1Z0-1124-25 Sample Questions & Answers
Three areas tie for the heaviest weight: secure connectivity, hybrid networking through DRG and BGP, and load balancers with DNS traffic steering, alongside designing virtual cloud networks, transitive routing, workload migration, and troubleshooting.
Launch the full 1Z0-1124-25 simulator →Showing 6 of 12 free samples.
- Question 1Beginner
Plan and Design OCI Networking Solutions and App Services · Recognize IP Management details
You are configuring a new OCI environment and notice that your subnets are running out of IP addresses faster than expected. You need to analyze the IP utilization across all VCNs in your tenancy to identify fragmentation and high-usage subnets. Which OCI feature should you use?
Show answer & explanation
Correct answer: C
IP Address Insights is a feature within the OCI Console that provides a comprehensive view of IP address usage across your tenancy, VCNs, and subnets. It helps identify utilization trends, potential exhaustion, and fragmentation issues.
- Question 2Advanced
Design for Hybrid Networking Architectures · Validate knowhow of the different FastConnect products from OCI
A healthcare organization requires a hybrid connectivity solution where all traffic between their on-premises data center and OCI is encrypted at the Data Link Layer (Layer 2) to prevent eavesdropping on the physical circuit. They also require high throughput of 10 Gbps. Which FastConnect configuration meets these specific requirements?
Show answer & explanation
Correct answer: D
MACsec (Media Access Control Security) provides point-to-point encryption at Layer 2. This secures the physical link between the customer edge and the OCI edge, providing line-rate encryption suitable for high-throughput requirements like 10 Gbps, unlike IPSec which adds overhead.
- Question 3Advanced
Implement and Operate Secure OCI Networking and Connectivity Solutions · Zero Trust Packet Routing
You are implementing Zero Trust Packet Routing (ZPR) for a critical banking application. You have assigned Security Attributes to your database resources. You now need to write a ZPR policy to allow the web servers to access these databases. Which statement accurately describes the relationship between ZPR policies and existing Network Security Groups (NSGs)?
Show answer & explanation
Correct answer: D
ZPR works as an additional layer of security intent. It does not replace NSGs or Security Lists. For a packet to pass, it must be permitted by the standard network firewall rules (NSG/SL) AND explicitly authorized by a ZPR policy linking the security attributes of the source and destination.
- Question 4Intermediate
Plan and Design OCI Networking Solutions and App Services · Demonstrate an understanding of OCI load-balancing offerings
A company is using OCI Network Load Balancer (NLB) to distribute traffic to a fleet of backend servers. The application requires that the backend servers see the original client IP address for audit purposes. Which NLB configuration setting is required to achieve this?
Show answer & explanation
Correct answer: D
In Source Preservation mode, the NLB forwards packets to the backend without changing the source IP address (unlike Full NAT mode where the source IP becomes the NLB's IP). This allows the backend to see the original client IP. Note that the backend servers must use the NLB as their default gateway or use specific routing to ensure return traffic goes back through the NLB.
- Question 5Beginner
Plan and Design OCI Networking Solutions and App Services · Demonstrate knowledge of OCI DNS and Traffic Steering
You are designing a Disaster Recovery (DR) solution using OCI DNS. You have a primary application in US East and a standby in US West. You want to direct traffic to US West only if the US East endpoint fails health checks. Which Traffic Management Steering Policy type should you use?
Show answer & explanation
Correct answer: A
The Failover policy type is designed specifically for Active-Passive configurations. It directs all traffic to the primary pool and only switches to the secondary pool if the primary pool becomes unhealthy based on the attached Health Checks.
- Question 6Intermediate
Design for Hybrid Networking Architectures · IPSec over FastConnect
Your organization is migrating a high-compliance workload to OCI. You have established a FastConnect connection using a third-party provider. The security policy mandates that ALL traffic traversing the FastConnect circuit must be encrypted at Layer 3, regardless of the physical circuit security. Which solution should you implement?
Show answer & explanation
Correct answer: B
OCI supports running IPSec VPN tunnels over a FastConnect virtual circuit. This provides Layer 3 encryption for the data traversing the dedicated private line, satisfying the requirement for encryption 'regardless of physical circuit security' and ensuring end-to-end encryption at the network layer.
Ready for the real thing?
The full 1Z0-1124-25 simulator has every exam-style question, timed mode, and instant scoring.