Skip to content

Oracle Cloud Infrastructure Architect Professional (1Z0-997-24)

The OCI Architect Professional certification validates advanced skills in designing, implementing, and managing complex enterprise solutions on Oracle Cloud Infrastructure. This is the highest-level architecture certification for OCI, demonstrating expertise in large-scale, multi-workload cloud architectures.

Quick Links

Study Materials

Core Notes

Exam Details

  • Exam Code: 1Z0-997-24
  • Duration: 150 minutes (2.5 hours)
  • Number of Questions: 60 questions
  • Passing Score: 68%
  • Question Types: Multiple choice, multiple select, scenario-based
  • Cost: $245 USD
  • Validity: Recertification required every 2 years
  • Language: Available in multiple languages
  • Delivery: Pearson VUE (online proctored or test center)

Exam Domains

1. Design and Deploy Enterprise-Scale Solutions (25%)

Multi-Tier Application Architecture

  • Application Design Patterns
  • Microservices architecture on OKE
  • Serverless architectures with Functions and API Gateway
  • Event-driven architectures with Events and Streaming
  • CQRS and event sourcing patterns

  • Saga pattern for distributed transactions

  • Container Orchestration

  • OKE cluster design: managed nodes, virtual nodes, self-managed
  • Node pool strategies (different shapes, ADs, preemptible)
  • OKE networking: VCN-native vs flannel overlay
  • Service mesh (Istio) integration

  • GitOps and CI/CD for Kubernetes

  • API Management

  • API Gateway deployment models
  • Rate limiting and throttling
  • API versioning strategies
  • Authentication and authorization flows (OAuth2, JWT)

  • Backend service integration

  • Scalability and Performance

  • Autoscaling: metric-based and schedule-based
  • Connection pooling and caching strategies
  • CDN and edge caching
  • Read replicas and database scaling
  • Performance testing and benchmarking

Database Architecture

  • Autonomous Database Advanced
  • Dedicated vs serverless infrastructure trade-offs
  • ECPU vs OCPU pricing models
  • Autonomous Data Guard for HA and DR
  • Refreshable clones for development

  • Database Links and cross-region queries

  • Exadata Cloud Service

  • Exadata X8M, X9M hardware
  • Quarter rack, half rack, full rack sizing
  • VM clusters and database homes
  • Performance optimization (smart scan, storage indexes)

  • Licensing considerations (BYOL vs license included)

  • Database Migration

  • Zero Downtime Migration (ZDM) for production
  • Data Pump for offline migration
  • GoldenGate for real-time replication
  • Oracle Cloud Migrations for discovery and planning

  • Database upgrade strategies during migration

  • NoSQL and Big Data

  • NoSQL Database for scale-out workloads
  • Data Flow for Apache Spark workloads
  • Data Integration for ETL pipelines
  • Big Data Service (Hadoop, Spark)
  • Data Science platform integration

2. Design for Hybrid and Multi-Cloud Architectures (20%)

Hybrid Cloud Connectivity

  • FastConnect Design
  • Provider selection and locations
  • Virtual circuits and BGP configuration
  • Redundant FastConnect for HA
  • Bandwidth selection (1, 2, 5, 10 Gbps)

  • FastConnect + VPN IPSec for encryption

  • Site-to-Site VPN

  • Static vs BGP routing
  • Redundant tunnels for high availability
  • Performance considerations (throughput limits)
  • VPN + internet gateway failover

  • Route-based vs policy-based VPN

  • Advanced DRG Architecture

  • Transit routing with DRG as hub
  • Route table attachments
  • Import and export route distribution
  • Multi-region DRG routing

  • DRG peering across regions

  • DNS Integration

  • Split-horizon DNS for hybrid
  • DNS Resolver for private zones
  • Zone transfers and secondary zones
  • Geo-steering and traffic management
  • DNSSEC for security

Multi-Cloud Integration

  • OCI + Azure Interconnect
  • ExpressRoute and FastConnect interconnect
  • Cross-cloud networking architecture
  • Azure AD integration with OCI IAM
  • Shared application architectures

  • Data synchronization strategies

  • OCI + AWS Integration

  • Direct Connect and FastConnect integration
  • Cross-cloud VPN tunnels
  • Multi-cloud application patterns
  • Data replication across clouds

  • Unified monitoring and management

  • Oracle Cloud VMware Solution

  • VMware SDDC architecture on OCI
  • Hybrid cloud extension (HCX) for workload mobility
  • Licensing and cost models
  • Integration with native OCI services
  • Disaster recovery scenarios

3. Design for Security and Compliance (20%)

Advanced IAM and Governance

  • Identity Federation
  • SAML 2.0 federation with external IdPs
  • OAuth 2.0 and OpenID Connect
  • Azure AD, Okta, ADFS integration
  • Just-in-time provisioning

  • Identity domain design

  • Complex Policy Scenarios

  • Conditional policies based on context
  • Policy combinations and conflicts
  • Dynamic group policies for resources
  • Tag-based access control

  • Policy versioning and testing

  • Multi-Tenancy Design

  • Compartment hierarchies for departments
  • Delegated administration patterns
  • Resource isolation strategies
  • Cross-tenant resource sharing
  • Billing and chargeback models

Security Architecture

  • Vault and Key Management
  • Customer-managed encryption keys (CMEK)
  • Master encryption key rotation
  • Cross-region key replication
  • Secrets management with rotation

  • Integration with external HSMs

  • Security Services Integration

  • Cloud Guard: custom detectors and responders
  • Security Zones for maximum security
  • Vulnerability Scanning at scale
  • Web Application Firewall: custom rules

  • Bastion service for zero-trust access

  • Network Security

  • Private access to Oracle services (Service Gateway)
  • Private endpoints for PaaS services
  • Network firewall for advanced filtering
  • DDoS protection strategies

  • Security list and NSG best practices

  • Compliance and Audit

  • Audit log aggregation and retention
  • Compliance reporting automation
  • Data residency requirements
  • Regulatory frameworks (GDPR, HIPAA, PCI-DSS)
  • Security posture dashboards

4. Migration Planning and Execution (15%)

Migration Assessment

  • Application Discovery
  • Oracle Cloud Migrations for inventory
  • Dependency mapping and analysis
  • Performance baselining
  • Licensing assessment

  • TCO analysis and business case

  • Migration Strategies (7 Rs)

  • Rehost (lift-and-shift): Fast migration with minimal changes
  • Replatform: Minor optimizations (e.g., managed database)
  • Refactor: Re-architect for cloud-native
  • Repurchase: Move to SaaS
  • Retire: Decommission legacy systems
  • Retain: Keep on-premises temporarily
  • Relocate: VMware workloads to Oracle Cloud VMware Solution

Migration Execution

  • Workload Migration Tools
  • Oracle Cloud Migrations for servers
  • Zero Downtime Migration (ZDM) for databases
  • Data Transfer Appliance for large datasets
  • Storage Gateway for gradual migration

  • rsync and rclone for file migration

  • Database Migration Patterns

  • Offline migration with Data Pump
  • Online migration with GoldenGate
  • Zero Downtime Migration (ZDM) for Oracle databases
  • Cross-platform migration (SQL Server, MySQL)

  • Database consolidation strategies

  • Application Migration

  • Containerizing legacy applications
  • Decoupling monoliths to microservices
  • Modernizing to serverless
  • Data migration strategies
  • Cutover planning and rollback

5. Design for Performance and Cost Optimization (10%)

Performance Optimization

  • Compute Performance
  • Shape selection and rightsizing
  • Burstable instances for variable workloads
  • Dedicated VM hosts for consistency
  • NUMA architecture for bare metal

  • GPU instances for ML/HPC workloads

  • Storage Performance

  • Block volume performance tiers (VPU/GB)
  • NVMe vs standard disks
  • Object Storage performance tuning
  • File Storage performance optimization

  • Caching strategies (Redis, Varnish)

  • Database Performance

  • Autonomous Database auto-scaling
  • Read replicas for read-heavy workloads
  • In-memory column store
  • Indexing strategies

  • Query optimization and tuning

  • Network Performance

  • Placement groups for low latency
  • FastConnect for high throughput
  • Load balancer bandwidth selection
  • Regional vs multi-region architecture
  • Edge services and caching

Cost Optimization

  • Pricing Models
  • Pay-as-you-go vs Monthly Flex (Universal Credits)
  • Reserved capacity for predictable workloads
  • Burstable instances for cost savings
  • Bring Your Own License (BYOL)

  • Always Free Tier resources

  • Resource Optimization

  • Rightsizing compute instances
  • Object Storage tier optimization
  • Block volume detachment when unused
  • Reserved capacity planning

  • Spot instances for fault-tolerant workloads

  • Cost Monitoring and Governance

  • Cost analysis and budgets
  • Tag-based cost allocation
  • Anomaly detection and alerts
  • Chargeback and showback models
  • FinOps best practices

6. Design for Availability and Disaster Recovery (10%)

High Availability Design

  • Multi-AD Architecture
  • Active-active across ADs
  • Load balancer health checks
  • Session persistence strategies
  • Database RAC for HA

  • Stateless application design

  • Fault Domain Strategies

  • Anti-affinity placement
  • Distributed application instances
  • Database fault domain awareness

  • Maintenance impact minimization

  • Regional Services

  • Object Storage (regional HA built-in)
  • IAM (global service)
  • DNS (global with low latency)
  • Load Balancer (regional)

Disaster Recovery

  • DR Strategies
  • Backup and restore (highest RTO)
  • Pilot Light (medium RTO, low cost)
  • Warm Standby (low RTO, medium cost)

  • Active-Active (near-zero RTO, highest cost)

  • Cross-Region DR

  • Object Storage cross-region replication
  • Autonomous Data Guard for databases
  • Full Stack DR for automated failover
  • DNS failover with Traffic Management

  • DR orchestration and testing

  • Backup Architecture

  • Block volume backup policies
  • Database backup strategies (RMAN, automatic)
  • File Storage snapshots
  • Cross-region backup copies
  • Immutable backups for ransomware protection

Prerequisites & Recommended Experience

Prerequisites

  • OCI Architect Associate (1Z0-1072-24) - Required
  • OCI Foundations (1Z0-1085-24) - Recommended foundation
  • 3+ years working with OCI
  • 5+ years in enterprise architecture
  • Experience with large-scale cloud migrations
  • Hands-on with hybrid cloud connectivity
  • Knowledge of DevOps and automation

Technical Skills

  • Design complex multi-tier enterprise applications
  • Implement hybrid and multi-cloud architectures
  • Perform large-scale migrations to OCI
  • Optimize performance and cost at scale
  • Design for compliance and governance
  • Implement advanced security patterns

Study Strategy

Weeks 1-2: Enterprise Architecture and Migration - Advanced application architecture patterns - Migration strategies and tools - Oracle Cloud Migrations platform - Database migration techniques (ZDM, GoldenGate)

Weeks 3-4: Advanced Networking and Hybrid Cloud - FastConnect design and implementation - Multi-cloud connectivity (Azure, AWS) - DRG transit routing - DNS integration patterns

Weeks 5-6: Advanced Database and Data Management - Exadata Cloud Service architecture - Autonomous Database advanced features - NoSQL and Big Data services - Data integration and ETL

Weeks 7-8: Security, Compliance, and Governance - Identity federation and SSO - Advanced IAM policies - Security services integration - Compliance automation

Weeks 9-10: Performance, Cost, and Observability - Performance tuning across services - Cost optimization strategies - Advanced monitoring and logging - Capacity planning

Weeks 11-12: HA, DR, and Practice - Multi-region architectures - Disaster recovery planning - Full Stack DR - Practice exams and scenarios

Weeks 13-14: Final Review - Weak area remediation - Architecture design practice - Final practice exams - Exam preparation

Essential Hands-on Labs

  • Migrate a multi-tier application to OCI
  • Implement FastConnect with redundancy
  • Deploy multi-region DR solution with Full Stack DR
  • Configure OKE with service mesh (Istio)
  • Implement identity federation with Azure AD or Okta
  • Design and deploy hub-and-spoke network with DRG
  • Configure Autonomous Data Guard across regions
  • Implement comprehensive monitoring and alerting
  • Build cost optimization automation
  • Deploy Oracle Cloud VMware Solution

Study Resources

Official Oracle Resources

  1. Oracle University: Official OCI Architect Professional course
  2. Oracle Whitepapers: Architecture best practices and patterns
  3. Practice Exams: Oracle official + third-party practice tests
  4. Case Studies: Real-world migration and architecture case studies
  5. Hands-on Labs: Extensive practice with advanced features

Exam Tips

Question Strategy

  • Long scenario questions require careful analysis
  • Identify business vs technical requirements
  • Consider cost, performance, security, and availability trade-offs
  • Watch for keywords: "enterprise-scale", "mission-critical", "compliance"
  • Multiple viable solutions - choose the BEST for the scenario

Common Question Themes

  • Hybrid connectivity architecture (FastConnect, VPN, DRG)
  • Database migration strategies and tools
  • Multi-AD and cross-region HA/DR design
  • IAM policy design for complex organizations
  • Cost optimization for large-scale deployments
  • Compliance and governance automation
  • Performance tuning for specific workloads
  • Multi-cloud integration patterns
  • Container orchestration on OKE
  • Migration planning and execution

Professional-Level Considerations

  • Enterprise scale: Solutions for large organizations
  • Business impact: Understand business requirements and constraints
  • Cost at scale: Optimize for large deployments
  • Compliance: Regulatory and governance requirements
  • Risk management: Design for failure and recovery
  • Operational excellence: Automate and monitor everything

Time Management

  • 150 minutes for 60 questions = 2.5 minutes per question
  • Scenario questions may require 3-5 minutes
  • Read all answer options carefully
  • Flag complex questions for review
  • Leave 20-30 minutes for final review

Success Criteria

  • Design enterprise-scale architectures on OCI
  • Implement hybrid and multi-cloud connectivity
  • Plan and execute large-scale cloud migrations
  • Optimize performance and cost for complex workloads
  • Design for compliance, security, and governance
  • Implement advanced HA and DR solutions
  • Leverage advanced OCI services (Exadata, OKE, etc.)
  • Apply architectural best practices for large organizations

Career Impact

Professional Recognition

  • Highest OCI architecture credential
  • Demonstrates advanced cloud expertise
  • Recognized by enterprises evaluating OCI
  • Competitive advantage in job market

Career Roles

  • Senior Cloud Architect
  • Principal Cloud Engineer
  • Cloud Migration Architect
  • Enterprise Solutions Architect
  • Cloud Consultant
  • Technical Lead for Cloud Transformations

Next Steps

  • Specialty Certifications: Security, Multicloud, specific workloads
  • Continuous Learning: Stay current with new OCI services
  • Community Leadership: Share knowledge, contribute to community
  • Advanced Specializations: Focus on specific industries or use cases

Master enterprise-scale Oracle Cloud Infrastructure architecture! 🚀