1Z0-1072-25 Question 120
Select 3You have deployed a web application to two regions in Oracle Cloud Infrastructure (OCI): a primary region in North America and a secondary region in Europe for disaster recovery. You want to configure OCI DNS so that traffic automatically fails over to the secondary region if the primary region becomes unreachable. Which two steps are required to implement DNS failover using an OCI DNS steering policy?
- A
- Create a Failover steering policy and define the primary endpoint and secondary endpoint within the policy.
- B
- Set up an Edge Policy in OCI Edge Services to redirect traffic only when the primary region reaches 90% CPU utilization.
- C
- Attach the Failover steering policy to your DNS zone so the policy is applied to your domain records.
- D
- Configure a custom SSL policy in the primary region to replicate certificate data across regions in real time.
- E
- Enable health checks for the primary and secondary endpoints within the Failover steering policy.
Show answer and explanation
Correct answers: A, C, E
Explanation
To set up DNS failover for a multi-region deployment in OCI, you must create a Failover steering policy (defining primary and secondary endpoints) and enable health checks to monitor the availability of each endpoint. Once configured, attach the Failover steering policy to your DNS zone to ensure queries are routed to the primary endpoint under normal conditions and automatically fail over to the secondary endpoint if the primary becomes unreachable. Refer to the OCI DNS and Traffic Management documentation for details on creating, attaching, and managing failover steering policies.
- A. Correct.
Option 1 is correct. When creating a Failover steering policy, you must specify the primary endpoint (the main region) and the secondary endpoint (the region to fail over to). This is fundamental to DNS failover capabilities in OCI.
- B. Incorrect.
Option 2 is incorrect. OCI Edge Services does not require setting up an 'Edge Policy' based on CPU utilization for DNS failover. DNS failover operates on health checks rather than CPU metric thresholds, so this wouldn't achieve the intended behavior.
- C. Correct.
Option 3 is correct. After creating a Failover steering policy, you must attach the policy to the relevant DNS zone or domain record. This ensures that DNS queries are directed according to the policy you configured.
- D. Incorrect.
Option 4 is incorrect. Configuring a custom SSL policy for replication across regions has no direct impact on DNS failover routing. SSL configuration does not handle traffic redirection; that remains the function of the DNS steering policy and associated health checks.
- E. Correct.
Option 5 is correct. Health checks are essential for Failover steering policies. DNS failover relies on health checks to determine whether the primary endpoint is up or down, so enabling health checks on both the primary and secondary endpoints is necessary.