- CAvailability Domains
- DVCN Flow Logs
Why this is the answer
Compartments help organize resources, and policies define resource access. Availability Domains and VCN Flow Logs are not IAM components.
- Question 33Interactive
Review the code block. Which type of IAM resource is being shown?
- AA policy statementCorrect answer
- BA group membership
- CA compartment hierarchy
- DA user credential
Why this is the answer
The code block shows an IAM policy statement that grants a group permission to manage resources in a compartment.
- Question 34Single Choice
In OCI IAM, what is a compartment used for?
- AIsolating and organizing cloud resources for access controlCorrect answer
- BAssigning public IP addresses to resources
- CStoring database backups
- DConfiguring application load balancers
Why this is the answer
Compartments help organize and isolate cloud resources, allowing administrators to apply fine-grained access control.
Storage
8 questions in this domain
- Question 35Single Choice
In Oracle Cloud Infrastructure, what does the service abbreviation IAM stand for in the context of governance and security?
- AIdentity and Access ManagementCorrect answer
- BInfrastructure and Availability Management
- CInformation Asset Management
- DIntegrated Access Monitoring
Why this is the answer
IAM stands for Identity and Access Management. It controls access to OCI resources by defining users, groups, policies, and compartments.
- Question 36Multiple Select
Which of the following are core components of Oracle Cloud Infrastructure Identity and Access Management?
- AUsersCorrect answer
- BGroupsCorrect answer
- CPoliciesCorrect answer
- DObject Storage buckets
Why this is the answer
Core IAM components include users, groups, policies, compartments, and dynamic groups. Object Storage buckets are a storage service resource, not an IAM component.
- Question 37Interactive
Look at the IAM policy in the code block. What privilege does the group have over object-family resources?
- AFull managementCorrect answer
- BRead-only access
- CMetadata inspection only
- DAccess to logs only
Why this is the answer
The manage verb grants full control over the specified resource family. StorageAdmins can create, read, update, delete, and otherwise manage object-family resources in the tenancy.
- Question 38Single Choice
Which IAM element represents the root container for all of an organization's Oracle Cloud Infrastructure resources?
- ATenancyCorrect answer
- BCompartment
- CGroup
- DPolicy
Why this is the answer
The tenancy is the root container that includes all compartments and resources. IAM policies and compartments live inside it.
- Question 39Multiple Select
Which of the following are valid verbs that can be used in an OCI IAM policy statement?
- AinspectCorrect answer
- BreadCorrect answer
- CuseCorrect answer
- Ddelete
Why this is the answer
OCI IAM policy statements use the verbs inspect, read, use, and manage. Delete is not a top-level policy verb; it is covered by higher-level verbs.
- Question 40Interactive
Based on the IAM policy in the code block, which access level can the group perform on bucket resources in the compartment?
- Ainspect
- BreadCorrect answer
- Cuse
- Dmanage
Why this is the answer
The policy includes the read verb, so the group can read bucket resources but not modify them. Read access is broader than inspect but narrower than use or manage.
- Question 41Single Choice
In an OCI IAM policy statement, which element defines what resources a permission applies to?
- AThe subject group
- BThe policy verb
- CThe resource typeCorrect answer
- DThe condition
Why this is the answer
The resource type, such as object-family or bucket, is the target of the access rule. It appears after the verb in a policy statement.
- Question 42Multiple Select
Which of the following are required elements when creating a user access policy in OCI IAM?
- AA user groupCorrect answer
- BA verbCorrect answer
- CA resource typeCorrect answer
- DA tag namespace
Why this is the answer
A user access policy needs a subject group, an access verb, a resource type, and a location. Tag namespaces are not required for policy syntax.
Frequently asked questions
Everything about the Oracle Cloud Infrastructure 2026 Architect Associate question bank and how to use it.