Exam 1z0-1072-23 topic 1 question 24 discussion

Actual exam question from Oracle's 1z0-1072-23

Question #: 24
Topic #: 1

You created a virtual cloud network (VCN) with three private subnets. Two of the subnets contain application servers and the third subnet contains a DB System. The application requires a shared file system, therefore you have provisioned one using the file storage service (FSS).
You have also created the corresponding mount target in one of the application subnets. The VCN security lists are properly configured so that the application servers can access FSS. The security team changed the settings for the DB System to have read-only access to the file system. However, when they test it, they are unable to access FSS.
How would you allow access to FSS?

A. Create an NFS export option that allows READ_ONLY access where the source is the CIDR range of the DB System subnet.
B. Modify the security list associated with the subnet where the mount target resides. Change the ingress rules corresponding to the DB System subnet to be stateless.
C. Create an instance principal for the DB System. Write an Identity and Access Management (IAM) policy that allows the instance principal read-only access to the file storage service.
D. Modify the security list associated with the subnet where the mount target resides. Change the ingress rules corresponding to the DB System subnet to be stateful.

Show Suggested Answer

Suggested Answer: A 🗳️

by Rod22 at Feb. 2, 2024, 2:26 p.m.

Comments

Submit Cancel

partnerexams

1 week, 5 days ago

Selected Answer: A

NFS Export Options: These control access to the file system at the NFS protocol level. You can specify which subnets or IP ranges can access the file system and what level of access (read, write) they have. By creating an NFS export option that grants read-only access to the specific CIDR range of the DB System subnet, you explicitly allow the DB System to access the FSS with the necessary permissions.

upvoted 1 times

...

Mopo

2 months, 3 weeks ago

Selected Answer: A

NFS export options define access permissions for NFS clients accessing the file system. By creating an NFS export option with READ_ONLY access, you restrict the DB System to read-only access. You specify the source of access in the export option, which in this case would be the CIDR range of the DB System subnet. This ensures that only resources within the DB System subnet can access the file system. Configuring the NFS export option in this manner ensures that the DB System has the necessary permissions to access the file system for its read-only operations.

upvoted 1 times

...

Rod22

4 months, 1 week ago

Selected Answer: D

Should be D.

upvoted 1 times

...

Exam 1z0-1072-23 All Questions

View all questions & answers for the 1z0-1072-23 exam

Exam 1z0-1072-23 topic 1 question 24 discussion

Comments

partnerexams

Mopo

Rod22

SY0-701