Oracle Cloud Infrastructure 2026 Foundations Associate

Last checked October 22, 2026 against the official Oracle exam page.

1. Question 1Security and Identity

   Which OCI service manages encryption keys and secrets for applications?

   1. ACompute, which runs the instances that execute the application workloads
   2. BEvents, which triggers actions when a resource in the tenancy changes state
   3. CLogging, which records the log entries that the services write during operation
   4. DVault, which manages encryption keys and secrets for applications
   Show answer and explanationHide answer

   Correct answer: D

   Vault manages encryption keys and secrets. Compute, Logging and Events serve other purposes.

2. Question 2Networking

   Which gateway lets instances in a private subnet reach the internet for outbound traffic, without allowing inbound connections from the internet?

   1. AA dynamic routing gateway, which connects the virtual cloud network to other networks
   2. BAn internet gateway, which allows inbound and outbound traffic for public subnets
   3. CA NAT gateway, which allows outbound connections from private subnets only
   4. DA service gateway, which connects the virtual cloud network to Oracle services only
   Show answer and explanationHide answer

   Correct answer: C

   A NAT gateway allows outbound connections from private subnets without allowing unsolicited inbound traffic. An internet gateway allows inbound traffic to public subnets, and a dynamic routing gateway and a service gateway connect to other networks or to Oracle services.

3. Question 3Storage and Databases

   Which Object Storage tier is designed for rarely accessed data, at the lowest storage cost, with a retrieval delay?

   1. AStandard, which is designed for frequently accessed data with immediate retrieval
   2. BArchive, which is designed for rarely accessed data at lower cost with a retrieval delay
   3. CBlock, which provides persistent disks attached to compute instances
   4. DFile, which provides shared network file systems mounted by compute instances
   Show answer and explanationHide answer

   Correct answer: B

   Archive storage is designed for data that is rarely accessed, at a lower cost, with a retrieval delay. Standard suits frequent access, and Block and File are different storage services.

4. Question 4Cloud Concepts and OCI Architecture

   A company must keep its data inside one country for legal reasons. Which OCI concept should it use to meet this requirement?

   1. AChoose a region located in that country for the resources that hold the data
   2. BChoose the largest compute shape so that all data stays on one physical server
   3. CEnable a site-to-site VPN only, since the VPN keeps traffic inside the company network
   4. DPlace every resource in a single compartment, which keeps data inside one boundary
   Show answer and explanationHide answer

   Correct answer: A

   A region is the geographic location where resources are deployed, so choosing one in the required country keeps the data there. Shape size, VPN use and compartments do not control where data is physically stored.

5. Question 5Compute

   Which compute shape lets the number of OCPUs and the amount of memory be chosen independently?

   1. AObject Storage tiers, which set the performance of the storage the instance uses
   2. BFixed shapes only, whose CPU and memory are set by the shape name and cannot change
   3. CBare metal shapes with a fixed core count, which cannot be resized after launch
   4. DFlexible shapes, such as VM.Standard.E4.Flex
   Show answer and explanationHide answer

   Correct answer: D

   Flexible shapes let the OCPU count and memory be selected independently within limits. Fixed and bare metal shapes have set configurations, and Object Storage tiers are storage options rather than compute shapes.