ExamTopics Logo
Mail Us[email protected]
Menu
Oracle Discussions
exam questions

Exam 1z0-997-20 All Questions

View all questions & answers for the 1z0-997-20 exam
Go to Exam

Exam 1z0-997-20 topic 1 question 16 discussion

Actual exam question from Oracle's 1z0-997-20
Question #: 16
Topic #: 1
[All 1z0-997-20 Questions]

You work as a solutions architect for an online retail store creating a portal to allow the users to pay for their groceries using credit cards. Since the application is not fully compliant with the Payment Card Industry Data Security Standard (PCI DSS), your company is looking to use a third-party payment service to process credit card payments.
The third-party service allows a maximum of 5 public IP addresses at a time. However, your website is using Oracle Cloud Infrastructure (OCI) Instance Pool Auto
Scaling policy to create up to 15 instances during peak traffic demand, which are launched in VCN private subnets and attached to an OCI public Load Balancer.
Upon user payment, the portal connects to the payment service over the Internet to complete the transaction
What solution can you implement to make sure that all 15 compute instances can connect to the third party system to process the payments during peak traffic demand? (Choose the best answer.)

  • A. Route credit card payment request from the compute instances through the NAT Gateway. On the third-party services, whitelist the public IP associated with the NAT Gateway.
  • B. Create an OCI Command Line Interface (CLI) script to automatically reserve public IP address for the compute instances. On the third-party services, whitelist the Reserved public IP.
  • C. Whitelist the Internet Gateway Public IP on the third party service and route all payment requests through the Internet Gateway.
  • D. Route payment request from the compute instances through the OCI Load Balancer, which will then be routed to the third party service.
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
by nwongsf at Nov. 12, 2020, 6:40 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
braindredger
Highly Voted 4 years, 2 months ago
I think it should be A. NAT gateway will have one public IP. All the compute instances will make the request throught the NAT gateway, so they'll appear as all coming from a single IP. Option D is talking about a load balancer. Load balancers are used to distribute "incoming" traffic across the backend server, here we are talking about outgoing traffic.
upvoted 15 times
Faz
4 years, 2 months ago
I too agree that answer would be A.
upvoted 2 times
...
fhoyos
4 years, 2 months ago
Nat Gateway is more to be used in Private subnets.
upvoted 3 times
...
Chityaab
4 years, 2 months ago
I agree that answer is A. There really isn't a pattern where you could initiate outbound connections through a load balancer.
upvoted 3 times
...
ginseng
3 years, 2 months ago
So you're going to route requests from a Public Facing LB - which has a Public IP - via a NAT Gateway? Really? Hmmm...
upvoted 2 times
...
...
Ludo
Most Recent 2 years, 1 month ago
Selected Answer: A
Test question appeared Dicember 2022 on 1Z0-997-22 exam
upvoted 1 times
...
LeeToowey
2 years, 11 months ago
test question appeared march 8 2022
upvoted 1 times
...
David_123
2 years, 11 months ago
Answer is D https://www.oracle.com/webfolder/technetwork/tutorials/obe/cloud/ocis/load-balancer/load-balancer.html
upvoted 1 times
...
Attaxhan
2 years, 11 months ago
in today exam
upvoted 2 times
...
JohnPi
2 years, 11 months ago
Selected Answer: A
it should be A
upvoted 1 times
...
BalaChinnasamy
2 years, 12 months ago
A is the answer as the NAT gateway provides public IP to pricvate IP translation for outgoing calls
upvoted 2 times
...
pelekafitinakwenu
3 years ago
The Correct answer is A
upvoted 2 times
...
Sanduni
3 years, 1 month ago
what about answer C
upvoted 1 times
...
lmkumar
3 years, 3 months ago
D is the answer
upvoted 2 times
...
nenoAZ
3 years, 11 months ago
Answer should be A. Load Balancer doc don't says anyway that LB could accept and process internal connections to internet. https://docs.oracle.com/en-us/iaas/Content/Balance/Concepts/balanceoverview.htm
upvoted 3 times
...
Rohit_B
4 years ago
Answer is D
upvoted 2 times
...
Zhillon
4 years, 1 month ago
Instances in a private subnet don't have public IP addresses. With the NAT gateway, they can initiate connections to the internet and receive responses, but not receive inbound connections initiated from the internet.
upvoted 2 times
...
ankit89
4 years, 2 months ago
I am changing my view to Answer : A, because application need to connect to third party after process completion.
upvoted 3 times
...
ankit89
4 years, 2 months ago
D, Nat gateway is for patching
upvoted 1 times
adesmaster
4 years, 2 months ago
Yes and no. NAT gateway let you connect internet with private subnets, but you must start the comunication from the private network. You can't connect directly from internet to the private network. Correct answer is A (nat gateway), because you can't route outbound traffic from backends server to the loadbalancer to connect to other 3rd party server.
upvoted 3 times
...
...
fhoyos
4 years, 2 months ago
Answer is D: You can OCI Load Balancer for this solution which can you the Public IPs of Load balancer toTraffic to third party services which allows a maximum of Spelunk IP addresses 5 public IPaddresses at a time However, your website is using Oracle Cloud Infrastructure (OCI) InstancePool Auto Scaling policy to create up to 15 Instances during peak traffic demand
upvoted 2 times
...
nwongsf
4 years, 3 months ago
Should be D
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago