1Z0-1124-25 practice question 9 of 25

You are troubleshooting an issue where a compute instance in a private subnet within a VCN cannot reach OCI Object Storage. You have verified that a…

You are troubleshooting an issue where a compute instance in a private subnet within a VCN cannot reach OCI Object Storage. You have verified that a Service Gateway is configured for the VCN and that the route table associated with the subnet has a route rule directing traffic for OCI Services to the Service Gateway. However, the instance still cannot connect. What is the MOST likely cause of the problem?

Answer options

A: The instance requires a public IP address to access OCI Object Storage.

B: The security list or network security group associated with the subnet or instance is not configured to allow outbound traffic to the OCI Object Storage service CIDR block. Correct answer

C: The Service Gateway is not configured to allow access to OCI Object Storage.

D: The instance is not configured with the Oracle Cloud Agent.

Correct Answer:

B. The security list or network security group associated with the subnet or instance is not configured to allow outbound traffic to the OCI Object Storage service CIDR block.

Explanation

Problem: Instance in private subnet can’t reach Object Storage despite Service Gateway and routing.
Option A: Service Gateway enables private access; public IP isn’t required—incorrect.
Option B: Security lists/NSGs act as firewalls; if outbound traffic to Object Storage CIDR isn’t allowed, connectivity fails—most likely and correct.
Option C: Service Gateway defaults to all OCI services unless restricted; less likely given setup verification—incorrect.
Option D: Oracle Cloud Agent is for management, not connectivity—incorrect. Conclusion: Option B is the most probable cause. Oracle states: "For private access to Object Storage via a Service Gateway, ensure security lists or NSGs allow outbound traffic to the Object Storage CIDR block." This supports Option B. Reference: Service Gateway Troubleshooting - Oracle Help Center (docs.oracle.com/en-us/iaas/Content/Network/Tasks/servicegateway.htm#troubleshooting).

Keep practicing

Take the free 1Z0-1124-25 practice test

Ten exam-style questions with answers and explanations, plus the exam facts and study guides.

Start the free practice test