OCI ARCHITECT 3 CERTIFICATION
EVALUATION 2026 FULL QUESTIONS AND
CORRECT ANSWERS
◉ Auth - API Signing Key
Answer: "API Signing Key is required when using the API in
conjunction with the SDK
The key is an RSA key pair in the PEM format (min 2048 bits
required)
In the interfaces, you can copy and paste the PEM public key"
◉ Auth - Username and Password
Answer: "Use the password to sign in to the web console
Administrator will provide you with a one-time password when
setting up your account
At first login, you are prompted to reset the password
◉ Auth Policy Format -
Answer: "Written in human-readable format:
Allow group <group_name> to <verb> <resource-type> in tenancy
<tenancy_name>
,Allow group <group_name> to <verb> <resource-type> in
comparrment <compartment_name> [where <conditions>]
ex. Allow group ProjectA_Admins to manage all-resources in
compartment ProjectA_compartment"""
◉ Authentication -
Answer: "2 ways IAM services authenticates a Principal - User name,
password and API Signing Key"
◉ Authorization -
Answer: "Process of specifiying what actions an authenticated
Principal can perform
Auth in IAM service done by defining specific priveleges in policies
and associating them with principals
Supports security principle of least privilege; by default, users are
not allowed to perform any actions (policies cannot be attached to
users, but only groups )
Policies are comprised of one or more statements which specifiy
what groups can access what resources and what level of access
users in that group have"
◉ Availability Domain -
Answer: "Multiple AD in each Region
High Scale High Performance Network
,Virtual Network
Services - Compute, Storage, DBMS, Network,
Connectivity and Edge
Governance"
◉ Availability Domain Components -
Answer: "Instances, Volumes, DB System, Subnets"
◉ Availability Domain/Zone -
Answer: "Fault tolerant
High Availability
Low latency to high bandwidth network — between availability
domain.
VCN — resides with in a single region but can cross multiple
availability zone.
You can have 10 VCN per Compartments (soft limit).
You can have 300 Subnets per VCN (soft limit)."
◉ Backup/Archive -
Answer: "Durable , low cost"
◉ Bare Metal -
, Answer: "No hypervisor involved - customers get the full bare metal
server (single-tenant model)
Gen 1 - Standard, High IO, Dense IO, up to 36 OCPU, 256 GB and
512GB RAM, 10 Gbps network bandwidth, Max 16 vNICs
Gen 2 instances, Standard, DenseIO, GPU, (higher bandwidth, more
cores, and more RAM )
52 OCPU, 192 (GPU), 768 GB RAM, Block storage only (Stand, GPU),
2 x 25 Gbps Network Bandwidth, and 24 max vNICs - (Only available
in IAD region)"""
◉ Bare Metal using boot volumes -
Answer: "Preserve boot disk content
Highliy durable boot disks
Compute Instance scaling"
◉ Benefits of DNS -
Answer: "• DNS Network operating for over 10+ years, leveraged by
thousands of customers, large and small, Enterprise, Business and
Web properties
• Support for OCI, other Cloud provider endpoints (AWS, Azure) and
private assets, including Cloud, CDNs and Data Centers
• Consistently lowest query latency performance
• Industry leading propagation time to ensure fast response to DNS
changes
EVALUATION 2026 FULL QUESTIONS AND
CORRECT ANSWERS
◉ Auth - API Signing Key
Answer: "API Signing Key is required when using the API in
conjunction with the SDK
The key is an RSA key pair in the PEM format (min 2048 bits
required)
In the interfaces, you can copy and paste the PEM public key"
◉ Auth - Username and Password
Answer: "Use the password to sign in to the web console
Administrator will provide you with a one-time password when
setting up your account
At first login, you are prompted to reset the password
◉ Auth Policy Format -
Answer: "Written in human-readable format:
Allow group <group_name> to <verb> <resource-type> in tenancy
<tenancy_name>
,Allow group <group_name> to <verb> <resource-type> in
comparrment <compartment_name> [where <conditions>]
ex. Allow group ProjectA_Admins to manage all-resources in
compartment ProjectA_compartment"""
◉ Authentication -
Answer: "2 ways IAM services authenticates a Principal - User name,
password and API Signing Key"
◉ Authorization -
Answer: "Process of specifiying what actions an authenticated
Principal can perform
Auth in IAM service done by defining specific priveleges in policies
and associating them with principals
Supports security principle of least privilege; by default, users are
not allowed to perform any actions (policies cannot be attached to
users, but only groups )
Policies are comprised of one or more statements which specifiy
what groups can access what resources and what level of access
users in that group have"
◉ Availability Domain -
Answer: "Multiple AD in each Region
High Scale High Performance Network
,Virtual Network
Services - Compute, Storage, DBMS, Network,
Connectivity and Edge
Governance"
◉ Availability Domain Components -
Answer: "Instances, Volumes, DB System, Subnets"
◉ Availability Domain/Zone -
Answer: "Fault tolerant
High Availability
Low latency to high bandwidth network — between availability
domain.
VCN — resides with in a single region but can cross multiple
availability zone.
You can have 10 VCN per Compartments (soft limit).
You can have 300 Subnets per VCN (soft limit)."
◉ Backup/Archive -
Answer: "Durable , low cost"
◉ Bare Metal -
, Answer: "No hypervisor involved - customers get the full bare metal
server (single-tenant model)
Gen 1 - Standard, High IO, Dense IO, up to 36 OCPU, 256 GB and
512GB RAM, 10 Gbps network bandwidth, Max 16 vNICs
Gen 2 instances, Standard, DenseIO, GPU, (higher bandwidth, more
cores, and more RAM )
52 OCPU, 192 (GPU), 768 GB RAM, Block storage only (Stand, GPU),
2 x 25 Gbps Network Bandwidth, and 24 max vNICs - (Only available
in IAD region)"""
◉ Bare Metal using boot volumes -
Answer: "Preserve boot disk content
Highliy durable boot disks
Compute Instance scaling"
◉ Benefits of DNS -
Answer: "• DNS Network operating for over 10+ years, leveraged by
thousands of customers, large and small, Enterprise, Business and
Web properties
• Support for OCI, other Cloud provider endpoints (AWS, Azure) and
private assets, including Cloud, CDNs and Data Centers
• Consistently lowest query latency performance
• Industry leading propagation time to ensure fast response to DNS
changes
