1Z0-1072-25 Question 126
Select 2You are deploying an e-commerce application on Oracle Cloud Infrastructure with a domain called example.com. The front-end of the application must be publicly accessible at store.example.com. However, you also have internal microservices that should only be resolvable within your Virtual Cloud Network (VCN) and not exposed to the public. Which two configurations would correctly meet these requirements?
- A
Create a Public DNS zone for example.com to manage external resolution (such as store.example.com) and a Private DNS zone for a subdomain (e.g., internal.example.com) that is associated with your VCN for private resolution.
- B
Create a single Public DNS zone for example.com and include all internal microservices� DNS records in the same zone to simplify the configuration.
- C
Associate the Private DNS zone with your VCN so that internal microservices are resolvable only within that VCN; you can also share this zone with additional VCNs if needed.
- D
Use only the Private DNS zone for both public and internal traffic by configuring a traffic steering policy to route external requests to the front-end.
Show answer and explanation
Correct answers: A, C
Explanation
In Oracle Cloud Infrastructure, public DNS zones are resolvable over the internet, while private DNS zones are restricted to specified VCNs. To meet requirements for exposing certain services publicly (store.example.com) and keeping others private (internal microservices), you typically create separate public and private DNS zones. Refer to Oracle Cloud Infrastructure DNS documentation for best practices on creating and associating DNS zones with your VCNs.
- A. Correct.
This is correct. A Public DNS zone for the main domain (example.com) handles publicly accessible resources like store.example.com, while a separate Private DNS zone (e.g., internal.example.com) restricts access to microservices within the VCN.
- B. Incorrect.
This is incorrect. Mixing private records with public ones in a single Public DNS zone would expose internal microservices to the public internet, violating the requirement of keeping the microservices private.
- C. Correct.
This is correct. Private DNS zones in OCI can be associated with one or more VCNs, ensuring that only those VCNs can resolve the internal records. This meets the requirement of internal-only visibility for microservices.
- D. Incorrect.
This is incorrect. A Private DNS zone alone cannot handle public-facing subdomains. You need a Public DNS zone to serve records that should be resolvable on the public internet.