Oracle 1Z0-997 OCI Architect Professional Practice Exam
Prepare for the Oracle Cloud Infrastructure 2025 Architect Professional exam (1Z0-997-25) with scenario-based, source-cited practice questions across all seven topic areas — cloud-native, high availability and DR, security, databases, multicloud and hybrid, migration, and observability — plus Learn mode and full timed Exam mode.
Start 24-hour free trial →1Z0-997-25 exam at a glance
- Vendor
- Oracle
- Exam code
- 1Z0-997-25
- Certification
- Oracle Cloud Infrastructure 2025 Certified Architect Professional
- Level
- Professional
- Blueprint
- Oracle 1Z0-997-25 exam topics (2025 release); verify the current version before publish
- Format
- Multiple choice; 50 questions
- Duration
- 90 minutes
- Passing score
- 68%
- Cost (USD)
- $245 (pricing may vary by country; OPN discounts may apply)
- Delivery
- Oracle University, delivered via Pearson VUE (online or test center)
- Recommended prep
- Oracle University “Become an OCI Architect Professional (2025)” learning path on MyLearn, plus hands-on tenancy practice
- Recommended experience
- 1–2 years working with OCI; the Architect Associate foundation is helpful
- Languages
- English
Sources: Oracle University — 1Z0-997-25 exam page · Become an OCI Architect Professional (2025) learning path. Oracle refreshes OCI exams yearly; verify the current version, question count, and passing score before scheduling.
About the OCI Architect Professional certification
1Z0-997 is Oracle’s professional-level credential for architects who design, implement, and operate enterprise-grade workloads on Oracle Cloud Infrastructure. You validate the ability to turn business and technical requirements into production-ready OCI architectures — highly available, secure, resilient, and cost-effective — spanning cloud-native design, high availability and disaster recovery, security, databases, multicloud and hybrid connectivity, workload migration, and observability. It sits above the Architect Associate (1Z0-1072) and is the capstone of the OCI architect path.
The most important thing to know before you study: the current release is 1Z0-997-25 (“Oracle Cloud Infrastructure 2025 Architect Professional”), and its blueprint is broader than older versions. Beyond the classic networking, HA/DR, and security content, the 2025 exam gives first-class weight to cloud-native architecture (microservices on OKE, serverless Functions, API Gateway, Infrastructure as Code), multicloud and hybrid designs (Oracle Interconnect and Oracle Database@Azure/@Google, Oracle Cloud VMware Solution), and workload migration. Study material written for the retired 2022 version (1Z0-997-22) will miss these areas. Oracle does not publish per-topic percentage weights for this release, so plan to cover all seven areas rather than chase numbers. For the broader cloud-architecture foundations this exam builds on, see the cloud platform and architecture certification study guide in the Learning Hub.
1Z0-997-25 topic areas
Oracle groups the current exam into seven topic areas but does not publish a per-topic percentage weighting for 1Z0-997-25. Rather than invent numbers, the areas below are drawn from Oracle’s official 1Z0-997-25 exam topics. Plan to study all seven; the design-and-evaluate scenarios often cross more than one area at once.
Microservices and containers with OKE, serverless Functions and API Gateway, DevOps practices, and Infrastructure as Code (Resource Manager / Terraform) to automate provisioning.
Availability Domains and Fault Domains, Full Stack DR, Data Guard, and cross-region replication to design scalable, resilient architectures that meet RPO/RTO targets.
Secure multi-tier architectures with OCI security services — compartments, IAM policies and dynamic groups, Security Zones, Cloud Guard — and secrets management with OCI Vault.
Autonomous and Base Database services, operating and troubleshooting databases, and optimizing performance and scalability (including OCI Cache).
Oracle Interconnect for Azure and Google Cloud, Oracle Database@Azure and @Google Cloud, and hybrid designs with Oracle Cloud VMware Solution.
Workload migration with Oracle Cloud Migrations, plus database and data migration approaches and troubleshooting.
The OCI observability platform — Monitoring, Logging, and APM — plus governance and cost-optimization strategies across OCI services.
Source: Oracle University — 1Z0-997-25 exam topics. Oracle does not publish a percentage weight table for this release; the areas above are qualitative, not fabricated percentages.
Who 1Z0-997 is for
This is a senior credential aimed at architects and engineers who own OCI solution design:
- Cloud solutions and infrastructure architects designing production OCI workloads across networking, compute, database, and security.
- OCI Architect Associates ready to move up to professional-level, multi-region, enterprise design.
- DevOps and platform engineers building cloud-native architectures on OKE, Functions, and Infrastructure as Code.
- Migration and multicloud specialists moving workloads to OCI and connecting OCI with Azure or Google Cloud.
If you architect on OCI or want to prove senior-level cloud design skill, this exam is the benchmark. For the roles it maps to and how they pay, see the cloud architect and platform-engineering career paths in the Career Hub.
What this 1Z0-997 practice exam delivers
Learn mode
Get the correct answer, the reasoning, and a link to the exact Oracle documentation page each question is derived from — immediately after each question. Built for the long scenario stems where one design detail decides the answer.
Exam mode
Rehearse under a 90-minute timer that mirrors the real 50-question exam, so you build the pacing and stamina a professional-level design exam demands.
Source-linked explanations
Every answer cites the Oracle Help Center page it was built from, so you can verify OCI behavior against Oracle’s own documentation rather than memorize.
Score by topic area
Results break down across all seven areas — from cloud-native to observability — so practice tells you exactly which area to revisit next.
Sample 1Z0-997 practice questions
Ten free questions across the 1Z0-997-25 topic areas, with full explanations and links to the exact Oracle documentation each is derived from. The complete bank is available with the 24-hour trial.
A team is designing a microservices application that must scale automatically, run in containers, and be managed by Kubernetes without operating the control plane themselves. Which OCI service fits?
- A single large compute instance running Docker manually
- Oracle Container Engine for Kubernetes (OKE), a managed Kubernetes service
- Object Storage configured as a container runtime
- Autonomous Database with containers enabled
Show answer & explanation
Correct: B. Oracle Container Engine for Kubernetes (OKE) is OCI’s managed Kubernetes service — Oracle runs the control plane while you deploy and scale containerized microservices, exactly the cloud-native pattern the 2025 blueprint adds.
Why not the others: a single Docker host (A) is not managed Kubernetes and does not scale automatically; Object Storage (C) stores objects, it is not a container runtime; Autonomous Database (D) is a database service, not a container platform.
Source: Oracle — Container Engine for Kubernetes → Further reading: PowerKram — cloud architecture study guide →An architect needs event-driven code to run only when triggered, with no servers to manage and automatic scaling to zero when idle. Which OCI service fits?
- A permanently running compute VM polling for events
- OCI Functions, a serverless functions-as-a-service platform
- A bare-metal instance reserved full time
- Block Volume with a scheduled snapshot
Show answer & explanation
Correct: B. OCI Functions is a serverless FaaS platform (based on Fn Project) that runs code on demand and scales to zero when idle — the right fit for event-driven, no-server workloads.
Why not the others: a polling VM (A) and a reserved bare-metal instance (C) run (and bill) continuously; Block Volume snapshots (D) are storage backups, not compute.
Source: Oracle — OCI Functions → Further reading: PowerKram — OCI Architect Associate (1Z0-1072) practice exam →An architect designs a global hub-and-spoke topology with a hub VCN in Ashburn and spoke VCNs in Ashburn, Frankfurt, and Tokyo. All spoke-to-spoke traffic must transit the Ashburn hub for inspection. Which OCI construct enables this cross-region transit routing?
- Public internet traffic between spokes and the hub
- A single VCN spanning all regions
- Dynamic Routing Gateways in each region with Remote Peering Connections to Ashburn, plus transit routing on the Ashburn hub DRG
- Local Peering Gateways between every pair of VCNs across regions
Show answer & explanation
Correct: C. Remote Peering Connections join DRGs across regions over Oracle’s backbone, and transit routing on the hub DRG forces inter-spoke traffic through the hub for inspection — the correct enterprise hub-and-spoke design.
Why not the others: public internet (A) is insecure and skips inspection; a single VCN cannot span regions (B); Local Peering Gateways are same-region only and (D) describes a full mesh, not hub-and-spoke.
Source: Oracle — Transit routing →An architect needs automated, orchestrated failover of an entire application stack — compute, database, and networking — from Ashburn to Phoenix, with a low RTO. Which OCI service fits?
- Manual runbooks executed by the on-call engineer
- Backup-only, with no standby region
- A report describing the DR design
- OCI Full Stack Disaster Recovery, orchestrating failover across the stack with Data Guard for the database tier
Show answer & explanation
Correct: D. Full Stack DR orchestrates switchover and failover across infrastructure, database, and application tiers between regions with a single action, using Data Guard for the database tier — the service designed for orchestrated full-stack DR.
Why not the others: manual runbooks (A) are slow and error-prone; backup-only (B) cannot meet a low RTO; a design document (C) is not a recovery mechanism.
Source: Oracle — Full Stack Disaster Recovery → Further reading: PowerKram — cloud architecture study guide →Every object uploaded to a production bucket in Ashburn must be asynchronously copied to Phoenix for DR and read access by Phoenix workloads. Which OCI capability fits?
- A nightly manual upload from Ashburn to Phoenix
- Object Storage cross-region replication from the Ashburn bucket to a Phoenix bucket
- A cron-triggered script with no OCI integration
- No replication; accept losing objects on a regional outage
Show answer & explanation
Correct: B. OCI Object Storage supports asynchronous cross-region replication policies between buckets — the engineered, managed DR mechanism for object data.
Why not the others: manual uploads (A) and custom scripts (C) are unmanaged and error-prone; no replication (D) violates the DR requirement.
Source: Oracle — Object Storage replication →A governance lead needs a compartment where non-compliant resources cannot be created at all — no public buckets, no public IPs on compute, encryption with customer-managed keys only. Which OCI feature enforces these as preventive controls?
- Cloud Guard detectors alone
- A weekly audit meeting
- Security Zones with a security recipe attached to the compartment
- Relying on developers to follow guidelines
Show answer & explanation
Correct: C. Security Zones attach a security recipe to a compartment and block creation of non-compliant resources — preventive control, not just detection.
Why not the others: Cloud Guard (A) detects and can remediate but is primarily detective; an audit meeting (B) and trusting guidelines (D) are not technical controls.
Source: Oracle — Security Zones →Compute instances in a compartment must call OCI APIs and retrieve database credentials without any embedded secrets. Which combination fits?
- A shared API key stored in each instance’s startup script
- A static, hand-maintained list of instance OCIDs
- Human user accounts shared across the instances
- A dynamic group whose matching rule includes the instances, IAM policies granting it access, and OCI Vault for the credentials
Show answer & explanation
Correct: D. A dynamic group matches the instances by compartment or tag and gives them identities for IAM policies, while OCI Vault stores and serves the secrets — so nothing is hard-coded. This is the standard credential-free pattern.
Why not the others: embedded shared keys (A) and shared human accounts (C) are security anti-patterns; a hand-maintained OCID list (B) does not scale and defeats the purpose of a dynamic group.
Source: Oracle — Managing dynamic groups →An application needs the highest Oracle Database I/O throughput with Real Application Clusters (RAC) on single-tenant dedicated hardware for compliance. Which OCI database service fits?
- Object Storage treated as a database
- Autonomous Database on shared infrastructure
- A compute instance with Oracle Database Express Edition installed
- Exadata Database Service with RAC on dedicated Exadata infrastructure
Show answer & explanation
Correct: D. Exadata Database Service delivers the highest Oracle Database performance, supports RAC, and runs on dedicated Exadata infrastructure — meeting the throughput, RAC, and single-tenant compliance requirements together.
Why not the others: Object Storage (A) is not a database; Autonomous on shared infrastructure (B) is multi-tenant; a self-managed XE instance (C) is unmanaged and does not provide RAC.
Source: Oracle — OCI database services →A customer runs its application tier in Microsoft Azure and wants low-latency private connectivity to an Oracle database in OCI, without traversing the public internet. Which approach fits?
- Oracle Interconnect for Azure, pairing an OCI FastConnect virtual circuit with an Azure ExpressRoute circuit for private cross-cloud connectivity
- A public-internet VPN with no private circuit
- Copying the database to Azure nightly by hand
- Exposing the database on a public IP for Azure to reach
Show answer & explanation
Correct: A. Oracle Interconnect for Azure links an OCI FastConnect virtual circuit with an Azure ExpressRoute circuit to give private, low-latency connectivity between the clouds — the multicloud pattern the 2025 blueprint adds.
Why not the others: a public-internet VPN (B) does not meet the private/low-latency requirement; manual copies (C) are not connectivity; a public IP (D) violates the private requirement and adds risk.
Source: Oracle — Interconnect for Azure → Further reading: PowerKram — cloud architecture study guide →An enterprise must migrate many VMware virtual machines and AWS EC2 instances to OCI compute, with automated discovery, planning, and replication rather than rebuilding each VM by hand. Which OCI service fits?
- Manually recreating every VM from scratch in OCI
- Oracle Cloud Migrations, which discovers, plans, and replicates VMware and EC2 workloads to OCI compute
- Object Storage lifecycle policies
- A one-time CSV export of VM names
Show answer & explanation
Correct: B. Oracle Cloud Migrations provides end-to-end, self-service discovery, planning, and replication for migrating VMware VMs and AWS EC2 instances to OCI compute — the migration service the 2025 blueprint calls out.
Why not the others: rebuilding each VM by hand (A) is exactly what the service replaces; Object Storage lifecycle policies (C) manage object tiers, not VM migration; a CSV export (D) is inventory data, not a migration.
Source: Oracle — Oracle Cloud Migrations → Further reading: PowerKram — cloud architect career paths →Keep going: Learning & Career resources
1Z0-997 is the capstone of the OCI architect path and opens senior cloud-architecture and platform-engineering roles. Both PowerKram hubs back this exam.
Deep dive: 1Z0-997 format, the 2025 blueprint, study path, and career outlook
Exam format and the 2025 blueprint
The current release, 1Z0-997-25 (“Oracle Cloud Infrastructure 2025 Architect Professional”), is a 50-question multiple-choice exam in 90 minutes with a 68% passing score, delivered through Oracle University via Pearson VUE for about $245. Its blueprint spans seven areas and, compared with the retired 2022 version, gives real weight to cloud-native design (OKE, Functions, API Gateway, IaC), multicloud and hybrid connectivity (Oracle Interconnect and Oracle Database@Azure/@Google, OCVS), and workload migration. Questions use long scenario stems where a single design detail decides the answer. Read the OCI exam-format guide →
Where candidates lose points
Two habits cost marks. First, studying from stale 2022 material and missing the newer cloud-native, multicloud, and migration content. Second, not reading the whole scenario — the correct answer often turns on one requirement (a compliance constraint, an RPO/RTO, a “no public internet” clause) buried in the stem. Know the trade-offs cold: which storage tier for which cost/performance/durability need, which DR pattern for which RPO/RTO, and the difference between preventive controls (Security Zones) and detective ones (Cloud Guard). Read the OCI security concepts guide →
Realistic study path
Start with the Oracle University “Become an OCI Architect Professional (2025)” learning path on MyLearn, then build in a practice tenancy: a two-region active-passive design with cross-region Data Guard and an Object Storage replication policy; a hardened landing zone with Cloud Guard and a Security Zone; a small OKE cluster with a Function and an API Gateway; and a multicloud interconnect if you have access. Drill IAM policy syntax with dynamic groups and tag conditions. Reinforce each area in Learn mode, then finish with full timed Exam-mode simulations until you clear the threshold several times in a row. Read the 1Z0-997 study-plan guide →
Cost, scheduling, and retakes
The exam costs about $245 (pricing varies by country; Oracle Partner Network discounts may apply). Schedule through Oracle University and Pearson VUE, online or at a test center. If you don’t pass, Oracle’s standard retake policy applies — check the current waiting period and any bundle options on Oracle’s certification pages before you book. Oracle’s official 1Z0-997-25 exam page →
Staying current and recertification
Oracle refreshes its OCI certifications on a yearly cadence (the exam code’s year suffix moves from -22 to -25 and onward), and Oracle typically offers free annual updates or short deltas to keep an existing certification current. Because OCI ships new services frequently, plan to refresh your knowledge each cycle — and confirm the current active exam version before you register. Read the OCI recertification guide →
Career outlook for OCI Architect Professionals
This is a senior credential with strong salary leverage. It maps to senior cloud solutions architect, principal cloud engineer, and enterprise architect roles, and pairs well with the OCI Security Professional and multicloud skills for architects who own end-to-end design. Salary ranges vary by region and seniority; the Career Hub tracks them by role. Career Hub — cloud architect roles →
Frequently asked questions
What is the current version of the 1Z0-997 exam?
The current release is 1Z0-997-25, “Oracle Cloud Infrastructure 2025 Architect Professional.” Oracle refreshes OCI exams yearly, so the year suffix moves over time (for example from the retired -22 to -25). Prep written for the 2022 version misses the newer cloud-native, multicloud, and migration content, so always confirm you are studying the current release.
How many questions is 1Z0-997-25, and what is the passing score?
The exam has 50 multiple-choice questions in 90 minutes, with a passing score of 68%. It costs about $245 (varies by country) and is delivered through Oracle University via Pearson VUE, online or at a test center. Confirm the current details on Oracle’s exam page before scheduling.
What topics does 1Z0-997-25 cover?
Seven areas: architecting cloud-native solutions (OKE, Functions, API Gateway, IaC); designing high availability and disaster recovery; implementing security solutions (IAM, Security Zones, Cloud Guard, Vault); implementing and operating databases; designing and evaluating multicloud and hybrid solutions (Interconnect, Oracle Database@Azure/@Google, OCVS); migrating workloads to OCI; and implementing observability. Oracle does not publish per-topic percentage weights for this release.
Do I need the OCI Architect Associate first?
Oracle no longer strictly requires the Associate as a prerequisite, but the Architect Associate (1Z0-1072) foundation is strongly recommended — the Professional exam assumes you are comfortable with core OCI networking, compute, storage, and IAM before layering on professional-level design, HA/DR, multicloud, and migration.
How long is the certification valid?
Oracle refreshes OCI certifications yearly and typically provides free annual updates or short delta assessments to keep an existing certification current. Because OCI adds services frequently, plan to refresh each cycle and confirm the current active exam version on Oracle’s certification pages.
Start your free 24-hour 1Z0-997 practice trial
Full access to the question bank, both study modes, source-linked explanations, and score-by-topic-area. No credit card required.
Start free trial →