1Z0-1072-25 Question 107
Select 3Your company has two Virtual Cloud Networks (VCNs) in different OCI regions: VCN-A in Ashburn (us-ashburn-1) and VCN-B in Phoenix (us-phoenix-1). You need to configure private communication between these networks without using the public internet. Which three actions are required to set up remote peering for these VCNs?
- A
Create a Dynamic Routing Gateway (DRG) in each region and attach the respective VCN to each DRG.
- B
Create a Remote Peering Connection (RPC) in each DRG and establish a peering relationship between them.
- C
Deploy Local Peering Gateways in both VCNs and update security lists to allow traffic.
- D
Add route rules in the route tables of both VCNs to direct traffic destined for the other VCN to the DRG attachment.
- E
Configure a NAT Gateway in each region and route all inter-VCN traffic through the NAT Gateways.
Show answer and explanation
Correct answers: A, B, D
Explanation
To configure remote peering across OCI regions, you must deploy a DRG in each region, attach the respective VCN to the DRG, create a Remote Peering Connection in each DRG, and establish a peering relationship between those connections. Additionally, you must update the route tables in each VCN to send traffic for the remote VCN� CIDR through the DRG. Refer to the official Oracle Cloud Infrastructure documentation on �VCN Peering� for detailed instructions and best practices.
- A. Correct.
Correct. Remote peering requires DRGs in each region. Each VCN must be attached to its regional DRG so traffic can be routed to the other region.
- B. Correct.
Correct. You must create a Remote Peering Connection (RPC) in each DRG, then establish a peering relationship between the two DRGs to enable private traffic between regions.
- C. Incorrect.
Incorrect. Local Peering Gateways are used only for peering VCNs within the same region, so this would not enable inter-region peering.
- D. Correct.
Correct. Proper route rules in each VCN� route table are needed to direct traffic to the DRG attachment for the remote VCN� CIDR block.
- E. Incorrect.
Incorrect. NAT Gateways are for outbound internet access and do not facilitate private traffic between regions.