1Z0-1124-24 Exam Training Practice Tests (Oracle Cloud Infrastructure 2024 Networking Professional)]

Question 1

For a highly available VCN, which is NOT required?

A. Multiple Availability Domains (ADs). B. Private subnets in each AD. C. Internet Gateways in each AD. D. Route tables with multiple next hops.

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 2

If a DRG attached to two VCNs. How can you ensure traffic from VCN A reaches specific resources in VCN B based on IP addresses or security groups?

A. Implement NAT Gateways in both VCNs for address translation. B. Create Security List rules in VCN B allowing specific traffic from VCN A. C. Configure route rules in the DRG with static routes. D. Use Traffic Management with forwarding rules based on source IPs.

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 3

You have successfully configured a network firewall to inspect N-S traffic and E-W traffic going in and out of the Oracle Cloud Infrastructure (OCI) network, as shown in the architecture diagram.
The Dynamic Routing Gateway (DRG) is correctly configured between the firewall hub Virtual Cloud Network (VCN) and spoke VCN for inter-VCN communication. The network firewall security policy is configured with 5-tuple security rules, as shown below:

Which two statements are correct with respect to network firewall policy configuration?
Response:

A. Network firewall allows ICMP traffic from ServerB to ServerA. B. Network firewall denies SSH traffic from ServerA to ServerB. C. Network firewall denies ICMP traffic from ServerB to ServerA. D. Network firewall allows SSH traffic from ServerA to ServerB.

Correct Answer: A,D

Question 4

What type of storage does CloudShell offer for user data and scripts?

A. No storage is available for user data or scripts in CloudShell. B. Persistent storage with a 5GB quota accessible across sessions. C. Temporary storage that is deleted after the CloudShell session ends. D. Local storage on the user,s device where they access CloudShell.

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 5

Which statement about BGP route propagation in transitive routing to other OCI regions is TRUE?

A. All DRGs involved must use the same BGP AS number for route exchange. B. BGP peering agreements must be established between all DRGs for proper communication. C. BGP automatically learns routes between DRGs without any configuration. D. You only need to configure BGP on the DRG connected to the on-premises network.

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 6

which service is primarily responsible for defining network security groups (NSGs) for worker nodes in the OKE cluster?

A. Oracle Cloud Infrastructure Web Console B. Kubernetes manifest files C. Terraform configuration files D. OKE Management Console

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 7

In a multi-tier OCI architecture, which BEST describes the role of a Bastion service?

A. Offers network segmentation within a single VCN subnet. B. Enforces least privilege access control for all incoming connections. C. Acts as a central jump point for secure access to internal resources. D. Provides remote desktop access directly to production instances.

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 8

When using Terraform to create a private subnet for OKE worker nodes within a multi-tier architecture, which resource attribute specifies the CIDR block for the subnet?

A. subnet_id B. availability_domain C. vcn_id D. cidr_block

Correct Answer: D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 9

To achieve highly available transitive routing between your on-premises network and a VCN in another OCI region. Which approach is NOT recommended?

A. Using two FastConnect connections to the remote region with different physical paths. B. Configuring two DRGs in the remote region and BGP peering them for redundancy. C. Implementing a redundant Site-to-Site VPN connection for the on-premises network. D. Utilizing a single FastConnect connection and DRG in the remote region.

Correct Answer: D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 10

You have reserved a public IP address but no longer need it. What action releases the IP for future use?

A. Release the IP address through the console or API. B. Update the subnet CIDR block to exclude the reserved IP. C. Terminate the instance using the IP. D. Delete the associated VNIC.

Correct Answer: A

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Oracle Cloud Infrastructure 2024 Networking Professional - 1Z0-1124-24 Exam Practice Test