1Z0-1072-25 Question 100
Single answerAn analytics company plans to run large-scale, real-time analytics across two Virtual Cloud Networks (VCNs) in the same region on Oracle Cloud Infrastructure (OCI). They require a single, dedicated, high-bandwidth link from their on-premises data center to both VCNs to handle continuous data ingestion. Which configuration should they implement to achieve this using Oracle FastConnect?
- A
Provision a single Dynamic Routing Gateway (DRG) in the region, attach both VCNs to the DRG, and create one Private Virtual Circuit for FastConnect to route on-premises traffic to each VCN using BGP.
- B
Create separate DRGs for each VCN, and then configure a Private Virtual Circuit for each DRG, requiring two distinct physical cross-connects.
- C
Use a single Public Virtual Circuit to connect to both VCNs, bypassing the need for a DRG entirely.
- D
Implement IPsec VPN tunnels to each VCN over the public internet for all data ingestion traffic.
Show answer and explanation
Correct answer: A
Explanation
To allow on-premises traffic to reach multiple VCNs in the same OCI region over a single, dedicated FastConnect, attach each VCN to one Dynamic Routing Gateway (DRG). Then, configure a single Private Virtual Circuit, which uses BGP to dynamically route traffic between on-premises and your VCNs. According to OCI networking best practices, this setup balances simplicity, cost-effectiveness, and performance by eliminating multiple physical connections. Refer to the official OCI documentation for FastConnect (FastConnect Overview) and DRG configurations for detailed guidance.
- A. Correct.
Correct. By creating a single DRG and attaching both VCNs to it, you can establish one Private Virtual Circuit via FastConnect to form a dedicated path to each VCN. BGP dynamically advertises routes between your on-premises network, the DRG, and the VCNs. This approach meets the requirement of a single, high-bandwidth link for both VCNs.
- B. Incorrect.
Incorrect. While you could create multiple DRGs, this adds unnecessary complexity and cost. Each DRG would require its own virtual circuit, and typically you would need more than one physical connection if you want full redundancy, which is not aligned with the stated 'single link' requirement.
- C. Incorrect.
Incorrect. Public Virtual Circuits are used to access public OCI services (like object storage endpoints) without traffic traversing the internet in the normal way. They do not provide private connectivity to your VCNs. A DRG is still needed for private network connectivity.
- D. Incorrect.
Incorrect. IPsec VPNs rely on the public internet and generally cannot deliver the same guaranteed bandwidth or low-latency performance as FastConnect. This does not meet the requirement of a dedicated, high-bandwidth link.