Oracle 1Z0-1124-25 Exam - Topic 7 Question 17 Discussion

Actual exam question for Oracle's 1Z0-1124-25 exam

Question #: 17
Topic #: 7

You are designing an OCI networking architecture for a multi-tier application using Infrastructure as Code (IaC). The architecture includes an OKE cluster for the front-end, a set of Compute instances for the back-end, and an Autonomous Database. You want to ensure that all traffic between these components is encrypted. You are using Transport Layer Security (TLS) for end-to-end encryption but are concerned about the overhead of encrypting all traffic within the VCN. Which approach provides the MOST balanced approach to security and performance, minimizing the overhead of encryption while still protecting sensitive data?

AImplement TLS encryption only between the OKE cluster and the load balancer. Rely on the inherent security of the OCI network for traffic within the VCN.

BImplement mutual TLS (mTLS) for all traffic between the OKE cluster, the Compute instances, and the Autonomous Database.

CUse Network Security Groups (NSGs) and Security Lists to control access between components but do not implement any additional encryption within the VCN.

DImplement TLS encryption for traffic between the OKE cluster and the Compute instances and use Oracle Database Vault to encrypt data at rest and in transit for the Autonomous Database.

Show Suggested Answer

Suggested Answer: D

Goal: Balance security and performance with encryption in a VCN.

Option A: TLS only to the load balancer leaves internal traffic unencrypted, risking exposure---insufficient security.

Option B: mTLS everywhere maximizes security but adds significant overhead (e.g., certificate management), impacting performance---overkill.

Option C: NSGs/Security Lists control access but don't encrypt traffic---lacks protection for sensitive data.

Option D: TLS between OKE and Compute secures app-tier communication. Oracle Database Vault ensures ADB traffic is encrypted efficiently, leveraging built-in features---balanced approach.

Conclusion: Option D optimizes security and performance.

Oracle states:

'Use TLS for application traffic between tiers. Autonomous Database with Database Vault provides encryption in transit and at rest, minimizing overhead.'

This supports Option D. Reference: Security in OCI Networking - Oracle Help Center (docs.oracle.com/en-us/iaas/Content/Network/Concepts/securityoverview.htm).

by Dominque at Mar 06, 2026, 12:00 AM

Limited Time Offer

25%

Off

Get Premium 1Z0-1124-25 Questions as Interactive Web-Based Practice Test or PDF