Summary: Module 6 – IP Management in Oracle Cloud Infrastructure (OCI)

1. Overview of IP Management

This module introduces how Oracle Cloud Infrastructure (OCI) handles IP addresses, both
private and public, and explains their roles, configurations, and use cases within a Virtual
Cloud Network (VCN).

A. Private IP Addresses

Private IP addresses are used for internal communication within OCI networks and connected
environments.

Use Cases of Private IPs

1. Intra-VCN communication:
Instances in the same VCN (even across subnets) communicate using private IPs.

2. VCN Peering:
Private IPs are used when connecting different VCNs (in the same or different regions)
through Local Peering or Remote Peering.

3. On-premises connectivity:
Communication with on-premises networks via Site-to-Site VPN or FastConnect also
uses private IPs.

Private IP Structure

Each instance has VNICs (Virtual Network Interface Cards):

• Primary VNIC: has 1 primary private IP address (mandatory).

• Secondary VNICs: can be added, each with its own primary private IP.

• Both types of VNICs can have up to 32 secondary private IPs, totaling 33 private IPv4
addresses per VNIC.

Association with Public IPs

• Any private IP (primary or secondary) can optionally have a public IP assigned.

• This provides external connectivity when required.

B. Public IP Addresses

Public IPs allow OCI resources to be reachable from the Internet.

Use Cases

• Typically used by Internet-facing resources such as NAT Gateways, Load Balancers, and
public subnet instances.

Types of Public IP Addresses

1. Ephemeral Public IP

o Temporary; exists only for the lifetime of the instance.

o Automatically released when the instance is terminated.

o Can only be assigned to a primary private IP.

2. Reserved Public IP

o Persistent; remains available even after an instance is deleted.

o Can be reassigned to another instance or resource.

o Can be assigned to both primary and secondary private IPs.

o No automatic deletion — it remains until manually deleted.

o Regional in scope — can be used in any availability domain within a region.

Public IP Accessibility Requirements

For an instance’s public IP to be accessible from the internet:

• An Internet Gateway must exist in the VCN.

• The route table must include a route to the Internet Gateway.

• Security lists or Network Security Groups (NSGs) must allow relevant traffic.

Cost

• There’s no charge for using public IPs in OCI, whether ephemeral or reserved (even
when unassociated).

C. Reserved Public IPs in Detail

• Created one at a time and limited to 50 per region.

 • Can be assigned or unassigned freely.

• When unassigned, they return to the tenancy’s pool of reserved IPs.

• Can move along with private IPs between VNICs.

• Persistent until manually deleted.

D. Bring Your Own IP (BYOIP)

This feature allows customers to import their own IPv4 or IPv6 address ranges (that they
legally own) into OCI.

Why Use BYOIP

• Enables migration of existing workloads that depend on fixed or hard-coded IP

addresses.

• Provides solution continuity, smoother migration, and helps preserve IP reputation.

Process Overview

1. Request Import:
Customer requests to import a public IPv4 CIDR block (min /24, max /8) or IPv6 prefix
(min /48).

2. Verification Token:
Oracle issues a verification token.

3. Registry Update:
Customer adds the token to their Regional Internet Registry (RIR) record to prove
ownership.

4. ROA Creation:
Customer creates a Route Origin Authorization (ROA), specifying Oracle’s BGP ASN.

o This allows Oracle to advertise the CIDR block.

5. Oracle Validation:
Oracle validates ownership with the RIR (takes ~1 day).

6. Provisioning:
Once verified, Oracle provisions the BYOIP CIDR block into the customer’s
compartment.
 7. Usage:
Customer can now use and advertise the IP addresses within OCI and to the Internet.

Benefits of BYOIP

• Enables smooth migrations by maintaining existing IP dependencies.

• Supports load balancers and internet-facing resources.

• Allows grouping of IPs into pools.

• Improves IP reputation and control over IP address space.

E. Public IP Pools

Public IP Pools are collections of IPv4 CIDR blocks (either Oracle-provided or BYOIP) allocated
to a tenancy.

Key Characteristics

• A set of IPv4 ranges reserved for one tenancy (private to your OCI account).

• Used to create and manage reserved public IPs efficiently.

Two Usage Options

1. Create Reserved IPs from Pool:

o Reserve IPs from the pool and attach to specific resources (like NAT Gateways,
Load Balancers, or Compute instances).

2. Direct Launch from Pool:

o Launch resources directly with IPs allocated automatically from the pool (no
manual reservation).

Size and Limits

• Each pool can contain zero or more IP CIDR ranges.

• Minimum range: /28, Maximum range: /24.

• IPv6 not yet supported for public IP pools.

Advantages

• Simplifies IP address management.

 • Ensures consistency across environments.

• Enhances security and administrative control by keeping IPs tenancy-specific.

Key Takeaways

• Private IPs: Internal communication; up to 33 per VNIC.

• Public IPs: Internet reachability; can be ephemeral (temporary) or reserved

(persistent).

• Reserved IPs: Can move between resources; regional scope; no auto-deletion.

• BYOIP: Import your own IP ranges for continuity and IP reputation.

• Public IP Pools: Organize and allocate your IP space efficiently; supports reserved and
direct assignment.

Perfect
Here are 40 Multiple-Choice Questions (MCQs) based on the “Module 6 – IP Management”
lesson transcript you shared — covering Private IPs, Public IPs, Reserved IPs, Bring Your Own IP
(BYOIP), and Public IP Pools.
Each question includes four options, the correct answer, and a clear explanation for
understanding.

Module 6: IP Management – 40 MCQs with Answers & Explanations

1.

Which of the following best describes a private IP address in OCI?

A. An IP address reachable from the Internet
B. An IP address used for internal communication within OCI networks
C. An IP address that is temporary and auto-deleted
D. An IP address used only for public subnets

Answer: B
Explanation: Private IPs are used for internal communication within a Virtual Cloud Network
(VCN) and across peered VCNs or on-premises networks.
2.

Which service allows OCI instances to communicate with on-premises environments using
private IPs?
A. Object Storage
B. Site-to-Site VPN or FastConnect
C. NAT Gateway
D. Public Load Balancer

Answer: B
Explanation: Private IPs are used for communication between OCI and on-premises networks
via VPN or FastConnect.

3.

Each VNIC in OCI must have at least:

A. One secondary private IP
B. One primary private IP
C. One public IP
D. Two private IPs

Answer: B
Explanation: Every VNIC (Virtual Network Interface Card) must have one primary private IP
assigned.

4.

What is the maximum number of secondary private IPs a single VNIC can have?
A. 8
B. 16
C. 24
D. 32

Answer: D
Explanation: Each VNIC can have up to 32 secondary private IPs in addition to one primary.
5.

How many total private IPv4 addresses can a VNIC have in OCI?
A. 16
B. 32
C. 33
D. 64

Answer: C
Explanation: One primary + 32 secondary = 33 total private IPv4 addresses per VNIC.

6.

Private IPs can optionally have:

A. A secondary subnet
B. A public IP assigned
C. A reserved subnet ID
D. A route table rule

Answer: B
Explanation: Each private IP (primary or secondary) can optionally have a public IP associated
with it.

7.

Which type of IP is reachable from the Internet?

A. Private IP
B. NAT IP
C. Public IP
D. Subnet IP

Answer: C
Explanation: Public IPs provide Internet reachability for OCI resources.

8.

What is the main difference between ephemeral and reserved public IPs?
A. Reserved IPs are private
B. Ephemeral IPs persist after deletion
C. Reserved IPs are persistent; ephemeral IPs are temporary
D. Ephemeral IPs are manually assigned

Answer: C
Explanation: Ephemeral IPs exist only for an instance’s lifetime, while reserved IPs persist and
can be reassigned.

9.

Ephemeral public IPs can be assigned only to:

A. Secondary private IPs
B. Primary private IPs
C. Both primary and secondary
D. None

Answer: B
Explanation: Ephemeral IPs can only be assigned to a VNIC’s primary private IP.

10.

Reserved public IPs can be assigned to:

A. Primary private IP only
B. Secondary private IP only
C. Both primary and secondary private IPs
D. None

Answer: C
Explanation: Reserved public IPs can be attached to either primary or secondary private IPs.

11.

What happens to an ephemeral public IP when an instance is terminated?

A. It remains reserved
B. It is transferred
C. It is released
D. It becomes private
 Answer: C
Explanation: Ephemeral IPs are temporary and are released when an instance is terminated.

12.

The scope of a reserved public IP address in OCI is:

A. Subnet
B. Region
C. Availability Domain
D. Compartment

Answer: B
Explanation: Reserved public IPs are regional and can be reassigned across availability domains
within the region.

13.

What is required for public IPs to be reachable from the Internet?

A. NAT Gateway
B. Private subnet
C. Internet Gateway with proper routes and security rules
D. Secondary VNIC

Answer: C
Explanation: Internet access requires an Internet Gateway, correct route table, and security
list/NSG configuration.

14.

How many reserved public IPs can a region have by default?

A. 10
B. 25
C. 50
D. 100

Answer: C
Explanation: Each OCI region can have up to 50 reserved public IPs.
15.

Reserved public IPs are deleted:

A. When the instance is deleted
B. Automatically after one month
C. Only when manually deleted
D. When reassigned

Answer: C
Explanation: They are persistent and only removed manually by the user.

16.

When moving a private IP from one VNIC to another, what happens to its reserved public IP?
A. It’s lost
B. It moves with the private IP
C. It becomes ephemeral
D. It must be reattached manually

Answer: B
Explanation: Reserved public IPs move along with their associated private IPs when reassigned.

17.

Who owns the public IP addresses assigned by default in OCI?

A. The customer
B. Oracle
C. Regional Internet Registry
D. ICANN

Answer: B
Explanation: Default OCI public IPs are owned and managed by Oracle.

18.

What does “Bring Your Own IP” (BYOIP) allow customers to do?
A. Create new IP ranges
B. Use Oracle-owned IPs
C. Import their own registered IP ranges into OCI
D. Share IPs between tenancies

Answer: C
Explanation: BYOIP lets customers bring their own IPv4 or IPv6 CIDR blocks into OCI.

19.

What is the purpose of a verification token in BYOIP?

A. To authenticate user logins
B. To prove IP ownership in the Regional Internet Registry
C. To reserve a public IP
D. To configure NAT

Answer: B
Explanation: The verification token confirms IP ownership with the RIR (Regional Internet
Registry).

20.

Which step allows Oracle to advertise the BYOIP CIDR block?

A. Creating a subnet
B. Assigning a NAT gateway
C. Creating a Route Origin Authorization (ROA)
D. Using a security list

Answer: C
Explanation: ROA authorizes Oracle to advertise the imported CIDR via BGP.

21.

Minimum IPv4 CIDR block size allowed in BYOIP is:

A. /8
B. /16
C. /24
D. /48
 Answer: C
Explanation: The smallest IPv4 block that can be imported is /24.

22.

Maximum IPv4 CIDR block size allowed in BYOIP is:

A. /24
B. /16
C. /12
D. /8

Answer: D
Explanation: The largest IPv4 block importable into OCI is /8.

23.

Minimum IPv6 prefix allowed for BYOIP import is:

A. /48
B. /64
C. /56
D. /32

Answer: A
Explanation: The minimum IPv6 prefix size for BYOIP is /48 or larger.

24.

How long does the BYOIP verification process typically take?

A. 1 hour
B. 1 day
C. 5 days
D. 10 days

Answer: B
Explanation: The verification of ownership via RIR generally takes around one day.

25.
BYOIP primarily helps with:
A. Increasing bandwidth
B. Solution continuity during migration
C. Creating more subnets
D. Enhancing DNS records

Answer: B
Explanation: BYOIP allows smooth migration by maintaining existing IP addresses and
reputation.

26.

After successful validation, BYOIP addresses are provisioned to:

A. The root tenancy
B. A compartment within the tenancy
C. Oracle shared pool
D. Public IP pool by default

Answer: B
Explanation: Once validated, the IP block is provisioned into a user’s compartment for
management.

27.

Public IP Pools contain:

A. DNS records
B. IPv6 prefixes
C. Sets of IPv4 CIDR blocks allocated to a tenancy
D. Only Oracle-assigned IPs

Answer: C
Explanation: A public IP pool is a set of IPv4 CIDR blocks assigned exclusively to one tenancy.

28.

Before creating a public IP pool, you must:

A. Create a NAT Gateway
B. Import IP addresses (BYOIP)
C. Add an Internet Gateway
D. Create a subnet

Answer: B
Explanation: You must import (BYOIP) addresses before adding them to a public IP pool.

29.

What are the two ways to use public IP pools?

A. Manual and Automatic routing
B. Create reserved IPs or direct launch from pool
C. Dynamic routing and static routing
D. Internet gateway and NAT gateway

Answer: B
Explanation: Public IPs can be used by reserving them first or launching resources directly from
the pool.

30.

Which resource can be attached to reserved public IPs from a pool?

A. Security list
B. NAT Gateway, Load Balancer, or Compute Instance
C. Internet Gateway only
D. DNS zone

Answer: B
Explanation: Reserved IPs can be attached to NAT Gateways, Load Balancers, or Compute
instances.

31.

Which protocol allows Oracle to advertise BYOIP addresses?

A. TCP
B. HTTP
C. BGP
D. ICMP
 Answer: C
Explanation: BGP (Border Gateway Protocol) is used for route advertisement of BYOIP
addresses.

32.

Public IP Pools are currently supported for which IP version?

A. IPv6
B. IPv4
C. Both IPv4 and IPv6
D. None

Answer: B
Explanation: As of now, only IPv4 CIDR blocks are supported in public IP pools.

33.

What is the minimum CIDR block size for a public IP pool range?
A. /32
B. /28
C. /24
D. /48

Answer: B
Explanation: Public IP pools require a minimum CIDR size of /28.

34.

What is the maximum CIDR block size allowed in a public IP pool?

A. /16
B. /20
C. /24
D. /28

Answer: C
Explanation: The largest range allowed in a pool is /24.
35.

Public IP Pools are available to:

A. All OCI customers globally
B. A specific region
C. The owning tenancy only
D. Oracle support team

Answer: C
Explanation: Public IP pools are allocated per tenancy and not shared with others.

36.

Which of these is not true about reserved public IPs?

A. They are persistent
B. They move with private IPs between VNICs
C. They are auto-deleted on instance termination
D. They are regional

Answer: C
Explanation: Reserved IPs are not auto-deleted; they persist until manually removed.

37.

In BYOIP, what organization validates IP ownership?

A. Oracle Support
B. Regional Internet Registry (RIR)
C. ICANN
D. The customer

Answer: B
Explanation: Ownership is verified via a Regional Internet Registry (RIR) such as ARIN, RIPE, or
APNIC.

38.

Which OCI feature helps maintain IP reputation during migration?

A. DNS Management
B. Public IP Pool
C. Bring Your Own IP (BYOIP)
D. NAT Gateway

Answer: C
Explanation: BYOIP ensures you retain your trusted IP reputation when moving workloads to
OCI.

39.

What happens to an unassigned reserved public IP in OCI?

A. It is billed
B. It’s deleted automatically
C. It stays in the tenancy pool
D. It becomes ephemeral

Answer: C
Explanation: When unassigned, the IP remains in the tenancy’s reserved IP pool.

40.

What is the main advantage of using public IP pools?

A. Reduces cost
B. Simplifies and centralizes IP management for a tenancy
C. Increases bandwidth
D. Automates DNS configuration

Answer: B
Explanation: Public IP pools centralize and simplify the management and allocation of public IP
addresses for resources.