1Z0-1072-25 Question 254
Single answerYour company runs a distributed application on multiple compute instances spread across two subnets in the same VCN and region. You want to store shared configuration and log files on Oracle Cloud Infrastructure File Storage so that each instance can securely read and write to the same data. Which solution requires the least overhead and still ensures access from both subnets?
- A
Create a single mount target in one availability domain, update export options to include both subnets, and configure security rules for NFS traffic.
- B
Create a separate mount target for each compute instance to ensure each one has a unique private IP address for the File Storage mount.
- C
Use a NAT Gateway to route all traffic to a single mount target located on a public subnet in another region.
- D
Export the file system only to the default VCN route and rely on open security lists for cross-subnet access.
Show answer and explanation
Correct answer: A
Explanation
When multiple compute instances need shared File Storage access across subnets in the same region, you only need a single mount target as long as you properly configure NFS exports and security rules to permit traffic from each subnet. This design simplifies management and reduces overhead. For more details, consult the Oracle Cloud Infrastructure File Storage documentation, which explains mount targets, export configurations, and best practices for secure, multi-subnet access.
- A. Correct.
Correct. You can create a single mount target for the File Storage, configure an export that grants access to both subnets, and ensure security rules allow NFS traffic. This approach is straightforward, avoids unnecessary complexity, and is recommended when subnets are in the same region and traffic is permitted.
- B. Incorrect.
Incorrect. Creating a separate mount target for each instance introduces overhead and complexity, especially since each mount target would require its own IP address and management. File Storage supports multiple subnets through a single mount target using appropriately configured exports and security rules.
- C. Incorrect.
Incorrect. A NAT Gateway is unrelated to internal NFS traffic within the same region and VCN. NAT Gateways are used primarily for outbound internet connectivity from private subnets, not for accessing File Storage mounts in the same region.
- D. Incorrect.
Incorrect. While adjusting routes and security lists might allow some traffic, simply exporting to the 'default VCN route' does not automatically grant multi-subnet accessibility for NFS. You must explicitly define allowed subnets in the export and configure appropriate security rules.