Question bank
Oracle Cloud Infrastructure 2026 Foundations Associate
40 Oracle Cloud Infrastructure 2026 Foundations Associate questions with the correct answer and a written explanation, organised across 4 exam domains.
- 40 questions
- 4 domains
- Foundation level
certilumQuestion index
Jump straight to any question. Answers and explanations are inline.
Core OCI Services
20 questions in this domain
- Question 1Single Choice
When studying Oracle Cloud Infrastructure, what does the acronym OCI stand for in Oracle's cloud offerings?
- AOracle Cloud InfrastructureCorrect answer
- BOracle Compute Instance
- COracle Cloud Integration
- DOracle Customer Interface
Why this is the answer
OCI stands for Oracle Cloud Infrastructure, which is Oracle's platform for delivering cloud computing services.
- Question 2Multiple Select
When designing a deployment on Oracle Cloud Infrastructure, which two concepts define its global geographic and fault-tolerant foundation?
- ARegionsCorrect answer
- BAvailability DomainsCorrect answer
- CObject Storage buckets
- DVirtual Cloud Networks
Why this is the answer
OCI uses regions and availability domains to provide geographic distribution and fault tolerance. Object Storage and VCNs are services, not global architecture concepts.
- Question 3Interactive
An OCI administrator runs the command shown in the code block. What kind of information does this command return?
- AList of OCI regionsCorrect answer
- BList of IAM users
- CList of compute instances
- DList of availability domains
Why this is the answer
The command oci iam region list returns region information, helping administrators see the regions available to their tenancy.
- Question 4Single Choice
In the Oracle Cloud Infrastructure operating model, what is the best definition of a tenancy for a customer?
- AA secure and isolated OCI partition for resourcesCorrect answer
- BA single virtual machine
- CA type of object storage bucket
- DA network firewall service
Why this is the answer
A tenancy is a secure and isolated partition within Oracle Cloud Infrastructure where a customer creates and manages cloud resources.
- Question 5Multiple Select
Which two OCI IAM resources are commonly used together to control access to cloud resources?
- AUsersCorrect answer
- BGroupsCorrect answer
- CVirtual Cloud Networks
- DObject Storage buckets
Why this is the answer
OCI IAM uses users and groups to manage identities and permissions. VCNs and Object Storage buckets are not IAM resources.
- Question 6Interactive
An administrator executes the OCI CLI command shown in the code block. What is the direct result of this action?
- AA new compartment named Finance is createdCorrect answer
- BThe Finance compartment is deleted
- CA list of existing compartments is displayed
- DThe Finance compartment is renamed
Why this is the answer
The command creates an IAM compartment called Finance inside the specified parent compartment.
- Question 7Single Choice
Within the Oracle Cloud Infrastructure resource hierarchy, what role does a compartment play for organizing resources?
- AA logical container for OCI resourcesCorrect answer
- BA physical data center
- CA virtual network gateway
- DA compute instance shape
Why this is the answer
A compartment is a logical container for organizing and isolating Oracle Cloud Infrastructure resources.
- Question 8Multiple Select
Which two services in Oracle Cloud Infrastructure are designed specifically for running compute workloads?
- AComputeCorrect answer
- BContainer Engine for KubernetesCorrect answer
- CObject Storage
- DIdentity and Access Management
Why this is the answer
OCI Compute provides virtual machines and bare metal instances, while OKE runs containerized workloads. Object Storage and IAM are not compute services.
- Question 9Interactive
The OCI CLI command in the code block is used to create which type of networking resource?
- AVirtual Cloud NetworkCorrect answer
- BSubnet
- CInternet Gateway
- DRoute Table
Why this is the answer
The oci network vcn create command creates a Virtual Cloud Network in the specified compartment.
- Question 10Single Choice
Within Oracle Cloud Infrastructure regional architecture, what is an Availability Domain designed to provide?
- AFault-tolerant data center isolationCorrect answer
- BA single physical server
- CA logical IAM policy container
- DA globally unique storage namespace
Why this is the answer
An Availability Domain is one or more data centers within a region. ADs are isolated from each other to prevent correlated failures.
- Question 11Multiple Select
Which two statements accurately describe Oracle Cloud Infrastructure regions and their relationship to availability domains?
- AA region is a localized geographic areaCorrect answer
- BA region contains one or more availability domainsCorrect answer
- CEvery region has exactly one availability domain
- DA region is the smallest OCI resource unit
Why this is the answer
A region is a localized geographic area that contains one or more availability domains. Regions are large-scale architecture components, not small resource units.
- Question 12Interactive
What type of information does the OCI CLI command displayed in the code block retrieve from the tenancy?
- AObject Storage namespaceCorrect answer
- BList of buckets
- CList of objects in a bucket
- DAvailability Domain name
Why this is the answer
The oci os ns get command returns the Object Storage namespace associated with the tenancy.
- Question 13Single Choice
Which OCI storage service is intended for storing large amounts of unstructured data such as images and backups?
- AObject StorageCorrect answer
- BBlock Volume
- CFile Storage
- DLocal NVMe storage
Why this is the answer
OCI Object Storage is designed for storing and retrieving unstructured data, including images, backups, and other object-based content.
- Question 14Multiple Select
Which two common methods can be used by an administrator to interact with and manage Oracle Cloud Infrastructure resources?
- AOracle Cloud ConsoleCorrect answer
- BOCI Command Line InterfaceCorrect answer
- COn-premises physical server
- DTelephone support
Why this is the answer
The Console and CLI are common ways to manage OCI resources. Physical servers and telephone support are not resource management interfaces.
- Question 15Interactive
The command in the code block is used to interact with which Oracle Cloud Infrastructure service?
- AComputeCorrect answer
- BObject Storage
- CNetworking
- DIdentity
Why this is the answer
The oci compute instance list command belongs to the Compute service and returns information about compute instances.
- Question 16Single Choice
What is the primary purpose of OCI Object Storage in an Oracle Cloud Infrastructure environment?
- AStoring unstructured dataCorrect answer
- BAttaching block volumes
- CCreating virtual networks
- DManaging IAM users
Why this is the answer
OCI Object Storage is primarily used for storing and retrieving unstructured data through an object-based interface.
- Question 17Multiple Select
Which two factors are most important to consider when selecting an OCI region for a new application deployment?
- AData residency or compliance requirementsCorrect answer
- BNetwork latency to end usersCorrect answer
- CConsole color scheme
- DNumber of compute shapes
Why this is the answer
Data residency, compliance, and latency are key factors for choosing a region. Console theme and compute shapes are not region selection criteria.
- Question 18Interactive
What does the OCI CLI command shown in the code block accomplish when run by an administrator?
- ALists IAM usersCorrect answer
- BCreates a new IAM user
- CDeletes an IAM user
- DChanges the user password
Why this is the answer
The oci iam user list command lists IAM users in the specified compartment or tenancy.
- Question 19Single Choice
What is the main purpose of the Oracle Cloud Infrastructure Identity and Access Management service?
- AControl access to OCI resourcesCorrect answer
- BProvide object storage
- CMonitor compute instances
- DCreate virtual cloud networks
Why this is the answer
OCI IAM controls who can access and manage resources in Oracle Cloud Infrastructure.
- Question 20Multiple Select
Which two options are valid compute offerings in the Oracle Cloud Infrastructure compute catalog?
- ABare metal instancesCorrect answer
- BVirtual machine instancesCorrect answer
- CObject Storage buckets
- DVirtual Cloud Networks
Why this is the answer
OCI Compute offers both bare metal and virtual machine instances. Object Storage and VCNs are not compute offerings.
Getting Started with OCI
6 questions in this domain
- Question 21Single Choice
In Oracle Cloud Infrastructure, what does the term 'tenancy' refer to?
- AThe physical data center within a region
- BA secure, logically isolated partition of OCI resourcesCorrect answer
- CA network gateway for internet connectivity
- DA command used to manage OCI resources
Why this is the answer
A tenancy in OCI is a secure and isolated partition of resources created when you sign up for Oracle Cloud Infrastructure.
- Question 22Multiple Select
Which of the following are considered core OCI Identity and Access Management (IAM) components?
- AUsersCorrect answer
- BGroupsCorrect answer
- CCompartmentsCorrect answer
- DCloud Shell
Why this is the answer
OCI IAM includes users, groups, and compartments to manage access to resources. Cloud Shell is a separate tool.
- Question 23Interactive
Review the command in the code block. Which OCI service is the command associated with?
- AComputeCorrect answer
- BNetworking
- CDatabase
- DIdentity and Access Management
Why this is the answer
The command uses 'oci compute instance list', so it interacts with the OCI Compute service.
- Question 24Single Choice
After creating your Oracle Cloud Infrastructure account, what is the immediate next step to start managing resources?
- ASign in to the OCI ConsoleCorrect answer
- BCreate a virtual cloud network
- CCreate a compartment
- DLaunch a compute instance
Why this is the answer
The first step after account creation is to sign in to the OCI Console, where you can manage all OCI resources.
- Question 25Multiple Select
Which statements accurately describe OCI regions and availability domains?
- AA region contains one or more availability domainsCorrect answer
- BEach availability domain is isolated from the othersCorrect answer
- CAll availability domains are in different geographic regions
- DAvailability domains in the same region are located independentlyCorrect answer
Why this is the answer
OCI regions contain one or more ADs. Each AD is isolated and independent but within the same region.
- Question 26Interactive
The code block shows a command to create a resource. What will the command output include?
- AA new VCN resource IDCorrect answer
- BA new availability domain
- CA new user account
- DA new OCI region
Why this is the answer
The command uses 'oci network vcn create', so it creates a new virtual cloud network (VCN) and outputs its OCID.
Governance and Administration
4 questions in this domain
- Question 27Single Choice
In Oracle Cloud Infrastructure, what is the top-level container that holds all resources and is created when you sign up?
- ATenancyCorrect answer
- BRegion
- CCompartment
- DAvailability domain
Why this is the answer
The tenancy is the root container for all OCI resources and is created when you register for Oracle Cloud Infrastructure.
- Question 28Multiple Select
In Oracle Cloud Infrastructure, compartments are used to organize and manage resources. Which statements about compartments are correct? Select all that apply.
- AA compartment is a logical container for resources.Correct answer
- BCompartments can be nested inside other compartments.Correct answer
- CCompartments provide an access-control boundary.Correct answer
- DA compartment can span multiple tenancies.
Why this is the answer
Compartments are logical containers that organize resources, can be nested, and provide access control boundaries. A compartment cannot span multiple tenancies.
- Question 29Interactive
Review the Oracle Cloud Infrastructure command-line interface command shown in the code block. What administrative task does it perform?
- AIt lists compartments accessible to the user.Correct answer
- BIt deletes a compartment.
- CIt creates a new user.
- DIt assigns a policy to a compartment.
Why this is the answer
The command lists compartments accessible to the current user in the specified tenancy, which helps administrators review governance structure.
- Question 30Single Choice
In Oracle Cloud Infrastructure Identity and Access Management (IAM), which option best describes the purpose of a group?
- AA collection of users that policies can grant access to.Correct answer
- BA type of storage service.
- CA logical container for compute instances.
- DA single-user account with administrative rights.
Why this is the answer
A group is a set of users configured in IAM; policies grant permissions to groups, not directly to each user.
Security Services
10 questions in this domain
- Question 31Single Choice
What is the primary purpose of the Oracle Cloud Infrastructure Identity and Access Management (IAM) service?
- AManage compute instances
- BControl access to OCI resourcesCorrect answer
- CStore encryption keys
- DMonitor security threats
Why this is the answer
OCI IAM is the service used to manage identities and control access to OCI resources by defining who can take action on specific resources.
- Question 32Multiple Select
Which of the following are Oracle Cloud Infrastructure security services?
- ACloud GuardCorrect answer
- BVaultCorrect answer
- CObject Storage
- DSecurity ZonesCorrect answer
Why this is the answer
Cloud Guard, Vault, and Security Zones are OCI security services, while Object Storage is a data storage service rather than a security service.
- Question 33Interactive
What does the following OCI policy statement permit the group CompartmentAdmins to do?
- AManage all resources in the tenancy
- BManage virtual network resources in the Networking compartmentCorrect answer
- CView all security policies
- DOnly manage compute instances
Why this is the answer
The policy grants the manage permission on the virtual-network-family specifically within the Networking compartment.
- Question 34Single Choice
Which Oracle Cloud Infrastructure service is used to store and manage sensitive data such as encryption keys and secrets?
- ACloud Guard
- BVaultCorrect answer
- CIAM
- DSecurity Zones
Why this is the answer
OCI Vault is a managed service that securely stores and manages encryption keys and secrets for use in OCI services and applications.
- Question 35Multiple Select
Which capabilities are provided by Oracle Cloud Guard?
- ADetects security misconfigurationsCorrect answer
- BMonitors and responds to threatsCorrect answer
- CAutomates investigation and remediationCorrect answer
- DManages user passwords
Why this is the answer
Cloud Guard detects security misconfigurations, monitors for threats, and automates investigation and remediation, but it does not manage user passwords.
- Question 36Interactive
What does the following OCI CLI command do?
- ALists all security lists in the specified compartmentCorrect answer
- BCreates a new security list
- CDeletes a security list
- DDisplays details of a single security list
Why this is the answer
The command uses the OCI CLI to list all security lists in the compartment identified by the given OCID.
- Question 37Single Choice
Which Oracle Cloud Infrastructure feature provides a logical collection of related resources and serves as a boundary for access policies?
- ACompartmentsCorrect answer
- BVaults
- CRegions
- DSecurity Lists
Why this is the answer
Compartments are logical collections of related OCI resources and are used as policy boundaries to control access for those resources.
- Question 38Multiple Select
Which statements about Oracle Cloud Infrastructure Security Zones are correct?
- AThey create a compartment with increased security controlsCorrect answer
- BThey enforce policies that prevent insecure resource configurationsCorrect answer
- CThey eliminate the need for all other security services
- DThey help ensure resources are deployed in a secure environmentCorrect answer
Why this is the answer
Security Zones create secure compartments that enforce policies to prevent insecure configurations, but they do not eliminate the need for other security services.
- Question 39Interactive
What is the effect of this OCI policy statement?
- AFull access to all resources in the compartment
- BAbility to create and manage security lists in the Networking compartmentCorrect answer
- CRead-only access to security lists
- DNo effect because the syntax is invalid
Why this is the answer
The policy grants the manage permission on security-lists resources within the Networking compartment, allowing full control over those security lists.
- Question 40Single Choice
What is the primary function of Oracle Cloud Infrastructure Vault?
- AMonitor security threats
- BManage encryption keys and secretsCorrect answer
- CDefine access policies
- DIsolate network traffic
Why this is the answer
OCI Vault is used to securely manage encryption keys and secrets, such as database passwords and API keys, for OCI resources and applications.
Frequently asked questions
Everything about the Oracle Cloud Infrastructure 2026 Foundations Associate question bank and how to use it.