1Z0-1072-25 Question 151
Select 2Your company hosts a multi-tier application in a private subnet in Oracle Cloud Infrastructure (OCI). The on-premises network is connected to OCI via an IPsec VPN. Recently, users have been unable to reach the application from on-premises. After verifying that the VPN tunnel is up, which two actions should you take in the Network Command Center to help identify and resolve this connectivity issue?
- A
Use Network Path Analyzer to test the route from the on-premises subnet to the application� private IP address and check for next-hop mismatches.
- B
Enable flow logs for the private subnet and review them in the Network Observability console to see if the traffic is accepted or dropped.
- C
Create and attach a NAT Gateway to the private subnet so that inbound connections from on-premises are directed to the application instances.
- D
Implement a Local Peering Gateway (LPG) in the same region to allow traffic from the on-premises environment to reach the private subnet.
Show answer and explanation
Correct answers: A, B
Explanation
In the Network Command Center, tools like Network Path Analyzer and flow logs (available in the Network Observability interface) help pinpoint why on-premises traffic may not be reaching instances in a private subnet. Network Path Analyzer checks for configuration or next-hop issues along the path, while flow logs confirm if packets are accepted, dropped, or never received. Refer to Oracle� documentation on Network Command Center (docs.oracle.com/en-us/iaas/Content/NetworkCommandCenter/Home.htm) for best practices on using these services to troubleshoot network connectivity problems.
- A. Correct.
Correct. Network Path Analyzer is part of the Network Command Center and lets you run a hop-by-hop analysis from the on-premises subnet to the OCI instance. It helps identify misconfigured route tables or security settings along the path.
- B. Correct.
Correct. Flow logs in Network Observability can reveal whether traffic is being received or dropped at the subnet level. This insight is crucial for diagnosing access issues, such as security list misconfigurations or missing route entries.
- C. Incorrect.
Incorrect. A NAT Gateway in OCI is used to enable outbound connections from private subnets to the internet (or other external endpoints), not to process inbound connections from on-premises.
- D. Incorrect.
Incorrect. A Local Peering Gateway (LPG) is used to connect VCNs within the same region without using the public internet. It does not establish connectivity from on-premises networks.