1Z0-1072-25 Question 124
Single answerYour company is consolidating DNS management in Oracle Cloud Infrastructure (OCI). You want external clients to resolve the domain example.com over the public internet, while your internal team uses internal.example.com for private services inside a VCN. You also need minimal administrative overhead and a clear separation between internal and external DNS records. Which approach meets these requirements?
- A
Create a single public DNS zone for example.com and define both external and internal records in that zone.
- B
Create two DNS zones: a public DNS zone for example.com containing external records, and a private DNS zone for internal.example.com scoped to the VCN.
- C
Create one private DNS zone for example.com across all VCNs and rely on a NAT gateway to expose it publicly.
- D
Manage example.com as a private zone only and configure a custom policy to forward public DNS queries to the internet.
Show answer and explanation
Correct answer: B
Explanation
In OCI, you typically split DNS usage into a public zone for domains resolvable from the internet (e.g., example.com) and a private zone for internal records (e.g., internal.example.com). This approach follows Oracle best practices by preventing exposure of internal hosts while ensuring external availability for public services. Refer to OCI DNS documentation for details on creating and managing both public and private DNS zones.
- A. Incorrect.
Incorrect. Mixing external and internal records in a single public DNS zone can expose internal endpoints to the internet and is not recommended for security or clarity.
- B. Correct.
Correct. Using separate zones (a public zone for external records and a private zone for internally scoped records) provides clear separation and helps ensure appropriate resolution for different audiences.
- C. Incorrect.
Incorrect. A single private zone cannot be publicly resolvable, and a NAT gateway does not handle DNS resolution for external clients.
- D. Incorrect.
Incorrect. Storing all records in a private zone alone makes internal.example.com accessible internally, but external users cannot resolve example.com unless it is published in a public zone.