1Z0-1072-25 Question 101
Single answerYour company is implementing a real-time data replication solution from your on-premises data center to Oracle Cloud Infrastructure (OCI). You require dedicated, high-throughput network connectivity with minimal latency. The solution must allow access to private IP addresses in your Virtual Cloud Network (VCN). Which FastConnect configuration approach meets these requirements?
- A
Establish a private virtual circuit to the Dynamic Routing Gateway (DRG) and advertise on-premises subnets for direct access to private IP addresses in OCI.
- B
Use a public virtual circuit with the Internet Gateway to route traffic to private subnets over the public Internet.
- C
Configure an IPsec VPN over the public Internet with a load balancer to achieve dedicated connectivity.
- D
Enable Local Peering Gateways in each Availability Domain to route traffic from on-premises subnets to private IP addresses in OCI.
Show answer and explanation
Correct answer: A
Explanation
FastConnect provides a dedicated, private connection to OCI, bypassing the public Internet and thereby ensuring higher performance and more consistent throughput. To reach your private subnets, you must configure a private virtual circuit to a Dynamic Routing Gateway. Refer to the Oracle documentation on configuring FastConnect private peering and DRGs for detailed setup guidance: https://docs.oracle.com/en-us/iaas/Content/Network/Tasks/configuringfastconnect.htm.
- A. Correct.
Option 1 is correct. A private virtual circuit through FastConnect, connected to the DRG, is the recommended approach to allow your on-premises network to reach private resources in your OCI VCN. You must advertise your on-premises subnets to OCI via BGP sessions established over this private connection. This provides low-latency, dedicated connectivity and access to private IP addresses in the VCN.
- B. Incorrect.
Option 2 is incorrect. A public virtual circuit connects your on-premises environment to public IP addresses of Oracle services, not to private IP addresses in your VCN. Traffic would traverse public endpoints, which does not meet the requirement for dedicated access to private subnets.
- C. Incorrect.
Option 3 is incorrect. An IPsec VPN over the public Internet does not provide the same dedicated connectivity, throughput, or latency guarantees as FastConnect, making it unsuitable for high-performance data replication use cases.
- D. Incorrect.
Option 4 is incorrect. Local Peering Gateways facilitate traffic between VCNs in the same region, not from on-premises networks to OCI. They do not establish a dedicated path from a data center to private IP addresses in OCI.