1Z0-1119-1 practice question 3 of 10

Which of these steps should be pet formed when creating the infrastructure Tor Sunbird ED deployment? I) Create NAT Gateway in the Virtual Cloud…

Which of these steps should be pet formed when creating the infrastructure Tor Sunbird ED deployment? I) Create NAT Gateway in the Virtual Cloud Network (VCN) to give those cloud resources that are without II) public IP addresses access to (he Internet, without exposing those resources to incoming Internet connections. III) Create Service Gateway in the VCN to enable private access lo specific Oracle service (for example. Object Storage. Container Registry, and so on) without exposing the data to the public Internet IV) Create Network Security Group (NSG) to allow the Compute VMs lo access other subnets. Oracle services, and the Internet. V) Create Reverse DNS (FTR) records to resolve all private IP addresses hack to fully qualified domain names VI) IFODN).

Answer options

A: (i), (ii), (iii) only Correct answer

B: (i), (ii), (iii) and (iv)

C: (i), (ii), and (iv) only

D: (iii) and (iv) only

Correct Answer:

A. (i), (ii), (iii) only

Explanation

When creating a secure and functional infrastructure in OCI, several components are fundamental.
(i) A NAT Gateway is essential for instances in private subnets to initiate outbound connections to the internet (e.g., for software updates) without being directly exposed to inbound traffic.
(ii) A Service Gateway is a best practice for providing private, secure access from VCN resources to OCI services like Object Storage, preventing traffic from traversing the public internet.
(iii) Network Security Groups (NSGs) are crucial for implementing a micro-segmentation security strategy by defining stateful firewall rules for specific groups of resources. These three components form the basis of a standard, secure OCI network architecture. Reverse DNS (iv) is a more specialized requirement, not a foundational step for all deployments.

Why Incorrect

B. This option is incorrect because creating Reverse DNS (PTR) records (iv) is not a mandatory or standard initial step for all infrastructure deployments.
C. This option is incorrect because it omits the creation of Network Security Groups (iii), which are a fundamental component for network security.
D. This option is incorrect because it omits the creation of the NAT Gateway (i) and Service Gateway (ii), which are critical for connectivity and security.

References

1. Oracle Cloud Infrastructure Documentation. (2023). NAT Gateway. Retrieved from https://docs.oracle.com/en-us/iaas/Content/Network/Tasks/NATgateway.htm (Explains the purpose of NAT Gateway for private subnets).

2. Oracle Cloud Infrastructure Documentation. (2023). Access to Oracle Services: Service Gateway. Retrieved from https://docs.oracle.com/en-us/iaas/Content/Network/Tasks/servicegateway.htm (Details the use of Service Gateway for private access to OCI services).

3. Oracle Cloud Infrastructure Documentation. (2023). Network Security Groups. Retrieved from https://docs.oracle.com/en-us/iaas/Content/Network/Concepts/networksecuritygroups.htm (Describes NSGs as a method for defining security rules).

Keep practicing

Take the free 1Z0-1119-1 practice test

Ten exam-style questions with answers and explanations, plus the exam facts and study guides.

Start the free practice test