Question 1
IntermediateWorkspace and Networking · Configure Networking for Data Science
You are architecting a secure OCI Data Science environment for a financial institution. The compliance team requires that all notebook sessions must be deployed in a private subnet and must not have direct internet access. However, data scientists need to access public PyPI repositories to install specific libraries. Which networking configuration provides the most secure and compliant solution?
Answer and explanation
Correct answer: B
While a Service Gateway handles OCI internal traffic (like Object Storage), access to external repositories like PyPI requires a NAT Gateway. To meet strict compliance, combining the NAT Gateway with Network Security Groups (NSGs) to whitelist specific outbound traffic is the optimal secure approach, as opposed to a completely open NAT or trying to mirror the entire PyPI repo which is operationally complex.
