1Z0-1072-25 Question 180
Single answerYou are troubleshooting intermittent network issues on an instance in a private subnet. You have created a Virtual Test Access Point (VTAP) to capture traffic for analysis. However, you only want to capture inbound traffic that originates from specific IP subnets. Which action should you take to ensure that the VTAP only forwards traffic from those IP subnets for monitoring?
- A
A. Configure the Instance Security List to permit only traffic from the specified subnets, and the VTAP will automatically capture it.
- B
B. Edit the default route table to route traffic from the specified subnets to a custom route target for monitoring.
- C
C. Create a Capture Filter with ingress rules specifying the desired source IP subnets and attach it to the existing VTAP.
- D
D. Modify the VCN Flow Logs configuration to log only traffic from the required source IP subnets.
Show answer and explanation
Correct answer: C
Explanation
To selectively capture traffic using a VTAP in Oracle Cloud Infrastructure, you must create and attach a Capture Filter that specifies which incoming packets are included. Adjusting Security Lists, route tables, or VCN Flow Logs does not provide the necessary granularity for filtering captured traffic. Refer to OCI documentation on Capture Filters and Virtual Test Access Points for detailed configuration guidance.
- A. Incorrect.
Option A: Incorrect. Security Lists control traffic allowed or denied at the subnet or instance level, but they do not filter VTAP captures. Even if the Security List is configured, the VTAP can still capture traffic outside the allowed subnets unless a Capture Filter is specified.
- B. Incorrect.
Option B: Incorrect. The route table determines how traffic is forwarded within the VCN, not what is captured by the VTAP. Editing the route table will not limit which traffic the VTAP sees.
- C. Correct.
Option C: Correct. Virtual Test Access Points can use Capture Filters to define which traffic is captured. Specifying the source IP subnets in an ingress rule within the Capture Filter and attaching it to the VTAP ensures only traffic from those subnets is forwarded to the VTAP for analysis.
- D. Incorrect.
Option D: Incorrect. VCN Flow Logs configuration influences log data collection but does not restrict or narrow down which traffic is mirrored by the VTAP. It only affects how traffic is logged, not the packet-level capture by the VTAP.