1Z0-1072-25 Question 153
Select 2You are the lead network engineer for a multinational company running mission-critical applications across multiple Oracle Cloud Infrastructure (OCI) regions. Your team wants a centralized approach�referred to internally as a 'Network Command Center'�to manage and troubleshoot network traffic in near-real time. You need to gather VCN Flow Logs across various compartments, correlate the logs for in-depth analysis, and configure alerts on anomalous traffic patterns. Which two actions must you take to implement this solution successfully?
- A
Enable VCN Flow Logs for all required VCNs and configure a Service Connector to stream these logs to Logging Analytics for advanced correlation.
- B
Set up a NAT Gateway in each subnet to forward flow logs automatically to the OCI Monitoring service for real-time analysis.
- C
Create an IAM dynamic group and corresponding policies that allow Logging Analytics to read VCN Flow Logs from multiple compartments and regions.
- D
Deploy a script on each Compute instance to store VCN Flow Logs locally and then manually push them to Object Storage.
Show answer and explanation
Correct answers: A, C
Explanation
To implement a robust 'Network Command Center' service in OCI, you must first enable and collect VCN Flow Logs for visibility into network traffic. Using the Service Connector Hub to stream logs into Logging Analytics provides advanced analysis, correlation, and alerting capabilities. Configuring IAM dynamic groups and policies ensures Logging Analytics can read logs from all relevant compartments and regions. For more details, refer to the official OCI documentation on VCN Flow Logs, Logging Analytics, and IAM policies.
- A. Correct.
Option 1 is correct. Enabling VCN Flow Logs for each Virtual Cloud Network and using a Service Connector to direct these logs to Logging Analytics is a best practice for centralized, in-depth analysis. Logging Analytics helps in identifying patterns, anomalies, and trends across multiple compartments or regions.
- B. Incorrect.
Option 2 is incorrect. NAT Gateways do not forward flow logs to any service. They enable outbound connections to the internet, but they do not function as log forwarders to Monitoring or Logging Analytics.
- C. Correct.
Option 3 is correct. You need to create an IAM dynamic group and policies that allow Logging Analytics to access flow logs across compartments and regions. Without these policies, Logging Analytics will not have the required permissions to retrieve the logs or process them.
- D. Incorrect.
Option 4 is incorrect. VCN Flow Logs are managed at the VCN/subnet level and automatically stored in OCI Logging by default when enabled. Manually storing logs locally on Compute instances is both cumbersome and error-prone. The recommended architecture is to use OCI Logging and Service Connectors for a centralized, fully managed solution.