Oracle Exam 1Z0-1067-23 Topic 4 Question 28 Discussion

Actual exam question for Oracle's 1Z0-1067-23 exam

Question #: 28
Topic #: 4

You launched a Linux compute instance to host the new version of your company website via Apache Httpd server on HTTPS (port 443). The instance is created in a public subnet along with other instances. The default security list associated to the subnet is:

AYou want to allow access to the company website from public internet without exposing websites eventually hosted on the other instances in the public subnet. Which action would you take to accomplish the task? (Choose the best answer.)

BCreate an NSG, add a stateful rule to allow ingress access on port 443, and associate it with the public subnet that hosts the company website.

CCreate a Network Security Group (NSG), add a stateful rule to allow ingress access on port 443, and associate it with the instance that hosts the company website.

DIn the default security list, add a stateful rule to allow ingress access on port 443.
Create a new security list with a stateful rule to allow ingress access on port 443 and associate it with the public subnet.

Show Suggested Answer

Suggested Answer: C

by Hollis at Sep 15, 2024, 07:22 PM

Limited Time Offer

25%

Off

Get Premium 1Z0-1067-23 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Orville

8 months ago

I'm leaning towards option B. Creating a dedicated NSG for the website seems like a more robust solution.

upvoted 0 times

Marsha

8 months ago

Definitely, option B is the way to go to ensure security for the company website.

upvoted 0 times

...

Gilma

8 months ago

I agree, creating a separate NSG for the website is a good way to control access.

upvoted 0 times

...

Dexter

8 months ago

Option B seems like the best choice. It will keep the other instances secure.

upvoted 0 times

...

Leonor

9 months ago

I'm not sure, but D also seems like a valid option. Adding a rule to the default security list could work too.

upvoted 0 times

...

Kayleigh

9 months ago

Haha, I bet the correct answer is going to be the one that takes the most work. That's how these exams always go!

upvoted 0 times

Basilia

8 months ago

D) In the default security list, add a stateful rule to allow ingress access on port 443. Create a new security list with a stateful rule to allow ingress access on port 443 and associate it with the public subnet.

upvoted 0 times

...

Orville

8 months ago

C) Create a Network Security Group (NSG), add a stateful rule to allow ingress access on port 443, and associate it with the instance that hosts the company website.

upvoted 0 times

...

Cordell

8 months ago

B) Create an NSG, add a stateful rule to allow ingress access on port 443, and associate it with the public subnet that hosts the company website.

upvoted 0 times

...

Audrie

8 months ago

A) You want to allow access to the company website from public internet without exposing websites eventually hosted on the other instances in the public subnet. Which action would you take to accomplish the task? (Choose the best answer.)

upvoted 0 times

...

Edna

9 months ago

I agree with Sheron. Creating an NSG and associating it with the public subnet seems like the right approach.

upvoted 0 times

...

Alease

9 months ago

Option D sounds good to me. Updating the default security list is a simple way to allow access to the website without affecting other instances.

upvoted 0 times

Aleta

8 months ago

Creating a Network Security Group and associating it with the instance hosting the website would also work well to restrict access to only that instance.

upvoted 0 times

...

Ezekiel

8 months ago

I agree with option D. It's important to ensure security while allowing access to the website from the public internet.

upvoted 0 times

...

Colton

9 months ago

I think creating a new security list with a stateful rule is a better option. It provides more control and isolation for the website instance.

upvoted 0 times

...

Daniel

9 months ago

Option D sounds good to me. Updating the default security list is a simple way to allow access to the website without affecting other instances.

upvoted 0 times

...

Sheron

9 months ago

I think the best answer is B.

upvoted 0 times

...

Alexis

9 months ago

I think option C is the best choice. Associating the NSG with the specific instance hosting the website is more secure than opening up the entire subnet.

upvoted 0 times

Kenneth

9 months ago

Yeah, it's important to limit access to only the necessary resources.

upvoted 0 times

...

Lonna

9 months ago

I agree, option C is definitely more secure.

upvoted 0 times

...