Question No 1

You are troubleshooting a connectivity issue between two compute instances within the same VCN. Both instances are in different subnets. Instance A (IPv4 10.0.1.10, IPv6 fc001110) can ping its subnet gateway (10.0.1.1) and can ping the IPv6 address of Instance B (fc001220), but cannot ping Instance B's IPv4 address (10.0.2.20). The security lists and network security groups (NSGs) are configured to allow all traffic between the subnets. The route table for Instance A’s subnet has a rule to route all traffic destined to 10.0.2.0/24 subnet to the VCN Local Peering Gateway. What is the most probable cause?

Choose the Choices:

The VCN does not have IPv6 enabled.

The route table for Instance B's subnet is missing a rule to route traffic destined for 10.0.1.0/24 to the VCN Local Peering Gateway.

IPv6 traffic cannot be filtered by security lists or NSGs.

The "ping" utility is not supported on the IPv6 address.

Question No 2

You are designing a backup solution in OCI. Compute instances in a private subnet need to back up data to OCI Object Storage. Security policy mandates that data transfer must not traverse the public internet. You need to choose the most secure and cost - effective method for accessing Object Storage. Which endpoint/gateway configuration should you implement?

Choose the Choices:

Configure an Internet Gateway and use public Object Storage endpoints.

Configure a NAT Gateway and use public Object Storage endpoints with HTTPS enabled.

Configure a Service Gateway with the Oracle Services Network service CIDR label for your region, and use regional Object Storage endpoints.

Configure a Dynamic Routing Gateway (DRG) and FastConnect to a remote region and use public Object Storage endpoints. Product Question:s Version

Question No 3

Your company has established a hybrid cloud environment using FastConnect to connect your on - premises network to your OCI VCN. You are advertising on - premises network prefixes to OCI via BGP. You want to ensure that OCI only learns routes from your on - premises network that are within a specific range, and that any other prefixes advertised are rejected to prevent routing conflicts. Which BGP attribute and configuration on the OCI side should you use to achieve this?

Choose the Choices:

AS Path Prepending Configure AS Path Prepending on the FastConnect virtual circuit to discourage OCI from selecting routes outside the desired range.

MED (Multi - Exit Discriminator) Configure MED values on the on - premises BGP router to influence OCI's route selection based on preferred exit points.

Route Filtering using Route Distinguisher (RD) and Route Target (RT) Configure RDs and RTs on the FastConnect virtual circuit to filter routes based on tenant isolation.

Route Filtering using Prefix Lists Configure Prefix Lists on the FastConnect virtual circuit to accept only the desired prefix ranges and reject all others.

Question No 4

Which OCI service or feature enables the enforcement of granular, identity - based access controls for packet routing, crucial for implementing Zero Trust principles?

Choose the Choices:

Question No 5

You are using Terraform to deploy a multi - tier application architecture consisting of a public subnet hosting a load balancer, a private subnet hosting application servers, and another private subnet hosting a database. The Terraform code successfully creates all the required infrastructure, including route tables and security lists. However, after deployment, you realize that the load balancer cannot reach the application servers in the private subnet. You have verified that the load balancer is healthy and the application servers are running. What is the most likely cause of this connectivity problem?

Choose the Choices:

The security list associated with the application server subnet does not allow ingress traffic from the load balancer's IP address range.

The route table associated with the application server subnet has a default route pointing to the Internet Gateway, which is incorrect for a private subnet.

The Network Address Translation (NAT) Gateway is misconfigured, preventing the application servers from initiating connections back to the load balancer.

The load balancer's security list is not configured to allow egress traffic to the application server subnet on the required ports (e.g., port 8080).

Practice Oracle 1Z0-1124-25 Exam Questions

Question No 1

Question No 2

Question No 3

Question No 4

Question No 5

1Z0-1124-25 Exam Features

1Z0-1124-25 PDF Dumps