1Z0-1072-25 Question 260
Single answerYour team needs to set up an Oracle Cloud Infrastructure (OCI) File Storage file system for a group of compute instances running in multiple subnets. You have created the file system and a mount target in one subnet. However, the compute instances in another subnet are unable to mount the file system even though the correct NFS mount command is being used. Which action must you take to resolve this issue?
- A
Update the export options for the file system to allow access from the subnet hosting the compute instances
- B
Add a second mount target in the same subnet as the file system, set to read-only
- C
Configure a block volume and attach it to all instances in the other subnet
- D
Disable the built-in firewall (iptables) on the compute instances to allow NFS traffic
Show answer and explanation
Correct answer: A
Explanation
When configuring OCI File Storage, you must create export rules that authorize specific subnets or CIDR ranges to access the file system. Even if you have a valid file system and mount target, instances in a different subnet require proper export rules and security configurations. Refer to the Oracle Cloud Infrastructure File Storage documentation for guidance on setting up export options and security lists so that you can mount the file system from other subnets.
- A. Correct.
Correct. You must ensure the export options of the OCI File Storage file system include the subnet or CIDR block where the compute instances reside. If the export options do not permit access from that subnet, the mount will fail.
- B. Incorrect.
Incorrect. Adding another mount target in the same subnet as the existing mount target does not help devices in a separate subnet gain access. You need correct export options and security rules to allow cross-subnet traffic.
- C. Incorrect.
Incorrect. Configuring a block volume is unrelated to providing network-based file storage via NFS. Block volumes require different provisioning and do not address the File Storage network access issue.
- D. Incorrect.
Incorrect. Disabling iptables is not recommended as a best practice, and it is not necessary if your security lists and export options are properly configured. NFS can be allowed without disabling the firewall entirely.