Oracle 1z0-1124-25 Value Pack (Frequently Bought Together)

You are designing a multi-tier application in OCI, deploying the application tier in a public subnet and the database tier in a private subnet within the same VCN. The application tier requires access to specific external internet resources for software updates and third-party API calls. However, the database tier should not have direct internet access. Which of the following is the most secure and efficient method to achieve this configuration?

• A. Configure a NAT Gateway for both the public and private subnets.
• B. Configure a NAT Gateway for the private subnet and an Internet Gateway for the public subnet.
• C. Configure a NAT Gateway for the public subnet and a Service Gateway for the private subnet.
• D. Configure a NAT Gateway for the private subnet and a Service Gateway for the public subnet.

You are configuring a VCN with multiple subnets for a customer. The security team requires that all instances have IPv6 addresses. You configure the VCN with an IPv6 ULA CIDR block of fc00:1:1::/48 and create two private subnets. After launching instances in the two private subnets, you notice that they only have IPv4 addresses assigned. You have not manually configured any IPv6 addresses on the instances themselves. What steps are necessary to ensure the instances automatically receive IPv6 addresses?

• A. Ensure that SLAAC (Stateless Address Autoconfiguration) is enabled on the operating system of the instances within the two subnets.
• B. Make sure the "Assign public IPv4 address" option is not selected during instance creation. This will force the instance to default to IPv6 allocation.
• C. No further steps are needed. Instances will automatically receive IPv6 addresses within the configured subnets upon launch.
• D. IPv6 address assignment is only supported on instances launched in public subnets.

When setting up cross-tenancy VCN peering using Local Peering Gateways (LPGs), which IAM permission is required in the target tenancy to accept the peering request?

• A. Allow group <group_name> to read virtual-network-family in tenancy=<target_tenancy_OCID>
• B. Allow group <group_name> to manage local-peering-gateways in tenancy=<target_tenancy_OCID>
• C. Allow group <group_name> to use local-peering-gateways in tenancy=<target_tenancy_OCID>
• D. Allow group <group_name> to inspect local-peering-gateways in tenancy=<target_tenancy_OCID>

A development team has deployed a three-tier application in an OCI VCN. The application consists of a public-facing web tier, an application tier, and a database tier. The team reports that the web tier instances can communicate with the application tier instances, but the application tier instances cannot connect to the database tier instances. All security lists are configured to allow all traffic within the VCN. Which OCI Networking diagnostic tool would BEST help you quickly isolate the root cause of this connectivity issue?

• A. Connection Diagnostics
• B. OCI Bastion
• C. Network Firewall
• D. VCN Flow Logs

Your company is deploying a high-throughput, low-latency financial application on OCI. This application relies on raw TCP connections and requires connection persistence to maintain session state. You anticipate extremely high traffic volume and need a load balancer that can handle millions of concurrent connections with minimal overhead. You also want to use private endpoints. Which OCI load balancing option provides the most appropriate solution to meet these stringent performance and security requirements?

• A. Regional Load Balancer with TCP load balancing and IP Hash Persistence
• B. Global Load Balancer with TCP load balancing and Cookie-based Persistence
• C. Regional Load Balancer with HTTP load balancing and Source IP Hash Persistence
• D. Network Load Balancer with TCP load balancing and 5-Tuple Hash Persistence