Weekend Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: ac4s65

You are deploying a three-tier web application using Infrastructure as Code (IaC) and Oracle Kubernetes...

Oracle 1z0-1124-25 Full Course Access
Oracle 1z0-1124-25 View All Questions

You are deploying a three-tier web application using Infrastructure as Code (IaC) and Oracle Kubernetes Engine (OKE) within a single VCN. The application consists of a public-facing web tier (running in OKE), an application tier, and a database tier. You want to ensure that only the web tier can access the application tier, and only the application tier can access the database tier. You are leveraging Network Security Groups (NSGs) for granular access control. Your IaC code successfully creates all the components, but you are experiencing connectivity issues. Specifically, Pods in the web tier cannot reach the application tier. Reviewing your IaC configuration, you realize the NSG assignments for the OKE cluster's node pool are misconfigured. Which of the following NSG configuration errors would most likely cause this connectivity issue?

A.

The NSG associated with the OKE node pool (web tier) allows ingress traffic from 0.0.0.0/0 on port 80, but egress traffic to the application tier's NSG is missing a rule allowing TCP traffic on port 8080 (the port the application tier is listening on).

B.

The NSG associated with the OKE node pool (web tier) is missing an ingress rule allowing traffic from the VCN CIDR on port 443. This is causing a routing problem within the VCN.

C.

The NSG associated with the application tier allows ingress traffic from the VCN CIDR, but the NSG associated with the OKE node pool (web tier) has no ingress rules at all. Therefore, the OKE nodes are not reachable.

D.

The NSG associated with the OKE node pool (web tier) only allows egress traffic to the internet and does not have a rule permitting egress traffic to the application tier's NSG on the required port (8080).

1z0-1124-25 PDF/Engine
  • Printable Format
  • Value of Money
  • 100% Pass Assurance
  • Verified Answers
  • Researched by Industry Experts
  • Based on Real Exams Scenarios
  • 100% Real Questions
buy now 1z0-1124-25 pdf
Get 65% Discount on All Products, Use Coupon: "ac4s65"
Next
Your company has a FastConnect circuit established between your on-premises data center and OCI.
You are designing an OCI VCN for a new application with the following requirements: The...
Previous