OCI ARCHITECT 3 STUDY GUIDE 2026 TESTED
QUESTIONS AND PRACTICE SOLUTION
GRADED A+
◉ Principal.
Answer: IAM entities that are allowed to interact with OCI resources
◉ what are two principals in OCI.
Answer: IAM Users and Resources
◉ what is a group in OCI.
Answer: are collection of users that have the same access to
resources
◉ AuthN.
Answer: Who you say you are
◉ AuthZ.
Answer: What permissions you are allowed to use (IAM policies)
◉ What are different ways to complete AuthN.
,Answer: User name and Password, API signing keys (use public
private key pair(RSA key pair PEM)), and Auth Tokens
◉ what are IAM policies.
Answer: Human readable statements to define granular permissions
(AuthZ)
◉ 4 levels of verbs in IAM policy, what are they.
Answer: Manage, Use, Read, Inspect
◉ Compartment.
Answer: used to collect related resources + isolate and control
access
◉ Can you share resources in two different compartments.
Answer: No - the resource created is dedicated to one compartment
◉ can you share resources from multiple regions in the same
compartment.
Answer: Yes
◉ in OCI can you set Quotas and Budgets on compartments?.
Answer: yes you can
,◉ What does CIDR stand for?.
Answer: Classless Inter-Domain Routing
◉ What is a subnet?.
Answer: group of IPs that are organized from a larger network
◉ How is NAT used in OCI.
Answer: It is used for Private network to reach out to internet but
does not allow internet to private network
◉ What is a service gateway used for.
Answer: It is used to access services that are on the internet in a
secured manner.
◉ What is a route table used for in VCN?.
Answer: Used to route network traffic through internet, on-
premises, and/or peered VCN.
◉ What is route table composed of?.
Answer: Destination CIDR block and route target.
, ◉ What is longest prefix match?.
Answer: This is used in route table where the more specific a
destination CIDR is, the more priority it has
◉ What is local peering.
Answer: This is used when VCNs are in the same region. VCNs
connect to each other via local peering gateway LPG
◉ What is remote peering.
Answer: used when VCNs are in different regions and use DRG for
connectivity
◉ What is Dynamic routing gateway V2 (DRG v2).
Answer: Used when there are a lot of VCNs (3-300). All VCNs
connect to single DRG for simplified routing
◉ What is a security list in OCI.
Answer: firewall rules that are applied to a subnet
◉ What is Network Security Group (NSG).
Answer: firewall rules applied to set of VNICs
◉ What are two ways to create fire wall rules in OCI.
QUESTIONS AND PRACTICE SOLUTION
GRADED A+
◉ Principal.
Answer: IAM entities that are allowed to interact with OCI resources
◉ what are two principals in OCI.
Answer: IAM Users and Resources
◉ what is a group in OCI.
Answer: are collection of users that have the same access to
resources
◉ AuthN.
Answer: Who you say you are
◉ AuthZ.
Answer: What permissions you are allowed to use (IAM policies)
◉ What are different ways to complete AuthN.
,Answer: User name and Password, API signing keys (use public
private key pair(RSA key pair PEM)), and Auth Tokens
◉ what are IAM policies.
Answer: Human readable statements to define granular permissions
(AuthZ)
◉ 4 levels of verbs in IAM policy, what are they.
Answer: Manage, Use, Read, Inspect
◉ Compartment.
Answer: used to collect related resources + isolate and control
access
◉ Can you share resources in two different compartments.
Answer: No - the resource created is dedicated to one compartment
◉ can you share resources from multiple regions in the same
compartment.
Answer: Yes
◉ in OCI can you set Quotas and Budgets on compartments?.
Answer: yes you can
,◉ What does CIDR stand for?.
Answer: Classless Inter-Domain Routing
◉ What is a subnet?.
Answer: group of IPs that are organized from a larger network
◉ How is NAT used in OCI.
Answer: It is used for Private network to reach out to internet but
does not allow internet to private network
◉ What is a service gateway used for.
Answer: It is used to access services that are on the internet in a
secured manner.
◉ What is a route table used for in VCN?.
Answer: Used to route network traffic through internet, on-
premises, and/or peered VCN.
◉ What is route table composed of?.
Answer: Destination CIDR block and route target.
, ◉ What is longest prefix match?.
Answer: This is used in route table where the more specific a
destination CIDR is, the more priority it has
◉ What is local peering.
Answer: This is used when VCNs are in the same region. VCNs
connect to each other via local peering gateway LPG
◉ What is remote peering.
Answer: used when VCNs are in different regions and use DRG for
connectivity
◉ What is Dynamic routing gateway V2 (DRG v2).
Answer: Used when there are a lot of VCNs (3-300). All VCNs
connect to single DRG for simplified routing
◉ What is a security list in OCI.
Answer: firewall rules that are applied to a subnet
◉ What is Network Security Group (NSG).
Answer: firewall rules applied to set of VNICs
◉ What are two ways to create fire wall rules in OCI.
