Exam 1z0-932 topic 1 question 117 discussion

Actual exam question from Oracle's 1z0-932

Question #: 117
Topic #: 1

You are designing a two-tier web application in Oracle Cloud Infrastructure (OCI). Your clients want to access the web servers from anywhere, but want to prevent access to the database servers from the Internet.
Which is the recommended way to design the network architecture?

A. Create public subnets for web servers and private subnets for database servers in your virtual cloud network (VCN), and associate separate internet gateways for each subnet.
B. Create a public subnet for web servers and associate a dynamic routing gateway with that subnet, and a private subnet for database servers with no association to dynamic routing gateway.
C. Create public subnets for web servers and private subnets for database servers in your VCN, and associate separate security lists and route tables for each subnet.
D. Create a single public subnet for your web servers and database servers, and associate only your web servers to internet gateway.

Show Suggested Answer

Suggested Answer: D 🗳️

by umarkhan at April 12, 2020, 5:25 p.m.

Comments

Submit Cancel

SIDNEY1

Highly Voted 5 years, 1 month ago

C is correct. Only option that puts the DB servers in the public subnet and allows for separate access lists and routing for it.

upvoted 8 times

...

rkrajnishraj

Highly Voted 4 years, 11 months ago

C looks correct but without Internet Gateway how it can be accessed.

upvoted 5 times

Oracleist

4 years, 6 months ago

right. But the other are totally wrong, then I think that you have to do what reported in C, plus adding an internet gateway(omitted).

upvoted 1 times

...

Wansico

Most Recent 2 years, 11 months ago

C is correct

upvoted 1 times

...

Scunningham99

4 years, 10 months ago

C is right

upvoted 1 times

...

passnow

5 years, 1 month ago

Deep cloud architecture experience from other cloud. I would go with A!

upvoted 1 times

Ricdell

5 years ago

Incorrect, its just confusing with Option C (which is the right option). You cannot have Internet gateways at subnet level. You only have 1 IGW for a VCN.

upvoted 4 times

Oracleist

4 years, 6 months ago

both are wrong, you can have an internet gateway at subnet level. But internet gateway works only with public subnet.

upvoted 1 times

...