Month End Sale 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: save70

Oracle 1z0-1124-25 Questions Answers

Page: 7 / 9
Total 120 questions

Oracle Cloud Infrastructure 2025 Networking Professional Questions and Answers

Question 25

Your organization is migrating a critical three-tier application to OCI. The application requires a highly available and performant database tier. You plan to use Oracle Autonomous Database on Dedicated Exadata Infrastructure. The Autonomous Database subnet must adhere to the organization's security policy, which mandates no direct internet access and private access to other VCN subnets. You need to ensure the proper IP address allocation and routing. Which of the following procedural steps is most effective for achieving this?

Options:

A.

Create a public subnet for the Autonomous Database and configure a Service Gateway with access to all Oracle Services in OCI. Configure NSG rules allowing only traffic from the application's compute instances.

B.

Create a private subnet for the Autonomous Database and configure a Service Gateway with access to only Object Storage and Yum Server Oracle Services in OCI. Configure NSG rules allowing only traffic from the application's compute instances, and configure routing to a Dynamic Routing Gateway (DRG) for access to other VCN subnets.

C.

Create a private subnet for the Autonomous Database and configure a Service Gateway with access to Autonomous Database Oracle Services in OCI. Configure NSG rules allowing only traffic from the application's compute instances, and configure routing to a Dynamic Routing Gateway (DRG) for access to other VCN subnets. Reserve a large CIDR block for future database expansion.

D.

Create a public subnet for the Autonomous Database, assign it a public IP address, and configure a Service Gateway with access to all Oracle Services in OCI. Configure routing to an Internet Gateway. Secure access using Security Lists allowing traffic only from approved IP ranges.

Question 26

You are troubleshooting a network connectivity issue between a compute instance in a private subnet within your VCN and a service on the public internet using Cloud Shell. You suspect a problem with the network security group (NSG) rules associated with the instance's VNIC. Which Cloud Shell command and appropriate tool combination allows you to directly inspect the NSG configuration impacting the VNIC?

Options:

A.

oci network network-security-group get --nsg-id piped to grep

B.

oci compute instance get --instance-id piped to jq '.vnics[].nic_id | oci network vnic get --vnic-id .' piped to jq '.network_security_group_ids[] | oci network network-security-group get --nsg-id .'

C.

oci compute instance get --instance-id piped to grep NetworkSecurityGroupIds

D.

oci network vnic get --vnic-id piped to awk '/network_security_group_ids/ {print $2}' | xargs oci network network-security-group get --nsg-id

Question 27

Your company needs to establish a secure connection between your on-premises network and OCI for a pilot project. The project has a limited budget and requires a quick setup, but also demands that the connection is encrypted. The long-term plan involves migrating to FastConnect, but that will take several months. Which OCI VPN solution would be most suitable for this short-term, budget-conscious, and security-aware scenario?

Options:

A.

Use a Dynamic Routing Gateway (DRG) with a Site-to-Site VPN connection configured using static routing.

B.

Deploy a third-party virtual appliance VPN solution from the OCI Marketplace within a public subnet and configure a VPN connection to your on-premises network.

C.

Use a Service Gateway to connect to a third-party VPN service available on the internet.

D.

Use a Dynamic Routing Gateway (DRG) with a Site-to-Site VPN connection configured using dynamic routing with BGP.

Question 28

A company has deployed a VCN in OCI with multiple subnets. Security requirements dictate that instances in different subnets within the same VCN should not be able to directly communicate with each other unless explicitly permitted. You are tasked with implementing this policy. What is the most appropriate approach to meet this requirement?

Options:

A.

Remove the default route rule in the VCN's route table that allows traffic between subnets.

B.

Create separate VCNs for each subnet.

C.

Configure network security groups (NSGs) for each subnet, defining strict ingress and egress rules that only allow the necessary traffic.

D.

Configure a stateful firewall in front of the VCN and configure the rules to deny inter-subnet traffic.

Page: 7 / 9
Total 120 questions