1Z0-1072-26 Networking Practice Test 7 — 15 Questions

Question 1

Which TWO methods can be used to assign public IP addresses to OCI compute instances?

Accepted Answer

Reserved public IP. OCI supports Ephemeral public IPs (which exist for the lifetime of the instance) and Reserved public IPs (persistent public IPs that can be reassigned).

Answer

Dynamic public IP lease via DHCP

Answer

Static NAT Gateway public IP

Answer

Service Gateway public IP allocation

Question 2

An OCI administrator creates a subnet route table with a route rule pointing 0.0.0.0/0 to an Internet Gateway. However, compute instances in this subnet cannot reach the internet. Upon checking the instance details, you notice the instances have private IP addresses only and no public IP assigned. What is missing?

Accepted Answer

The compute instances need a public IP address (ephemeral or reserved) assigned to their VNICs.. Instances in a public subnet require a public IP address (ephemeral or reserved) in addition to the subnet's route to the Internet Gateway in order to communicate bi-directionally with the public internet.

Answer

The VCN CIDR block must be changed to /8.

Answer

A Service Gateway must be attached to the VCN.

Answer

A NAT Gateway must be attached to the public subnet.

Question 3

You are designing an OCI VCN and need to ensure that database instances in a private subnet can communicate with backend storage endpoints over the Oracle network backbone. Which gateway should you ensure is attached and routed to?

Accepted Answer

Service Gateway. Service Gateway provides private access to Oracle services like Object Storage across the Oracle network backbone.

Answer

Internet Gateway

Answer

NAT Gateway

Answer

Local Peering Gateway

Question 4

What is the primary purpose of an OCI Local Peering Gateway (LPG)?

Accepted Answer

To enable private communication between two VCNs in the same OCI region.. An LPG enables you to peer one VCN with another VCN in the same OCI region so that their instances can communicate privately.

Answer

To route traffic to regional Oracle services.

Answer

To connect an on-premises datacenter to a VCN.

Answer

To provide outbound internet access for private subnets.

Question 5

You are configuring an OCI DNS Traffic Management steering policy with a Load Balancer steering strategy. What is the primary behavior of this policy type?

Accepted Answer

It distributes traffic across multiple endpoints according to assigned weights and health checks.. Load Balancer steering distributes traffic across a pool of endpoints based on specified weights and health status, similar to load balancing algorithms.

Answer

It routes all traffic to a single primary datacenter until manual failover occurs.

Answer

It routes users based strictly on their geographic location.

Answer

It routes traffic based on client ASN numbers.

Question 6

Which THREE statements regarding OCI NAT Gateway behavior are correct?

Accepted Answer

Instances behind a NAT Gateway can initiate outbound connections to the internet.. NAT Gateways allow private subnet instances to initiate outbound connections to the internet, they scale automatically, and they do not accept inbound connections initiated from the internet.

Answer

NAT Gateways require compute instances to have public IP addresses.

Answer

NAT Gateways replace the need for an Internet Gateway in public subnets.

Question 7

What is the maximum number of Availability Domains (ADs) in a typical multi-AD OCI region?

Accepted Answer

3. Standard multi-AD OCI regions contain exactly 3 Availability Domains.

Answer

1

Answer

5

Answer

2

Question 8

Which TWO protocols are supported for OCI Site-to-Site VPN IPSec tunnels?

Accepted Answer

IKEv1. OCI Site-to-Site VPN supports Internet Key Exchange (IKE) protocol versions IKEv1 and IKEv2 for establishing IPSec VPN tunnels.

Answer

BGP over SSL

Answer

HTTPS tunneling

Answer

SNMPv3

Question 9

You are designing an OCI VCN and need to configure DNS so that instances can resolve custom internal domain names as well as internet domain names. Which OCI VCN Resolver feature should you utilize?

Accepted Answer

VCN Resolver custom forwarders. The VCN Resolver handles DNS resolution for instances. You can configure custom DNS forwarders in the VCN Resolver to forward queries for specific private domains to internal DNS servers while resolving internet queries normally.

Answer

Internet Gateway DNS proxy

Answer

Service Gateway name server

Answer

NAT Gateway DNS translation

Question 10

An OCI customer has an architecture where VCN-A, VCN-B, and VCN-C are connected to a central DRG in a Hub-and-Spoke topology. VCN-A needs to communicate with VCN-B, but VCN-C must be completely isolated from VCN-A. How should the DRG route tables and attachments be configured?

Accepted Answer

Use custom DRG route tables for each attachment, ensuring VCN-A's route table does not import routes from VCN-C's attachment.. To isolate VCN-C from VCN-A, you assign VCN-A and VCN-C attachments to separate DRG route tables. VCN-A's route table imports routes for VCN-B but does not import routes for VCN-C, and vice versa.

Answer

Configure NAT Gateways on all spoke VCNs.

Answer

Attach an Internet Gateway to VCN-C to block internal DRG traffic.

Answer

Delete all subnets in VCN-C.

Question 11

You are troubleshooting a web application where users are reporting intermittent connection failures when accessing your OCI Public Load Balancer. You check the load balancer metrics and notice that the `DroppedConnections` metric is spiking. What is the most likely cause?

Accepted Answer

The load balancer has reached its maximum bandwidth or connection rate limit, or backend instances are overwhelmed.. Dropped connections on an OCI Load Balancer typically occur when the load balancer or backend servers reach capacity limits, or security lists/NSGs drop packets due to rate limiting or connection tracking limits.

Answer

The NAT Gateway is misconfigured.

Answer

The VCN route table is missing a default route.

Answer

The DNS record has an incorrect TTL.

Question 12

Which THREE statements regarding OCI VCN DNS and Hostname resolution are correct?

Accepted Answer

Instances in a VCN can resolve each other using their assigned hostnames.. OCI assigns internal domain names to instances based on VCN and subnet configuration. Instances can resolve each other using hostname prefixes or fully qualified domain names (FQDNs), and custom DNS zones can be integrated.

Answer

Public DNS zones cannot be hosted on OCI.

Answer

OCI requires you to deploy external bind DNS servers for basic VCN hostname resolution.

Question 13

Which TWO networking components are required when establishing an OCI Site-to-Site VPN connection using dynamic routing (BGP)?

Accepted Answer

Dynamic Routing Gateway (DRG) configured with BGP ASN. Site-to-Site VPN with dynamic routing requires a CPE object, a DRG attached to the VCN, an IPSec connection with tunnels configured, and BGP ASN configuration on both the OCI side and CPE side.

Answer

Internet Gateway attached to private subnets

Answer

Local Peering Gateway (LPG)

Answer

NAT Gateway for BGP packet translation

Question 14

You are setting up OCI Traffic Management Steering Policy with a Failover strategy. You have a primary endpoint in Ashburn and a secondary endpoint in Phoenix. If the primary endpoint fails, how does the steering policy handle incoming DNS queries?

Accepted Answer

It automatically routes all DNS queries to the secondary endpoint in Phoenix.. A Failover steering policy routes all traffic to the highest-priority healthy endpoint (Ashburn). If Ashburn fails health checks, it automatically fails over to the secondary endpoint (Phoenix).

Answer

It drops all DNS queries until Ashburn recovers.

Answer

It returns an NXDOMAIN error to the client.

Answer

It round-robins queries between both endpoints equally.

Question 15

An Oracle Cloud Infrastructure (OCI) architect needs to provision a web application that must be accessible directly from the public internet. Which component must be attached to the Virtual Cloud Network (VCN) to allow inbound traffic from the internet?

Accepted Answer

Internet Gateway. An Internet Gateway is a routing component that connects the edge of a VCN with the public internet, enabling bidirectional communication for public resources.

Answer

Service Gateway

Answer

Dynamic Routing Gateway

Answer

NAT Gateway