Q64. You are tasked with setting up a secure connection from an OCI Compute instance running in a private subnet to a third-party API that is only accessible over the internet via a static public IP address. Your company policy prohibits exposing the compute instance directly to the internet. Which combination of VCN resources BEST facilitates this secure outbound connection to the third-party API?

Q65. Which OCI feature allows the DRG to dynamically learn routes from on-premises networks, facilitating automated route propagation to connected VCNs?

Q66. Your company is utilizing a multi-cloud architecture with applications running on both OCI and AWS. You have established a Site-to-Site VPN connection between OCI and AWS for secure communication. Over time, you observe that the VPN tunnel becomes unstable and frequently disconnects, particularly during peak hours.
You suspect this is due to increased network latency and packet loss. Which action is least likely to improve the stability and reliability of your OCI-AWS Site-to-Site VPN connection in this scenario?

Q67. You have deployed an application on OCI that uses a Regional Load Balancer with an HTTPS listener. You want to enforce end-to-end encryption and ensure that the connection between the load balancer and the backend servers is also encrypted. Which load balancer configuration step is MANDATORY to achieve this?

Q68. Your company has decided to migrate its on-premises data center to OCI. As a network engineer, you need to establish a secure and reliable connection between the on-premises network and the OCI VCN with the following constraints: high bandwidth requirements, low latency requirements, secure private connection, and redundant connectivity crucial for business continuity. Which is the MOST suitable and resilient solution, considering the VCN gateway options?

Q69. When troubleshooting inter-region connectivity issues between VCNs peered via a Dynamic Routing Gateway (DRG), which OCI tool is most effective for verifying the routing configuration and identifying potential misconfigurations?

Q70. You’re automating the creation of multiple VCNs across different OCI regions using Cloud Shell scripting.
Which authentication method within Cloud Shell is best suited to programmatically authenticate with OCI, ensuring both security and scalability for this automation task?

Q71. Your company is migrating its on-premises data center to OCI. A critical security requirement is to maintain centralized logging and auditing of all network traffic traversing the OCI Network Firewall. You need to ensure that every session that passes through the firewall is logged and can be analyzed for security events.
Which OCI service should you configure in conjunction with the Network Firewall to achieve this centralized logging?

Q72. Your company is migrating its publicly accessible website to OCI. You want to ensure the highest level of security and prevent DNS spoofing or cache poisoning attacks. You’ve decided to implement DNSSEC.
Which of the following is the most important first step in enabling DNSSEC for your domain using OCI DNS?

Q73. Your application running on OCI Compute instances in a private subnet requires high availability and the ability to distribute incoming traffic across multiple instances. You need to ensure that the load balancer can handle both HTTP and HTTPS traffic and provides health checks to monitor the availability of your backend servers. Which OCI Load Balancer offering is the most suitable for this scenario, considering both functionality and cost-effectiveness for a production environment?

Q74. Your company is deploying a high-throughput, low-latency financial application on OCI. This application relies on raw TCP connections and requires connection persistence to maintain session state. You anticipate extremely high traffic volume and need a load balancer that can handle millions of concurrent connections with minimal overhead. You also want to use private endpoints. Which OCI load balancing option provides the most appropriate solution to meet these stringent performance and security requirements?

Q75. A large financial institution is migrating its on-premises trading platform to OCI. The platform requires low latency and high bandwidth connectivity to the on-premises data center. You have established an Oracle Cloud Infrastructure FastConnect circuit. You now need to connect multiple VCNs in different regions to the on-premises data center via this FastConnect circuit, optimizing for cost and management overhead. Which DRG configuration would be the most efficient and recommended approach?

Q76. You are designing a multi-tier application within an OCI Virtual Cloud Network (VCN). The application comprises a public-facing web tier in one subnet, an application tier in another, and a database tier in a third.
For security reasons, you want to ensure that only the application tier can initiate connections to the database tier. The web tier needs to be able to communicate with the application tier, but not directly with the database tier. You are using private IP addresses within your VCN. Which procedural step is MOST effective to achieve this network isolation?

Q77. Your organization is migrating a critical three-tier application to OCI. The application requires a highly available and performant database tier. You plan to use Oracle Autonomous Database on Dedicated Exadata Infrastructure. The Autonomous Database subnet must adhere to the organization’s security policy, which mandates no direct internet access and private access to other VCN subnets. You need to ensure the proper IP address allocation and routing. Which of the following procedural steps is most effective for achieving this?

Q78. You are responsible for managing the network infrastructure of a multi-tenant SaaS application deployed on OCI. Each tenant has their own dedicated VCN. To simplify management and provide a centralized point for connectivity to your on-premises network via FastConnect, you are using a DRG. However, you need to ensure that tenants are logically isolated from each other, and no traffic can flow directly between tenant VCNs through the DRG. How can you achieve tenant isolation while still allowing each tenant to connect to your on-premises network through the centralized DRG?

Q79. When migrating workloads from another cloud provider to OCI, what is a key consideration when choosing a connectivity strategy to ensure optimal network performance?

Q80. You are designing a microservices-based application on OCI. Each microservice is deployed as a container in Oracle Container Engine for Kubernetes (OKE). You want to expose these microservices through a single entry point using a Layer 7 load balancer and route traffic based on the request path. Which OCI load balancing integration method with OKE is the MOST appropriate and efficient?

Q81. You are designing a highly available web application on OCI. The application needs to be accessible globally with traffic being routed to the nearest region based on user location. Additionally, you need to implement sophisticated traffic management policies, such as A/B testing and weighted traffic distribution based on application version. You also require protection against DDoS attacks. Which OCI load balancing solution is best suited for these requirements?

Q82. When using Service Connector Hub to route VCN Flow Logs to Object Storage for long-term analysis, which Service Connector Hub task type is essential for ensuring the logs are correctly processed and stored?

Q83. You’re designing a multi-region deployment of your application on OCI. You want to use OCI’s global load balancing capabilities, but also require the WAF to protect against attacks close to the user. Which configuration provides the best balance between global load balancing and regional WAF protection?

Q84. You have successfully enabled DNSSEC on your OCI DNS zone and provided the DS record to your domain registrar. However, when you test your DNS configuration using online DNSSEC validation tools, you are still seeing errors indicating that DNSSEC validation is failing. What is the most likely reason for this failure?

Q85. You are troubleshooting an issue where legitimate users are occasionally blocked by your OCI WAF, which is configured in “Detection” mode. You need to identify the specific WAF rules that are triggering these false positives and adjust them without disrupting legitimate traffic. Which approach offers the most efficient way to diagnose and resolve this issue?

Q86. Which OCI service facilitates the creation of a private connection between two VCNs located in different tenancies, without traversing the public internet?

Q87. You are designing a hybrid cloud architecture connecting your on-premises network to OCI. You have established a Site-to-Site VPN between your on-premises network and an OCI DRG. You have two VCNs attached to the DRG: VCN-A (10.0.0.0/16) and VCN-B (10.1.0.0/16). You need to ensure that only VCN-A can communicate with the on-premises network (192.168.1.0/24), while VCN-B should remain isolated. What is the MOST effective and secure method to achieve this connectivity requirement using DRG route tables?

Q88. Your organization is migrating a legacy application to OCI. This application relies on a specific IP address for its external communication, and you need to maintain this IP address during the migration. Which OCI Load Balancer feature or configuration can help you achieve this while ensuring high availability for the application?