1Z0-1072-25 Question 108
Select 3Your organization has created two Virtual Cloud Networks (VCNs) in the Phoenix region (VCN-A and VCN-B) with non-overlapping CIDRs. You want these two VCNs to communicate with each other locally in Phoenix, and you also need VCN-A to communicate with another VCN in the Ashburn region (VCN-C). Which three steps must you complete to successfully configure both local and remote peering so that VCN-A and VCN-B can communicate with each other and with VCN-C?
- A
Create and configure a local peering gateway in each Phoenix VCN, and add route rules in each VCN� route table pointing to the local peering gateway for the other VCN� CIDR.
- B
Use the same remote peering gateway in Phoenix for both VCN-A and VCN-B to connect to VCN-C in Ashburn.
- C
Create a remote peering gateway in Phoenix and a corresponding remote peering gateway in Ashburn, then establish a connection between them with matching route table entries.
- D
Ensure security lists or network security groups allow the required traffic between the Phoenix CIDRs and the Ashburn CIDR.
Show answer and explanation
Correct answers: A, C, D
Explanation
When configuring both local and remote peering on Oracle Cloud Infrastructure, you need a local peering gateway in each VCN for regional connectivity and a remote peering gateway in both the source and destination regions for inter-regional connectivity. Route tables must be updated to direct traffic to the correct gateways, and security rules must allow the intended traffic in all peered VCNs. For in-depth guidance, refer to the OCI documentation on �VCN Peering� and �Working with Local and Remote Peering Gateways.�
- A. Correct.
Option 1 is correct. For local peering within the same region, each VCN needs its own local peering gateway. You must also update the route tables so that traffic destined for the other VCN� CIDR goes through the local peering gateway.
- B. Incorrect.
Option 2 is incorrect. You cannot reuse a single remote peering gateway for multiple VCNs. Each VCN that needs remote peering must have its own remote peering gateway, or you must design a hub/spoke with appropriate gateways, but not simply use the same gateway across multiple VCNs directly.
- C. Correct.
Option 3 is correct. Remote peering requires creating a remote peering gateway in both the local region (Phoenix) and the remote region (Ashburn). You then establish a connection (peering) between these gateways and configure appropriate routes to direct traffic to each other� CIDRs.
- D. Correct.
Option 4 is correct. Even if the gateways and route tables are properly configured, network communication will fail if the security rules (security lists or NSGs) do not allow traffic on the necessary protocols and ports. Ensuring that the security rules match the intended traffic is crucial.