Oracle Cloud Infrastructure 2025 Architect Associate (1Z0-1072-25) Practice Exam

What the Oracle Cloud Infrastructure 2025 Architect Associate (1Z0-1072-25) exam covers

• Identity and Access Management100 questions
• Networking188 questions
• Compute156 questions
• Storage172 questions

Free Oracle Cloud Infrastructure 2025 Architect Associate (1Z0-1072-25) sample questions

A sample of 10 questions with answers and explanations. Sign up free to practice all 616.

1. Question 1Compute

   A retail analytics team runs a Java service that is memory-bound (needs about 256 GB RAM) but uses only 8 OCPUs. Which shape lets them size OCPU count and memory independently to match this ratio without paying for unused cores?

   • AVM.Standard.E4.Flex, custom sizedCorrect
   • BBM.Standard.E4.128 bare metal
   • CVM.DenseIO.E4.Flex
   • DVM.Standard2.16 fixed shape
   ✓ Correct answer: A

   Flexible shapes such as VM.Standard.E4.Flex decouple OCPU count from memory allocation, so the team can provision 8 OCPUs with a high memory ratio instead of paying for a fixed bundle. This avoids over-provisioning cores just to reach the required RAM.

   Why the other options are wrong

   • BBare metal is fixed at 128 OCPUs with no per-core memory tuning, far more than needed for 8 OCPUs.
   • CDenseIO adds local NVMe optimized for storage IO, not aimed at custom OCPU-to-memory ratios.
   • DStandard2 is a fixed, non-flexible shape with a locked OCPU-to-memory ratio that cannot be tuned.
2. Question 2Compute

   A team created an Instance Pool but instances are all landing in the same fault domain, creating a single point of failure within the availability domain. What should the architect check or adjust?

   • AThe boot volume performance tier of each instance
   • BThe Instance Pool's fault domain distribution settingCorrect
   • CThe Object Storage tier used by the custom image
   • DThe IAM policy attached to the compartment
   ✓ Correct answer: B

   Checking and adjusting the placement configuration used by the pool ensures new instances are spread across the available fault domains instead of concentrating in one.

   Why the other options are wrong

   • ABoot volume performance tier is unrelated to fault domain spread.
   • CThe storage tier of the image source has no bearing on fault domain placement.
   • DIAM policy governs permissions, not physical instance placement.
3. Question 3Compute

   A high-frequency trading workload running on OKE needs near bare-metal CPU performance with no hypervisor overhead on the worker nodes. What should the architect choose?

   • AVirtual node pool
   • BManaged node pool using bare metal shapesCorrect
   • COCI Functions
   • DContainer Instances
   ✓ Correct answer: B

   Managed node pools can use bare metal Compute shapes as worker nodes, giving the trading workload direct access to physical CPU resources without virtualization overhead, which virtual nodes or serverless options cannot guarantee.

   Why the other options are wrong

   • AVirtual nodes run on Oracle-managed shared infrastructure, not dedicated bare metal chosen by the customer.
   • COCI Functions is a serverless FaaS model unsuited to a persistent, latency-sensitive trading engine.
   • DContainer Instances do not offer bare-metal-level dedicated performance guarantees.
4. Question 4Identity and Access Management

   A company's architecture calls for StorageAdmins to fully manage Block Volumes and Volume Groups, but not Object Storage buckets, scoped to compartment Data. Complete the policy: Allow group StorageAdmins to manage ___ in compartment Data

   • Aobject-family
   • Ball-resources
   • Cbuckets
   • Dvolume-familyCorrect
   ✓ Correct answer: D

   Using the volume-family aggregate resource-type keeps the grant focused on block storage, leaving object-family and other resource types untouched, which satisfies the requirement to exclude Object Storage.

   Why the other options are wrong

   • Aobject-family is Object Storage's resource-type, the opposite of what StorageAdmins should manage here.
   • Ball-resources would also grant control over Object Storage and every other resource type in Data.
   • Cbuckets alone would still be an Object Storage concept, not Block Volumes.
5. Question 5Identity and Access Management

   Why is periodic IAM policy review and optimization considered an architectural best practice rather than a one-time task?

   • AOCI automatically deletes unused policies every 90 days
   • BPolicies expire automatically after one year
   • CPolicy optimization is only relevant during initial setup
   • DAccess needs evolve, causing policies to drift from least privilegeCorrect
   ✓ Correct answer: D

   A policy that was correctly scoped at launch may accumulate unused permissions or become overly broad as requirements shift, so ongoing review is needed to keep the tenancy aligned with least-privilege principles.

   Why the other options are wrong

   • AOCI does not automatically delete policies; they persist until explicitly changed or removed.
   • BPolicies do not have a built-in expiration; they remain in effect until modified.
   • CAccess needs continue to evolve well beyond initial setup, making ongoing review valuable throughout the tenancy's lifecycle.
6. Question 6Networking

   Two private subnets in the same VCN both need the exact same routing: a NAT Gateway route and a Service Gateway route, nothing else. What is the simplest route table design?

   • ACreate a separate identical route table for each
   • BAssociate both subnets with one shared route tableCorrect
   • CMerge the two subnets into a single subnet
   • DLeave one subnet without any route table
   ✓ Correct answer: B

   Since both subnets need the same set of rules, the architect can create one route table with the NAT Gateway and Service Gateway rules and associate it with both subnets, avoiding duplicate configuration to maintain.

   Why the other options are wrong

   • ACreating duplicate identical route tables adds maintenance overhead with no functional benefit.
   • CMerging subnets changes the network design unnecessarily just to share routing rules.
   • DEvery subnet must have an associated route table; leaving one without any is not valid.
7. Question 7Networking

   A company already has FastConnect established for accessing OCI Object Storage over public peering, and now also needs private connectivity into their VCN's compute instances over the same physical cross-connect. What should the architect add?

   • AA second physical cross-connect only
   • BA NAT Gateway in the VCN
   • CA private peering virtual circuitCorrect
   • DA Local Peering Gateway
   ✓ Correct answer: C

   Multiple virtual circuits, both public and private peering, can typically be provisioned over the same physical FastConnect cross-connect, so a new private peering circuit is all that is needed rather than new physical infrastructure.

   Why the other options are wrong

   • AA new virtual circuit can be added on the existing physical connection without requiring a new cross-connect.
   • BA NAT Gateway supports private subnet outbound internet access, unrelated to inbound FastConnect routing.
   • DA Local Peering Gateway peers VCNs in the same region, not on-premises to VCN connectivity.
8. Question 8Networking

   A troubleshooting engineer runs Network Path Analyzer between a client on-premises and an OCI load balancer's private IP, and the tool reports the path is reachable through the DRG, route tables, and security rules, yet users still report connection failures. What should the engineer check next, since Path Analyzer only evaluates configuration, not live traffic?

   • ARecreate the DRG entirely
   • BApplication or backend health statusCorrect
   • CDelete the Network Visualizer diagram
   • DReduce the VTAP capture filter scope
   ✓ Correct answer: B

   Path Analyzer validates routing and security rule configuration statically, it cannot detect an unhealthy backend or an application-level failure, so live health status is the next logical thing to check.

   Why the other options are wrong

   • AThe DRG path was already confirmed reachable by the tool, recreating it does not address an application-level issue.
   • CThe visualizer diagram is unrelated to the live connectivity problem.
   • DVTAP filter scope adjustments affect mirroring, not the root cause of a live failure the analyzer cannot detect.
9. Question 9Storage

   A bare metal database server needs several additional data volumes attached. Which attachment type must be used?

   • AParavirtualized, for the simplest ongoing management
   • BEither type, chosen at random by the platform
   • CiSCSI, since bare metal instances require itCorrect
   • DAn NFS-based attachment through a mount target
   ✓ Correct answer: C

   Paravirtualized attachment is only available on virtual machine instances. Bare metal instances must attach Block Volumes using the iSCSI attachment type, which requires configuring the guest OS's iSCSI initiator.

   Why the other options are wrong

   • AParavirtualized attachment is not available on bare metal shapes.
   • BThe attachment type is a deliberate choice constrained by shape, not a random assignment.
   • DNFS mount targets belong to File Storage, not to attaching a Block Volume.
10. Question 10Storage

    A software vendor's build-artifact bucket has highly unpredictable access patterns: some artifacts are pulled daily for months, others go cold within days. The vendor wants to minimize storage cost without building custom automation to track per-object access recency. What is the most operationally simple solution?

    • AWrite a nightly CLI script to move objects
    • BSet a fixed 10-day lifecycle rule
    • CEnable Auto-Tiering on the bucketCorrect
    • DEnable cross-region replication
    ✓ Correct answer: C

    Since Auto-Tiering automatically tracks actual access recency at the object level, it removes the need for custom scripts or fixed-age rules while still minimizing cost for cold artifacts.

    Why the other options are wrong

    • AA custom nightly script works but is unnecessary engineering effort when a built-in feature already solves the problem.
    • BA fixed 10-day rule ignores actual access recency and can mis-tier artifacts still being pulled daily well past day 10.
    • DReplication copies data to another region for redundancy or DR; it does not change an object's storage tier or reduce per-object cost based on access.

Who this Oracle Cloud Infrastructure 2025 Architect Associate (1Z0-1072-25) practice exam is for

This practice set is for anyone preparing for the Oracle Cloud Infrastructure 2025 Architect Associate (1Z0-1072-25) exam at the intermediate level - from first-time candidates building a foundation to experienced Oracle Cloud practitioners doing a final review before test day. If you learn best by working through realistic questions and reading why each answer is right or wrong, it is built for you.

How to use this Oracle Cloud Infrastructure 2025 Architect Associate (1Z0-1072-25) practice exam

1. Start with the free sample questions above to gauge your current baseline.
2. Read the full explanation on every question, including why each wrong option is wrong.
3. Track your weak domains and focus your study where you are losing the most marks.
4. Once you are scoring consistently well, take a timed, full-length mock exam.
5. Use your readiness score to decide when you are ready to book the real Oracle Cloud Infrastructure 2025 Architect Associate (1Z0-1072-25) exam.

Related Oracle Cloud resources

• Oracle Cloud Infrastructure 2025 Architect Associate (1Z0-1072-25) study guideKey concepts
• Oracle Cloud practice examsAll Oracle Cloud
• Certification pathWhere this fits
• Certification exam guides & tipsBlog
• Plans & pricingFree & paid
• Oracle Cloud Infrastructure 2025 Foundations Associate (1Z0-1085-25) practice examRelated

Oracle Cloud Infrastructure 2025 Architect Associate (1Z0-1072-25) practice exam FAQ