1Z0-1072 · Question #40
You are the Solutions Architect of a large company and are tasked with migrating all your services to Oracle Cloud Infrastructure. As part of this, you first design a Virtual Cloud Network (VCN)…
The correct answer is A. Disable "Source and Destination Check" on the VNIC of your Linux instance. https://docs.cloud.oracle.com/iaas/Content/Network/Tasks/managingVNICs.htm#Source/D By default, every VNIC performs the source/destination check on its network traffic. The VNIC looks at the source and destination listed in the header of each network packet. If the VNIC is not…
Question
You are the Solutions Architect of a large company and are tasked with migrating all your services to Oracle Cloud Infrastructure. As part of this, you first design a Virtual Cloud Network (VCN) with a public subnet and a private subnet. Then in order to provide Internet connectivity to the instances in your private subnet, you create an Oracle Linux instance in your public subnet and configure NAT on it. However, even after adding all related security list rules and routes in the Route Table, your private subnet instances still cannot connect to the Internet. Which action should you perform to enable Internet connectivity?
Options
- ADisable "Source and Destination Check" on the VNIC of your Linux instance.
- BThere is no way that a private subnet can connect to the Internet.
- CCreate a Dynamic Routing Gateway (DRG) and route your private IP traffic to the DRG.
- DRestart the NAT instance.
How the community answered
(55 responses)- A76% (42)
- B4% (2)
- C13% (7)
- D7% (4)
Explanation
https://docs.cloud.oracle.com/iaas/Content/Network/Tasks/managingVNICs.htm#Source/D By default, every VNIC performs the source/destination check on its network traffic. The VNIC looks at the source and destination listed in the header of each network packet. If the VNIC is not the source or destination, then the packet is dropped. If the VNIC needs to forward traffic (for example, if it needs to perform Network Address Translation (NAT)), you must disable the source/destination check on the VNIC. For instructions, see To update an existing VNIC. For information about the general scenario, see Using a Private IP as a Route Target.
Topics
Community Discussion
No community discussion yet for this question.