1Z0-1072-25 Question 125
Select 2You are configuring the DNS for a new e-commerce application in Oracle Cloud Infrastructure (OCI). You need to make the domain myretailshop.com publicly accessible from the internet while also providing private DNS resolution of internal.myretailshop.com for hosts inside a specific VCN. Which two actions should you take to meet these requirements?
- A
Create a public DNS zone for myretailshop.com in OCI and configure its NS records with your domain registrar to point to OCI� public DNS nameservers.
- B
Create a private DNS zone for internal.myretailshop.com in OCI and configure an A record that resolves to the private IP addresses used by the internal hosts.
- C
Create an additional public DNS zone for internal.myretailshop.com and add A records that reference the private IP addresses of your internal hosts.
- D
Use a private DNS zone for the entire domain myretailshop.com and configure both public and private IP addresses in the same zone records.
Show answer and explanation
Correct answers: A, B
Explanation
In OCI, a public DNS zone is used for internet-facing domains so that external users can resolve the domain name. A private DNS zone is used for records that should only be resolvable within a specific VCN or set of VCNs. By splitting the domain into a public zone (myretailshop.com) and a private subdomain (internal.myretailshop.com), you ensure public resolution for external hosts and private resolution for internal hosts. Refer to OCI documentation on DNS zones for additional best practices on setting up public and private DNS zones.
- A. Correct.
CORRECT. Creating a public DNS zone for myretailshop.com allows external clients to resolve the domain from the internet. You must update the registrar� Name Server (NS) records to use OCI� public DNS nameservers so that internet requests are directed to OCI� public DNS.
- B. Correct.
CORRECT. A private DNS zone for internal.myretailshop.com ensures that only resources in the selected VCN can resolve records to private IP addresses. This isolates internal DNS queries from the public internet.
- C. Incorrect.
INCORRECT. If you create a public zone for internal.myretailshop.com and map it to private IP addresses, those private addresses will be exposed publicly. This defeats the purpose of having an isolated subdomain for internal resources.
- D. Incorrect.
INCORRECT. Using a single private DNS zone for the entire myretailshop.com domain would prevent legitimate public internet queries from being resolved. You need a separate public zone for external access.