Study with Oracle : 1z0-1124-25 Exam Torrent as your best preparation materials

A company wants to leverage a best-of-breed approach for their application stack. They plan to use OCI for its Autonomous Database, Azure for its container orchestration (AKS), and AWS for its object storage (S3).
Considering cost optimization and minimizing data egress charges, which strategy is the MOST efficient for transferring large datasets between these services?

• A. Utilizing a third-party data integration platform that is strategically located at a network peering point between OCI, Azure, and AWS
• B. Establishing a hub-and-spoke model, using a central cloud provider as the data transfer hub, incurring egress charges from each cloud to the hub and then ingress charges from the hub to the destination cloud
• C. Using Storage Gateway service on each cloud and replicate data from one gateway to the other
• D. Moving data directly between OCI Autonomous Database, Azure AKS, and AWS S3 using public internet, as this is the most cost-effective option

Your organization requires that all backups of critical application data stored in OCI Object Storage from an instance within a private subnet must remain within the Oracle Cloud Infrastructure network and not traverse the public internet. Which OCI networking component should you configure to enable this secure and private access to Object Storage?

• A. NAT Gateway
• B. Service Gateway
• C. Network Firewall
• D. Internet Gateway

Your company is migrating its legacy application to OCI. This application uses self-signed certificates. As part of the migration, you want to replace these with certificates issued by a trusted Certificate Authority (CA) managed through OCI Certificates. What is the most secure and recommended method to handle this transition?

• A. Configure OCI WAF to bypass certificate validation for the legacy application.
• B. Import the self-signed certificates into OCI Certificates and continue using them until they expire.
• C. Obtain certificates from OCI Certificates, gradually replace self-signed certificates on application servers, and update the truststores on client systems to include the OCI Certificates CA.
• D. Immediately replace the self-signed certificates on all application servers with certificates issued by OCI Certificates, without any gradual rollout.

Which OCI component facilitates transitive routing between VCNs in different regions via a dedicated, private network backbone, while also enabling connectivity to on-premises networks?

• A. Service Gateway
• B. Dynamic Routing Gateway (DRG)
• C. Internet Gateway
• D. Local Peering Gateway (LPG)

You are troubleshooting a network connectivity issue between a compute instance in a private subnet within your VCN and a service on the public internet using Cloud Shell. You suspect a problem with the network security group (NSG) rules associated with the instance's VNIC. Which Cloud Shell command and appropriate tool combination allows you to directly inspect the NSG configuration impacting the VNIC?

• A. oci compute instance get --instance-id <instance_OCID> piped to jq '.vnics[].nic_id | oci network vnic get --vnic-id .' piped to jq '.network_security_group_ids[] | oci network network-security-group get -- nsg-id .'
• B. oci compute instance get --instance-id <instance_OCID> piped to grep NetworkSecurityGroupIds
• C. oci network network-security-group get --nsg-id <NSG_OCID> piped to grep <instance_VNIC_OCID>
• D. oci network vnic get --vnic-id <instance_VNIC_OCID> piped to awk '/network_security_group_ids/
  {print $2}' | xargs oci network network-security-group get --nsg-id