Oracle 1z0-1124-25 問題集

質問 1：
Consider a scenario where you have several private subnets within your VCN, and instances in these subnets need to access different OCI Object Storage buckets across various compartments. How can you efficiently manage and secure private access to Object Storage for all these subnets while adhering to the principle of least privilege?
A. Create a Private Endpoint for each Object Storage bucket within each private subnet.
B. Deploy a single NAT Gateway and manage access using Network Security Groups (NSGs) for each subnet.
C. Implement a Service Gateway within the VCN and utilize IAM policies and route tables to direct traffic to the appropriate Object Storage service endpoints.
D. Configure a single Internet Gateway and use IAM policies to control access at the bucket level.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Your security team has mandated that all traffic to Oracle Cloud Infrastructure Object Storage must be encrypted end-to-end and must not be routed over the public internet. You are designing asolution where compute instances within a private subnet will frequently upload and download data from Object Storage.
Which of the following options provides the most secure and compliant solution?
A. Configure a Private Endpoint to Object Storage and ensure all API calls to Object Storage are made over HTTPS.
B. Configure a Service Gateway to Object Storage and enable encryption at rest on the Object Storage bucket.
C. Configure a Service Gateway to Object Storage and ensure all API calls to Object Storage are made over HTTPS.
D. Configure a NAT Gateway for the instances and enable encryption in transit using HTTPS for all Object Storage API calls.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 3：
You are using Terraform to deploy a multi-tier application architecture consisting of a public subnet hosting a load balancer, a private subnet hosting application servers, and another private subnet hosting a database. The Terraform code successfully creates all the required infrastructure, including route tables and security lists.
However, after deployment, you realize that the load balancer cannot reach the application servers in the private subnet. You have verified that the load balancer is healthy and the application servers are running.
What is the most likely cause of this connectivity problem?
A. The route table associated with the application server subnet has a default route pointing to the Internet Gateway, which is incorrect for a private subnet.
B. The load balancer's security list is not configured to allow egress traffic to the application server subnet on the required ports (e.g., port 8080).
C. The Network Address Translation (NAT) Gateway is misconfigured, preventing the application servers from initiating connections back to the load balancer.
D. The security list associated with the application server subnet does not allow ingress traffic from the load balancer's IP address range.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 4：
You are tasked with setting up a secure connection from an OCI Compute instance running in a private subnet to a third-party API that is only accessible over the internet via a static public IP address. Your company policy prohibits exposing the compute instance directly to the internet. Which combination of VCN resources BEST facilitates this secure outbound connection to the third-party API?
A. A NAT Gateway and a security list allowing outbound traffic to the third-party API's IP address.
B. A Dynamic Routing Gateway (DRG) connected to a FastConnect circuit, with routes configured to direct traffic to the third-party API's IP address.
C. An Internet Gateway with a security list allowing outbound traffic to the third-party API's IP address.
D. A Service Gateway configured with a Service CIDR label that includes the third-party API's IP address.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 5：
You are troubleshooting a BGP peering issue between your on-premises router and an OCI FastConnect virtual circuit. You have verified the physical connectivity and confirmed that the BGP session is established.
However, routes are not being exchanged. You suspect a problem with the BGP configuration. What is the MOST LIKELY cause of this issue, assuming the basic BGP configuration (AS numbers, peer IP addresses) is correct?
A. There is a mismatch in the BGP authentication keys between the on-premises router and OCI.
B. The BGP keepalive timers are misconfigured, causing the session to drop intermittently.
C. The advertised prefixes are being filtered by a prefix list or route map on either the on-premises router or the OCI FastConnect virtual circuit.
D. The MTU (Maximum Transmission Unit) size is mismatched, causing fragmentation and packet loss.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 6：
When configuring transitive routing with a DRG across multiple VCNs and on-premises networks, which key configuration step ensures that traffic from one VCN is correctly routed through the DRG to an on-premises destination?
A. Configuring dynamic routing protocol (e.g., BGP) on the DRG and the on-premises Customer Premises Equipment (CPE).
B. Configuring static routes on the DRG route table with the on-premises network CIDR and the corresponding VCN attachment.
C. Attaching all VCNs to a single LPG and configuring route tables to direct traffic to the on-premises network.
D. Implementing a Service Gateway to facilitate direct communication between the VCNs and the on- premises network.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 7：
Your organization is deploying a critical database application on OCI. To ensure high availability, you have deployed the database instances across multiple availability domains (ADs) within asingle region. You need to distribute client connections to the database instances and ensure that the load balancer can handle long- lived TCP connections with minimal overhead. Session persistence is not required. Which OCI load balancing solution would you choose in this scenario to minimize latency and connection establishment overhead?
A. Flexible Load Balancer with HTTP health checks.
B. Network Load Balancer with TCP health checks.
C. Application Load Balancer with HTTP health checks.
D. Application Load Balancer with TCP health checks.
正解：B
解説: (Topexam メンバーにのみ表示されます)