nerdexam
Oracle

1Z0-1067 · Question #53

You launched a Linux compute Instance to host the new version of your company website via Apache HTTPS server on HTTPS (port 443). The Instance is created in a public subnet along with other…

The correct answer is A. Access the Linux instance via SSH and configure Iptables to allow HTTPS access on port 443. D. Create a network security group, add a stateful rule to allow ingress access on port 443 and associate. The NSG is created and then displayed on the Network Security Group page in the compartment you chose. You can specify this NSG when creating or managing instances or other types of parent resources.

Implement OCI Tagging and Governance

Question

You launched a Linux compute Instance to host the new version of your company website via Apache HTTPS server on HTTPS (port 443). The Instance is created in a public subnet along with other Instances. The default security list associated to the subnet is:

You want to allow access to the company website from public Internet without exposing websites eventually hosted on the other instances In the public subnet. Which two actions should you do?

Options

  • AAccess the Linux instance via SSH and configure Iptables to allow HTTPS access on port 443.
  • BCreate a new security list with a stateful rule to allow ingress access on port 443 and associate it to
  • CIn default security list, add a stateful rule to allow ingress access on port 443.
  • DCreate a network security group, add a stateful rule to allow ingress access on port 443 and associate
  • ECreate a network security group, add a stateful rule to allow ingress access on port 443 and associate

How the community answered

(47 responses)
  • A
    74% (35)
  • B
    2% (1)
  • C
    9% (4)
  • E
    15% (7)

Explanation

The NSG is created and then displayed on the Network Security Group page in the compartment you chose. You can specify this NSG when creating or managing instances or other types of parent resources.

Topics

#network security groups#iptables#ingress rules#HTTPS access

Community Discussion

No community discussion yet for this question.

Full 1Z0-1067 Practice