1Z0-1067-25 Question 7
Select 3You are working as a Cloud Ops engineer for a SaaS provider that needs to stand up a new public-facing microservice in Oracle Cloud Infrastructure (OCI). You have created a custom VCN and a public subnet for your Compute instance. The microservice must be accessible from the public internet for incoming HTTP requests. Which three steps must you take (at a minimum) to ensure external clients can reach your instance?
- A
Create and attach an Internet Gateway to your VCN
- B
Assign a public IP address to your instance
- C
Create a NAT Gateway for outbound traffic from your instance
- D
Add a route rule in the route table to direct 0.0.0.0/0 to the Internet Gateway
- E
Configure a Service Gateway for your instance
- F
Launch the instance in a private subnet instead of a public subnet
Show answer and explanation
Correct answers: A, B, D
Explanation
To manually deploy a public-facing instance in OCI, you must attach an Internet Gateway to your VCN, assign a public IP to the instance, and create a route rule sending 0.0.0.0/0 traffic to the Internet Gateway. These are the fundamental steps for inbound and outbound internet connectivity. In addition, you must configure security rules (via Security Lists or Network Security Groups) to allow incoming traffic on the desired ports. Refer to Oracle Cloud Infrastructure Networking documentation for best practices on creating and configuring subnets, gateways, and route tables.
- A. Correct.
Option 1: Create and attach an Internet Gateway to your VCN. Correct. The Internet Gateway is essential for allowing external internet traffic to enter your VCN. Without it, your instance cannot be reached directly from external networks.
- B. Correct.
Option 2: Assign a public IP address to your instance. Correct. A public IP address is necessary if you want your instance to be directly addressable from the internet. Without a public IP or a Public Load Balancer in front, external clients cannot route traffic directly to your instance.
- C. Incorrect.
Option 3: Create a NAT Gateway for outbound traffic from your instance. Incorrect. NAT Gateways allow private subnet hosts to initiate outbound connections to the internet. They do not enable inbound connections from the internet to your instance.
- D. Correct.
Option 4: Add a route rule in the route table to direct 0.0.0.0/0 to the Internet Gateway. Correct. Even if you have an Internet Gateway attached, you must explicitly define in your route table that all external traffic (0.0.0.0/0) should be sent to that gateway. Without this route rule, the traffic will not be forwarded to the internet.
- E. Incorrect.
Option 5: Configure a Service Gateway for your instance. Incorrect. A Service Gateway is used to enable private access to Oracle services (such as Object Storage) without traversing the public internet. It does not facilitate public internet connectivity to your instance.
- F. Incorrect.
Option 6: Launch the instance in a private subnet instead of a public subnet. Incorrect. Using a private subnet prevents direct access from the internet, unless you use additional services such as a Public Load Balancer. For direct public connectivity, a public subnet is required.