Your company has established a hybrid cloud environment using FastConnect to connect your on-premises network to your OCI VCN. You are advertising on-premises network prefixes to OCI via BGP. You want to ensure that OCI only learns routes from your on-premises network that are within a specific range, and that any other prefixes advertised are rejected to prevent routing conflicts. Which BGP attribute and configuration on the OCI side should you use to achieve this?

• A.AS Path Prepending: Configure AS Path Prepending on the FastConnect virtual circuit to discourage OCI from selecting routes outside the desired range.
• B.MED (Multi-Exit Discriminator): Configure MED values on the on-premises BGP router toinfluence OCI's route selection based on preferred exit points.
• C.Route Filtering using Route Distinguisher (RD) and Route Target (RT): Configure RDs and RTs on the FastConnect virtual circuit to filter routes based on tenant isolation.
• D.Route Filtering using Prefix Lists: Configure Prefix Lists on the FastConnect virtual circuit to accept only the desired prefix ranges and reject all others.

Comment: *

Name: *

Email: *

Verification: *

Your organization is migrating a legacy application to OCI. This application relies on a specific IP address for its external communication, and you need to maintain this IP address during the migration. Which OCI Load Balancer feature or configuration can help you achieve this while ensuring high availability for the application?

• A.Using a private IP address for the load balancer and NAT Gateway for outbound traffic.
• B.Utilizing the Network Load Balancer (NLB) with its inherent ability to preserve client IP addresses.
• C.Configuring the Flexible Load Balancer with a reserved public IP address.
• D.Deploying multiple Flexible Load Balancers with different public IP addresses and using DNS round- robin.

Comment: *

Name: *

Email: *

Verification: *

In a multi-tier application environment with geographically dispersed teams requiring access to private resources, how can an OCI Bastion service be optimized to reduce latency for remote users?

• A.Deploying a single Bastion host in the primary application region.
• B.Implementing Bastion hosts in multiple regions closer to user locations.
• C.Using dynamic port forwarding to allow direct connections to private resources.
• D.Configuring a Bastion service with a public load balancer.

Comment: *

Name: *

Email: *

Verification: *

Your company utilizes a hybrid cloud architecture, connecting its on-premises network to an OCIVCN using a FastConnect private peering connection. You need to ensure that instances within a specific subnet in the VCN can only communicate with resources in a designated IP address range within the on-premises network.
What is the MOST effective way to achieve this specific network isolation?

• A.Configure an Internet Gateway for the subnet with a route rule to the on-premises network.
• B.Modify the VCN's default security list to restrict traffic to the on-premises IP address range.
• C.Create a custom route table for the subnet with a route rule pointing to the Dynamic Routing Gateway (DRG) and configure network security groups (NSGs) to limit traffic to the specified on-premises IP address range.
• D.Configure a Local Peering Gateway (LPG) for the subnet to route traffic to the on-premises network.

Comment: *

Name: *

Email: *

Verification: *

You are configuring a FastConnect connection between your on-premises network and OCI. You need to establish a BGP (Border Gateway Protocol) session to exchange routing information. You want to use private peering to securely connect to your private resources within OCI. What are the MINIMUM requirements for configuring BGP for private peering over FastConnect?

• A.A public AS number and a valid ASN for the OCI side.
• B.A private AS number for the on-premises side and a valid ASN for the OCI side.
• C.A public IP address range for BGP peering on the on-premises side and OCI side and an established DRG.
• D.A valid ASN for the on-premises side and the OCI side and a non-overlapping IP address range for BGP peering on both the on-premises and OCI side.

Comment: *

Name: *

Email: *

Verification: *