1Z0-1072-25 Question 163
Select 2You manage multiple compartments and Virtual Cloud Networks (VCNs) across your Oracle Cloud Infrastructure environment. Recently, the DevOps team reported intermittent connectivity issues between an application server in the Development compartment and a database system in the Production compartment. You want to use the Network Visualizer to quickly identify any misconfiguration in security rules or route tables across compartments. Which two actions must you take to effectively implement and use Network Visualizer to troubleshoot these issues?
- A
Create or update an IAM policy that grants the appropriate user group permission to view networking resources in both compartments.
- B
Use the OCI Console to launch the Network Visualizer and select both compartments so that all relevant VCNs, subnets, and route tables are included in the visualization.
- C
Enable VCN Flow Logs on all subnets, which automatically feed traffic data to Network Visualizer for route analysis.
- D
Deploy a dedicated network gateway in each region to allow the Network Visualizer to retrieve routing and security rule data.
Show answer and explanation
Correct answers: A, B
Explanation
To effectively use the Network Visualizer to diagnose cross-compartment connectivity issues, you must ensure that you have the proper IAM policies to view networking resources in each compartment and then specify those compartments in the visualizer workflow. This allows you to see all relevant VCNs, subnets, route tables, and security lists in one diagram, quickly highlighting potential misconfigurations. Refer to the official Oracle Cloud Infrastructure documentation on Network Visualizer for further guidance on permissions and recommended configurations.
- A. Correct.
Correct. Network Visualizer needs permission to read network configurations, so you must ensure your user group has at least 'inspect' or 'read' permissions on the relevant VCN and subnet resources in both compartments.
- B. Correct.
Correct. In the OCI Console, you should specify the compartments you wish to include so the Network Visualizer can display resources and routes from each environment in one combined topology view.
- C. Incorrect.
Incorrect. While VCN Flow Logs are useful for detailed packet-level troubleshooting, they are not a prerequisite for using Network Visualizer. The Visualizer bases its topology primarily on defined resources and configurations rather than live flow logs.
- D. Incorrect.
Incorrect. There is no requirement to deploy an additional gateway in each region for the Network Visualizer. The feature works with existing gateways and networking resources to map out the topology.