OracleAssociate level1Z0-1072-25Page 2 of 4

1Z0-1072-25 exam dumps: questions 101 to 200 of 318

Page 2 of the free 1Z0-1072-25 question bank for the Oracle Cloud Infrastructure 2025 Architect Associate exam. Questions 101 to 200 are listed below, the first 5 in full with answers and explanations. Back to page 1 for the exam overview and FAQ.

Question bank last updated May 2025

Start timed practice exam Questions 101 to 200

Free 1Z0-1072-25 practice questions

Questions 101 to 105 of 318

Pick an answer before you open the explanation. Each question also has its own page with a permalink.

1Z0-1072-25 Question 101

Single answer

Your company is implementing a real-time data replication solution from your on-premises data center to Oracle Cloud Infrastructure (OCI). You require dedicated, high-throughput network connectivity with minimal latency. The solution must allow access to private IP addresses in your Virtual Cloud Network (VCN). Which FastConnect configuration approach meets these requirements?

A
Establish a private virtual circuit to the Dynamic Routing Gateway (DRG) and advertise on-premises subnets for direct access to private IP addresses in OCI.
B
Use a public virtual circuit with the Internet Gateway to route traffic to private subnets over the public Internet.
C
Configure an IPsec VPN over the public Internet with a load balancer to achieve dedicated connectivity.
D
Enable Local Peering Gateways in each Availability Domain to route traffic from on-premises subnets to private IP addresses in OCI.

Show answer and explanation

Correct answer: A

Explanation

FastConnect provides a dedicated, private connection to OCI, bypassing the public Internet and thereby ensuring higher performance and more consistent throughput. To reach your private subnets, you must configure a private virtual circuit to a Dynamic Routing Gateway. Refer to the Oracle documentation on configuring FastConnect private peering and DRGs for detailed setup guidance: https://docs.oracle.com/en-us/iaas/Content/Network/Tasks/configuringfastconnect.htm.

A. Correct.
Option 1 is correct. A private virtual circuit through FastConnect, connected to the DRG, is the recommended approach to allow your on-premises network to reach private resources in your OCI VCN. You must advertise your on-premises subnets to OCI via BGP sessions established over this private connection. This provides low-latency, dedicated connectivity and access to private IP addresses in the VCN.
B. Incorrect.
Option 2 is incorrect. A public virtual circuit connects your on-premises environment to public IP addresses of Oracle services, not to private IP addresses in your VCN. Traffic would traverse public endpoints, which does not meet the requirement for dedicated access to private subnets.
C. Incorrect.
Option 3 is incorrect. An IPsec VPN over the public Internet does not provide the same dedicated connectivity, throughput, or latency guarantees as FastConnect, making it unsuitable for high-performance data replication use cases.
D. Incorrect.
Option 4 is incorrect. Local Peering Gateways facilitate traffic between VCNs in the same region, not from on-premises networks to OCI. They do not establish a dedicated path from a data center to private IP addresses in OCI.

1Z0-1072-25 Question 102

Select 2

Baker Enterprises needs a dedicated, high-bandwidth connection from their on-premises data center to Oracle Cloud Infrastructure (OCI) for a latency-sensitive application. They plan to use FastConnect to connect directly to their Virtual Cloud Network (VCN). Which two statements are correct in this scenario?

A
1. They can configure a private virtual circuit to connect their Dynamic Routing Gateway and route traffic securely to private subnets in the VCN.
B
1. They must purchase a separate software license from Oracle to enable public peering for multiple regions.
C
1. They can use a FastConnect partner provider to establish the physical link instead of connecting to an OCI edge point of presence themselves.
D
1. They must attach an Internet Gateway to route all traffic from the on-premises network, including private subnets, via FastConnect.

Show answer and explanation

Correct answers: A, C

Explanation

FastConnect provides a dedicated, low-latency link from your data center to OCI. You can configure private peering via a Dynamic Routing Gateway for secure routing of private traffic, and optionally configure public peering to reach Oracle public services without traversing the internet. You can also select an OCI partner provider to handle the physical connection if a direct link to an OCI location is not practical. For more details, consult the 'Oracle Cloud Infrastructure FastConnect' documentation for recommended configurations and best practices.

A. Correct.
Option 1 is correct. A private virtual circuit can be configured through a Dynamic Routing Gateway (DRG) to securely route data from the on-premises data center to private subnets within an OCI VCN. This approach ensures traffic does not traverse the public internet.
B. Incorrect.
Option 2 is incorrect. FastConnect does not require a separate software license from Oracle to use public peering across multiple regions. While you might incur additional costs or partner fees depending on usage, a separate Oracle license for public peering is not required.
C. Correct.
Option 3 is correct. FastConnect allows connectivity through an OCI partner provider. If a direct physical connection to an Oracle edge location is not feasible, leveraging a partner provider is a common and supported method to establish a dedicated circuit.
D. Incorrect.
Option 4 is incorrect. An Internet Gateway is not required for private subnets using FastConnect. For private traffic, you use private peering via a DRG. An Internet Gateway would be necessary only for outbound internet traffic, not for traffic traveling over a FastConnect private circuit.

1Z0-1072-25 Question 103

Single answer

You have set up two Virtual Cloud Networks (VCNs) in different Oracle Cloud Infrastructure (OCI) regions and created a Remote Peering Gateway (RPG) in each region. Although the peering connection is established, you notice that traffic is not flowing between instances in the two VCNs. Which additional step must you take to enable communication across the remote peering connection?

A
Add a route rule in each VCN� route table directing traffic to the Remote Peering Gateway as the target.
B
Configure an Internet Gateway in each VCN and route all inter-VCN traffic via the public internet.
C
Enable Data Guard on both Remote Peering Gateways to replicate packet headers between regions.
D
Attach both VCNs to a single Dynamic Routing Gateway (DRG) and remove the Remote Peering Gateways.

Show answer and explanation

Correct answer: A

Explanation

To enable private connectivity between VCNs in different OCI regions, each VCN needs a Remote Peering Gateway (RPG). After creating the RPGs and establishing the remote peering connection, you must configure the route tables in each VCN to direct the relevant traffic (the other VCN� CIDR range) to the local RPG. In addition, ensure that the security lists or network security groups allow the communication from the peer CIDR. For detailed instructions, refer to the official Oracle documentation on 'VCN Peering' at: https://docs.oracle.com/en-us/iaas/Content/Network/Tasks/VCNpeeringoverview.htm

A. Correct.
Correct. After creating the RPGs and establishing the remote peering connection, you must update each VCN� route table with a route rule that points the relevant CIDRs to the RPG. Without this routing configuration, traffic will not flow between the VCNs even if the peering connection is active.
B. Incorrect.
Incorrect. Using an Internet Gateway and routing inbound/outbound traffic over the internet defeats the purpose of remote peering and is not required for private connectivity between the two VCNs. Remote peering allows private interconnection without traversing the public internet.
C. Incorrect.
Incorrect. Data Guard is an OCI service primarily for replicating Oracle databases, not network traffic. Enabling Data Guard will not facilitate inter-VCN network connectivity.
D. Incorrect.
Incorrect. While a DRG can be used for other networking scenarios (such as connecting on-premises networks via IPsec VPN or FastConnect), it is not required for remote peering between two VCNs in different regions. You need separate Remote Peering Gateways, not a single DRG, to connect VCNs autonomously across regions.

1Z0-1072-25 Question 104

Select 2

Your organization has two Virtual Cloud Networks (VCN-A and VCN-B) in the same region used by different departments and a third VCN (VCN-C) in a remote region. You need to enable communication between VCN-A and VCN-B with minimal latency, and also allow traffic to flow between the local region� VCNs and VCN-C over Oracle� private backbone. Which two actions must you take to achieve this goal? (Choose two.)

A
Create a Local Peering Gateway (LPG) in VCN-A and VCN-B and update their route tables and security rules for local peering.
B
Create a Dynamic Routing Gateway (DRG) in both VCN-A and VCN-B to set up local peering in the same region.
C
Create a DRG in VCN-C� region and a DRG in the local region, then establish a remote peering connection between them.
D
Use Local Peering Gateways in the remote region to interconnect with the local region� VCNs for remote peering.
E
Attach each subnet directly to a DRG in the same region to enable local peering.

Show answer and explanation

Correct answers: A, C

Explanation

In this scenario, local peering gateways are used for communication between VCNs in the same region, while dynamic routing gateways are required for remote peering across regions. After creating the appropriate gateways, you must also configure route tables and security rules to allow inter-VCN traffic. For more details, refer to the Oracle Cloud Infrastructure Virtual Cloud Network (VCN) documentation on local and remote peering.

A. Correct.
Option 1 is correct. For local peering between two VCNs in the same region, you must create a Local Peering Gateway (LPG) in each VCN and configure the necessary route rules and security lists to allow traffic. This approach keeps traffic within the Oracle Cloud Infrastructure backbone without requiring an external gateway like a DRG.
B. Incorrect.
Option 2 is incorrect. A DRG is not required for local peering within the same region; an LPG is used instead. A DRG is typically used for connectivity to on-premises networks or remote VCNs in different regions.
C. Correct.
Option 3 is correct. To peer VCNs across different regions (remote peering), each region requires its own DRG. You then establish a remote peering connection between these DRGs so VCN traffic can flow securely and remain on the Oracle backbone.
D. Incorrect.
Option 4 is incorrect. Local Peering Gateways (LPGs) are only used for peering within the same region. Remote peering always requires DRGs in each region to facilitate cross-region communication.
E. Incorrect.
Option 5 is incorrect. You do not connect subnets directly to a DRG for local peering. Instead, subnets route traffic to an LPG for local peering. DRGs serve a different purpose such as remote peering or on-prem connections.

1Z0-1072-25 Question 105

Select 2

Your company has created two Virtual Cloud Networks (VCNs), named 'NetworkA' and 'NetworkB', in the same Oracle Cloud Infrastructure region. They need private communication between the instances in these VCNs without traversing the public internet or involving a Dynamic Routing Gateway. Which two steps must you take to achieve local peering between these VCNs? (Choose two correct answers)

A
Create a Local Peering Gateway (LPG) in each VCN and establish the peering connection between them.
B
Create a Remote Peering Gateway (RPG) in each VCN and assign a Remote Peering Connection (RPC).
C
Update the route table in each VCN to direct traffic to the Local Peering Gateway for the subnets you want to communicate.
D
Attach each VCN to a Dynamic Routing Gateway (DRG) and configure an IPSec tunnel.

Show answer and explanation

Correct answers: A, C

Explanation

To enable private communication between two VCNs in the same region, you must create Local Peering Gateways (LPGs) in both VCNs and connect them (one VCN initiates the peering, and the other accepts). You also need to update the relevant route tables in both VCNs to ensure traffic is routed to the newly created LPG rather than going out to the internet. Refer to the Oracle Cloud Infrastructure Networking documentation for step-by-step instructions and best practices on configuring Local Peering Gateways and associated route table rules.

A. Correct.
Option 1 is correct. For VCNs in the same region, you create a Local Peering Gateway in each VCN and connect them (one side requests, the other accepts). This enables local peering.
B. Incorrect.
Option 2 is incorrect. Remote Peering Gateways are used for cross-region peering, not for VCNs in the same region.
C. Correct.
Option 3 is correct. You must update the VCNs' route tables so that traffic for the peered VCN's CIDR blocks is sent via the Local Peering Gateway instead of the internet or a DRG.
D. Incorrect.
Option 4 is incorrect. A Dynamic Routing Gateway is not required for local peering within the same region and would be used for scenarios like on-premises connectivity or remote peering across regions.

Timed practice exam

Take a 1Z0-1072-25 practice test under exam conditions

50 questions in 90 minutes, drawn from this bank, with a score report and a per-question review when you finish.

Start timed exam

1Z0-1072-25 practice questions 101 to 200 of 318

Every question has a page with the answer and explanation. Numbers are stable, so you can bookmark or share them. The bank is split into 4 pages of up to 100 questions.

More Oracle exam dumps

All Oracle exams

1Z0-1123-25150 questions

OCI 2025 Migration Architect Professional exam dumps

Oracle Cloud Infrastructure 2025 Migration Architect Professional

1Z0-184-25182 questions

Oracle AI Vector Search Professional exam dumps

Oracle AI Vector Search Professional

1Z0-997-25175 questions

OCI 2025 Architect Professional exam dumps

Oracle Cloud Infrastructure 2025 Architect Professional

1Z0-1067-25138 questions

OCI 2025 Cloud Operations Professional exam dumps

Oracle Cloud Infrastructure 2025 Cloud Ops Professional

1Z0-1151-25133 questions

OCI 2025 Multicloud Architect Professional exam dumps

Oracle Cloud Infrastructure 2025 Multicloud Architect Professional

1Z0-1104-25174 questions

OCI 2025 Security Professional exam dumps

Oracle Cloud Infrastructure 2025 Security Professional