Oracle 1z0-1124-25 問題集

質問 1：
You are designing an OCI architecture where a custom application running on a compute instance in a private subnet needs to securely access an Oracle Integration Cloud (OIC) instance. The security policy mandates that all communication remains within the OCI network and avoids traversing the public internet. Which type of endpoint provides the most secure and direct connectivity for this scenario?
A. Service Gateway Endpoint
B. Private Endpoint
C. Public Endpoint
D. Regional Endpoint
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 2：
You're designing a multi-region deployment of your application on OCI. You want to use OCI's global load balancing capabilities, but also require the WAF to protect against attacks close to the user. Which configuration provides the best balance between global load balancing and regional WAF protection?
A. Configure the OCI GLB to distribute traffic based on source IP address to specific regions, and enable WAF on the regional Load Balancer.
B. Configure the WAF in front of the OCI GLB itself to inspect all traffic globally.
C. Use OCI GLB to distribute traffic to regional Load Balancers, each fronted by a regional WAF.
D. Use OCI Global Load Balancer (GLB) with a single regional WAF protecting the backend servers in one region.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 3：
You are designing an OCI networking architecture for a multi-tier application using Infrastructure as Code (IaC). The architecture includes an OKE cluster for the front-end, a set of Compute instances for the back- end, and an Autonomous Database. You want to ensure that all traffic between these components is encrypted. You are using Transport Layer Security (TLS) for end-to-end encryption but are concerned about the overhead of encrypting all traffic within the VCN. Which approach provides the MOST balanced approach to security and performance, minimizing the overhead of encryption while still protecting sensitive data?
A. Use Network Security Groups (NSGs) and Security Lists to control access between components but do not implement any additional encryption within the VCN.
B. Implement TLS encryption only between the OKE cluster and the load balancer. Rely on the inherent security of the OCI network for traffic within the VCN.
C. Implement TLS encryption for traffic between the OKE cluster and the Compute instances and use Oracle Database Vault to encrypt data at rest and in transit for the Autonomous Database.
D. Implement mutual TLS (mTLS) for all traffic between the OKE cluster, the Compute instances, and the Autonomous Database.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 4：
Your application running on OCI Compute instances in a private subnet requires high availability and the ability to distribute incoming traffic across multiple instances. You need to ensure that the load balancer can handle both HTTP and HTTPS traffic and provides health checks to monitor the availability of your backend servers. Which OCI Load Balancer offering is the most suitable for this scenario, considering both functionality and cost-effectiveness for a production environment?
A. Flexible Load Balancer with only TCP listeners.
B. Flexible Load Balancer with HTTP and HTTPS listeners and health checks.
C. Network Load Balancer (NLB) with UDP listeners.
D. Network Load Balancer (NLB) with TCP listeners.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Your company uses OCI Certificates to manage SSL/TLS certificates for its public-facing applications. You need to implement a solution that automatically renews these certificates before they expire to avoid service disruptions. Which OCI Certificates feature or configuration best achieves this?
A. Manually renew the certificates through the OCI Console before their expiration date.
B. There is no automatic renewal feature in OCI Certificates; manual renewal is always required.
C. Enable "Automatic Renewal" option within the OCI Certificates service and ensure DNS validation is properly configured.
D. Use OCI Vault to store the certificates and manually renew them using the Vault API.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 6：
You are configuring a VCN with multiple subnets for a customer. The security team requires that all instances have IPv6 addresses. You configure the VCN with an IPv6 ULA CIDR block of fc00:1:1::/48 and create two private subnets. After launching instances in the two private subnets, you notice that they only have IPv4 addresses assigned. You have not manually configured any IPv6 addresses on the instances themselves. What steps are necessary to ensure the instances automatically receive IPv6 addresses?
A. Make sure the "Assign public IPv4 address" option is not selected during instance creation. This will force the instance to default to IPv6 allocation.
B. No further steps are needed. Instances will automatically receive IPv6 addresses within the configured subnets upon launch.
C. IPv6 address assignment is only supported on instances launched in public subnets.
D. Ensure that SLAAC (Stateless Address Autoconfiguration) is enabled on the operating system of the instances within the two subnets.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 7：
Your company has two FastConnect circuits connecting your on-premises network to OCI. You want to implement a BGP configuration that ensures that traffic from OCI to your on-premises network is load- balanced across both FastConnect circuits. Which BGP configuration would BEST achieve load balancing across the two FastConnect circuits?
A. Advertise the same prefixes with the same attributes (including AS Path) across both FastConnect circuits.
B. Configure AS Path Prepending on one of the FastConnect virtual circuits.
C. Configure different MED values on each FastConnect virtual circuit.
D. Configure local preference to be higher on one of the FastConnect virtual circuits.
正解：A
解説: (Topexam メンバーにのみ表示されます)