1Z0-1123-25 Question 88
Select 2You are migrating a microservices-based container application from an on-premises environment to Oracle Container Engine for Kubernetes (OKE) in OCI. One microservice handles analytics using ephemeral in-container storage for real-time data processing, while other microservices must persist transaction data. Your security team also requires that no public traffic be allowed to the cluster, including the control plane. Which two tasks must you perform to ensure the application is securely migrated and data integrity is preserved?
- A
Use ephemeral volumes for all microservices to mimic the on-premises setup, relying on node availability for persistence.
- B
Deploy the OKE cluster into a private subnet, ensuring the control plane is not exposed publicly.
- C
Configure persistent volume claims for microservices that store transaction data and require persistent storage.
- D
Expose the cluster control plane to a public endpoint to enable direct access for developers and automated build agents.
Show answer and explanation
Correct answers: B, C
Explanation
In this scenario, certain microservices can safely rely on ephemeral storage for transient processing (such as analytics), but those that store critical or transactional data require persistent volume claims to protect against data loss. Additionally, deploying the OKE cluster into a private subnet ensures that no external traffic can directly access the node pool or control plane, aligning with OCI best practices and your organization's security policy. Refer to Oracle documentation on Private OKE Cluster Configuration for recommended network setups and persistent storage strategies.
- A. Incorrect.
Option 1: Incorrect. Relying solely on ephemeral volumes for all microservices would risk data loss for those requiring persistence, especially in the event of node termination or container redeployment.
- B. Correct.
Option 2: Correct. Deploying OKE into a private subnet helps fulfill security requirements by restricting public access to both the worker nodes and the control plane, in accordance with best practices for OCI networking.
- C. Correct.
Option 3: Correct. Persistent volume claims (PVCs) ensure that transaction data is stored reliably, meeting the requirement for retaining business-critical information that extends beyond the container� lifecycle.
- D. Incorrect.
Option 4: Incorrect. Exposing the control plane publicly would violate the strict security policy that mandates private traffic only.