1Z0-1072-25 Question 166
Single answerYou have set up multiple VCNs across different compartments for a multi-tier application. You want to use Oracle Cloud Infrastructure Network Visualizer to review the entire topology and validate connectivity among your resources. However, you notice that certain subnets and compartments do not appear in the Network Visualizer tool, even though they are properly configured. Which action must you take to ensure these resources are discovered and displayed by Network Visualizer?
- A
Create a policy that grants the Network Visualizer service permission to read network resources across all relevant compartments.
- B
Attach a Public Load Balancer to each VCN, as Network Visualizer can only discover networks that are publicly routable.
- C
Enable Traffic Management in the VCNs by configuring custom DHCP options for Network Visualizer to scan the subnets.
- D
Migrate all subnets to a single compartment, since Network Visualizer cannot visualize resources that span multiple compartments.
Show answer and explanation
Correct answer: A
Explanation
To provide a complete view of your network topology, Network Visualizer needs permission to list and read network-related resources (VCNs, subnets, etc.) across any compartments. Oracle recommends creating an appropriate policy that grants these permissions. Failing to do so will result in missing or partial visibility, as resources in compartments without suitable policies will not be displayed. Refer to the Oracle Cloud Infrastructure documentation for details on creating policies for Network Visualizer (for example, 'allow service Network-Visualizer to read vcns in tenancy').
- A. Correct.
Correct. Network Visualizer needs appropriate IAM rights to list and read resources in different compartments. By creating a policy (e.g., 'allow service Network-Visualizer to read vcns in tenancy'), you ensure Network Visualizer can discover and display subnets and compartments properly.
- B. Incorrect.
Incorrect. The Network Visualizer can discover private networks as long as the correct IAM policies are in place. Public endpoints are not a requirement for visibility.
- C. Incorrect.
Incorrect. There is no requirement to configure custom DHCP options for Network Visualizer discovery. It relies on IAM permissions and does not scan subnets in the traditional sense.
- D. Incorrect.
Incorrect. Network Visualizer supports multi-compartment visualization as long as the service has the necessary permissions. Consolidating all subnets into a single compartment is not required.