1z0-1085-23 Oracle Cloud Infrastructure 2023 Foundations Associate Questions and Answers

Users are not a component of the OCI Identity domains, but rather a resource within an identity domain. An identity domain is a container for managing users and roles, federating and provisioning of users, secure application integration through Oracle Single Sign-On (SSO) configuration, and SAML/OAuth based Identity Provider administration1.

Oracle Cloud Infrastructure is hosted in regions and availability domains. A region is a localized geographic area, and an availability domain is one or more data centers located within a region. A region is composed of one or more availability domains. Most Oracle Cloud Infrastructure resources are either region-specific, such as a virtual cloud network, or availability domain-specific, such as a compute instance. Traffic between availability domains and between regions is encrypted.

Availability domains are isolated from each other, fault tolerant, and very unlikely to fail simultaneously. Because availability domains do not share infrastructure such as power or cooling, or the internal availability domain network, a failure at one availability domain within a region is unlikely to impact the availability of the others within the same region.

The availability domains within the same region are connected to each other by a low latency, high bandwidth network, which makes it possible for you to provide high-availability connectivity to the internet and on-premises, and to build replicated systems in multiple availability domains for both high-availability and disaster recovery.

A fault domain is a grouping of hardware and infrastructure within an availability domain. Each availability domain contains three fault domains. Fault domains provide anti-affinity: they let you distribute your instances so that the instances are not on the same physical hardware within a single availability domain. A hardware failure or Compute hardware maintenance event that affects one fault domain does not affect instances in other fault domains. In addition, the physical hardware in a fault domain has independent and redundant power supplies, which prevents a failure in the power supply hardware within one fault domain from affecting other fault domains.

Oracle Cloud Infrastructure Autonomous Database is based on Oracle Database, the world’s leading relational database management system. It leverages the features and capabilities of Oracle Database to provide a fully managed, self-driving, self-securing, and self-repairing database service6

The Oracle Cloud Infrastructure Domain Name System (DNS) service lets you create and manage your DNS zones. You can create zones, add records to zones, and allow Oracle Cloud Infrastructure's edge network to handle your domain's DNS queries.

You can filter Costs Analysis Tools by following three ways

To filter costs by dates

To filter costs by tags

To filter costs by compartments

An availability domain is a part of a region. A region is a localized geographic area composed of one or more availability domains. An availability domain is one or more data centers located within a region that have fault-tolerant power and network connectivity. Availability domains are isolated from each other within a region, which provides protection from failures that affect multiple data centers at once.

Budgets can be used to set thresholds for your Oracle Cloud Infrastructure spending. You can set alerts on your budget to let you know when you might exceed your budget, and you can view all of your budgets and spending from one single place in the Oracle Cloud Infrastructure console.

• Oracle Cloud VMware Solution is a customer-managed, native VMware-based cloud environment that is installed within a customer’s tenancy. Customers have complete access to and control over their VMware environment in the cloud2
• Customers can use the same VMware tools and skills to manage and run their infrastructure in the cloud without compromise2
• Customers have full administrative control over the VMware environment, including vCenter access with administrative credentials3

The Oracle Cloud Infrastructure Notifications service broadcasts messages to distributed components through a publish-subscribe pattern, delivering secure, highly reliable, low latency and durable messages for applications hosted on Oracle Cloud Infrastructure and externally. Use Notifications to get notified when event rules are triggered or alarms are breached, or to directly publish a message.

Messages sent out as email by the Oracle Cloud Infrastructure Notifications service are processed and delivered through Oracle resources

Oracle Functions is a fully managed, multi-tenant, highly scalable, on-demand, Functions-as-a-Service platform. It is built on enterprise-grade Oracle Cloud Infrastructure and powered by the Fn Project open source engine. Use Oracle Functions (sometimes abbreviated to just Functions) when you want to focus on writing code to meet business needs.

The serverless and elastic architecture of Oracle Functions means there's no infrastructure administration or software administration for you to perform. You don't provision or maintain compute instances, and operating system software patches and upgrades are applied automatically. Oracle Functions simply ensures your app is highly-available, scalable, secure, and monitored. With Oracle Functions, you can write code in Java, Python, Node, Go, and Ruby (and for advanced use cases, bring your own Dockerfile, and Graal VM). You can then deploy your code, call it directly or trigger it in response to events, and get billed only for the resources consumed during the execution.

Oracle Functions is based on Fn Project. Fn Project is an open source, container native, serverless platform that can be run anywhere - any cloud or on-premises. Fn Project is easy to use, extensible, and performant. You can download and install the open source distribution of Fn Project, develop and test a function locally, and then use the same tooling to deploy that function to Oracle Functions.

You can access Oracle Functions using the Console, a CLI, and a REST API. You can invoke the functions you deploy to Oracle Functions using the CLI or by making signed HTTP requests.

The primary goal for distributing resources across multiple availability domains in Oracle Cloud Infrastructure is to improve fault tolerance and high availability. An availability domain is one or more data centers located within a region that have fault-tolerant power and network connectivity. Availability domains are isolated from each other within a region, which provides protection from failures that affect multiple data centers at once. By distributing resources across multiple availability domains, users can ensure that their applications can continue to run even if one availability domain becomes unavailable.

Oracle Functions is a fully managed, multi-tenant, highly scalable, on-demand, Functions-as-a-Service platform. It is built on enterprise-grade Oracle Cloud Infrastructure and powered by the Fn Project open source engine. Use Oracle Functions (sometimes abbreviated to just Functions) when you want to focus on writing code to meet business needs.

The serverless and elastic architecture of Oracle Functions means there's no infrastructure administration or software administration for you to perform. You don't provision or maintain compute instances, and operating system software patches and upgrades are applied automatically. Oracle Functions simply ensures your app is highly-available, scalable, secure, and monitored. With Oracle Functions, you can write code in Java, Python, Node, Go, and Ruby (and for advanced use cases, bring your own Dockerfile, and Graal VM). You can then deploy your code, call it directly or trigger it in response to events, and get billed only for the resources consumed during the execution.

When you work with Oracle Cloud Infrastructure, one of the first steps is to set up a virtual cloud network (VCN) for your cloud resources.

VIRTUAL CLOUD NETWORK (VCN) :

A virtual, private network that you set up in Oracle data centers. It closely resembles a traditional network, with firewall rules and specific types of communication gateways that you can choose to use. A VCN resides in a single Oracle Cloud Infrastructure region and covers a single, contiguous IPv4 CIDR block of your choice. See Allowed VCN Size and Address Ranges. The terms virtual cloud network, VCN, and cloud network are used interchangeably in this documentation. For more information, see VCNs and Subnets.

SUBNETS :

Subdivisions you define in a VCN (for example, 10.0.0.0/24 and 10.0.1.0/24). Subnets contain virtual network interface cards (VNICs), which attach to instances. Each subnet consists of a contiguous range of IP addresses that do not overlap with other subnets in the VCN. You can designate a subnet to exist either in a single availability domainavailability domain

or across an entire region (regional subnets are recommended). Subnets act as a unit of configuration within the VCN: All VNICs in a given subnet use the same route table, security lists, and DHCP options (see the definitions that follow). You can designate a subnet as either public or private when you create it. Private means VNICs in the subnet can't have public IP addresses. Public means VNICs in the subnet can have public IP addresses at your discretion. See Access to the Internet.

The MySQL Database Service HeatWave Configuration in OCI is a distributed in-memory query accelerator that enables customers to run analytics queries on their MySQL databases up to 400 times faster than without HeatWave. It also eliminates the need to move data to a separate analytics database5

https://www.oracle.com/cloud/cloud-infrastructure-compliance/

Explanation

Oracle Cloud Infrastructure offers best-in-class security technology and operational processes to secure its enterprise cloud services. However, for you to securely run your workloads in Oracle Cloud Infrastructure, you must be aware of your security and compliance responsibilities. By design, Oracle provides security of cloud infrastructure and operations (cloud operator access controls, infrastructure security patching, and so on), and you are responsible for securely configuring your cloud resources. Security in the cloud is a shared responsibility between you and Oracle.

In a shared, multi-tenant compute environment, Oracle is responsible for the security of the underlying cloud infrastructure (such as data-center facilities, and hardware and software systems) and you are responsible for securing your workloads and configuring your services (such as compute, network, storage, and database) securely.

In a fully isolated, single-tenant, bare metal server with no Oracle software on it, your responsibility increases as you bring the entire software stack (operating systems and above) on which you deploy your applications. In this environment, you are responsible for securing your workloads, and configuring your services (compute, network, storage, database) securely, and ensuring that the software components that you run on the bare metal servers are configured, deployed, and managed securely.

The responsibilities can be divided as:

Oracle Cloud Infrastructure File Storage service provides a durable, scalable, secure, enterprise-grade network file system. You can connect to a File Storage service file system from any bare metal, virtual machine, or container instance in your Virtual Cloud Network (VCN).

You can control the access of the file system from FSS by applying some security rules and others but the services it self not related to security but it related to shared storage

A fault domain is a grouping of hardware and infrastructure within an availability domain. Each availability domain contains three fault domains. Fault domains provide anti-affinity: they let you distribute your instances so that the instances are not on the same physical hardware within a single availability domain. A hardware failure or Compute hardware maintenance event that affects one fault domain does not affect instances in other fault domains. In addition, the physical hardware in a fault domain has independent and redundant power supplies, which prevents a failure in the power supply hardware within one fault domain from affecting other fault domains.

To control the placement of your compute instances, bare metal DB system instances, or virtual machine DB system instances, you can optionally specify the fault domain for a new instance or instance pool at launch time. If you don't specify the fault domain, the system selects one for you. Oracle Cloud Infrastructure makes a best-effort anti-affinity placement across different fault domains, while optimizing for available capacity in the availability domain. To change the fault domain for an instance, terminate it and launch a new instance in the preferred fault domain.

Use fault domains to do the following things:

Protect against unexpected hardware failures or power supply failures.

Protect against planned outages because of Compute hardware maintenance.

We can use fault domains to do the following things:

1) Protect against unexpected hardware failures or power supply failures.

2) Protect against planned outages because of Compute hardware maintenance

For more information on Always Free Resources refer below official documentation page

https://docs.cloud.oracle.com/en-us/iaas/Content/FreeTier/resourceref.htm?Highlight=%20Always%20free

OCI FastConnect is not offered as part of the Free tier:

Network Security Groups (NSGs) and Security Lists (SLs) are two virtual firewall features that can be used for controlling traffic in an OCI Virtual Cloud Network (VCN). NSGs and SLs allow you to create stateful network filtering rules that allow or deny network traffic based on source and destination IP addresses, ports, and protocols5

NSGs are a subsequent feature designed for application components that have different security postures. NSGs are a set of security rules that you can apply to a set of VNICs in a VCN. NSGs are associated with VNICs, not subnets. You can use NSGs to implement a network security policy at the level of individual VNICs or a group of VNICs. For example, you can use NSGs to control traffic between tiers of an application deployed in a VCN5

SLs are the original virtual firewall feature from the Networking service. SLs are a set of security rules that you apply to a subnet in a VCN. SLs are associated with subnets, not VNICs. You can use SLs to implement a network security policy at the level of the subnet. For example, you can use SLs to control traffic between subnets in a VCN5

A shape is a template that determines the number of CPUs, amount of memory, and other resources that are allocated to an instance.

The network bandwidth is directly proportional to the number of OCPUs in the instance shape!

A single registry can contain both private and public Docker repositories in OCIR. A private repository requires authentication to pull images, while a public repository allows anyone with internet access and the appropriate URL to pull images. You can create and manage both types of repositories using the OCI Console or the Docker CLI3.

COMPARTMENT A collection of related resources. Compartments are a fundamental component of Oracle Cloud Infrastructure for organizing and isolating your cloud resources. You use them to clearly separate resources for the purposes of measuring usage and billing, access (through the use of policies), and isolation (separating the resources for one project or business unit from another). A common approach is to create a compartment for each major part of your organization.

· User Group can use some resources in the compartment like network resources also they can't create it depend on the policy that assigned

· Remember, a compartment is a logical grouping, not a physical one

The primary purpose of a network security group (NSG) in the Oracle Cloud Infrastructure Networking service is to control traffic flow between specific resources within a VCN. An NSG is a set of virtual firewall rules that can be applied to one or more resources, such as instances, load balancers, or database nodes. NSGs allow users to define granular security policies for different types of resources within a VCN.

You must create a dedicated virtual machine host before you can place any instances on it. When creating the dedicated virtual machine host, you select an availability domain and fault domain to launch it in. All the VM instances that you place on the host will subsequently be created in this availability domain and fault domain. You also select a compartment when you create the dedicated virtual machine host, but you can move the host to a new compartment later without impacting any of the instances placed on it. You can also create the instances in a different compartment than the dedicated virtual machine host, or move them to difference compartments after they have been launched.

You are billed for the dedicated virtual machine host as soon as you create it, but you are not billed for any of the individual VM instances you place on it. You will still be billed for image licensing costs if they apply to the image you are using for the VM instances.

Read more: https://docs.cloud.oracle.com/en-us/iaas/Content/Compute/Concepts/dedicatedvmhosts.htm

Oracle Compute Shape is coming with predefined or customize the number of OCPUs that are allocated to an instance. The amount of memory, network bandwidth, and number of VNICs scale proportionately with the number of OCPUs.

Nano instance is not a type of instance offered by the Oracle Cloud Infrastructure Compute service. The types of instances offered by the Compute service are bare metal, virtual machine, dedicated virtual machine host, and flexible virtual machine host. A nano instance is a type of instance offered by AWS EC2 service that provides a small amount of consistent CPU resources and allows users to increase CPU capacity in short bursts when additional cycles are available.

Archive storage is the most cost effective for archive data

Oracle Cloud Infrastructure Marketplace is an online store that offers solutions specifically for customers of Oracle Cloud Infrastructure. In the Oracle Cloud Infrastructure Marketplace catalog, you can find listings for two types of solutions from Oracle and trusted partners: images and stacks. These listing types include different categories of applications. Also, some listings are free and others require payment.

Images are templates of virtual hard drives that determine the operating system and software to run on an instance. You can deploy image listings on an Oracle Cloud Infrastructure Compute instance. Marketplace also offers stack listings. Stacks represent definitions of groups of Oracle Cloud Infrastructure resources that you can act on as a group. Each stack has a configuration consisting of one or more declarative configuration files. With an image or a stack, you have a customized, more streamlined way of getting started with a publisher's software.

Oracle Dedicated Region Cloud @Customer is a fully managed cloud region that brings all Oracle Cloud Infrastructure services and Oracle Fusion Cloud Applications, including Oracle Autonomous Database and SaaS applications, to customer datacenters, starting from only $500K a month1

https://education.oracle.com/en/learning-paths/trackp_OCIF2023CA

Setting up your application across multiple fault domains is a way to configure high availability for an application in an OCI region with a single availability domain. A fault domain is a logical grouping of hardware and infrastructure within an availability domain that is designed to be isolated from failures in other fault domains. Fault domains let you distribute your instances so that they are not on the same physical hardware within a single availability domain. This reduces the impact of hardware failures, power outages, or network issues on your application availability and performance. Each availability domain has three fault domains, regardless of the number of availability domains in a region1

Network File System (NFS) is the file protocol that Oracle Cloud Infrastructure File Storage Service uses to enable file sharing across instances. NFS is a distributed file system protocol that allows a user on a client computer to access files over a network in a manner similar to how local storage is accessed. The File Storage service supports the NFS version 3.0 protocol with Network Lock Manager (NLM) for file locking functionality2.

A NAT gateway gives cloud resources without public IP addresses access to the internet without exposing those resources to incoming internet connections.

The Ultra High Performance level is the only OCI Block Volume performance level that can meet the requirement of at least 105 IOPS/GB and 100,000 IOPS per volume. The Ultra High Performance level is recommended for workloads with the highest I/O requirements, requiring the best possible performance. With this option, you can purchase between 30 – 120 VPUs (volume performance units) per GB/month. The VPUs determine the baseline performance of the volume, as well as the maximum burst performance. The Ultra High Performance level offers the following performance characteristics: 1

• Baseline IOPS/GB: 75
• Maximum IOPS/GB: 300
• Maximum IOPS per volume: 480,000
• Baseline throughput/GB: 0.6 MB/s
• Maximum throughput/GB: 2.4 MB/s
• Maximum throughput per volume: 3,680 MB/s

To achieve the requirement of at least 105 IOPS/GB, you need to purchase at least 45 VPUs/GB. To achieve the requirement of 100,000 IOPS per volume, you need to have a volume size of at least 334 GB. Therefore, the Ultra High Performance level can satisfy both requirements with a minimum volume size of 334 GB and a minimum VPUs/GB of 45.

The other performance levels (Balanced, Higher Performance, and Lower Cost) cannot meet the requirement of at least 105 IOPS/GB and 100,000 IOPS per volume. The Balanced level offers 10 VPUs/GB, with a baseline of 60 IOPS/GB and a maximum of 75 IOPS/GB. The Higher Performance level offers 20 VPUs/GB, with a baseline of 75 IOPS/GB and a maximum of 150 IOPS/GB. The Lower Cost level offers 2 VPUs/GB, with a baseline of 2 IOPS/GB and a maximum of 10 IOPS/GB. None of these levels can provide the required performance for the workload1

IAM components are

RESOURCE

The cloud objects that your company's employees create and use when interacting with Oracle Cloud Infrastructure. For example: compute instances, block storage volumes, virtual cloud networks (VCNs), subnets, route tables, etc.

USER

An individual employee or system that needs to manage or use your company's Oracle Cloud Infrastructure resources. Users might need to launch instances, manage remote disks, work with your virtual cloud network, etc. End users of your application are not typically IAM users. Users have one or more IAM credentials (see User Credentials).

POLICY

A document that specifies who can access which resources, and how. Access is granted at the group and compartment level, which means you can write a policy that gives a group a specific type of access within a specific compartment, or to the tenancy itself. If you give a group access to the tenancy, the group automatically gets the same type of access to all the compartments inside the tenancy. For more information, see Example Scenario and How Policies Work. The word "policy" is used by people in different ways: to mean an individual statement written in the policy language; to mean a collection of statements in a single, named "policy" document (which has an Oracle Cloud ID (OCID) assigned to it); and to mean the overall body of policies your organization uses to control access to resources.

GROUP

A collection of users who all need the same type of access to a particular set of resources or compartment.

DYNAMIC GROUP

A special type of group that contains resources (such as compute instances) that match rules that you define (thus the membership can change dynamically as matching resources are created or deleted). These instances act as "principal" actors and can make API calls to services according to policies that you write for the dynamic group.

NETWORK SOURCE

A group of IP addresses that are allowed to access resources in your tenancy. The IP addresses can be public IP addresses or IP addresses from a VCN within your tenancy. After you create the network source, you use policy to restrict access to only requests that originate from the IPs in the network source.

COMPARTMENT

A collection of related resources. Compartments are a fundamental component of Oracle Cloud Infrastructure for organizing and isolating your cloud resources. You use them to clearly separate resources for the purposes of measuring usage and billing, access (through the use of policies), and isolation (separating the resources for one project or business unit from another). A common approach is to create a compartment for each major part of your organization. For more information, see Setting Up Your Tenancy.

TENANCY

The root compartment that contains all of your organization's Oracle Cloud Infrastructure resources. Oracle automatically creates your company's tenancy for you. Directly within the tenancy are your IAM entities (users, groups, compartments, and some policies; you can also put policies into compartments inside the tenancy). You place the other types of cloud resources (e.g., instances, virtual networks, block storage volumes, etc.) inside the compartments that you create.

HOME REGION

The region where your IAM resources reside. All IAM resources are global and available across all regions, but the master set of definitions reside in a single region, the home region. You must make changes to your IAM resources in your home region. The changes will be automatically propagated to all regions. For more information, see Managing Regions.

FEDERATION

A relationship that an administrator configures between an identity provider and a service provider. When you federate Oracle Cloud Infrastructure with an identity provider, you manage users and groups in the identity provider. You manage authorization in Oracle Cloud Infrastructure's IAM service. Oracle Cloud Infrastructure tenancies are federated with Oracle Identity Cloud Service by default.

Creating a manual cluster of compute instances, and Writing custom scripts that will monitor your solution are not valid ways to ensure fault tolerance at all. Also, Performing Data Integrity check when using OCI File Storage Service is not valid since OCI takes care of it.

Therefore, we are left with:

1) Using multiple OCI Availibility Domains (AD), where available, to deploy your solution - Which is excellent because we have multiple AD's so that if one fails, we have a backup AD!

2) Ensuring your solution components are distributed across OCI Fault Domains - So that we can protect our deployment against unexpected power failures, AD failure etc.

The available purchase models are:

Pay As You Go (PAYG):Billed in arrears based on consumption. Recommended for organizations who are trying new services, rapid prototyping, or for elastic scaling.

Monthly Flex:Billed in advance with a 12-month minimum. Use monthly or forfeit that month’s credits.Recommended for customers with predictable production workloads or large long-running applications, such as HR, payroll, analytics, and more.Monthly Flex maximizes cost reduction with predictable monthly spend, similar to your monthly phone plan. Delivers faster time to market by offering customers the choice of using any IaaS and PaaS services.

Oracle’s current PaaS offering is “license-included PaaS.” It includes:

· Compute and compute support

· Automation

· License entitlement and license support

Bring your own license

BYOL stands for “bring your own license.” Previously, you could bring your own licenses to Oracle IaaS, but to get the benefits of PaaS automation, you couldn’t leverage existing licenses. This has been changed. We’re offering Oracle BYOL to PaaS, enabling our customers to leverage their investment in existing on-premises licenses in their journey to the cloud.

Oracle BYOL to PaaS includes:

· Compute and compute support

· Automation

· Customers bring their on-premises license entitlement and get license support via their existing on-premises support contract.

· As customers leverage their existing on-premises license entitlement, they can move to the cloud at a lower cost.

You can open a support service request with Oracle Support

To create a service request:

Go to My Oracle Support and sign in.

If you are not signed in to Oracle Cloud Support, click Switch to Cloud Support at the top of the page.

Click Create Service Request.

Select the following from the displayed menus:

Service Type: Select Oracle Cloud Infrastructure from the list.

Service Name: Select the appropriate option for your organization.

Problem Type: Select your problem type from the list.

Enter your contact information.

Enter a Description, and then enter the required fields specific to your issue. For most Oracle Cloud Infrastructure issues you need to include the OCID (Oracle Cloud Identifier) for each resource you need help with. See Locating Oracle Cloud Infrastructure IDs for instructions on locating these.

These statements are true regarding OCI regions. A region is a localized geographic area that hosts one or more availability domains. An availability domain is one or more data centers that host OCI resources such as compute instances, block volumes, and subnets. Availability domains are isolated from each other, fault tolerant, and very unlikely to fail simultaneously1

Some regions provide multiple availability domains, while some regions provide a single availability domain. The number of availability domains per region varies depending on the region type and the customer demand. You can check the list of regions and their availability domains here: 2

• Commercial regions: These are the standard regions that are available to all customers and offer a wide range of OCI services and features. Commercial regions can have one, two, or three availability domains per region.
• Government regions: These are the regions that are dedicated to US government customers and meet specific compliance and security requirements. Government regions can have one or two availability domains per region.
• Dedicated regions: These are the regions that are deployed within a customer’s data center and provide a fully managed OCI environment that is consistent with the public cloud regions. Dedicated regions can have one or two availability domains per region.

The other statements are false regarding OCI regions. There is no concept of subregions in OCI. A region is composed of one or more availability domains, not subregions1

Regions do not only provide test/dev environments. Regions can host any type of workload or application, whether it is for production, development, testing, or disaster recovery purposes. Regions offer different performance levels, service levels, and pricing options to suit different customer needs and use cases1

Regions do not provide a single fault domain. A fault domain is a grouping of hardware and infrastructure within an availability domain that is designed to be isolated from failures in other fault domains. Fault domains let you distribute your instances so that they are not on the same physical hardware within a single availability domain. Each availability domain has three fault domains, regardless of the number of availability domains in a region3

Changing the Shape of an Instance (Horizontal Scaling)

You can change the shape of a virtual machine (VM) instance without having to rebuild your instances or redeploy your applications. This lets you scale up your Compute resources for increased performance, or scale down to reduce cost.

Autoscaling (vertical scaling)

Autoscaling lets you automatically adjust the number of Compute instances in an instance pool based on performance metrics such as CPU utilization. This helps you provide consistent performance for your end users during periods of high demand, and helps you reduce your costs during periods of low demand.

As load increases, instances are automatically provisioned: the instance pool scales out. As load decreases, instances are automatically removed: the instance pool scales in.

https://docs.cloud.oracle.com/en-us/iaas/Content/Compute/Tasks/resizinginstances.htm

Exadata DB Systems are not available as part of Oracle Cloud Free Tier. Exadata DB Systems are a premium service that provides the highest levels of performance and availability for Oracle Database workloads. Oracle Cloud Free Tier includes a set of Always Free services that never expire, and a 30-day trial with US$300 of free credit to use on all eligible OCI services1. The Always Free services include two Oracle Autonomous Databases, two AMD Compute VMs, up to four instances of ARM Ampere A1 Compute, and other services1.

Oracle offers several different service level agreements as defined in this section (Service Level Agreements).Service level agreements range from least restrictive (data plane) to more restrictive (control plane) to most restrictive (performance).