問題文
A tenancy has three VCNs. An architect wants one bastion to serve targets in all three. What is the constraint?
選択肢
- One bastion can serve two VCNs but not three, and a tenancy with three VCNs therefore needs a second bastion.
- One bastion serves any VCN in the region as long as the VCNs are peered, and the peering carries the session traffic between them.
- A bastion is associated with a single VCN, so one bastion per VCN is required.
- One bastion serves any VCN in the tenancy, and the client CIDR allowlist is what limits the reach, so restricting the allowlist per VCN is the supported way to separate access between them.