Question 1

In a multi-tier OCI architecture, which of the following is NOT a valid use case for the Bastion service?

Options :

A : Providing secure access to jump hosts for managing private resources within a VCN.

B : Enabling SSH connections to bastion hosts from external sources while restricting access to other resources.

C : Implementing multi-factor authentication (MFA) for accessing bastion hosts.

D : Offering remote access to public-facing resources like web servers directly.

Answer: D

Question 2

Which VCN gateway type enables secure, private communication between your VCN and on-premises network using IPSec tunnels?

Options :

A : Local Peering Gateway

B : Internet Gateway

C : Dynamic Routing Gateway

D : NAT Gateway

Answer: C

Question 3

Which FastConnect product is suitable if you requires a dedicated connection to OCI with flexible bandwidth options.

Options :

A : Dedicated Internet Access (DIA)

B : Dedicated Connection

C : Cloud VPN

D : IPSec VPN

Answer: B

Question 4

Which approach is NOT suitable for using a Bastion service to secure access to the private tiers?

Options :

A : Configure a Bastion host instance in a public subnet with SSH access and jump server functionality.

B : Deploy a Bastion service instance in a private subnet with SSH access and route traffic through a NAT gateway.

C : Utilize a Bastion service instance in a public subnet with SSH access and restrict inbound traffic to specific source IP addresses.

D : Implement a Bastion service gateway with policies to control access to specific resources in the private tiers.

Answer: A

Question 5

To achieve highly available transitive routing between your on-premises network and a VCN in another OCI region. Which approach is NOT recommended?

Options :

A : Using two FastConnect connections to the remote region with different physical paths.

B : Configuring two DRGs in the remote region and BGP peering them for redundancy.

C : Utilizing a single FastConnect connection and DRG in the remote region.

D : Implementing a redundant Site-to-Site VPN connection for the on-premises network.

Answer: C

Free 1Z0-1124-26 Mock Exam – Practice Online Confidently