Oracle Cloud Infrastructure 2025 Networking Professional Intermediate Practice Exam: Medium Difficulty 2025

Your organization is designing a VCN architecture for a three-tier application that requires strict isolation between tiers. The web tier needs internet access, the application tier requires private communication with the web tier and database tier, and the database tier must be completely isolated from the internet. Which subnet and routing configuration best meets these requirements?

A company has deployed an application behind an OCI Load Balancer with SSL termination enabled. The backend servers are reporting that they cannot identify the original client IP addresses, which is needed for security logging and geographic analysis. What configuration should be implemented to resolve this issue?

Your organization needs to establish connectivity between an on-premises data center and OCI. The connection must provide predictable network performance with bandwidth of 5 Gbps, low latency, and should not traverse the public internet. Multiple VCNs in different regions need to be accessible from on-premises. Which solution architecture should you recommend?

A security audit revealed that your VCN's security lists are allowing too much traffic. You need to implement defense-in-depth by adding an additional layer of security at the subnet level. However, some legacy applications require specific port ranges that conflict with standard security policies. What is the best approach to implement granular security while accommodating these legacy applications?

Your company is migrating a multi-tier application to OCI across three availability domains in a single region. The application requires that database traffic between application servers and database servers never leaves the OCI network infrastructure. The database tier is deployed using a private subnet. What VCN configuration ensures optimal performance and security for this inter-tier communication?

Your application uses an OCI Load Balancer with health checks configured for backend servers. Recently, you've noticed that healthy servers are being marked as unhealthy intermittently, causing service disruptions. The health check is configured with a 3-second interval and 3 retries before marking a server unhealthy. Backend application logs show occasional processing delays of 5-7 seconds during batch operations. What is the most appropriate solution?

A company is establishing a hybrid cloud architecture connecting their on-premises network (10.0.0.0/8) to OCI. They need to ensure that the VCN CIDR blocks don't overlap with on-premises ranges and that they have room for future growth supporting at least 50 VCNs. They also need to implement hub-and-spoke topology where shared services in a hub VCN are accessible to all spoke VCNs. What is the best design approach?

Your security team requires all outbound internet traffic from compute instances in private subnets to be inspected by a third-party firewall appliance before reaching the internet. The firewall appliance is deployed in a separate subnet with two interfaces. How should you configure the network routing to implement this requirement?

An application deployed across multiple compute instances behind an OCI Network Load Balancer is experiencing uneven traffic distribution, with some backend servers handling significantly more connections than others. All backend servers have identical configurations and health status. The application uses long-lived TCP connections. What is the most likely cause and solution?

Your organization needs to provide private connectivity from OCI to Microsoft Azure for a hybrid application deployment. The application requires bidirectional communication with latency under 10ms and bandwidth of 2 Gbps. Both cloud providers must access each other's resources using private IP addresses. What is the most appropriate solution architecture?