1Z0-1072-25 Question 156
Select 2You are the lead architect for a large organization that operates multiple Virtual Cloud Networks (VCNs) across different compartments in a single OCI region. Your network operations team requires a centralized 'command center' to monitor traffic, identify anomalies, and quickly troubleshoot connectivity issues across all VCNs. Which two actions should you take in Oracle Cloud Infrastructure 2025 to establish a robust Network Command Center with end-to-end visibility of your network environment?
- A
Enable VCN Flow Logs for each subnet, direct them to the OCI Logging service, and configure Logging Analytics for detailed traffic analysis.
- B
Use Cloud Guard to monitor security posture changes across compartments and integrate alerts with a third-party SIEM for real-time threat detection.
- C
Deploy a single Internet Gateway in one compartment and route all external network traffic from every VCN through that gateway.
- D
Manually export each VCN� route table configuration once a month and store the data for offline analysis in a local repository.
Show answer and explanation
Correct answers: A, B
Explanation
In OCI, a Network Command Center approach relies on automated, real-time monitoring and security oversight rather than ad hoc or manual processes. Flow Logs provide detailed traffic data when streamed to OCI Logging and analyzed with Logging Analytics, enabling quick anomaly detection and troubleshooting. Cloud Guard helps you maintain an up-to-date view of potential security issues across multiple compartments and VCNs. Combining these services delivers a holistic command center solution recommended by OCI best practices. Refer to the official OCI Logging, Logging Analytics, and Cloud Guard documentation for further guidance on configuring these services for large-scale multi-VCN environments.
- A. Correct.
Option 1 is correct. Enabling Flow Logs for your VCN subnets and sending them to the OCI Logging service is the recommended approach to gain detailed insights into network traffic. By leveraging Logging Analytics, you can perform advanced queries, visualize patterns, and quickly spot anomalies in real time. This is a critical component of a centralized network monitoring strategy.
- B. Correct.
Option 2 is correct. Cloud Guard provides centralized visibility into your OCI security posture. By monitoring changes across compartments, including network configuration changes and potential threats, you can correlate events and alerts. Integrating Cloud Guard with a third-party SIEM or notification service further enhances incident response capabilities, making it an essential part of a Network Command Center.
- C. Incorrect.
Option 3 is incorrect. Deploying a single Internet Gateway for all VCNs in one compartment is not a recommended design because it creates a single point of failure and complicates routing. It also does not inherently improve network visibility; it merely funnels traffic through one gateway. Furthermore, each VCN should typically maintain its own gateway resources to align with OCI best practices for isolation, manageability, and scalability.
- D. Incorrect.
Option 4 is incorrect. Manually exporting route tables monthly and storing them offline does not provide real-time insights and is prone to human error. It does not support centralized or automated monitoring, which is crucial for a Network Command Center that requires continuous visibility into the environment.