1Z0-1072-25 Question 64
Single answerYour organization hosts an internal business application on an Oracle Cloud Infrastructure compute instance in a private subnet. Due to new partner requirements, you must allow external access to this application over the internet, while retaining its existing internal connectivity for communication with other private services. Which action should you take so that the instance can be reached publicly without losing its private connectivity?
- A
Create a new VNIC in a public subnet and migrate the instance entirely to that new VNIC.
- B
Assign a reserved public IP to the existing private IP address on the primary VNIC.
- C
Detach the private IP and attach a new private IP from a public subnet to the instance.
- D
Use a second private IP on the instance� primary VNIC and leave it unassigned to any public IP.
Show answer and explanation
Correct answer: B
Explanation
In Oracle Cloud Infrastructure, you can assign a public IP (either ephemeral or reserved) to the same private IP on a VNIC to enable external traffic while maintaining private internal connectivity. Oracle documentation recommends using a reserved public IP if you need a consistent address for partner integration and DNS records. For more details, see Oracle� documentation on Virtual Cloud Networks and VNICs.
- A. Incorrect.
Option 1 is incorrect. Creating a new VNIC in a public subnet and moving the instance entirely there would remove its direct private subnet connectivity. You would then need additional steps to maintain private communication. A single instance can indeed have multiple VNICs, but simply migrating everything to a new VNIC in a public subnet doesn't preserve the existing private IP's connections seamlessly.
- B. Correct.
Option 2 is correct. Assigning a reserved public IP to the existing private IP on the primary VNIC ensures the instance keeps its private address (and subnet placement) for internal traffic while also offering a persistent public address for external access. This approach is a recommended practice when you need both public and private connectivity for the same instance.
- C. Incorrect.
Option 3 is incorrect. Detaching the private IP and attaching a new private IP from a different (public) subnet would disrupt current connections and complicate routing. You would lose the advantage of retaining the same private IP for private communications.
- D. Incorrect.
Option 4 is incorrect. Adding a second private IP with no public IP attached does not enable external connectivity; it simply adds another private IP within the same subnet. This is useful for multiple private addresses, but not for public access.