1z0-1124-25 試験問題を無料オンラインアクセス

Your company is migrating several applications to OCI and requires a highly available and resilient VPN connection between your on-premises network and OCI. You need to ensure that if one VPN tunnel fails, traffic automatically fails over to a backup tunnel with minimal disruption. Which configuration would BEST achieve high availability and automatic failover for your OCI Site-to-Site VPN connection?

• A.Configure a single VPN connection with two tunnels using the same CPE IP address.
• B.Configure two separate VPN connections, each with a single tunnel, pointing to different CPE IP addresses on the on-premises side. Advertise the same prefixes over both VPN connections using BGP.
• C.Configure a single VPN connection with two tunnels, ensuring that both tunnels use different CPE IP addresses on the on-premises side.
• D.Configure a single VPN connection with a single tunnel and rely on the underlying OCI infrastructure for automatic failover.

Your company needs to connect an on-premises data center to an OCI Virtual Cloud Network (VCN) to extend their existing infrastructure to the cloud. The connection MUST be secure, reliable, and provide consistent, low-latency access to resources in both environments. Resources in the OCI VCN need access to the on-premises servers, and resources in the on-premises data center need to access the compute instances located in a private subnet within the OCI VCN. Which is the MOST appropriate architectural design for establishing connectivity in this hybrid cloud environment, considering the available endpoints and gateway options in OCI?

• A.Implement a FastConnect connection from the on-premises network to the OCI VCN utilizing a Dynamic Routing Gateway (DRG) in OCI and implement a Site-to-Site VPN connection as backup.
• B.Configure a public endpoint for each resource in the OCI VCN that needs to be accessed from the on- premises network.
• C.Establish a FastConnect connection between the on-premises network and the OCI VCN, utilizing a Dynamic Routing Gateway (DRG) in OCI.
• D.Implement a Site-to-Site VPN connection between the on-premises network and the OCI VCN, utilizing a Dynamic Routing Gateway (DRG) in OCI.

Your organization is migrating workloads to a multicloud environment using OCI, AWS, and Azure. You have applications that require access to on-premises resources and must maintain high security standards.
Which connectivity configuration would provide the MOST secure and reliable access while adhering to best practices for a hybrid multicloud architecture?

• A.Using public internet connectivity for all cloud providers and relying on application-level security measures
• B.Establishing IPSec VPN tunnels from the on-premises network directly to each cloud provider (OCI, AWS, and Azure), terminating on the respective cloud provider's virtual network gateways
• C.Connecting on-premises to OCI using FastConnect and building VPN tunnels from OCI to Azure and AWS
• D.Creating a private network connection to OCI using FastConnect, then extending the network to AWS and Azure using a software-defined WAN (SD-WAN) solution that supports end-to-end encryption and policy-based routing

You are troubleshooting a network connectivity issue between a compute instance in a private subnet within your VCN and a service on the public internet using Cloud Shell. You suspect a problem with the network security group (NSG) rules associated with the instance's VNIC. Which Cloud Shell command and appropriate tool combination allows you to directly inspect the NSG configuration impacting the VNIC?

• A.oci network vnic get --vnic-id <instance_VNIC_OCID> piped to awk '/network_security_group_ids/
  {print $2}' | xargs oci network network-security-group get --nsg-id
• B.oci compute instance get --instance-id <instance_OCID> piped to jq '.vnics[].nic_id | oci network vnic get --vnic-id .' piped to jq '.network_security_group_ids[] | oci network network-security-group get -- nsg-id .'
• C.oci network network-security-group get --nsg-id <NSG_OCID> piped to grep <instance_VNIC_OCID>
• D.oci compute instance get --instance-id <instance_OCID> piped to grep NetworkSecurityGroupIds

In a hybrid cloud migration, which OCI component is essential for dynamically routing traffic between on- premises networks and OCI Virtual Cloud Networks (VCNs), facilitating seamless communication?

• A.Dynamic Routing Gateway (DRG)
• B.Service Gateway
• C.Internet Gateway
• D.Local Peering Gateway (LPG)