OCI VCN Design Architecture Quiz

1. Which CIDR block size is recommended as a best practice for a VCN?

/16 or larger

/24 or smaller

/32 (single IP)

/8 (entire subnet)

2. Service Gateways in OCI allow instances to access which of the following without traversing the internet?

Oracle Cloud services like Object Storage and Databases

On-premises data centers

Other VCNs in different regions

Public websites and APIs

3. Which statement about DHCP options in a VCN is correct?

DHCP options define DNS servers and domain names for subnets

DHCP automatically assigns public IP addresses

DHCP options are required for all instances

DHCP replaces static IP configuration

4. What is the maximum transmission unit (MTU) size for traffic within a VCN?

1500 bytes

9000 bytes

512 bytes

Configurable per instance

5. Which connectivity option is used to connect an on-premises data center to an OCI VCN securely?

Site-to-Site VPN or FastConnect

Internet Gateway

NAT Gateway

VCN peering

6. Network Security Groups (NSGs) operate at which layer compared to security lists?

A more granular level (VNIC/instance)

A broader level (region-wide)

The same level but with encryption

Only for on-premises networks

7. Which of the following is true about security lists in OCI?

They are stateful and applied at the subnet level

They are stateless and applied at the instance level

They replace Network Security Groups entirely

They only control outbound traffic

8. What is the primary advantage of using a NAT Gateway over an Internet Gateway for private instances?

Instances remain private while accessing external resources

It provides faster network speeds

It encrypts all outbound traffic

It eliminates the need for security lists

9. What is the function of a route table in a VCN?

To define how packets are directed to their destinations

To encrypt all network traffic

To authenticate user access

To load balance traffic across instances

10. A subnet in OCI must be associated with which of the following?

A route table and security list

Only a security group

An Internet Gateway only

A NAT gateway exclusively

11. What is the maximum number of subnets you can create in a single VCN?

10

50

Unlimited

100

12. What is the primary purpose of a Virtual Cloud Network (VCN) in OCI?

To provide isolated, customizable networking for cloud resources

To automatically scale compute instances

To manage database backups

To monitor application performance metrics

13. Which type of gateway allows instances in a private subnet to initiate outbound connections without receiving inbound traffic?

NAT Gateway

Internet Gateway

Dynamic Gateway

Bastion Gateway

14. Which component controls inbound and outbound traffic at the subnet level?

Security List

Route Table

Internet Gateway

Network ACL

Submit

OCI Architect Associate VCN Design Quiz

1. Which CIDR block size is recommended as a best practice for a VCN?

2.

What first name or nickname would you like us to use?

2. Service Gateways in OCI allow instances to access which of the following without traversing the internet?

3. Which statement about DHCP options in a VCN is correct?

4. What is the maximum transmission unit (MTU) size for traffic within a VCN?

5. Which connectivity option is used to connect an on-premises data center to an OCI VCN securely?

6. Network Security Groups (NSGs) operate at which layer compared to security lists?

7. Which of the following is true about security lists in OCI?

8. What is the primary advantage of using a NAT Gateway over an Internet Gateway for private instances?

9. What is the function of a route table in a VCN?

10. A subnet in OCI must be associated with which of the following?

11. What is the maximum number of subnets you can create in a single VCN?

12. What is the primary purpose of a Virtual Cloud Network (VCN) in OCI?

13. Which type of gateway allows instances in a private subnet to initiate outbound connections without receiving inbound traffic?

14. Which component controls inbound and outbound traffic at the subnet level?

15. A public subnet must have a route to an ______ in its route table to allow internet access.

16. An Internet Gateway enables ______ connectivity between a VCN and the public internet.

17. A peering connection between two VCNs is called a ______ peering if both VCNs are in the same region.

18. A ______ is a logical grouping of subnets within a VCN that can be used for network segmentation.

19. A VCN can span multiple ______ within a single region for high availability.