Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Oracle 1Z0-1104-25 Exam - Topic 5 Question 8 Discussion

Actual exam question for Oracle's 1Z0-1104-25 exam
Question #: 8
Topic #: 5
[All 1Z0-1104-25 Questions]

SIMULATION

Challenge 2

In deploying a new application, a cloud customer needs to reflect different security postures. If a security zone is enabled with the Maximum Security Zone recipe, the customer will be unable to create or update a resource in the security zone if the action violates the attached Maximum Security Zone policy.

As an application requirement, the customer requires a compute instance in the public subnet. You therefore, need to configure Custom Security Zones that allow the creation of compute instances in the public subnet.

Review the architecture diagram, which outlines the resoures you'll need to address the requirement:

Preconfigured

To complete this requirement, you are provided with the following:

Access to an OCI tenancy, an assigned compartment, and OCI credentials

Required IAM policies

Task 5: Provision a Compute Instance

Provision a compute instance in the IAD-SP-PBT-PUBSNET-01 public subnet, where:

Name IAD-SP-PBT-1-VM-01

image: Oracle Linux 8

Shape VM: Standard, A1, Flex

Enter the OCID of the created compute instance in the text box below.

Show Suggested Answer Hide Answer
Suggested Answer: A

To provision a compute instance named IAD-SP-PBT-1-VM-01 in the IAD-SP-PBT-PUBSNET-01 public subnet with the specified configuration (Oracle Linux 8 image, VM Standard A1 Flex shape), follow these steps based on the Oracle Cloud Infrastructure (OCI) Compute documentation.

Step-by-Step Solution for Task 5: Provision a Compute Instance

Log in to the OCI Console:

Use your OCI credentials to log in to the OCI Console (https://console.us-ashburn-1.oraclecloud.com).

Ensure you have access to the assigned compartment.

Navigate to Compute Instances:

From the OCI Console, click the navigation menu (hamburger icon) on the top left.

Under Compute, select Instances.

Create a New Compute Instance:

Click the Create Instance button.

Configure the Instance Details:

Name: Enter IAD-SP-PBT-1-VM-01.

Compartment: Select the assigned compartment.

Placement: Choose the availability domain (e.g., AD-1) based on your region's availability.

Select the Image:

Under Image and Shape, click Change Image.

Select Oracle Linux 8 from the platform images list.

Click Select Image.

Choose the Shape:

Click Change Shape.

Select VM Standard category.

Choose A1 Flex from the shape options.

Configure the OCPUs (e.g., 1 OCPU) and memory (e.g., 6 GB) as needed for A1 Flex, then click Select Shape.

Configure Networking:

Under Networking, ensure the Virtual Cloud Network is set to IAD-SP-PBT-VCN-01.

Set the Subnet to IAD-SP-PBT-PUBSNET-01 (public subnet with CIDR 10.0.1.0/24).

Enable Assign a public IPv4 address to allow external connectivity.

Leave the default security list or assign a custom one if configured previously.

Set Up SSH Access:

Under Add SSH Keys, either:

Upload your public SSH key file, or

Paste your public SSH key manually.

This ensures you can access the instance via SSH.

Launch the Instance:

Click Create to provision the compute instance.

Wait for the instance to reach the Running state (this may take a few minutes).

Note the Instance OCID:

Once the instance is running, go to the instance details page for IAD-SP-PBT-1-VM-01.

Copy the OCID displayed (e.g., ocid1.instance.oc1..<unique_string>).

OCID of the Created Compute Instance

Enter the OCID of the created compute instance (IAD-SP-PBT-1-VM-01) into the text box. The exact OCID will be available after Step 9 (e.g., ocid1.instance.oc1..<unique_string>).

Notes

Ensure the security zone IAD_SAP-PBT-CSZ-01 and its associated recipe IAD-SP-PBT-CSP-01 allow compute instance creation in the public subnet (10.0.1.0/24).

Verify network connectivity by testing SSH access using the public IP assigned to the instance.


Contribute your Thoughts:

0/2000 characters
Kayleigh
5 hours ago
Agreed, security zones can be confusing.
upvoted 0 times
...
Matthew
5 days ago
This question is tricky.
upvoted 0 times
...
Leigha
10 days ago
I thought public subnets were easier to manage. Why all the fuss?
upvoted 0 times
...
Leeann
29 days ago
Yup, that's how it works. Better safe than sorry!
upvoted 0 times
...
Carma
1 month ago
Okay, let's see if I can get this compute instance provisioned correctly.
upvoted 0 times
...
Wilburn
1 month ago
Haha, I bet the customer is regretting those security requirements now!
upvoted 0 times
...
Linwood
1 month ago
Hmm, I'll need to review the security zone policies carefully.
upvoted 0 times
...
Evangelina
2 months ago
The security zone requirements are a bit tricky, but I think I can figure it out.
upvoted 0 times
...
Brice
2 months ago
I think I recall that we need to specify the correct shape and image for the compute instance, but I’m not 100% sure about the exact OCID format we need to enter.
upvoted 0 times
...
Jimmie
2 months ago
I feel a bit confused about the public subnet requirements. Did we cover how to configure those security zones in detail?
upvoted 0 times
...
Gene
2 months ago
This question seems similar to one we did in class about provisioning instances in specific subnets. I think we need to pay close attention to the IAM policies.
upvoted 0 times
...
Chau
2 months ago
I remember we practiced setting up custom security zones, but I'm not entirely sure how to ensure the policies align with the Maximum Security Zone requirements.
upvoted 0 times
...
Sharee
3 months ago
I feel pretty confident about this one. I'll review the diagram, the requirements, and the preconfigured resources, then put together a plan to configure the Custom Security Zone and provision the compute instance.
upvoted 0 times
...
Ines
3 months ago
This seems straightforward enough. I'll provision the compute instance in the public subnet, making sure to use the right image, shape, and name. The OCID of the created instance is what I need to provide.
upvoted 0 times
...
Elliot
3 months ago
I'm a bit confused about the Maximum Security Zone policy and how that impacts the requirement. I'll need to make sure I understand how to work around that constraint.
upvoted 0 times
...
Osvaldo
3 months ago
Totally agree, you can't bypass those rules.
upvoted 0 times
...
Glory
3 months ago
This seems straightforward. I'll give it a shot.
upvoted 0 times
...
Sharee
3 months ago
Maximum Security Zone policies are strict!
upvoted 0 times
...
Vonda
4 months ago
Wait, so we need custom zones just for public instances? Seems complicated.
upvoted 0 times
...
Anisha
4 months ago
But we need flexibility for the application, right?
upvoted 0 times
...
Flo
4 months ago
Okay, I think I get it. I need to configure a Custom Security Zone that allows the creation of a compute instance in the public subnet. Let me start by reviewing the preconfigured resources.
upvoted 0 times
...
Alisha
4 months ago
Hmm, this looks like a tricky one. I'll need to carefully review the architecture diagram and the requirements to understand what I need to do.
upvoted 0 times
...

Save Cancel