Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Oracle Exam 1Z0-1124-25 Topic 8 Question 4 Discussion

Actual exam question for Oracle's 1Z0-1124-25 exam
Question #: 4
Topic #: 8
[All 1Z0-1124-25 Questions]

When analyzing Flow Logs for a subnet, how can you filter logs to isolate traffic that was rejected due to a specific security list rule?

Show Suggested Answer Hide Answer
Suggested Answer: A

Goal: Filter Flow Logs for traffic rejected by a specific security list rule.

Option A: ''action'' = ''REJECT'' identifies rejected traffic; ''securityListRule'' with rule ID pinpoints the exact rule---correct.

Option B: ''status'' and ''securityRule'' aren't standard Flow Log fields (''action'' and ''securityListRule'' are)---incorrect.

Option C: ''direction'' and ''port'' filter traffic but don't specify rejection or rule---incorrect.

Option D: ''type'' and ''rule'' aren't valid Flow Log fields---incorrect.

Conclusion: Option A is the precise filtering method.

Oracle states:

'In Flow Logs, use the 'action' field ('REJECT') and 'securityListRule' field (rule ID) to filter traffic rejected by a specific security list rule.''

This validates Option A. Reference: Flow Logs Fields - Oracle Help Center (docs.oracle.com/en-us/iaas/Content/Network/Concepts/flowlogs.htm#fields).


Contribute your Thoughts:

Quinn
1 months ago
Option D looks like it might work, but I'm not sure the 'type' field is really what we need here. Seems like a bit of a stretch.
upvoted 0 times
...
William
1 months ago
Haha, option C is just silly. Filtering on 'direction' and 'port' won't tell you anything about the security list rule that caused the rejection.
upvoted 0 times
...
Golda
1 months ago
Option B seems more logical to me. The 'status' field will tell you if the traffic was denied, and the 'securityRule' field will give you the name of the rule that caused the denial.
upvoted 0 times
Bulah
1 days ago
B) By filtering on the 'status' field with the value 'DENIED' and the 'securityRule' field with the rule name
upvoted 0 times
...
Meaghan
5 days ago
A) By filtering on the 'action' field with the value 'REJECT' and the 'securityListRule' field with the rule ID
upvoted 0 times
...
...
Anglea
2 months ago
Hmm, that makes sense too. Let's review the question again before the exam.
upvoted 0 times
...
Leonie
2 months ago
I disagree, I believe the correct answer is B. We should filter based on the status field and securityRule field.
upvoted 0 times
...
Solange
2 months ago
I think option A is the correct way to filter the Flow Logs. The 'action' field specifies whether the traffic was accepted or rejected, and the 'securityListRule' field will give you the specific rule that caused the rejection.
upvoted 0 times
Grover
13 days ago
Option D doesn't seem right. 'Type' and 'rule' fields might not directly point to the specific security list rule that caused rejection.
upvoted 0 times
...
Melda
14 days ago
I'm not sure about option C. Filtering on 'direction' and 'port' might not give the specific security list rule that caused rejection.
upvoted 0 times
...
Brett
15 days ago
I think option B might work too. Filtering on the 'status' field with 'DENIED' could also help identify rejected traffic.
upvoted 0 times
...
Nettie
19 days ago
I agree, option A is the way to go. It helps isolate traffic rejected due to a specific security list rule.
upvoted 0 times
...
Lettie
20 days ago
User4: That makes sense, it's important to isolate rejected traffic for security analysis.
upvoted 0 times
...
Matthew
1 months ago
User3: And the 'securityListRule' field will give you the specific rule ID.
upvoted 0 times
...
Roy
1 months ago
User2: Yes, the 'action' field with the value 'REJECT' will show rejected traffic.
upvoted 0 times
...
Alberto
2 months ago
User1: I think option A is the correct way to filter the Flow Logs.
upvoted 0 times
...
...
Anglea
3 months ago
I think the answer is A, because we need to filter based on the action field and securityListRule field.
upvoted 0 times
...

Save Cancel
az-700  pass4success  az-104  200-301  200-201  cissp  350-401  350-201  350-501  350-601  350-801  350-901  az-720  az-305  pl-300  

Warning: Cannot modify header information - headers already sent by (output started at /pass.php:70) in /pass.php on line 77