1Z0-1072-25 Question 263
Single answerYour organization has two private subnets in the same VCN, both of which must have read/write access to a shared file system in Oracle Cloud Infrastructure (OCI) File Storage. Which configuration will allow instances in both subnets to successfully mount and use the file system?
- A
Create a single mount target in one of the subnets, configure the security list or network security group (NSG) to allow NFS traffic from both subnets, and mount the file system using the mount target's private IP address on all instances.
- B
Deploy a mount target in each subnet, and mount each instance to the mount target in its local subnet using separate file systems for each subnet.
- C
Attach the file system as a block volume to each instance in both subnets and configure replication between the volumes.
- D
Use an Internet Gateway to make the mount target publicly accessible and allow instances in the private subnets to mount the file system over the internet.
Show answer and explanation
Correct answer: A
Explanation
In OCI, a single mount target placed in one subnet can provide NFS access to instances across multiple subnets within the same VCN, provided that network security (security lists or NSGs) and routing are correctly configured to permit NFS traffic from those subnets. Creating additional mount targets is only necessary if you have separate networking or IP address constraints. Refer to Oracle� official File Storage documentation for details on setting up mount targets, configuring network security, and mounting file systems from multiple subnets.
- A. Correct.
Correct. A single mount target can service multiple subnets if the proper network configuration is in place. You must allow NFS traffic in your security lists or NSGs for each subnet, and route traffic correctly so that instances in both subnets can reach the mount target. Each instance then mounts the same file system using the mount target's IP address.
- B. Incorrect.
Incorrect. While you can create multiple mount targets (one per subnet) if there is a specific requirement for separate IP addresses or routing, it is not mandated for accessing the same file system from multiple subnets in the same VCN. A single mount target can serve both subnets if networking is properly configured.
- C. Incorrect.
Incorrect. OCI File Storage is a managed NFS service and is not attached as a block volume. Attaching block volumes and setting up replication is a different approach that does not address the shared NFS requirement directly.
- D. Incorrect.
Incorrect. Making the mount target publicly accessible via an Internet Gateway is neither recommended nor required. It exposes your mount target to external traffic unnecessarily and does not solve the private subnet routing requirements.