Career growth often waits behind an exam door, and the 1z0-997-21 exam is one of those doors. RealVCE cannot open it for you, but it can make the walk shorter — 145 practice questions for the 1z0-997-21 exam, a free downloadable demo for reference, and 365 days of free updates while you prepare.
Oracle 1z0-997-21 Exam Overview:
| Certification Vendor: | Oracle |
|---|---|
| Exam Name: | Oracle Cloud Infrastructure 2021 Architect Professional |
| Exam Number: | 1Z0-997-21 |
| Real Exam Qty: | 50 |
| Related Certifications: | Oracle Cloud Infrastructure 2021 Certified Architect Associate |
| Exam Format: | Multiple Select, Multiple Choice |
| Exam Price: | USD 245 |
| Passing Score: | 70% |
| Available Languages: | German, French, Spanish, Russian, English, Portuguese (Brazil), Korean, Japanese, Simplified Chinese, Italian |
| Certificate Validity Period: | 18 months |
| Exam Duration: | 120 minutes |
| Recommended Training: | Oracle Cloud Infrastructure Architect Professional Learning Path |
| Exam Registration: | Oracle University Pearson VUE |
| Sample Questions: |  |
| Exam Way: | Online proctored or Onsite at Pearson VUE test centers |
| Pre Condition: | Must hold Oracle Cloud Infrastructure 2021 Certified Architect Associate or equivalent |
| Official Syllabus URL: | https://education.oracle.com/oracle-cloud-infrastructure-2021-architect-professional/pexam_1Z0-997-21 |
Oracle 1z0-997-21 Exam Syllabus Topics:
| Section | Objectives |
|---|---|
| Monitoring, Governance & Cost Optimization | - Tagging, quota management and billing controls - Right-sizing and cost optimization strategies - Logging, metrics, alarms and observability |
| Design and Operate Database Services | - Database migration and replication methods - Choose and deploy OCI database offerings - Implement database security, backup and recovery |
| Migration & Hybrid Cloud | - Data transfer services and tools - Workload migration strategies: lift-and-shift, refactor - Hybrid architecture design and operations |
| Design and Implement Networking | - Design VCN topology, subnets, route tables, gateways - Implement FastConnect, Site-to-Site VPN, Remote Access VPN - Design hybrid and multi-cloud connectivity |
| Design for High Availability and Disaster Recovery | - Availability domains, fault domains, regions and replicas - RTO/RPO planning, backup and replication strategies - Load balancing, failover and traffic management |
| Security and Compliance | - Cloud Guard, Security Zones, Vault and Key Management - IAM policies, compartments, federation and SSO - Encryption, firewall rules, WAF and compliance controls |
| Cloud Native Architecture & Automation | - Serverless and event-driven design - Microservices, containers and OKE - Infrastructure as Code: Terraform, Resource Manager, CLI |
1z0-997-21 Exam FAQ: Difficulty, Details, and Preparation
The 1z0-997-21 exam is the required test for earning the Oracle Cloud Infrastructure 2021 Architect Professional certification from Oracle. It assesses your command of the official exam objectives through scenario-based and knowledge questions, and the resulting credential is widely recognized by employers. Its reputation for difficulty is real but manageable — candidates who practice consistently with quality materials routinely walk in well prepared.
The official outline for the 1z0-997-21 exam highlights these domains:
- Design and Operate Database Services ()
- Cloud Native Architecture & Automation ()
- Design and Implement Networking ()
Seeing the topics laid out this way often shrinks the exam's intimidation factor — each domain is a finite, learnable block, and the Oracle Cloud Infrastructure 2021 Architect Professional practice questions at RealVCE follow the same structure.
Must hold Oracle Cloud Infrastructure 2021 Certified Architect Associate or equivalent
The 1z0-997-21 exam is demanding, but its difficulty is specific, not mysterious: unfamiliar question formats, time pressure, and a few heavily weighted domains. All three respond to the same remedy — repeated, timed exposure to exam-style questions. That is what the Oracle Cloud Infrastructure 2021 Architect Professional practice materials at RealVCE provide, and the free demo lets you measure the real difficulty yourself before committing, which is usually the moment the fear starts shrinking.
The 1z0-997-21 exam consists of 50 questions with a time allowance of 120 minutes minutes. Practicing full sets under a similar time cap is the most direct way to make sure pacing never costs you points on exam day.
Oracle offers these training resources for candidates:
Official courses explain the material; practice questions teach you how the exam asks about it. Most successful candidates use both.
Because seeing beats guessing. The free demo of the 1z0-997-21 exam materials at RealVCE contains genuine samples from the full Oracle Cloud Infrastructure 2021 Architect Professional question set — same format, same expert-verified answers — and downloading it costs nothing. If you are unsure whether the materials match your level or your study style, the demo answers that question with evidence rather than marketing, and every demo on the site is free of charge.
The passing score is 70% and the exam fee is USD 245. Knowing both numbers early helps you plan: aim to be consistently above the passing mark in timed practice sessions before you spend the fee on a booking.
Registration is available through the following official channels:
Many candidates find that booking a date early converts vague anxiety into a focused countdown — a useful psychological trick while working through the Oracle Cloud Infrastructure 2021 Architect Professional practice questions.
Oracle Cloud Infrastructure 2021 Architect Professional Sample Questions:
Which of the following features is NOT supported by Oracle Cloud Infrastructure Multi-factor authentication (MFA)?
- A. Members of the Administrators group can disable MFA for other users.
- B. Only the user can enable MFA for their own account.
- C. Members of the Administrators group can enable MFA for other users.
- D. Users can disable MFA for their own accounts.
Correct Answer: C 🗳️
A company has an application that processes confidential dat
a. The data is currently stored in an on-premises data center. A solution architect needs to move this data to Oracle Cloud Infrastructure (OCI) Object Storage and ensure data is encrypted in-transit to OCI.
Which two steps should the solution architect perform to set up the most cost-effective connection between on-premises data center and OCI?
- A. Attach an Internet Gateway to Virtual Cloud network(VCN).
- B. Set up VPN Connect between the customer equipment and the Dynamic Routing Gateway.
- C. Set up private end point for accessing Object Storage.
- D. Configure a service gateway accessing Object Storage.
- E. Set up an IPsec tunnel between the customer equipment and software VPN on an oci instance
- F. Configure a private peering connection on the Oracle FastConnect
Correct Answer: B,D 🗳️
An organization has its IT infrastructure in a hybrid setup with an on-premises environment and an Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN) in the us-phonix-1 region. The on-premise applications communications with compute instances inside the VPN over a hardware VPN connection. They are looking to implement an Intrusion detected and Prevention (IDS/IPS) system for their OCI environment. This platform should have the ability to scale to thousands of compute of instances running inside the VCN.
How should they architect their solution on OCI to achieve this goal?
- A. Configure each host with an agent that collects all network traffic and sends that traffic to the IDS/IPS platform to inspection
- B. Configure autoscaling on a compute Instance pool and set vNIC to promiscuous mode to called traffic across the vcn and send it IDS/IPS platform for inspection.
- C. There Is no need to implement an IPS/IDS system as traffic coming over IPSec VPN tunnels Is already encrypt
- D. Set up an OCI Private Load Balance! and configure IDS/IPS related health checks at TCP and/or HTTP level to inspect traffic
Correct Answer: A 🗳️
Explanation: Only visible for RealVCE members. You can sign-up / login (it's free).
As part of planning the network design on Oracle Cloud Infrastructure, you have been asked to create an Oracle Cloud Infrastructure Virtual Cloud Network (VCN) with 3 subnets, one in each Availability Domain. Each subnet needs to have a minimum of 64 usable IP addresses.
What is the smallest subnet and VCN size you should use to implement this design? The requirements are static, so no growth is expected.
- A. 122 for the VCN; 124 for the subnets
- B. /22 for the VCN; /25 for the subnets
- C. /23 for the VCN; /25 for the subnets
- D. /24 for the VCN; /24 for the subnets
Correct Answer: C 🗳️
Your organization is planning on using Oracle Cloud Infrastructure (OCI) File Storage Service (FSS). You will be deploying multiple compute instance in Oracle Cloud Infrastructure(OCI) and mounting the file system to these compute instances.
The file system will hold payment data processed by a Database instance and utilized by compute instances to create a overall inventory report. You need to restrict access to this data for specific compute instances and must be allowed/blocked per compute instance's CIDR block.
Which option can you use to secure access?
- A. Create a new VCN security list, choose SOURCE TYPE as Service and SOURCE SERVICE as FSS. Add stateless ingress and egress rules for specific IP address and CIDR blocks.
- B. Create and configure OCI Web Application Firewall service with built in DNS based intelligent routing.
- C. Use 'Export option' feature of FSS to restrict access to the mounted file systems.
- D. Use stateless Security List rule to restrict access from known IP addresses only.
Correct Answer: C 🗳️
Hilary 
Ives 
Marjorie 
Levi 
Beau 
Harley 
Moses 
Justin 
Moses 
Conrad 
Harriet 
Corey 
Peter 
Patrick 
Clyde 
