1Z0-1072-25 Question 154
Single answerYour organization has multiple Virtual Cloud Networks (VCNs) spanning several compartments across different OCI regions. You want to leverage the Oracle Cloud Infrastructure 2025 Network Command Center to gain a real-time, centralized view of network traffic and detect anomalies across all VCNs. Which approach should you implement to ensure that flow logs from each region are collected and analyzed centrally in the Network Command Center?
- A
Store flow logs in an Autonomous Database within each region, then manually upload logs to the Network Command Center on a weekly basis.
- B
Enable the integrated flow logging feature for each VCN, configure an Object Storage bucket as a centralized repository in your primary region, and point the Network Command Center to automatically pull logs from that bucket in near real-time.
- C
Use a single dynamic routing gateway (DRG) in one region to aggregate flow logs from all remote VCNs and stream them to the Network Command Center.
- D
Enable Oracle Logging Analytics in each compartment and rely on automatic cross-region ingestion to feed data directly into the Network Command Center.
Show answer and explanation
Correct answer: B
Explanation
To achieve real-time, centralized analysis of VCN flow logs using the OCI 2025 Network Command Center, each VCN must have flow logging enabled, and logs must be aggregated in a single repository that the Network Command Center can access. Storing logs in an Object Storage bucket in your primary region and configuring it as the log source for the Command Center meets this requirement. Refer to the Oracle Cloud Infrastructure Networking documentation and Network Command Center best practices for detailed steps on configuring flow logging, Object Storage aggregation, and the Network Command Center integration.
- A. Incorrect.
Option 1 is incorrect because manually uploading logs on a weekly basis does not provide the real-time visibility needed for proactive network monitoring. Additionally, storing logs in Autonomous Database within each region creates data silos and complicates centralized analysis.
- B. Correct.
Option 2 is correct. Enabling integrated flow logging in each VCN and directing the logs to a central Object Storage bucket in the primary region, then configuring the Network Command Center to pull from that bucket, ensures near real-time ingestion and analysis of flow logs across all regions. This approach aligns with recommended OCI best practices for centralized monitoring.
- C. Incorrect.
Option 3 is incorrect because simply attaching all VCNs to a single DRG does not automatically aggregate flow logs for centralized analysis. DRGs help with inter-VCN traffic routing, but they do not replace the need for properly configured flow log collection and an ingestion endpoint for the Network Command Center.
- D. Incorrect.
Option 4 is incorrect because Oracle Logging Analytics by itself handles log analysis and dashboards but does not natively feed logs into the Network Command Center without additional configuration. While Logging Analytics can collect logs, the question specifically asks for direct, real-time flow log analysis in the Network Command Center, which requires the integrated flow logging and collector setup.