Question bank
Oracle Cloud Infrastructure 2026 Cloud Operations Professional
41 Oracle Cloud Infrastructure 2026 Cloud Operations Professional questions with the correct answer and a written explanation, organised across 6 exam domains.
- 41 questions
- 6 domains
- Foundation level
certilumQuestion index
Jump straight to any question. Answers and explanations are inline.
Configuration Management Tools
8 questions in this domain
- Question 1Single Choice
Which Oracle Cloud Infrastructure service is the managed Terraform service used to automate the deployment and lifecycle of cloud resources?
- AResource ManagerCorrect answer
- BCloud Shell
- CCloud Advisor
- DVirtual Cloud Network
Why this is the answer
OCI Resource Manager is the managed Terraform service that provisions and updates resources from Terraform configuration files.
- Question 2Multiple Select
Which functions are provided by the Oracle Cloud Infrastructure Resource Manager service for Terraform-based configuration management?
- ACreating Terraform plansCorrect answer
- BApplying Terraform configurationsCorrect answer
- CDetecting drift in deployed resourcesCorrect answer
- DManaging user authentication
Why this is the answer
Resource Manager runs plan and apply jobs, and drift detection compares the last successful job with the current state of resources. Identity and access tasks are handled by IAM.
- Question 3Interactive
Review the displayed OCI CLI command and identify the flag that provides the path to the Terraform configuration directory.
- A--compartment-id
- B--display-name
- C--config-sourceCorrect answer
- D--terraform-version
Why this is the answer
The --config-source flag defines the Terraform configuration location. The other flags identify the compartment, service label, and Terraform version.
- Question 4Single Choice
Which type of file maintains metadata about Oracle Cloud resources after a Terraform configuration has been applied?
- ATerraform state fileCorrect answer
- BProvider configuration file
- CIAM policy file
- DOCI CLI config file
Why this is the answer
The Terraform state file stores resource metadata and is used to plan changes. The other listed files are not used to store state.
- Question 5Multiple Select
Which of the following source locations can Resource Manager use to obtain the Terraform configuration for a new stack?
- AGitHub repositoryCorrect answer
- BGitLab repositoryCorrect answer
- CObject Storage bucketCorrect answer
- DAutonomous Database table
Why this is the answer
Resource Manager can load configurations from supported Git providers and Object Storage buckets. A database table is not a configuration source.
- Question 6Interactive
Which language is used in the displayed configuration excerpt to declare Oracle Cloud Infrastructure resources?
- AHCLCorrect answer
- BJSON
- CYAML
- DPython
Why this is the answer
Terraform configurations are normally written in HCL, the HashiCorp Configuration Language. Resource Manager reads HCL to create the resources described.
- Question 7Single Choice
Which Resource Manager job type provisions, updates, or deletes resources so that the deployed environment matches the Terraform plan?
- APlan
- BApplyCorrect answer
- CDestroy
- DImport
Why this is the answer
Apply runs after a plan and implements resource changes. Plan only previews changes, while destroy and import perform different operations.
- Question 8Multiple Select
Which elements are commonly found in Terraform configuration files that Resource Manager reads to build an execution plan?
- AProvider definitionsCorrect answer
- BResource declarationsCorrect answer
- CVariable declarationsCorrect answer
- DState file backups
Why this is the answer
Terraform configuration files include providers, resource blocks, variables, and outputs. The state file is generated after resources are managed.
Cost and Performance Optimization
7 questions in this domain
- Question 9Single Choice
What is the primary purpose of Cost Analysis in Oracle Cloud Infrastructure?
- ATo explore OCI costs and usage trendsCorrect answer
- BTo deploy compute resources automatically
- CTo configure network security rules
- DTo create user access policies
Why this is the answer
Cost Analysis provides visibility into OCI spending and usage, allowing teams to identify optimization opportunities and manage cloud costs.
- Question 10Multiple Select
Which two Oracle Cloud Infrastructure capabilities are used to manage cloud costs?
- ABudgetsCorrect answer
- BCost AnalysisCorrect answer
- CVirtual Cloud Network (VCN)
- DOCI Identity and Access Management (IAM)
Why this is the answer
Budgets and Cost Analysis are cost management services. VCN and IAM provide networking and access control, not cost monitoring.
- Question 11Interactive
What action does the OCI CLI command in the code block perform?
- AIt creates a new monthly budgetCorrect answer
- BIt lists all budgets in the compartment
- CIt removes the existing monthly budget
- DIt generates a cost and usage report
Why this is the answer
The budget create command creates a new budget in the specified compartment; it does not list, delete, or report budgets.
- Question 12Single Choice
What is a primary benefit of enabling Compute autoscaling for an OCI workload?
- AIt automatically adjusts compute capacity to match demandCorrect answer
- BIt applies security rules to compute instances
- CIt backs up every application database
- DIt removes the need for performance monitoring
Why this is the answer
Autoscaling adjusts compute capacity according to workload demand, reducing overprovisioning and supporting performance targets.
- Question 13Multiple Select
Which two practices help optimize costs while protecting workload performance?
- AStopping unused compute instancesCorrect answer
- BRightsizing underutilized resourcesCorrect answer
- CDeploying workloads on the largest available shapes
- DRemoving all cost tracking tags from resources
Why this is the answer
Stopping unused resources and right-sizing shapes reduce waste while maintaining the capacity required for application performance.
- Question 14Interactive
Which two statements describe the result of the OCI CLI command in the code block?
- AIt returns compute instances in the RUNNING stateCorrect answer
- BIt returns compute instances in the STOPPED state
- CIt limits the results to the specified compartmentCorrect answer
- DIt creates a new compute instance in the compartment
Why this is the answer
The CLI command lists only RUNNING instances inside a single compartment; it does not return stopped instances or create instances.
- Question 15Single Choice
What is the purpose of a cost tracking tag in Oracle Cloud Infrastructure?
- AIt groups resource cost and usage data by tag valuesCorrect answer
- BIt automatically changes resource shapes based on load
- CIt defines routing rules between virtual cloud networks
- DIt creates security policies for user access
Why this is the answer
Cost tracking tags allow Cost Analysis to group and report spend by custom dimensions, helping teams understand and control costs.
Deploying and Managing Resources
4 questions in this domain
- Question 16Single Choice
In Oracle Cloud Infrastructure, which element is used as the primary logical container for organizing and isolating resources?
- ACompartmentCorrect answer
- BRegion
- CAvailability Domain
- DVirtual Cloud Network
Why this is the answer
A compartment is a primary logical container in OCI for organizing and isolating cloud resources. Regions, availability domains, and VCNs describe physical or network boundaries, not resource organization containers.
- Question 17Multiple Select
Which two statements about OCI compartments are correct?
- ACompartments can be nested to create a hierarchy.Correct answer
- BEach new cloud resource is created inside a compartment.Correct answer
- CCompartments replace the need for network security lists.
- DCompartments automatically replicate resources across all global regions.
Why this is the answer
OCI compartments can be nested, and all cloud resources belong to a compartment. Compartments do not replace network security or automatically replicate resources across regions.
- Question 18Interactive
Review the OCI command in the code block. What does this command do?
- AIt lists compute instances in the specified compartment and availability domain.Correct answer
- BIt launches a new compute instance in the given compartment.
- CIt terminates all compute instances that are currently running.
- DIt displays the service limits for the tenancy.
Why this is the answer
The command uses the OCI CLI compute instance list operation with compartment and availability domain parameters. Therefore, it retrieves and lists the matching compute instances.
- Question 19Single Choice
What is the correct way to request more capacity after reaching an OCI resource limit?
- ASubmit a service limit increase request for the tenancy.Correct answer
- BCreate a new tenancy without submitting any request.
- CDelete the root compartment and recreate it with a larger quota.
- DUse the operating system filesystem to change the internal OCI quota.
Why this is the answer
OCI service limits are managed by Oracle. When more capacity is needed, the correct action is to submit a service limit increase request through the OCI Console or an approved process.
Identity and Security
10 questions in this domain
- Question 20Single Choice
In the context of Oracle Cloud Infrastructure identity and security, what is the primary purpose of an IAM policy?
- ADetermines permitted resource operationsCorrect answer
- BProvides physical data center security
- CCreates virtual cloud networks
- DDesigns database schemas
Why this is the answer
OCI IAM policies determine which groups can act on which resources. The policy grants authorization after the user or service principal is authenticated.
- Question 21Multiple Select
Which of the following OCI entities are used by IAM to control access to cloud resources? Select all that apply.
- AUsersCorrect answer
- BGroupsCorrect answer
- CVirtual cloud networks
- DFault domains
Why this is the answer
Users and groups identify principals in IAM policies. VCNs and fault domains are infrastructure constructs, not identity and access control entities.
- Question 22Interactive
Refer to the OCI IAM policy statement displayed in the code block. Which access result does it produce for the named group?
- AManage network resources in the Network compartmentCorrect answer
- BRead compute instances in the Network compartment
- CManage users across the tenancy
- DDelete object storage buckets
Why this is the answer
This IAM policy allows the NetworkAdmins group to perform management actions on the virtual-network-family inside the Network compartment.
- Question 23Single Choice
What is an OCI compartment and what role does it play when cloud resources are deployed?
- ALogical isolation container for cloud resourcesCorrect answer
- BDedicated physical server
- CLoad balancer configuration
- DDatabase backup repository
Why this is the answer
Compartments are logical containers for cloud resources. They support security by allowing policies and administrators to organize and isolate deployments.
- Question 24Multiple Select
Which security practices should be implemented when managing users and resources in an OCI tenancy? Select all that apply.
- AEnable MFA for administrator usersCorrect answer
- BGrant unrestricted access to every user
- CUse least-privilege policies for groupsCorrect answer
- DUse root user for daily administration
Why this is the answer
MFA and least-privilege policies restrict the impact of stolen credentials. The root user and tenancy-wide grants should be avoided for everyday operations.
- Question 25Interactive
Based on the policy shown in the code block, what access does the group receive in the specified compartment?
- ARead all resources in the Security compartmentCorrect answer
- BManage all resources in the tenancy
- CCreate resources in the Security compartment
- DRead resources only in the root compartment
Why this is the answer
This statement gives SecurityAnalysts read access to all resources in the Security compartment. It does not grant manage, create, or delete rights.
- Question 26Single Choice
Which sentence correctly describes a dynamic group in Oracle Cloud Infrastructure IAM and its typical use for running workloads?
- AResources matched by membership rulesCorrect answer
- BStatic list of human users
- CVirtual network group
- DStorage replication set
Why this is the answer
OCI dynamic groups allow service resources to obtain IAM permissions without a static user account. Membership is rule-based.
- Question 27Multiple Select
Which statements about OCI IAM policies are correct when you configure resource deployment and access? Select all that apply.
- AWritten in structured policy languageCorrect answer
- BScoped to a target compartmentCorrect answer
- CReplacement for IAM users
- DNetwork packet filter mechanism
Why this is the answer
Policies are written in a structured language and can be scoped to compartments. They specify access but do not replace users or perform network filtering.
- Question 28Interactive
Refer to the IAM policy in the code block and identify the operation that the named group is authorized to perform.
- AUse compute instances in the Production compartmentCorrect answer
- BDelete volumes in the Production compartment
- CManage user groups in the tenancy
- DCreate VCNs in the Production compartment
Why this is the answer
The use verb allows operational actions on the instance family in Production, but stops short of full management-level permissions.
- Question 29Single Choice
What is the meaning of the verb manage when used in an OCI IAM policy statement?
- AAll actions on the target resource typeCorrect answer
- BRead-only access to resources
- CAccess to metadata only
- DLimited to one-time actions
Why this is the answer
The manage verb is the broadest OCI IAM verb. It allows create, read, update, delete, and other lifecycle actions on the resource type named in the policy.
Observability
8 questions in this domain
- Question 30Single Choice
Which OCI service stores metric data and can raise alarms when a threshold is crossed?
- AMonitoringCorrect answer
- BLogging
- CAudit
- DResource Manager
Why this is the answer
OCI Monitoring stores metrics, evaluates metric queries against thresholds, and raises alarms when conditions are met.
- Question 31Multiple Select
Which options describe valid uses of the OCI Logging service? (Choose all that apply.)
- ACollect request and error logs from custom applications through an agent.Correct answer
- BAccess audit and service logs from supported OCI resources.Correct answer
- CGraph infrastructure utilization as a metric time series.
- DEvaluate tag-based cost tracking rules.
Why this is the answer
OCI Logging centralizes custom, service, and audit logs; it does not graph metrics or evaluate cost tracking rules.
- Question 32Interactive
Review the code block. Which OCI service does this CLI command interact with?
- AOCI MonitoringCorrect answer
- BOCI Logging
- COCI Audit
- DOCI Notifications
Why this is the answer
The command uses the 'monitoring' service prefix and lists alarms, so it targets OCI Monitoring.
- Question 33Single Choice
Which OCI resource is a logical container for organizing and isolating cloud resources?
- ACompartmentCorrect answer
- BCloud region
- CAvailability domain
- DService gateway
Why this is the answer
A compartment is a logical container that isolates resources and controls access through IAM policies.
- Question 34Multiple Select
Which OCI services are used to collect observability data? (Choose all that apply.)
- AOCI MonitoringCorrect answer
- BOCI LoggingCorrect answer
- COCI AuditCorrect answer
- DOCI Object Storage
Why this is the answer
Monitoring, Logging, and Audit provide metrics, logs, and event records for observability; Object Storage is a data storage service.
- Question 35Interactive
Read the code block. Which OCI service is accessed by this CLI command?
- AOCI LoggingCorrect answer
- BOCI Monitoring
- COCI Notifications
- DOCI Audit
Why this is the answer
The command uses the 'logging' service prefix and lists log groups, so it targets OCI Logging.
- Question 36Single Choice
Which statement best defines a metric in OCI Monitoring?
- AA numeric measurement emitted by a resource at a point in time.Correct answer
- BA log entry containing a recorded event.
- CA collection of user-defined tags for cost tracking.
- DA lifecycle policy applied to retained logs.
Why this is the answer
A metric is a time-series numeric measurement collected from a resource and used for monitoring and alarms.
- Question 37Multiple Select
Which resources can produce metrics monitored by OCI Monitoring? (Choose all that apply.)
- ACompute instancesCorrect answer
- BLoad balancersCorrect answer
- CBlock volumesCorrect answer
- DObject Storage lifecycle policies
Why this is the answer
Compute instances, load balancers, and block volumes emit resource metrics; Object Storage lifecycle policies are not metrics.
Reliability and Business Continuity
4 questions in this domain
- Question 38Single Choice
Which boundary provides physical isolation against hardware failures within a single Availability Domain?
- AFault DomainCorrect answer
- BRegion
- CCompartment
- DTenancy
Why this is the answer
A Fault Domain is a logical data center boundary within an Availability Domain. It limits the impact of hardware failures and supports resilient resource placement.
- Question 39Multiple Select
Which two actions support business continuity when you manage cloud-deployed resources and need to recover from an outage?
- APerform automated backupsCorrect answer
- BEstablish a disaster recovery siteCorrect answer
- CDisable monitoring alerts
- DDelete archived configurations
Why this is the answer
Automated backups preserve data, and a disaster recovery site enables restoration after an outage. Disabling monitoring alerts or deleting archives increases operational risk and reduces continuity.
- Question 40Interactive
What is the intended outcome of the OCI CLI command shown in the code block?
- ACreate a Resource Manager stackCorrect answer
- BStart a container cluster
- CTrigger a database backup
- DModify a network security list
Why this is the answer
Resource Manager stack create registers a Terraform configuration as a stack in OCI Resource Manager. After creation, the stack can be used to plan and apply the described infrastructure.
- Question 41Single Choice
What is the main goal of business continuity planning for cloud operations?
- AMaintain or rapidly resume operations after a disruptionCorrect answer
- BConsolidate resources to a single region
- CRemove all manual operational oversight
- DEliminate the need for data backups
Why this is the answer
Business continuity planning keeps essential workloads running or restores them quickly during disruptions. It includes recovery objectives, backups, failover, and clear operational procedures.
Frequently asked questions
Everything about the Oracle Cloud Infrastructure 2026 Cloud Operations Professional question bank and how to use it.