Instant Access Oracle.1Z0-1072-20.v2022-02-28.q110 Actual Practice Test Engine for Free (Page 7)

Question 26

You have created a public subnet in a VCN, and your public subnet has a Route Table, a Security List, and an Internet Gateway. However, none of the compute instances can connect to the Internet.
Which two are possible reasons for the connectivity issue? (Choose two.)

A.There is no Dynamic Routing Gateway (DRG) associated with the VCN.
B.The Route Table has no default route for routing traffic to the Internet Gateway.
C.There is no stateful ingress rule in the Security List associated with the public subnet.
D.There is no stateful egress rule in the Security List associated with the public subnet.

Correct Answer: B,D

Explanation
An internet gateway as an optional virtual router that connects the edge of the VCN with the internet. To use the gateway, the hosts on both ends of the connection must have public IP addresses for routing. Connections that originate in your VCN and are destined for a public IP address (either inside or outside the VCN) go through the internet gateway. Connections that originate outside the VCN and are destined for a public IP address inside the VCN go through the internet gateway.
Working with Internet Gateways
You create an internet gateway in the context of a specific VCN. In other words, the internet gateway is automatically attached to a VCN. However, you can disable and re-enable the internet gateway at any time.
Compare this with a dynamic routing gateway (DRG), which you create as a standalone object that you then attach to a particular VCN. DRGs use a different model because they're intended to be modular building blocks for privately connecting VCNs to your on-premises network.
For traffic to flow between a subnet and an internet gateway, you must create a route rule accordingly in the subnet's route table (for example, destination CIDR = 0.0.0.0/0 and target = internet gateway). If the internet gateway is disabled, that means no traffic will flow to or from the internet even if there's a route rule that enables that traffic. For more information, see Route Tables.
For the purposes of access control, you must specify the compartment where you want the internet gateway to reside. If you're not sure which compartment to use, put the internet gateway in the same compartment as the cloud network. For more information, see Access Control.
You may optionally assign a friendly name to the internet gateway. It doesn't have to be unique, and you can change it later. Oracle automatically assigns the internet gateway a unique identifier called an Oracle Cloud ID (OCID). For more information, see Resource Identifiers.
To delete an internet gateway, it does not have to be disabled, but there must not be a route table that lists it as a target.
AS per compute instances can connect to the Internet so you use egress no ingress

Question 27

You are deploying a highly available web application in Oracle Cloud Infrastructure and have decided to use a public load balancer. The back-end web servers will be distributed across all three availability domains (ADs).
How many subnets should you create to deliver a secure highly available application?

A.four subnets in total; one subnet in each AD for the web servers and a single subnet in any one AD for the load balancer
B.six subnets in total; two subnets in each AD; one for the load balancer and one for the web servers
C.five subnets in total; two subnets each in the first and second AD with a single subnet in the third AD
D.three subnets in total; one subnet in each AD

Question 28

You developed a microservices based application that runs on Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE). You want to provide access to this cluster to other team members.
What should you do to provide access to this cluster using as fewest steps as possible?

A.Create a group in OCI Infrastructure Access Management (IAM). Create a policy to grant access to the OKE cluster. Other team members should use OCI Cloud Shell to generate the kubeconfig into their own cloud shell environment and access the cluster using kubectl from cloud shell.
B.Create a group in OCI Infrastructure Access Management (IAM). Create a policy to grant access to the OKE cluster. Other team members should install oci cli and kubectl locally on their laptop. Use the oci cli to generate the kubeconfig and use kubectl to access the cluster.
C.Create a group in OCI Infrastructure Access Management (IAM). Create a policy to grant access to the OKE cluster. Create individual users and access token for each team member. Other team members should use OCI Cloud Shell to generate the kubeconfig into their own cloud shell environment and access the cluster using kubectl from cloud shell.
D.Create a group in OCI Infrastructure Access Management (IAM). Create a policy to grant access to the OKE cluster. Create a cluster role and cluster role binding to provide access to the cluster for each team member. Other team members should install oci cli and kubectl locally on their laptop. Use the oci cli to generate the kubeconfig and use kubectl to access the cluster.

Question 29

You are a network architect and have designed the network infrastructure of a three-tier application on Oracle Cloud Infrastructure (OCI). In the architecture, back-end DB servers are in a private subnet. One of your DB administrators requests to have access to OCI object storage service.
How can you meet this requirement?

A.Create a service gateway, add a new route rule to the private subnet route table that uses storage as your service gateway target type
B.Create a dynamic routing gateway (DRG) and attach it your virtual cloud network (VCN). Add a default route rule to the private subnets route table and set the target as DRG
C.Attach a public IP address to the instances in the private subnet, and then add a new route rule to the private subnet route table to route default traffic to the internet gateway
D.Add a new route rule to the private subnet route table to route default traffic to the internet gateway

Question 30

You have an Oracle Cloud Infrastructure (OCI) load balancer distributing traffic via an evenly-weighted round robin policy to your backend web servers. You notice that one of your web servers is receiving more traffic than other web servers.
How can you resolve this imbalance?

A.Check security lists and route tables of your virtual cloud network (VCN) and fix any issues associated with the rules
B.Create separate listeners for each backend web server
C.Delete and re-create your OCI load balancer
D.Disable session persistence on your backend set

Question 26

Question 27

Question 28

Question 29

Question 30

Download PDF File