Free Oracle Cloud Infrastructure 2025 Networking Professional Exam 1Z0-1124-25 Exam Practice Test

You are designing a microservices-based application on OCI. Each microservice is deployed as a container in Oracle Container Engine for Kubernetes (OKE). You want to expose these microservices through a single entry point using a Layer 7 load balancer and route traffic based on the request path. Which OCI load balancing integration method with OKE is the MOST appropriate and efficient?

• Manually create a Regional Load Balancer and configure backend sets with the private IP addresses of the Kubernetes worker nodes hosting the microservices.
• Deploy a Kubernetes LoadBalancer service, which automatically provisions an OCI Regional Load Balancer to distribute traffic to the microservice pods.
• Deploy a Kubernetes NodePort service for each microservice and configure an OCI Network Load Balancer to forward traffic to the NodePort services on the worker nodes.
• Deploy a Kubernetes Ingress controller that leverages an OCI Regional Load Balancer to route traffic to the microservice pods based on Ingress rules.

In a Zero Trust network architecture, what is the primary purpose of implementing micro- segmentation within OCI VCNs?

• To increase network bandwidth.
• To reduce the number of required route tables.
• To limit the blast radius of potential security breaches.
• To simplify inter-region connectivity.

Your company is deploying a high-throughput, low-latency financial application on OCI. This application relies on raw TCP connections and requires connection persistence to maintain session state. You anticipate extremely high traffic volume and need a load balancer that can handle millions of concurrent connections with minimal overhead. You also want to use private endpoints. Which OCI load balancing option provides the most appropriate solution to meet these stringent performance and security requirements?

• Regional Load Balancer with TCP load balancing and IP Hash Persistence
• Network Load Balancer with TCP load balancing and 5-Tuple Hash Persistence
• Global Load Balancer with TCP load balancing and Cookie-based Persistence
• Regional Load Balancer with HTTP load balancing and Source IP Hash Persistence

In a hybrid cloud migration, which OCI component is essential for dynamically routing traffic between on-premises networks and OCI Virtual Cloud Networks (VCNs), facilitating seamless communication?

• Internet Gateway
• Dynamic Routing Gateway (DRG)
• Service Gateway
• Local Peering Gateway (LPG)

Your organization requires that all backups of critical application data stored in OCI Object Storage from an instance within a private subnet must remain within the Oracle Cloud Infrastructure network and not traverse the public internet. Which OCI networking component should you configure to enable this secure and private access to Object Storage?

• Internet Gateway
• NAT Gateway
• Service Gateway
• Network Firewall

You have configured DNSSEC for your domain hosted on OCI DNS. You understand the importance of regularly rotating your Key Signing Key (KSK) to maintain security best practices. Which of the following statements regarding KSK rotation in OCI DNS is TRUE?

• KSK rotation is a fully automated process managed by OCI DNS and requires no manual intervention.
• You must manually generate a new KSK and ZSK pair and upload them to OCI DNS to initiate a KSK rotation.
• KSK rotation in OCI DNS involves enabling a "KSK Rollover" feature, which automatically handles the key rotation process while minimizing disruption to DNS resolution.
• KSK rotation is not supported in OCI DNS; you must migrate your DNS zone to another provider if you require KSK rotation.

You are designing an OCI architecture where a custom application running on a compute instance in a private subnet needs to securely access an Oracle Integration Cloud (OIC) instance. The security policy mandates that all communication remains within the OCI network and avoids traversing the public internet. Which type of endpoint provides the most secure and direct connectivity for this scenario?

• Public Endpoint
• Service Gateway Endpoint
• Private Endpoint
• Regional Endpoint

When migrating workloads from another cloud provider to OCI, what is a key consideration when choosing a connectivity strategy to ensure optimal network performance?

• Prioritizing the lowest possible initial setup cost, even if it results in higher ongoing operational expenses
• Ignoring the geographical proximity of the cloud regions being interconnected
• Factoring in the bandwidth requirements of the applications being migrated and choosing a connection that can accommodate peak traffic loads
• Only considering managed connectivity solutions to avoid the complexity of configuring VPNs or direct interconnects

You’re tasked with creating a network diagnostic tool using Cloud Shell to test connectivity to various endpoints from within your VCN. To enhance security, you want to ensure the tool only has the necessary permissions to perform network diagnostics (e.g., ping, traceroute, nc). Which IAM principle and associated action(s) provide the MOST restrictive, least-privilege access for Cloud Shell to perform network diagnostic tasks?

• An IAM user with the read permission on all virtual-network-family resources.
• Cloud Shell session using Instance Principals, belonging to a dynamic group with a policy allowing network-security-groups and vnics to be read and used.
• An IAM group with inspect permission on virtual-network-family in the target compartment.
• An IAM group with the use permission on the virtual-network-family aggregate resource in the tenancy.

You are using Terraform to deploy a multi-tier application architecture consisting of a public subnet hosting a load balancer, a private subnet hosting application servers, and another private subnet hosting a database. The Terraform code successfully creates all the required infrastructure, including route tables and security lists. However, after deployment, you realize that the load balancer cannot reach the application servers in the private subnet. You have verified that the load balancer is healthy and the application servers are running. What is the most likely cause of this connectivity problem?

• The security list associated with the application server subnet does not allow ingress traffic from the load balancer's IP address range.
• The route table associated with the application server subnet has a default route pointing to the Internet Gateway, which is incorrect for a private subnet.
• The Network Address Translation (NAT) Gateway is misconfigured, preventing the application servers from initiating connections back to the load balancer.
• The load balancer's security list is not configured to allow egress traffic to the application server subnet on the required ports (e.g., port 8080).