NEW QUESTION 68
Which OCI service or feature is best suited for capturing and analyzing network traffic metadata to identify anomalies and troubleshoot connectivity issues between VCN resources?

NEW QUESTION 69
You are designing a highly available web application on OCI. The application needs to be accessible globally with traffic being routed to the nearest region based on user location. Additionally, you need to implement sophisticated traffic management policies, such as A/B testing and weighted traffic distribution based on application version. You also require protection against DDoS attacks. Which OCI load balancing solution is best suited for these requirements?

NEW QUESTION 70
You are designing a microservices-based application on OCI. Each microservice is deployed as a container in Oracle Container Engine for Kubernetes (OKE). You want to expose these microservices through a single entry point using a Layer 7 load balancer and route traffic based on the request path. Which OCI load balancing integration method with OKE is the MOST appropriate and efficient?

NEW QUESTION 71
Which OCI service or feature enables the enforcement of granular, identity-based access controls for packet routing, crucial for implementing Zero Trust principles?

NEW QUESTION 72
You have configured an IPSec VPN tunnel over your FastConnect circuit to OCI. You are experiencing intermittent connectivity issues and notice that the VPN tunnel is flapping (frequently going up and down).
You have verified the IKE and IPSec configuration and confirmed that the security policies are correct.
Which is a LESS likely cause of the VPN tunnel flapping when using IPSec over FastConnect, compared to using IPSec over the public internet?

NEW QUESTION 73
You are designing a solution to implement IPSec encryption over a FastConnect circuit between your on- premises network and OCI. You are concerned about the overhead of IPSec impacting themaximum MTU (Maximum Transmission Unit) size that can be supported. What is the most important factor to consider when determining the MTU size for the IPSec tunnel interfaces in this scenario?

NEW QUESTION 74
In a multi-region OCI environment, which configuration is necessary to allow communication between two VCNs located in different regions through a DRG?

NEW QUESTION 75
A financial services company is implementing a multicloud strategy, storing sensitive customer data in OCI due to its enhanced security features, running analytics workloads in AWS, and utilizing a SaaS application hosted in Google Cloud Platform (GCP). To comply with stringent data sovereignty regulations, the company requires that all traffic between OCI and AWS must transit exclusively within the United States. Which is the MOST critical consideration when choosing a connectivity solution to ensure compliance?

NEW QUESTION 76
When establishing cross-tenancy connectivity using Remote Peering Connections (RPCs), which IAM policy statement is essential to grant the requesting tenancy the ability to initiate the connection?

NEW QUESTION 77
You are designing an OCI VCN for a new application with the following requirements: The application servers in a private subnet must be able to download software updates from public repositories on the internet; the application servers must NOT be directly accessible from the public internet; the application servers must also be able to access Oracle Cloud Infrastructure Registry (OCIR) within the same region to pull container images. Which combination of VCN Gateways BEST meets these requirements?

NEW QUESTION 78
A development team has deployed a three-tier application in an OCI VCN. The application consists of a public-facing web tier, an application tier, and a database tier. The team reports that the web tier instances can communicate with the application tier instances, but the application tier instances cannot connect to the database tier instances. All security lists are configured to allow all traffic within the VCN. Which OCI Networking diagnostic tool would BEST help you quickly isolate the root cause of this connectivity issue?

NEW QUESTION 79
You are troubleshooting a BGP peering issue between your on-premises router and an OCI FastConnect virtual circuit. You have verified the physical connectivity and confirmed that the BGP session is established.
However, routes are not being exchanged. You suspect a problem with the BGP configuration. What is the MOST LIKELY cause of this issue, assuming the basic BGP configuration (AS numbers, peer IP addresses) is correct?

NEW QUESTION 80
When configuring transitive routing through a network appliance in a hub-and-spoke VCN topology, which configuration is necessary to ensure that traffic from a spoke VCN to another spoke VCN passes through the network appliance?

NEW QUESTION 81
When migrating workloads from another cloud provider to OCI, what is a key consideration when choosing a connectivity strategy to ensure optimal network performance?

NEW QUESTION 82
Your company is utilizing a multi-cloud architecture with applications running on both OCI and AWS. You have established a Site-to-Site VPN connection between OCI and AWS for secure communication. Over time, you observe that the VPN tunnel becomes unstable and frequently disconnects, particularly during peak hours.
You suspect this is due to increased network latency and packet loss. Which action is least likely to improve the stability and reliability of your OCI-AWS Site-to-Site VPN connection in this scenario?

NEW QUESTION 83
When configuring transitive routing with a DRG across multiple VCNs and on-premises networks, which key configuration step ensures that traffic from one VCN is correctly routed through the DRG to an on-premises destination?

NEW QUESTION 84
Which OCI component facilitates transitive routing between VCNs in different regions via a dedicated, private network backbone, while also enabling connectivity to on-premises networks?

NEW QUESTION 85
You are designing an OCI networking architecture for a multi-tier application using Infrastructure as Code (IaC). The architecture includes an OKE cluster for the front-end, a set of Compute instances for the back- end, and an Autonomous Database. You want to ensure that all traffic between these components is encrypted. You are using Transport Layer Security (TLS) for end-to-end encryption but are concerned about the overhead of encrypting all traffic within the VCN. Which approach provides the MOST balanced approach to security and performance, minimizing the overhead of encryption while still protecting sensitive data?

NEW QUESTION 86
In a multi-tier application architecture with separate public and private subnets, where should an OCI Bastion host be placed to provide secure access to resources in the private subnets without exposing them to the internet?

NEW QUESTION 87
Your company uses OCI Certificates to manage SSL/TLS certificates for its public-facing applications. You need to implement a solution that automatically renews these certificates before they expire to avoid service disruptions. Which OCI Certificates feature or configuration best achieves this?

NEW QUESTION 88
You have successfully enabled DNSSEC on your OCI DNS zone and provided the DS record to your domain registrar. However, when you test your DNS configuration using online DNSSEC validation tools, you are still seeing errors indicating that DNSSEC validation is failing. What is the most likely reason for this failure?

NEW QUESTION 89
Which OCI service provides detailed logs for network traffic traversing a Network Load Balancer, offering insights into client connections and backend health checks?

NEW QUESTION 90
In the context of OCI’s Zero Trust Packet Routing, which principle emphasizes the necessity of explicitly defining and enforcing access controls at every stage of network communication?

NEW QUESTION 91
You are using the OCI Application Load Balancer (ALB) for your web application. You want to implement a blue/green deployment strategy to minimize downtime during application updates. You have two backend sets: ‘blue’ (the current version) and ‘green’ (the new version). What is the most efficient way to switch traffic from the ‘blue’ backend set to the ‘green’ backend set using the ALB’s traffic management capabilities?