1Z0-1072-25 Question 175
Select 2You have deployed an internal application in Oracle Cloud Infrastructure (OCI) 2025. To troubleshoot sporadic connectivity issues, you created a Virtual Test Access Point (VTAP) to mirror traffic to a network packet collector. However, you also need to exclude Oracle internal traffic from your capture to reduce noise. Which two actions must you take to achieve this objective?
- A
Create a custom route table entry directing internal OCI traffic to a null target so it bypasses the VTAP.
- B
Configure and attach a capture filter to your VTAP that excludes traffic from the IP address ranges used by Oracle internal services.
- C
Enable ephemeral ports in your Security List to ensure all ports are captured and filtered at the network packet collector.
- D
Specify the correct VTAP target (your network packet collector) and select the filter rules that exclude internal OCI traffic before finalizing the VTAP.
Show answer and explanation
Correct answers: B, D
Explanation
To refine VTAP traffic captures in OCI, you must configure both the VTAP target and a capture filter that defines which packets to mirror. Capture filters allow you to pinpoint which source IP ranges or protocols should be included or excluded from the mirrored traffic. Refer to the OCI Networking documentation and VTAP setup guidelines for details on implementing capture filters that target the correct IP addresses, protocols, and ports while excluding unnecessary traffic.
- A. Incorrect.
Incorrect. A separate route table with a null route for Oracle internal IP addresses won't prevent those packets from being mirrored by the VTAP. Route tables control actual traffic routing, not mirrored traffic.
- B. Correct.
Correct. Capture filters let you selectively include or exclude traffic by IP address, protocol, or port, so specifying the Oracle internal IP ranges to exclude ensures that unwanted traffic is not mirrored.
- C. Incorrect.
Incorrect. Opening ephemeral ports in the Security List does not selectively exclude Oracle internal traffic. While security lists can block or allow traffic, they do not filter which packets get mirrored by the VTAP.
- D. Correct.
Correct. You must specify a valid VTAP target (e.g., a network packet collector) and ensure that the filter rules are in place. This combination lets you mirror only relevant traffic and exclude Oracle internal traffic before you finalize the VTAP configuration.