Which two are key architectural considerations that must be evaluated when designing a multicloud solution according to the Oracle Cloud Infrastructure (OCI) Multicloud Architecture Framework? (Choose two.)

• A. Third-party cloud provider hardware manufacturing origins
• B. Security, identity, and operations management standardization
• C. Network latency and data movement across cloud boundaries
• D. Native OCI virtual machine hypervisor patching schedules

Your development team is trying to establish a private network connection from an Azure Container Apps environment to an Exadata database on Oracle AI Database@Azure, but the connection keeps timing out.
Which feature must you enable on your database virtual network (VNet) to resolve this compatibility issue?

• A. ExpressRoute Global Reach Gateway
• B. Azure Network Virtual Appliance Route Bypass
• C. OCI FastConnect Shared Port Multiplexing
• D. Advanced Networking

An enterprise already uses Microsoft Entra ID to govern employee access to hundreds of SaaS applications through group-based role assignment. The database team wants administrators to sign in to the OCI Console for Oracle AI Database@Azure using the same corporate credentials, and wants Entra ID group membership to automatically determine the corresponding OCI IAM group membership without manually creating each user in OCI. As the architect, you must choose the configuration that satisfies both the single sign-on and automated group-mapping requirements. Choose ONE.

• A. Configure Azure role-based access control (RBAC) exclusively, without OCI IAM changes.
• B. Configure Azure Key Vault access policies for each administrator.
• C. Create local OCI IAM users manually for every administrator.
• D. Configure SAML-based identity federation with Microsoft Entra ID and enable group claims.

A multinational organization's security team has implemented strict Azure Policy definitions that deny the creation of any untagged resource groups and prohibit deploying resources in any region other than West Europe. An administrator is now attempting to purchase an Oracle AI Database@Azure Private Offer and complete the subscription setup, but the subscription registration fails immediately with a "Deny" policy action during the purchase. The failure is traced to a managed resource group that must be created in the background to contain the OracleSubscription billing object. To resolve this deployment blocker and successfully purchase the offer, what specific adjustment must the Azure policy and administrator align on?
Choose ONE.

• A. Re-configure the OCI tenancy to use the pay-as-you-go model, removing the Azure-side managed resource group requirement.
• B. Manually pre-create the tagged managed resource group in West Europe prior to purchasing the Marketplace offer.
• C. Exclude the background managed resource group from the deny policies, allowing it to initially be created in the EastUS region without tags.
• D. Update the Azure subscription billing address to match an OCI region, bypassing the regional managed resource group requirement.

Your enterprise is configuring federated single sign-on (SSO) and authentication for administrators operating Oracle AI Database@Azure resources. Which identity provider natively provides federated identity and access management for this co-located database service?

• A. Active Directory Federation Services
• B. OCI Identity Domains
• C. Okta Identity Cloud
• D. Microsoft Entra ID