Practice 1Z0-1072-26 exam questions across 4 domains. Detailed answer explanations. Start with 10 free questions — no signup required.
Loading practice session...
OCI Architect Associate is a Oracle certification with approximately 50 questions in 90 minutes. The table below shows the exam weighting published for each domain, so you can decide where to spend your study time instead of working through the syllabus in order.
| Domain | Exam weight | What it covers |
|---|---|---|
| OCI Networking | 35% | Design VCNs, connectivity, and network security for OCI workloads |
| OCI Storage | 25% | Architect storage solutions across Object, Block, File, and Archive |
| OCI Compute | 20% | Design compute architectures for scalability and availability |
| OCI Identity and Access Management | 20% | Design identity, access, and governance for OCI resources |
A passing study plan usually trails the weighting: spend the most sessions on OCI Networking (35%), then check the next domain down before moving on. If your accuracy on a high-weight domain stays under 80%, more practice there is worth more than another pass at a low-weight topic.
These questions come from the OCI Architect Associate practice bank. Read the rationale even when you answer correctly — the explanation is usually where the exam technique lives.
A regional bus operator patches close to four hundred Linux servers each month, and its SRE refuses to place a public address on any of them. Auditors also insist the machines stay unreachable from outside, yet the patch agent still has to pull packages from vendor mirrors on the open web. Which OCI object provides outbound-only access while the servers remain invisible from the internet?
Answer: C. Option C is correct. Placing a NAT Gateway in the VCN and pointing the segment's default route at it gives the patch traffic an outbound path through a translated address, so the servers reach vendor mirrors while nothing on the internet can open a session to them. Option D would leave those downloads with no route out, since a service path reaches only Oracle-published endpoints. Option A would require exactly the addresses the auditors reject, and Option B forwards egress only toward attachments it already has.
Two production VCNs in different OCI regions must exchange private application traffic. The design must not expose the workloads to the public internet, and the address ranges of the two VCNs do not overlap. Which connectivity option should the architect implement?
Answer: B. Option B is correct. Remote peering attaches a dynamic routing gateway to each VCN and connects those two gateways across regions, which routes private traffic between the non-overlapping address ranges with no public exposure and is the cross-region counterpart of local peering. Option A is wrong because local peering gateways join VCNs within a single region and cannot span two regions. Option D is wrong because a service gateway provides private access to Oracle services and carries no traffic between VCNs. Option C is wrong because routing the traffic through internet gateways exposes the workloads publicly, and encrypting in transit does not satisfy a network isolation requirement.
A compliance rule requires that objects in an Object Storage bucket be protected from deletion or overwrite for ninety days after upload, but the application must still be able to add new objects and read existing ones during that window. Which Object Storage feature enforces this?
Answer: A. Option A is correct. An Object Storage retention rule places a time-bound lock that prevents objects from being deleted or overwritten until the retention duration elapses, while still allowing new uploads and reads during the window. Option D is incorrect because versioning preserves earlier versions but does not prevent a delete or an overwrite of the current object. Option B is incorrect because lifecycle policies move objects between storage tiers and do not lock them against modification. Option C is incorrect because public access settings are not a retention control and would not stop an authorized principal from overwriting an object.
You can answer 10 1Z0-1072-26 practice questions free without creating an account. Each one is graded instantly with a written explanation. A free account keeps your progress, and the full bank (300+ questions) unlocks with a subscription.
The 1Z0-1072-26 exam is organised into 4 domains: OCI Networking (35%), OCI Storage (25%), OCI Compute (20%), OCI Identity and Access Management (20%). The weighting above shows how much of the exam each domain represents, so budget study time in the same proportion.
The 1Z0-1072-26 exam has approximately 50 questions in 90 minutes, with a passing score of 68%. Practice sets here are scored the same way as the real exam so you can see whether you are above or below the line before test day.
Start with OCI Networking, the highest-weighted domain, then work down the list. Answer a mixed set after each domain pass — mixing domains forces you to identify what a question is asking before recalling the content, which is what the real exam does.
No. These are original practice questions written against the published 1Z0-1072-26 exam objectives. They mirror the style, difficulty, and domain weighting of the real exam, but the actual exam content is confidential and is not reproduced here.
A practice set shows you where you are; the rest of the 1Z0-1072-26 cluster shows you what to do next. Work through the domain checklist, then return here for another mixed set.