1Z0-1072-25 Question 140
Select 2You have an internally hosted web application that requires SSL termination at the load balancer and also a separate real-time TCP data stream that needs minimal overhead. You plan to use Oracle Cloud Infrastructure (OCI) to accommodate these two distinct traffic types. Which two actions should you take to meet these requirements?
- A
Deploy a public OCI Load Balancer with SSL termination for the web application and a separate OCI Network Load Balancer for the real-time TCP traffic.
- B
Configure the Network Load Balancer to terminate SSL connections for the real-time data stream to reduce CPU overhead on the backend servers.
- C
Place the public Load Balancer in a public subnet and the Network Load Balancer in a separate private subnet to provide isolation and limit external exposure.
- D
Use path-based routing on the Network Load Balancer to route HTTP requests differently from the real-time TCP data traffic.
- E
Deploy both load balancers into the same public subnet to simplify the configuration and access for all traffic.
Show answer and explanation
Correct answers: A, C
Explanation
A common real-world design in OCI is to use the public Load Balancer for Layer 7 HTTP/HTTPS traffic (including SSL termination, path-based routing, etc.) and the Network Load Balancer for low-latency Layer 4 traffic such as TCP or UDP. Separating them into different subnets aligns security and routing requirements. For more information, refer to OCI documentation on Load Balancer and Network Load Balancer design principles.
- A. Correct.
Correct. A public OCI Load Balancer is well suited for handling SSL-encrypted web traffic at Layer 7, including SSL termination. Meanwhile, the OCI Network Load Balancer operates at Layer 4 (TCP/UDP) and is designed for low latency, making it ideal for real-time traffic.
- B. Incorrect.
Incorrect. The Network Load Balancer does not currently provide SSL termination features. It is intended to pass traffic at the TCP or UDP layer directly to backend endpoints.
- C. Correct.
Correct. Placing the public Load Balancer in a public subnet allows external client access, while maintaining the Network Load Balancer in a private subnet helps isolate internal real-time traffic. This design follows security best practices by limiting external exposure.
- D. Incorrect.
Incorrect. Path-based routing is a Layer 7 feature available in the (HTTP) Load Balancer. The Network Load Balancer operates at Layer 4 and cannot inspect HTTP paths for routing decisions.
- E. Incorrect.
Incorrect. Although it is possible to place both load balancers in the same subnet, this approach decreases network isolation and can raise security concerns. Best practice is to keep them in subnets aligned with their respective access requirements (public or private).