1Z0-1124-25 practice question 2 of 25

When analyzing Flow Logs for a subnet, how can you filter logs to isolate traffic that was rejected due to a specific security list rule?

Answer options

A: By filtering on the "action" field with the value "REJECT" and the "securityListRule" field with the rule ID Correct answer

B: By filtering on the "status" field with the value "DENIED" and the "securityRule" field with the rule name

C: By filtering on the "direction" field with the value "EGRESS" and the "port" field with the rule port

D: By filtering on the "type" field with the value "SECURITY" and the "rule" field with the rule number

Correct Answer:

A. By filtering on the "action" field with the value "REJECT" and the "securityListRule" field with the rule ID

Explanation

Goal: Filter Flow Logs for traffic rejected by a specific security list rule.
Option A: “action” = “REJECT” identifies rejected traffic; “securityListRule” with rule ID pinpoints the exact rule—correct.
Option B: “status” and “securityRule” aren’t standard Flow Log fields (“action” and “securityListRule” are)—incorrect.
Option C: “direction” and “port” filter traffic but don’t specify rejection or rule—incorrect.
Option D: “type” and “rule” aren’t valid Flow Log fields—incorrect. Conclusion: Option A is the precise filtering method. Oracle states: "In Flow Logs, use the ‘action’ field (‘REJECT’) and ‘securityListRule’ field (rule ID) to filter traffic rejected by a specific security list rule.” This validates Option A. Reference: Flow Logs Fields - Oracle Help Center (docs.oracle.com/en- us/iaas/Content/Network/Concepts/flowlogs.htm#fields).

Keep practicing

Take the free 1Z0-1124-25 practice test

Ten exam-style questions with answers and explanations, plus the exam facts and study guides.

Start the free practice test