1Z0-1072-26 Networking Practice Question
An enterprise has multiple VCNs peered to a central hub VCN using a DRG. A security auditor notes that Vcn-A can communicate with Vcn-C because transit routing is enabled on the DRG. The security policy dictates that Vcn-A must never communicate with Vcn-C. How can you block this specific inter-VCN traffic while keeping other routes intact?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Modify the DRG route tables and import/export route distributions to prevent Vcn-A and Vcn-C from exchanging routes.
In DRG version 2, you can create custom DRG route tables and fine-tune import/export route distributions to prevent specific attachments from learning each other's routes, thereby blocking unwanted transit paths.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Attach a NAT Gateway to the hub VCN.
Why it's wrong here
NAT Gateways provide outbound internet access, not inter-VCN traffic filtering.
- ✓
Modify the DRG route tables and import/export route distributions to prevent Vcn-A and Vcn-C from exchanging routes.
Why this is correct
Custom DRG route tables and route distribution statements control which routes are advertised between attachments.
- ✗
Delete the Internet Gateway from Vcn-A.
Why it's wrong here
VCN-to-VCN transit routing does not use Internet Gateways.
- ✗
Change the subnet CIDR of Vcn-C so it no longer overlaps.
Why it's wrong here
Overlapping CIDRs prevent connectivity entirely, but the issue is unauthorized routing between valid non-overlapping VCNs.
About these practice questions
This 1Z0-1072-26 question is part of Courseiva's 521-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Oracle exam blueprint
This 1Z0-1072-26 practice question is part of Courseiva's free Oracle certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 1Z0-1072-26 exam.