Which aspect of OCI's security framework is essential for continuous monitoring and verification of packet flows, a core requirement of Zero Trust Packet Routing?

• A. Flow logs and audit trails
• B. Public IP address assignments
• C. Static routing configurations
• D. Default security lists

When migrating workloads from another cloud provider to OCI, what is a key consideration when choosing a connectivity strategy to ensure optimal network performance?

• A. Ignoring the geographical proximity of the cloud regions being interconnected
• B. Prioritizing the lowest possible initial setup cost, even if it results in higher ongoing operational expenses
• C. Factoring in the bandwidth requirements of the applications being migrated and choosing a connection that can accommodate peak traffic loads
• D. Only considering managed connectivity solutions to avoid the complexity of configuring VPNs or direct interconnects

You are designing a highly available and scalable e-commerce application on OCI. The application requires load balancing for both HTTP/HTTPS traffic and TCP-based microservices communication. You need a solution that provides advanced traffic management capabilities, including content-based routing and path- based routing, and can also protect against common web exploits. Which OCI load balancing offering is the most suitable for this scenario, considering the need for web application firewall (WAF) integration?

• A. Application Load Balancer
• B. Flexible Load Balancer
• C. Load Balancing as a Service (LBaaS)
• D. Network Load Balancer

Your organization is migrating a legacy application to OCI. This application relies on a specific IP address for its external communication, and you need to maintain this IP address during the migration. Which OCI Load Balancer feature or configuration can help you achieve this while ensuring high availability for the application?

• A. Deploying multiple Flexible Load Balancers with different public IP addresses and using DNS round- robin.
• B. Utilizing the Network Load Balancer (NLB) with its inherent ability to preserve client IP addresses.
• C. Using a private IP address for the load balancer and NAT Gateway for outbound traffic.
• D. Configuring the Flexible Load Balancer with a reserved public IP address.

You are troubleshooting an issue where legitimate users are occasionally blocked by your OCI WAF, which is configured in "Detection" mode. You need to identify the specific WAF rules that are triggering these false positives and adjust them without disrupting legitimate traffic. Which approach offers the most efficient way to diagnose and resolve this issue?

• A. Increase the sensitivity level of the entire WAF configuration.
• B. Disable all WAF rules and then gradually re-enable them one by one until the issue reappears.
• C. Whitelist the IP addresses of the affected users.
• D. Analyze the OCI WAF logs in OCI Logging Analytics, focusing on the rule IDs associated with blocked requests. Then, move the specific rule to "log only".