Online Access Free 1z0-1124-25 Practice Test

Which OCI service facilitates the creation of a private connection between two VCNs located in different tenancies, without traversing the public internet?

• A.Service Gateway
• B.Internet Gateway
• C.Dynamic Routing Gateway (DRG) with Local Peering Gateway (LPG)
• D.Remote Peering Connection (RPC)

Your organization is deploying a critical database application on OCI. To ensure high availability, you have deployed the database instances across multiple availability domains (ADs) within asingle region. You need to distribute client connections to the database instances and ensure that the load balancer can handle long- lived TCP connections with minimal overhead. Session persistence is not required. Which OCI load balancing solution would you choose in this scenario to minimize latency and connection establishment overhead?

• A.Flexible Load Balancer with HTTP health checks.
• B.Network Load Balancer with TCP health checks.
• C.Application Load Balancer with TCP health checks.
• D.Application Load Balancer with HTTP health checks.

You're automating the creation of multiple VCNs across different OCI regions using Cloud Shell scripting.
Which authentication method within Cloud Shell is best suited to programmatically authenticate with OCI, ensuring both security and scalability for this automation task?

• A.Using the default Cloud Shell user and configuring the OCI CLI with API keys in a shell script.
• B.Using Resource Manager stack with Terraform to provision network resources including cross-region configurations, leveraging OCI Vault to handle the sensitive credentials used in Terraform scripts.
• C.Creating a dedicated IAM user for automation, generating API keys, storing the keys securely in Cloud Shell's persistent storage, and using them in the scripts.
• D.Leverage Instance Principals in conjunction with a dynamic group that includes your Cloud Shell session.

You are configuring a VCN with multiple subnets for a customer. The security team requires that all instances have IPv6 addresses. You configure the VCN with an IPv6 ULA CIDR block of fc00:1:1::/48 and create two private subnets. After launching instances in the two private subnets, you notice that they only have IPv4 addresses assigned. You have not manually configured any IPv6 addresses on the instances themselves. What steps are necessary to ensure the instances automatically receive IPv6 addresses?

• A.IPv6 address assignment is only supported on instances launched in public subnets.
• B.Make sure the "Assign public IPv4 address" option is not selected during instance creation. This will force the instance to default to IPv6 allocation.
• C.Ensure that SLAAC (Stateless Address Autoconfiguration) is enabled on the operating system of the instances within the two subnets.
• D.No further steps are needed. Instances will automatically receive IPv6 addresses within the configured subnets upon launch.

You're tasked with creating a network diagnostic tool using Cloud Shell to test connectivity to various endpoints from within your VCN. To enhance security, you want to ensure the tool only has the necessary permissions to perform network diagnostics (e.g., ping, traceroute, nc). Which IAM principle and associated action(s) provide the MOST restrictive, least-privilege access for Cloud Shell to perform network diagnostic tasks?

• A.Cloud Shell session using Instance Principals, belonging to a dynamic group with a policy allowing network-security-groups and vnics to be read and used.
• B.An IAM group with the use permission on the virtual-network-family aggregate resource in the tenancy.
• C.An IAM group with inspect permission on virtual-network-family in the target compartment.
• D.An IAM user with the read permission on all virtual-network-family resources.