1Z0-1072-25 Question 155
Select 2You are designing a 'Network Command Center' for a large enterprise running multi-tier applications in multiple compartments on Oracle Cloud Infrastructure (OCI). The goal is to have a centralized solution to monitor network flows, identify anomalies, and quickly troubleshoot connectivity issues across all environments. Which two actions should you take to implement this solution effectively?
- A
Enable VCN flow logs and store them in OCI Logging, then use custom queries for real-time traffic analysis.
- B
Create a dedicated secondary region exclusively for network monitoring services to isolate them from production.
- C
Configure vTAP on critical subnets to mirror traffic to a network analysis tool for deeper inspection and troubleshooting.
- D
Enable Data Flow to automatically block suspicious IP addresses at the Internet Gateway without additional configuration.
Show answer and explanation
Correct answers: A, C
Explanation
Implementing a 'Network Command Center' in OCI generally involves combining several observability and monitoring features: VCN flow logs in OCI Logging help you track and query network traffic, while vTAP enables deeper analysis through traffic mirroring. These tools allow you to quickly diagnose, audit, and troubleshoot issues in your environment. Refer to OCI documentation on VCN flow logs and vTAP configuration for detailed setup instructions and best practices.
- A. Correct.
Option 1 is correct. Enabling VCN flow logs provides essential insight into network traffic, which you can analyze using OCI Logging and query for real-time troubleshooting. This is a recommended best practice for monitoring network flows in OCI.
- B. Incorrect.
Option 2 is incorrect. While separating workloads across regions can be used for disaster recovery or compliance, simply creating a dedicated region for network monitoring is unnecessary and does not directly improve the visibility or management of traffic in your production environment.
- C. Correct.
Option 3 is correct. Configuring vTAP on subnets allows traffic mirroring to a network analysis or intrusion detection system. This helps you inspect traffic at a granular level, aiding in faster root cause analysis for network or security issues.
- D. Incorrect.
Option 4 is incorrect. OCI Data Flow is a serverless big data processing service and does not provide real-time blocking of IP addresses at the gateway level. Network security lists, network security groups, and firewall solutions are typically used to control or block traffic at the network boundary.