1Z0-1072-26 Networking — 10 Questions

Question 1

Which THREE statements are correct regarding OCI BYOIP (Bring Your Own IP)?

Accepted Answer

You can create public IP pools from your imported BYOIP address ranges.. OCI BYOIP allows you to bring your own public IPv4 addresses to OCI, prefix lengths from /24 to /28 are typically supported for import, and you can create public IP pools from your prefix.

Answer

BYOIP prefixes can be assigned directly to private subnet VNICs without public IPs.

Answer

BYOIP is only supported for private IP addresses within an on-premises datacenter.

Answer

OCI automatically transfers ownership of the IP block to Oracle permanently.

Question 2

Which THREE statements regarding OCI FastConnect redundancy and high availability are correct?

Accepted Answer

You can configure multiple BGP sessions across redundant virtual circuits.. FastConnect supports redundant connections, redundant physical cross-connects or partner ports, and dual BGP sessions to ensure high availability.

Answer

FastConnect does not support BGP dynamic routing when redundancy is enabled.

Answer

FastConnect redundant circuits must share the exact same physical cross-connect port.

Answer

FastConnect automatically provides 100% SLA without requiring redundant circuits on customer end.

Question 3

Your development team deployed a three-tier application in an OCI VCN. You need to restrict database instances so they only accept incoming traffic from specific application instances, regardless of which subnet the application instances reside in. Which OCI networking feature should you use?

Accepted Answer

Network Security Groups (NSGs). Network Security Groups (NSGs) allow you to group VNICs of a similar security posture (like the application tier) and apply security rules to them, independent of subnet boundaries.

Answer

Local Peering Gateway (LPG) access control lists

Answer

Security Lists associated with the database subnet

Answer

Dynamic Routing Gateway (DRG) security policies

Question 4

You have configured a FastConnect dedicated circuit using a Provider model, but your on-premises routers cannot reach OCI VCN instances. BGP status is showing as 'Idle'. What is the most likely cause?

Accepted Answer

BGP peering IP addresses or Autonomous System Numbers (ASNs) are misconfigured between the Oracle router and on-premises router.. BGP status 'Idle' typically indicates that the BGP peer IP configuration is incorrect, or there is an issue with the virtual circuit provisioning state, or access control lists/firewalls are blocking TCP port 179.

Answer

The route table on the VCN subnet does not have a route to 0.0.0.0/0.

Answer

The Security List on the DRG attachment blocks ICMP traffic.

Answer

The public subnet has an incorrect Internet Gateway route.

Question 5

An enterprise customer has a Hybrid cloud architecture. They need to connect their on-premises datacenter to multiple VCNs in different OCI regions using a single dedicated connection. Which OCI component must be used as the central transit hub?

Accepted Answer

Dynamic Routing Gateway (DRG). A Dynamic Routing Gateway (DRG) version 2 acts as a virtual router that provides a single point of entry for your network traffic and supports attachments to multiple VCNs across regions, as well as on-premises connections via FastConnect or VPN.

Answer

NAT Gateway

Answer

Local Peering Gateway (LPG)

Answer

Internet Gateway

Question 6

You need to configure custom DNS resolution for instances within your OCI VCN so they can resolve hostnames of your on-premises datacenter servers. What should you configure in OCI?

Accepted Answer

Custom DNS forwarders in the VCN Resolver pointing to on-premises DNS servers via the DRG. OCI DNS provides a Resolver where you can set up custom DNS forwarders to route DNS queries for specific on-premises domains to your corporate DNS servers via the DRG.

Answer

A NAT Gateway configured with DNS proxy settings

Answer

A public DNS zone for your on-premises domain

Answer

An Internet Gateway with custom host file mappings

Question 7

You are designing an OCI VCN and need to allow resources in a private subnet to access Oracle Cloud Infrastructure Object Storage in the same region without traversing the public internet. Which gateway should you create and configure?

Accepted Answer

Service Gateway. A Service Gateway provides access to Oracle Services Network (such as Object Storage) from a private subnet without requiring an Internet Gateway or NAT Gateway.

Answer

Dynamic Routing Gateway

Answer

Internet Gateway

Answer

NAT Gateway

Question 8

You are configuring an OCI Public Load Balancer to distribute incoming HTTP traffic to backend compute instances. Which backend set configuration is required to verify the health of the instances?

Accepted Answer

Health check policy defining protocol, port, and optional URL path. Load balancer health checks regularly probe backend servers using specific protocols, ports, and paths to verify that instances are available and healthy.

Answer

A NAT Gateway attached to the backend server subnet

Answer

A security list allowing all incoming traffic from the internet

Answer

An active Service Gateway

Question 9

An Oracle Cloud Infrastructure (OCI) architect needs to configure a Virtual Cloud Network (VCN) with a public subnet and a private subnet. Which configuration is required for resources in the private subnet to reach the public internet through a NAT Gateway?

Accepted Answer

Add a route in the private subnet route table with a destination of 0.0.0.0/0 and the target as the NAT Gateway.. A NAT Gateway allows instances in a private subnet to initiate connections to the internet, but prevents inbound connections from the internet. The route table associated with the private subnet must have a route pointing 0.0.0.0/0 to the NAT Gateway.

Answer

Attach an Internet Gateway directly to the private subnet and add a security list rule allowing egress to 0.0.0.0/0.

Answer

Configure a Service Gateway with a route to 0.0.0.0/0.

Answer

Assign a public IP address to the instances within the private subnet.

Question 10

Two VCNs (VCN-A and Vcn-B) reside in the same OCI region but in different compartments. You need to establish a low-latency, high-bandwidth connection between them using local VCN peering. Which component is NOT required for this setup?

Accepted Answer

Internet Gateway attached to VCN-A. Local VCN peering requires a Local Peering Gateway (LPG) in each VCN, matching route table rules in both VCNs, and security rules permitting traffic. An Internet Gateway is not required because local peering traffic stays entirely within the Oracle backbone network.

Answer

Local Peering Gateway (LPG) in VCN-A

Answer

Route table rules pointing to the LPG

Answer

Local Peering Gateway (LPG) in VCN-B