1124-25 Subnet Practice Questions

When analyzing Flow Logs for a subnet, how can you filter logs to isolate traffic that was rejected due to a specific security list rule?

• AA. By filtering on the "action" field with the value "REJECT" and the "securityListRule" field with the rule ID
• BB. By filtering on the "status" field with the value "DENIED" and the "securityRule" field with the rule name
• CC. By filtering on the "direction" field with the value "EGRESS" and the "port" field with the rule port
• DD. By filtering on the "type" field with the value "SECURITY" and the "rule" field with the rule number

You are troubleshooting an issue where a compute instance in a private subnet within a VCN cannot reach OCI Object Storage. You have verified that a Service Gateway is configured for the VCN and that the route table associated with the subnet has a route rule directing traffic for OCI Services to the Service Gateway. However, the instance still cannot connect. What is the MOST likely cause of the problem?

• AA. The instance requires a public IP address to access OCI Object Storage.
• BB. The security list or network security group associated with the subnet or instance is not configured to allow outbound traffic to the OCI Object Storage service CIDR block.
• CC. The Service Gateway is not configured to allow access to OCI Object Storage.
• DD. The instance is not configured with the Oracle Cloud Agent.