1Z0-1072-25 Question 63
Single answerYou have deployed a compute instance in a public subnet for testing an external application. The instance currently only has a private IP address on its primary VNIC. You want to temporarily enable direct internet access without disrupting internal communication on the private IP. What is the simplest way to achieve this?
- A
Assign an ephemeral public IP to the existing private IP on the instance's primary VNIC
- B
Convert the primary private IP to a public IP by updating the subnet settings
- C
Create a new secondary VNIC in a private subnet and attach a public IP to it
- D
Deploy a NAT Gateway and update the instance's route table to route traffic through it
Show answer and explanation
Correct answer: A
Explanation
In Oracle Cloud Infrastructure, instances in a public subnet can be assigned public IP addresses for direct internet access. Typically, you can assign either an ephemeral or reserved public IP. Ephemeral IPs are temporary and automatically released when unassigned or the instance is terminated, making them ideal for short-term testing. For more details, refer to the OCI documentation on 'Assigning a Public IP.'
- A. Correct.
Correct. In Oracle Cloud Infrastructure, you can quickly assign an ephemeral public IP to the instance's existing private IP on its primary VNIC if the instance resides in a public subnet. This enables direct internet access without losing the private IP for internal communication. Once you no longer need public access, you can release the ephemeral IP.
- B. Incorrect.
Incorrect. You cannot directly change a private IP into a public IP simply by adjusting subnet settings. Public IPs (ephemeral or reserved) must be assigned to a private IP; they are separate entities in OCI.
- C. Incorrect.
Incorrect. Creating an additional VNIC in a private subnet does not provide internet access. A private subnet does not support direct routing to the internet, and attaching a public IP there is not possible without further configuration (e.g., load balancer, NAT gateway).
- D. Incorrect.
Incorrect. A NAT Gateway only supports outbound connections to the internet from private subnets; it does not provide inbound access. Thus, it will not enable your external application to access the instance directly over the internet.