In a multi-tier application architecture with separate public and private subnets, where should an OCI...

Purpose:Secure access to private subnet resources via Bastion.

Placement Considerations:Must be internet-accessible yet isolated.

Evaluate Options:

A:Private subnet lacks internet access for Bastion; incorrect.

B:Dedicated public subnet balances accessibility and isolation; correct.

C:Separate VCN adds complexity, unnecessary; less optimal.

D:Ambiguous phrasing, but implies exposure; less precise than B.

Conclusion:Dedicated public subnet is the best placement.

OCI Bastion requires public access with security. The Oracle Networking Professional study guide notes, "Place the Bastion host in a public subnet with a dedicated configuration to allow secure SSH access to private subnet resources without exposing them directly" (OCI Networking Documentation, Section: Bastion Host Placement). Option B ensures this balance.