Online Access Free 1z0-1124-25 Practice Test

In a hybrid cloud migration, which OCI component is essential for dynamically routing traffic between on- premises networks and OCI Virtual Cloud Networks (VCNs), facilitating seamless communication?

• A.Dynamic Routing Gateway (DRG)
• B.Local Peering Gateway (LPG)
• C.Internet Gateway
• D.Service Gateway

Your company is migrating its legacy application to OCI. This application uses self-signed certificates. As part of the migration, you want to replace these with certificates issued by a trusted Certificate Authority (CA) managed through OCI Certificates. What is the most secure and recommended method to handle this transition?

• A.Configure OCI WAF to bypass certificate validation for the legacy application.
• B.Import the self-signed certificates into OCI Certificates and continue using them until they expire.
• C.Obtain certificates from OCI Certificates, gradually replace self-signed certificates on application servers, and update the truststores on client systems to include the OCI Certificates CA.
• D.Immediately replace the self-signed certificates on all application servers with certificates issued by OCI Certificates, without any gradual rollout.

Your security team has mandated that all traffic to Oracle Cloud Infrastructure Object Storage must be encrypted end-to-end and must not be routed over the public internet. You are designing asolution where compute instances within a private subnet will frequently upload and download data from Object Storage.
Which of the following options provides the most secure and compliant solution?

• A.Configure a Service Gateway to Object Storage and enable encryption at rest on the Object Storage bucket.
• B.Configure a NAT Gateway for the instances and enable encryption in transit using HTTPS for all Object Storage API calls.
• C.Configure a Private Endpoint to Object Storage and ensure all API calls to Object Storage are made over HTTPS.
• D.Configure a Service Gateway to Object Storage and ensure all API calls to Object Storage are made over HTTPS.

You are designing a hybrid cloud solution where sensitive data must be transferred between your on-premises data center and an OCI VCN. You require a dedicated, private connection with guaranteed bandwidth and low latency. In addition to FastConnect, what additional product would you implement to achieve encryption of the traffic traversing the FastConnect link and to ensure data confidentiality?

• A.Oracle Cloud Infrastructure Vault
• B.IPSec VPN
• C.MACsec
• D.OCI Bastion

Your company has decided to migrate its on-premises data center to OCI. As a network engineer, you need to establish a secure and reliable connection between the on-premises network and the OCI VCN with the following constraints: high bandwidth requirements, low latency requirements, secure private connection, and redundant connectivity crucial for business continuity. Which is the MOST suitable and resilient solution, considering the VCN gateway options?

• A.A single VPN Connect connection to a DRG.
• B.Multiple VPN Connect connections to a DRG.
• C.A FastConnect circuit with a DRG.
• D.Multiple FastConnect circuits to a DRG in conjunction with multiple VPN Connect connections to the same DRG.