Oracle Exam 1Z0-1072-22 Topic 7 Question 23 Discussion

Actual exam question for Oracle's 1Z0-1072-22 exam

Question #: 23
Topic #: 7

You have launched a compute instance running Oracle database in a private subnet in the Oracle Cloud Infrastructure US East region. You have also created a Service Gateway to back up the data files to OCI Object Storage in the same region. You have modified the security list associated with the private subnet to allow traffic to the Service Gateway, but your instance still cannot access OCI Object Storage. How can you resolve this issue?

AAdd a stateful rule that enables ingress HTTPS (TOP port 443) traffic to 001 Object Storage in the security list associated with the private subnet

BAdd a stateful rule that enables egress HTTPS (TCP port 443) traffic to OCI Object Storage in the security list associated with the private subnet

CAdd a rule in the Route Table associated with the private subnet with Target type as 'Service Gateway' and destination service as all IAD services in the Oracle Service Network.'

DUse the default Security List, which has ports open for OCI Object Storage

Show Suggested Answer

Suggested Answer: C

A service gateway lets your virtual cloud network (VCN) privately access specific Oracle services without exposing the data to the public internet. No internet gateway or NAT is required to reach those specific services. The resources in the VCN can be in a private subnet and use only private IP addresses. The traffic from the VCN to the Oracle service travels over the Oracle network fabric and never traverses the internet.

The service gateway is regional and enables access only to supported Oracle servicesin the same regionas the VCN.

For traffic to be routed from a subnet in your VCN to a service gateway, you must add a rule accordingly to the subnet's route table. The rule must use the service gateway as the target. For the destination, you must use theservice CIDR labelthat is enabled for the service gateway. This means that you don't have to know the specific public CIDRs, which could change over time.

by Cassi at Jul 25, 2023, 12:14 AM

Limited Time Offer

25%

Off

Get Premium 1Z0-1072-22 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!