1Z0-1072-25 Question 109
Select 2Your organization has established a hub-and-spoke architecture in a single Oracle Cloud Infrastructure (OCI) region. The Hub VCN is attached to a Dynamic Routing Gateway (DRG) for on-premises connectivity, and the Spoke VCN is locally peered with the Hub. You need to configure routing so that on-prem traffic can transit through the Hub and reach resources in the Spoke VCN (and vice versa). Which two configurations are required to enable this transit routing scenario?
- A
Create a route rule in the DRG route table with the Spoke VCN CIDR as the destination and the Hub VCN attachment as the next hop.
- B
Update the Spoke VCN� route table associated with its Local Peering Gateway (LPG) to send on-prem traffic (on-prem CIDR) to the LPG.
- C
Deploy a Remote Peering Gateway (RPG) in both the Hub VCN and the Spoke VCN to enable routing across the region.
- D
Use the Hub VCN's default route table to forward all traffic directly to the DRG without configuring any route rules for the Spoke VCN's CIDR.
Show answer and explanation
Correct answers: A, B
Explanation
When implementing transit routing in OCI, you must ensure both inbound and outbound traffic paths are explicitly defined. In this scenario, the DRG route table routes Spoke-bound traffic to the Hub VCN attachment, while the Spoke VCN route table routes on-prem traffic via the Local Peering Gateway to reach the Hub VCN and ultimately the DRG. For more details, refer to the official OCI documentation on transit routing at: https://docs.oracle.com/en-us/iaas/Content/Network/Tasks/transitrouting.htm
- A. Correct.
Correct. The DRG route table must have a route rule pointing to the Spoke VCN� CIDR via the Hub VCN attachment. This ensures that incoming traffic from on-prem to the Spoke VCN is routed correctly.
- B. Correct.
Correct. The Spoke VCN must know how to send traffic back to on-prem. By configuring a route rule that uses the Local Peering Gateway for on-prem CIDRs, traffic will flow to the Hub VCN and then to the DRG.
- C. Incorrect.
Incorrect. A Remote Peering Gateway (RPG) is used for peering across different regions or tenancies. For a local region transit scenario between a Hub and Spoke VCN, local peering gateways and DRG configurations are sufficient.
- D. Incorrect.
Incorrect. Simply sending all traffic to the DRG without specifying the Spoke CIDR in the route table would not properly forward traffic to the Spoke VCN. Route rules for the Spoke VCN� CIDR block are required for transit routing.