Oracle Cloud Infrastructure 2025 Architect Professional Intermediate Practice Exam: Medium Difficulty 2025

A financial services company is designing a multi-tier application architecture in OCI. The application must meet regulatory requirements for data residency and have zero data loss tolerance. The database tier experiences variable workloads with peak traffic during business hours. Which architecture design best satisfies these requirements?

Your organization runs a containerized microservices application on OCI Container Engine for Kubernetes (OKE). The development team reports that some pods are being evicted during peak loads, and they need better resource allocation. The application has three services: a frontend (CPU-intensive), a backend API (memory-intensive), and a batch processor (both CPU and memory intensive). What is the most appropriate approach to optimize resource allocation?

A healthcare organization must implement end-to-end encryption for patient data stored in Object Storage and ensure that encryption keys are rotated quarterly with full audit trails. The organization cannot allow Oracle to manage the master encryption keys. Which combination of OCI services best meets these requirements?

An e-commerce company is migrating their on-premises application to OCI. The application consists of web servers, application servers, and a database. During migration planning, they discover the database is 50TB and contains data that must remain accessible during migration with less than 5 minutes of downtime. What migration strategy should the architect recommend?

A company is designing a multi-region disaster recovery solution for their critical application in OCI. The primary region is in Ashburn and the DR region is in Phoenix. The application uses Load Balancer, Compute instances, and Autonomous Database. The RTO requirement is 4 hours and RPO is 1 hour. Which DR architecture should be implemented?

Your organization has deployed a three-tier web application across multiple availability domains in OCI. The security team requires that database servers have no direct internet access, application servers can access specific external APIs, and web servers are publicly accessible. Network traffic between tiers must be encrypted and logged. How should you configure the network architecture?

A SaaS company serves customers globally and needs to deploy their application in OCI with automatic traffic distribution based on geographic proximity and health checks. The application runs in three regions: Mumbai, Frankfurt, and Toronto. They also need to redirect traffic away from a region during maintenance. Which OCI service configuration accomplishes this?

An enterprise is implementing a hub-and-spoke network topology in OCI with the hub VCN in one region and spoke VCNs across multiple regions. The security team requires centralized inspection of all inter-VCN traffic through a network firewall appliance. The solution must support up to 20 spoke VCNs and maintain low latency. What architecture should be implemented?

A company uses OCI Identity and Access Management (IAM) with multiple compartments for different departments. The security team needs to grant the DevOps team permission to manage compute instances and block volumes in the Development compartment, but only read access to the Production compartment. The team should not be able to create or delete compartments. How should the IAM policies be configured?

A company is migrating a legacy application to OCI that currently uses a shared file system accessed by multiple application servers. The file system contains 10TB of data with moderate I/O requirements and must support NFS protocol. The solution should provide high availability within a single region and support automatic backups. Which OCI storage service best meets these requirements?