Exactprep 1z0-1124-25 Questions

Goal:Prefer FastConnect routes over public internet in OCI.

BGP Attributes:

Local Preference:Higher value prefers a path within an AS.

AS Path:Shorter path preferred, but manipulated on sender side.

Prefix Length:More specific wins, but not controllable here.

MED:Influences inbound traffic, not OCI preference.

Evaluate Options:

A:Higher Local Preference ensures FastConnect priority; correct.

B:AS Path is set by on-premises, not OCI; incorrect.

C:Prefix specificity is on-premises controlled; incorrect.

D:MED affects on-premises, not OCI; incorrect.

Conclusion:Local Preference is the right attribute.

Local Preference controls route preference in BGP. The Oracle Networking Professional study guide states, "To prioritize FastConnect routes in OCI, increase the Local Preference for routes learned via the FastConnect virtual circuit over other paths" (OCI Networking Documentation, Section: BGP Configuration). This ensures OCI prefers the private path.

Objective: Improve OCI-AWS data transfer performance.

Option A: Region distance affects latency—valid.

Option B: Dedicated interconnect boosts bandwidth and stability—valid.

Option C: Compute pricing doesn’t influence inter-cloud bandwidth—invalid.

Option D: WAN optimization can enhance transfer efficiency—valid.

Conclusion: Option C is not a design consideration for performance.

Oracle notes:

"To optimize OCI-AWS connectivity, consider region proximity, dedicated interconnects, or WAN optimization. Compute pricing is unrelated to network performance."This excludes Option C. Reference:Hybrid Cloud Networking - Oracle Help Center(docs.oracle.com/en-us/iaas/Content/Network/Concepts/hybridcloud.htm).

Needs: Private, dedicated connection for large data transfers to Object Storage.

Option A: VPN with Service Gateway uses public internet, limiting bandwidth—incorrect.

Option B: Internet Gateway exposes traffic publicly—incorrect.

Option C: FastConnect Private Peering provides a dedicated link, and Service Gateway ensures private Object Storage access—correct.

Option D: DRG with Internet Gateway isn’t private—incorrect.

Conclusion: Option C best meets the need.

Oracle states:

"FastConnect Private Peering combined with a Service Gateway enables secure, high-bandwidth access to Object Storage from on-premises networks."This supports Option C. Reference:FastConnect and Service Gateway - Oracle Help Center(docs.oracle.com/en-us/iaas/Content/Network/Tasks/fastconnect.htm#servicegateway).

Requirement Analysis: Strict compliance mandates logging all user access to private resources in a multi-tier setup.

Option A Assessment: Dynamic port forwarding with no logging fails compliance, as it provides no audit trail.

Option B Assessment: Managed Bastion sessions in OCI offer detailed logging (e.g., session start/end times, user IDs), integrated with OCI Logging. This meets compliance needs with a managed, scalable solution.

Option C Assessment: SSH port forwarding with minimal logs doesn’t provide the detailed auditing required for strict compliance.

Option D Assessment: A jump server with manual logging is error-prone, lacks scalability, and isn’t a managed OCI service, making it less suitable.

Conclusion: Option B provides the most robust, compliance-ready solution with detailed logging.

From Oracle’s Bastion documentation:

"OCI Bastion provides managed SSH sessions with detailed logging capabilities, capturing user access details for audit and compliance. Enable session logging to record all activities."This supports Option B as the best choice. Reference:Bastion Service Overview - Oracle Help Center(docs.oracle.com/en-us/iaas/Content/Bastion/Concepts/bastionoverview.htm).