1Z0-1072 · Question #96
You have created a virtual cloud network (VCN) with three private subnets. Two of the subnets contain application servers and the third subnet contains a DB System. The application requires a shared…
The correct answer is A. Create an NFS export option that allows READ_ONLY access where the source is the CIDR range. NFS export options enable you to create more granular access control than is possible using just security list rules to limit VCN access. You can use NFS export options to specify access levels for IP addresses or CIDR blocks connecting to file systems through exports in a…
Question
You have created a virtual cloud network (VCN) with three private subnets. Two of the subnets contain application servers and the third subnet contains a DB System. The application requires a shared file system so you have provisioned one using the file storage service (FSS). You also created the corresponding mount target in one of the application subnets. The VCN security lists are properly configured so that both application servers and the DB System can access the file system. The security team determines that the DB System should have read-only access to the file system. What change would you make to satisfy this requirement?
Options
- ACreate an NFS export option that allows READ_ONLY access where the source is the CIDR range
- BConnect via SSH to one of the application servers where the file system has been mounted. Use
- CModify the security list associated with the subnet where the mount target resides. Change the
- DCreate an instance principal for the DB System. Write an Identity and Access Management (IAM)
How the community answered
(49 responses)- A82% (40)
- B12% (6)
- C2% (1)
- D4% (2)
Explanation
NFS export options enable you to create more granular access control than is possible using just security list rules to limit VCN access. You can use NFS export options to specify access levels for IP addresses or CIDR blocks connecting to file systems through exports in a mount target.
Topics
Community Discussion
No community discussion yet for this question.