1Z0-1072-25 Question 264
Select 2Your organization has created an OCI File Storage file system and a mount target in Subnet A. One of your compute instances in Subnet A can successfully mount the file system, but another compute instance in Subnet B cannot. You have verified that the instance in Subnet B is using the correct NFS export path, but the mount request still times out. Which two configuration steps must you take to enable the compute instance in Subnet B to access the same file system via the mount target in Subnet A?
- A
Update the mount target� export options to include the CIDR block of Subnet B
- B
Attach an Internet Gateway to the VCN to enable incoming NFS traffic
- C
Add an ingress security rule in Subnet B� Security List or Network Security Group allowing NFS traffic from the mount target IP
- D
Create a Terraform script to automatically replicate the file system to different subnets
- E
Deploy an additional mount target in Subnet B and associate it with the file system
Show answer and explanation
Correct answers: A, C
Explanation
To allow a compute instance in a different subnet to mount the same File Storage file system, you must grant it access within the mount target� export options and configure security rules to permit NFS traffic between the mount target and the instance's subnet. Reference the Oracle Cloud Infrastructure File Storage documentation to review how to modify export options and add appropriate security rules or network security group configurations for NFS traffic.
- A. Correct.
Correct. By default, the file system is only accessible to the IP address ranges specified in the export options. You need to explicitly add Subnet B� CIDR block to grant mount permission.
- B. Incorrect.
Incorrect. An Internet Gateway is used for outbound access to the public internet, which is not required for internal NFS traffic between subnets in the same VCN.
- C. Correct.
Correct. You must allow inbound traffic from the mount target� IP on ports used by NFS in the Security List or Network Security Group for Subnet B, otherwise the instance cannot receive NFS responses.
- D. Incorrect.
Incorrect. Creating Terraform scripts can automate OCI deployments but is not specifically required to fix the connectivity or permission issue between these subnets.
- E. Incorrect.
Incorrect. It is not mandatory to create a second mount target for another subnet. A single mount target can serve multiple subnets as long as export options and security lists are properly configured.