1Z0-1067-25 Question 136
Select 2Your organization has deployed a custom web application on an Oracle Cloud Infrastructure (OCI) Compute instance behind an OCI Load Balancer. Even though the application responds properly when accessed directly, the load balancer consistently marks the instance as 'unhealthy.' Which two actions should you take to troubleshoot and resolve the health check issue?
- A
Verify that your application returns an HTTP 200 response on the correct health check path configured in the load balancer
- B
Open inbound connections from any source (0.0.0.0/0) on all ports in your security list for maximum accessibility
- C
Update the load balancer� health check policy with the correct protocol (TCP or HTTP) that matches your application service
- D
Disable SSL certificates on the load balancer so all traffic is sent over HTTP
- E
Configure an advanced path-based health check to ensure the load balancer verifies the application's actual health endpoint
Show answer and explanation
Correct answers: A, C
Explanation
To ensure that your backend instance is marked healthy by the OCI Load Balancer, the health check must match the actual service. Double-check that the path and protocol in the load balancer� health check settings align with your application's configuration. Additionally, verify that the network security settings allow health-check traffic from the load balancer on the appropriate port. For more details, consult the Oracle Cloud Infrastructure documentation on configuring load balancer health checks.
- A. Correct.
Correct. Ensuring the health check is pointed to a valid path (e.g., /health or /) that returns a 200 status code is crucial for the load balancer to consider the instance healthy. If the application� actual endpoint differs from what is configured in the load balancer health check settings, the instance will be marked unhealthy.
- B. Incorrect.
Incorrect. While you do need to open specific ports to allow traffic from the load balancer, allowing all ports from 0.0.0.0/0 unnecessarily broadens the attack surface and violates security best practices.
- C. Correct.
Correct. The load balancer must use the same protocol as the service you are checking. If your application runs an HTTP-based service, setting the health check to HTTP with the correct port is essential. Similarly, if it� TCP-based, the correct TCP configuration is necessary.
- D. Incorrect.
Incorrect. Disabling SSL would leave traffic unencrypted, which is both insecure and not required to resolve a health check configuration issue. Health checks can be performed over HTTPS with proper certificates in place.
- E. Incorrect.
Incorrect. Configuring an advanced path-based health check could potentially help diagnose more complex scenarios, but it is not necessarily required if a simple path check already provides a valid health response. In most cases, verifying a standard path that returns a 200 response is sufficient.