1Z0-1072-25 Question 164
Select 2Your organization has deployed a multi-tier application where the front-end resides in Virtual Cloud Network (VCN) A and the database in VCN B. You have established a local peering connection between them. However, intermittent connectivity issues occur when the front-end tries to access the database. You plan to use Oracle Cloud Infrastructure Network Visualizer to analyze the traffic path and pinpoint the issue. Which two actions must you ensure are in place to accurately display the path across the peered VCNs?
- A
Configure a local peering gateway in each VCN and update the route tables to forward traffic to the other VCN� CIDR block.
- B
Create public subnets with public IP addresses in both VCNs so that path visualization can function correctly.
- C
Allow relevant traffic in the Security Lists or Network Security Groups of both VCNs for source and destination subnets.
- D
Create a 0.0.0.0/0 route in each VCN� route table that points to a Dynamic Routing Gateway (DRG).
Show answer and explanation
Correct answers: A, C
Explanation
When implementing Network Visualizer for peered VCNs in Oracle Cloud Infrastructure, you must ensure that each VCN has a functioning local peering gateway and properly configured route table rules pointing to the other VCN� CIDR block. Additionally, verify that security rules (Security Lists or Network Security Groups) allow traffic between the source and destination subnets. These configurations enable Network Visualizer to accurately trace and display the path. Refer to Oracle� documentation on VCN peering (docs.oracle.com/en-us/iaas/Content/Network/Tasks/VCNpeering.htm) and Network Visualizer setup (docs.oracle.com/en-us/iaas/Content/Network/Tasks/network-visualizer.htm) for detailed guidance.
- A. Correct.
Correct. Network Visualizer requires accurate routing information to pinpoint the path. When using local peering, each VCN must have a local peering gateway and route table entries that direct traffic intended for the other VCN� CIDR to that gateway.
- B. Incorrect.
Incorrect. Network Visualizer does not require public subnets or public IP addresses to visualize traffic. It can operate on private subnets within peered VCNs, provided that the necessary routing and security rules are in place.
- C. Correct.
Correct. Security Lists or Network Security Groups must allow the specific protocols and ports for traffic between the source and destination subnets; otherwise, Network Visualizer will indicate blocked traffic and you won�t get full visibility into the path.
- D. Incorrect.
Incorrect. A 0.0.0.0/0 route to a Dynamic Routing Gateway is used primarily for internet egress or routing to on-premises networks, not for local VCN peering. This routing setup is not required for traffic within peered VCNs.