1Z0-1072-26 Networking Practice Test 6 — 15 Questions

Question 1

You are migrating a legacy application to OCI. The application relies heavily on multicast network traffic to synchronize state between backend nodes. Which OCI networking feature should you configure to support multicast?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

OCI VCNs do not support IP multicast; the application must be redesigned to use unicast.. OCI Virtual Cloud Networks (VCNs) operate at Layer 3 and do not support IP multicast traffic. Application architectures must be redesigned to use unicast or alternative synchronization mechanisms.

Answer

Attach a NAT Gateway configured for multicast translation.

Answer

Configure an Internet Gateway with multicast proxy enabled.

Answer

Enable multicast routing on the Dynamic Routing Gateway (DRG).

Question 2

Which THREE statements regarding OCI IPv6 implementation in VCNs are correct?

Accepted Answer

Security lists and NSGs support rules for IPv6 traffic filtering.. OCI supports IPv6 addressing. You can assign IPv6 CIDR blocks (/56) to your VCN, assign IPv6 subnets (/64) to subnets, and configure security rules and route tables for IPv6 traffic.

Answer

IPv6 is mandatory for all new VCN creation in OCI.

Answer

IPv6 addresses in OCI require a NAT Gateway for outbound internet access.

Question 3

What is the maximum number of VCNs allowed per region in an OCI tenancy by default (subject to service limits)?

Accepted Answer

50 (default service limit). The default service limit for VCNs per region in an OCI tenancy is typically 50, but can be increased upon request.

Answer

1

Answer

Unlimited

Answer

5

Question 4

You are troubleshooting a connection to a database instance in a private subnet. You need to verify if security list rules are blocking incoming traffic to port 1521. Which tool in OCI can you use to test reachability between an application instance and the database instance?

Accepted Answer

OCI Network Path Analyzer. OCI Network Path Analyzer is a diagnostic tool that analyzes network reachability between two endpoints in your VCN, checking route tables, security lists, and NSGs to determine if traffic can flow.

Answer

NAT Gateway packet tracer

Answer

OCI Load Balancer health check

Answer

Service Gateway connectivity tester

Question 5

Which TWO metrics are available for monitoring OCI Public Load Balancers in OCI Monitoring service?

Accepted Answer

BackendSetHealthyInstanceCount. OCI Load Balancer metrics include bytes evaluation, backend set health, active connections, request/response latency, and HTTP status code counts.

Answer

DatabaseCPUUtilization

Answer

BlockStorageIOPS

Answer

ComputeInstanceVCPUTime

Question 6

You are setting up DNS steering in OCI Traffic Management using a Response Pool. An endpoint in the pool fails its health check. How does OCI Traffic Management respond to DNS queries?

Accepted Answer

It automatically removes the unhealthy endpoint from DNS responses and routes traffic to healthy endpoints.. When an endpoint fails its health check, OCI Traffic Management automatically removes it from the DNS response rotation, routing queries only to healthy endpoints according to the steering policy.

Answer

It returns a 504 Gateway Timeout error to the DNS client.

Answer

It shuts down the VCN associated with the endpoint.

Answer

It continues to send traffic to the failed endpoint until manual intervention occurs.

Question 7

You are configuring an OCI Public Load Balancer and notice that backend instances are marked as unhealthy. Upon inspecting the health check URL on the backend server via curl, it returns HTTP 200. What is the most likely reason the load balancer still reports them as unhealthy?

Accepted Answer

Security lists or NSGs on the backend instances are blocking traffic from the Load Balancer subnet on the listener/health check port.. If backend servers return HTTP 200 locally but are unhealthy in the load balancer, security list rules or NSGs on the backend subnet are likely blocking incoming health check probes from the load balancer subnet.

Answer

The VCN has an Internet Gateway attached.

Answer

The load balancer shape is set to 10 Gbps instead of 100 Mbps.

Answer

The NAT Gateway is misconfigured.

Question 8

What is the primary function of an OCI Dynamic Routing Gateway (DRG)?

Accepted Answer

To provide a private connection between your VCN and on-premises networks or other VCNs.. A DRG is a virtual router that provides a path for private traffic between your VCN and on-premises networks (via FastConnect or Site-to-Site VPN) or other VCNs.

Answer

To provide public internet access for public subnets.

Answer

To load balance web requests across backend servers.

Answer

To provide access to regional Object Storage.

Question 9

An OCI customer has a VCN with CIDR 10.0.0.0/16 and wants to peer it with another VCN having CIDR 10.1.0.0/16. However, they also have an on-premises network connected via FastConnect using the CIDR 10.0.0.0/14. What routing challenge does this create?

Accepted Answer

The on-premises CIDR (10.0.0.0/14) subsumes the VCN CIDRs, creating overlapping prefix routing conflicts.. The on-premises CIDR (10.0.0.0/14) encompasses both VCN CIDRs (10.0.0.0/16 and 10.1.0.0/16). This creates overlapping address spaces where the more specific VCN routes might conflict or cause unpredictable routing behavior between hybrid and cloud peers.

Answer

FastConnect does not support CIDRs larger than /16.

Answer

The Internet Gateway will drop all 10.x.x.x traffic.

Answer

Peered VCNs cannot use private IP addresses.

Question 10

Which TWO types of targets can be specified in an OCI VCN route table rule?

Accepted Answer

NAT Gateway. Route table targets in OCI include Internet Gateways, NAT Gateways, Service Gateways, Dynamic Routing Gateways, Local Peering Gateways, and private IPs of VNICs (such as firewalls).

Answer

Block Volume

Answer

Identity and Access Management (IAM) Policy

Answer

Object Storage Bucket

Question 11

Which THREE statements regarding OCI VCN Route Tables are correct?

Accepted Answer

Each subnet in a VCN must be associated with a route table.. Route tables contain rules that map destination CIDR blocks to target gateways. Each subnet must be associated with a route table, and route tables can be shared across multiple subnets.

Answer

Route tables perform firewall packet inspection like Network Security Groups.

Answer

A subnet can be associated with multiple route tables simultaneously.

Question 12

You are managing an OCI VCN and want to monitor all dropped packets due to security list violations across all subnets. Which OCI feature should you enable?

Accepted Answer

OCI VCN Flow Logs configured to capture rejected traffic. OCI VCN Flow Logs capture traffic information including dropped/rejected packets due to security list or NSG blocks when configured to log 'REJECT' or 'ALL' traffic.

Answer

Service Gateway audit logs

Answer

Internet Gateway access logs

Answer

NAT Gateway traffic logging

Question 13

What is the maximum MTU (Maximum Transmission Unit) supported on standard OCI VCN virtual network interfaces (VNICs)?

Accepted Answer

9000 bytes (Jumbo Frames). Standard OCI VNICs support an MTU of 9000 bytes (Jumbo Frames), as well as the standard 1500 bytes.

Answer

576 bytes

Answer

1500 bytes

Answer

65535 bytes

Question 14

An OCI customer has a primary database in Ashburn and a standby database in Phoenix. They need to replicate database traffic over a dedicated, highly secure private connection between the two regions. Which OCI networking architecture best achieves this requirement?

Accepted Answer

Attach DRGs to the VCNs in Ashburn and Phoenix and establish a Remote Peering Connection (RPC).. Cross-region database replication requires secure private connectivity between VCNs in Ashburn and Phoenix, which is achieved by setting up OCI VCN Remote Peering using Dynamic Routing Gateways (DRGs) and a Remote Peering Connection (RPC).

Answer

Route database traffic through regional Internet Gateways.

Answer

Use Local Peering Gateways (LPGs) between Ashburn and Phoenix.

Answer

Configure NAT Gateways with public IP tunneling across regions.

Question 15

You are configuring an OCI Load Balancer and need to distribute incoming requests across backend servers based on the client's source IP address so that requests from the same client always go to the same backend server. Which load balancing policy should you choose?

Accepted Answer

IP Hash. The IP Hash load balancing policy hashes the client's source IP address to route requests from the same client to the same backend server, ensuring session persistence.

Answer

Least Connections

Answer

Random

Answer

Weighted Round Robin