1Z0-1072-25 Question 133
Select 2You are deploying a new two-tier application on Oracle Cloud Infrastructure in a region with multiple Availability Domains. You have created a public load balancer to distribute traffic across multiple backend compute instances, which are placed in separate subnets in different Availability Domains for high availability. You want the load balancer to route requests only to healthy backend instances. Which two actions must you take to ensure traffic is only directed to healthy instances?
- A
Create a backend set with a health check policy that specifies protocol, port, and any required path for each group of backend servers.
- B
Use only private subnets for all backend servers and attach a secondary private IP to the load balancer for health checks.
- C
Configure a custom SSL certificate in the load balancer� certificate store to handle HTTP health checks.
- D
Enable the load balancer� built-in health checks on each backend set to confirm instance availability before sending traffic.
- E
Use an Autonomous Database-specific firewall rule to block all traffic from one of the Availability Domains.
Show answer and explanation
Correct answers: A, D
Explanation
In Oracle Cloud Infrastructure, you set up a backend set for each group of backend servers and configure a health check policy. Health checks probe each instance at defined intervals, helping route traffic only to instances that respond correctly. You must enable these health checks on each backend set (both are necessary steps). For more details, refer to OCI documentation on Load Balancer health checks and backend set configuration.
- A. Correct.
Option 1 is CORRECT. Each backend set should have a proper health check policy specifying the protocol, port, and path (if applicable) to accurately determine instance health. This ensures only healthy backends receive traffic.
- B. Incorrect.
Option 2 is INCORRECT. While private subnets are an option, using them alone does not guarantee health-based routing. The load balancer can operate in public or private subnets, and adding a secondary private IP is not directly related to configuring health checks.
- C. Incorrect.
Option 3 is INCORRECT. Configuring SSL certificates is relevant for encrypting traffic, not for ensuring health checks. HTTP health checks do not require a custom SSL certificate to validate instance health (unless you specifically use HTTPS health checks with SSL configured).
- D. Correct.
Option 4 is CORRECT. Enabling built-in load balancer health checks is essential. The load balancer must actively probe your backend instances at intervals to determine their health status and route traffic only to those that pass.
- E. Incorrect.
Option 5 is INCORRECT. Blocking traffic with an Autonomous Database-specific firewall rule is unrelated to load balancer health checks and would restrict necessary application traffic, reducing availability rather than ensuring healthy backends.