Q: 6
You are troubleshooting a network connectivity issue between a compute instance in a private
subnet within your VCN and a service on the public internet using Cloud Shell. You suspect a problem
with the network security group (NSG) rules associated with the instance's VNIC. Which Cloud Shell
command and appropriate tool combination allows you to directly inspect the NSG configuration
impacting the VNIC?
Options
Discussion
Curious what folks think about using jq vs awk here. B seems most accurate because it goes from instance to NSG and actually lets you see the config, not just grab IDs. Pretty sure that's what you'd want for rule troubleshooting.
Don’t think it’s D, B is the better pick here. B actually drills down from instance to VNIC to the NSG with jq, so you really get to see all the config details that could be impacting connectivity. D is a bit of a trap since awk parsing can miss stuff if JSON changes. Anyone disagree?
OwenM, agree with you that jq is more reliable when parsing JSON from the CLI. D looks tempting if you're used to quick shell scripting, but OCI's responses can get messy. Pretty sure B is the safest choice for structured output here, but open to other tricks if someone has a real-world edge case.
Its D, because awk is quick for pulling NSG IDs right from the VNIC. I know jq is more robust, but if you just want the NSG details fast, D seems good enough. Maybe missing something small though.
A is wrong, B. Awk in D won’t catch nested JSON right.
I don’t think it’s D. B works better since jq actually handles the nested JSON for VNIC NSG mapping, while D can break if OCI CLI changes output. Trap is thinking awk will always parse right. Correct me if I missed something.
Option B is the way I'd go. Parsing with jq handles structured OCI JSON much better than awk, so it's less likely to break if the format changes. D looks close but falls for that classic brittle parsing trap.
B tbh. Awk parsing like D feels too brittle, jq is safer for JSON. Trap here is thinking D works every time.
D
Anyone else notice on some exam reports that B is the one used for actual rule inspection?
Be respectful. No spam.
