1Z0-1072-25 Question 103
Single answerYou have set up two Virtual Cloud Networks (VCNs) in different Oracle Cloud Infrastructure (OCI) regions and created a Remote Peering Gateway (RPG) in each region. Although the peering connection is established, you notice that traffic is not flowing between instances in the two VCNs. Which additional step must you take to enable communication across the remote peering connection?
- A
Add a route rule in each VCN� route table directing traffic to the Remote Peering Gateway as the target.
- B
Configure an Internet Gateway in each VCN and route all inter-VCN traffic via the public internet.
- C
Enable Data Guard on both Remote Peering Gateways to replicate packet headers between regions.
- D
Attach both VCNs to a single Dynamic Routing Gateway (DRG) and remove the Remote Peering Gateways.
Show answer and explanation
Correct answer: A
Explanation
To enable private connectivity between VCNs in different OCI regions, each VCN needs a Remote Peering Gateway (RPG). After creating the RPGs and establishing the remote peering connection, you must configure the route tables in each VCN to direct the relevant traffic (the other VCN� CIDR range) to the local RPG. In addition, ensure that the security lists or network security groups allow the communication from the peer CIDR. For detailed instructions, refer to the official Oracle documentation on 'VCN Peering' at: https://docs.oracle.com/en-us/iaas/Content/Network/Tasks/VCNpeeringoverview.htm
- A. Correct.
Correct. After creating the RPGs and establishing the remote peering connection, you must update each VCN� route table with a route rule that points the relevant CIDRs to the RPG. Without this routing configuration, traffic will not flow between the VCNs even if the peering connection is active.
- B. Incorrect.
Incorrect. Using an Internet Gateway and routing inbound/outbound traffic over the internet defeats the purpose of remote peering and is not required for private connectivity between the two VCNs. Remote peering allows private interconnection without traversing the public internet.
- C. Incorrect.
Incorrect. Data Guard is an OCI service primarily for replicating Oracle databases, not network traffic. Enabling Data Guard will not facilitate inter-VCN network connectivity.
- D. Incorrect.
Incorrect. While a DRG can be used for other networking scenarios (such as connecting on-premises networks via IPsec VPN or FastConnect), it is not required for remote peering between two VCNs in different regions. You need separate Remote Peering Gateways, not a single DRG, to connect VCNs autonomously across regions.