Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Oracle 1Z0-1124-25 Exam - Topic 7 Question 17 Discussion

You are designing an OCI networking architecture for a multi-tier application using Infrastructure as Code (IaC). The architecture includes an OKE cluster for the front-end, a set of Compute instances for the back-end, and an Autonomous Database. You want to ensure that all traffic between these components is encrypted. You are using Transport Layer Security (TLS) for end-to-end encryption but are concerned about the overhead of encrypting all traffic within the VCN. Which approach provides the MOST balanced approach to security and performance, minimizing the overhead of encryption while still protecting sensitive data?
D) Implement TLS encryption for traffic between the OKE cluster and the Compute instances and use Oracle Database Vault to encrypt data at rest and in transit for the Autonomous Database.
A) Implement TLS encryption only between the OKE cluster and the load balancer. Rely on the inherent security of the OCI network for traffic within the VCN.
B) Implement mutual TLS (mTLS) for all traffic between the OKE cluster, the Compute instances, and the Autonomous Database.
C) Use Network Security Groups (NSGs) and Security Lists to control access between components but do not implement any additional encryption within the VCN.

Oracle 1Z0-1124-25 Exam - Topic 7 Question 17 Discussion

Actual exam question for Oracle's 1Z0-1124-25 exam
Question #: 17
Topic #: 7
[All 1Z0-1124-25 Questions]

You are designing an OCI networking architecture for a multi-tier application using Infrastructure as Code (IaC). The architecture includes an OKE cluster for the front-end, a set of Compute instances for the back-end, and an Autonomous Database. You want to ensure that all traffic between these components is encrypted. You are using Transport Layer Security (TLS) for end-to-end encryption but are concerned about the overhead of encrypting all traffic within the VCN. Which approach provides the MOST balanced approach to security and performance, minimizing the overhead of encryption while still protecting sensitive data?

Show Suggested Answer Hide Answer
Suggested Answer: D

Goal: Balance security and performance with encryption in a VCN.

Option A: TLS only to the load balancer leaves internal traffic unencrypted, risking exposure---insufficient security.

Option B: mTLS everywhere maximizes security but adds significant overhead (e.g., certificate management), impacting performance---overkill.

Option C: NSGs/Security Lists control access but don't encrypt traffic---lacks protection for sensitive data.

Option D: TLS between OKE and Compute secures app-tier communication. Oracle Database Vault ensures ADB traffic is encrypted efficiently, leveraging built-in features---balanced approach.

Conclusion: Option D optimizes security and performance.

Oracle states:

'Use TLS for application traffic between tiers. Autonomous Database with Database Vault provides encryption in transit and at rest, minimizing overhead.'

This supports Option D. Reference: Security in OCI Networking - Oracle Help Center (docs.oracle.com/en-us/iaas/Content/Network/Concepts/securityoverview.htm).


by Dominque at Mar 06, 2026, 12:00 AM

Limited Time Offer

25%

Off

Get Premium 1Z0-1124-25 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Bettina
1 month ago
Surprised that people would consider C. No encryption at all?
upvoted 0 times
...
Mona
1 month ago
A seems risky. Relying on OCI's network alone? Nah.
upvoted 0 times
...
Tonette
1 month ago
I think option B is the best for security. mTLS is solid.
upvoted 0 times
...
Natalie
2 months ago
NSGs are great, but I wouldn't skip encryption altogether like in option C.
upvoted 0 times
...
Elfrieda
2 months ago
Option A sounds too risky, relying on OCI's inherent security isn't enough.
upvoted 0 times
...
Lashaunda
2 months ago
Surprised that some would skip encryption within the VCN. Isn't that risky?
upvoted 0 times
...
Sabra
2 months ago
I disagree, option D seems more balanced with encryption and performance.
upvoted 0 times
...
Corinne
2 months ago
I think option B is the best for security. mTLS is solid.
upvoted 0 times
...
Ashlyn
2 months ago
I recall that implementing TLS only between the OKE cluster and the load balancer might not be enough for sensitive data, so I’m leaning towards option D.
upvoted 0 times
...
Buddy
3 months ago
I’m a bit uncertain about relying solely on the OCI network's security. It feels risky to skip encryption entirely, like in option C.
upvoted 0 times
...
Brigette
3 months ago
I think option D sounds familiar because it combines TLS with Oracle Database Vault, which we practiced in a similar scenario.
upvoted 0 times
...
Zona
3 months ago
I remember discussing the trade-offs of TLS and mTLS in class, but I’m not sure if mTLS is really necessary for all traffic.
upvoted 0 times
...

Save Cancel