1Z0-1072-25 Question 152
Single answerYour organization has expanded into multiple OCI regions and needs to consolidate network traffic visibility across all compartments using the Network Command Center. You have created your Virtual Cloud Networks (VCNs) and subnets in each region, and now want to ensure that all subnet traffic is monitored in real time. Which configuration step is mandatory to capture and display VCN traffic flows within the Network Command Center dashboard?
- A
Enable VNIC-level flow logs in each subnet and store them in the Logging service for ingestion by the Network Command Center.
- B
Create a dedicated Internet Gateway in each region and route all external traffic to the Network Command Center.
- C
Use a NAT Gateway in each subnet to forward traffic to centralized object storage for logging and analysis.
- D
Attach a Service Gateway in each VCN and configure dynamic routing so that all traffic goes through the Network Command Center.
Show answer and explanation
Correct answer: A
Explanation
To implement Network Command Center services and visualize comprehensive subnet traffic data, each VNIC within your subnets must have flow logging enabled and be directed to the OCI Logging service. This provides the granular traffic data necessary for Network Command Center analytics and real-time monitoring. For more details, refer to the official OCI documentation on VNIC flow logs and Logging service configuration.
- A. Correct.
Correct. Enabling VNIC-level flow logs in each subnet is the key step for capturing detailed traffic data. These logs must be directed to the OCI Logging service, which the Network Command Center will then process and display. Without enabling flow logs at the subnet (VNIC) level, no granular traffic data would be available to the dashboard.
- B. Incorrect.
Incorrect. The Internet Gateway provides external connectivity but does not automatically forward traffic logs to the Network Command Center. It is typically used for outbound access to the internet, not for monitoring internal or cross-region subnet traffic.
- C. Incorrect.
Incorrect. NAT Gateways offer private instances access to the internet but do not capture or forward detailed flow logs. Pointing traffic to object storage alone will not provide real-time visibility within the Network Command Center.
- D. Incorrect.
Incorrect. Service Gateways are used for private connections to OCI services (e.g., Object Storage), and routing all traffic through them does not enable per-VNIC flow logging. The Network Command Center relies on flow logs from the Logging service rather than raw traffic routing rules.