1Z0-1072-25 Question 110
Select 2You have two VCNs in the same region (VCN-A and VCN-B) that are locally peered. You also have an on-premises data center connected to your Dynamic Routing Gateway (DRG) via an IPSec VPN. You want to configure transit routing so that on-premises clients can communicate with both VCNs through the DRG. Which two actions must you perform to enable this transit routing scenario?
- A
Add a local peering gateway to each VCN and update the DRG route table to forward on-premises traffic to each local peering gateway.
- B
Create a Service Gateway in each VCN and configure route rules pointing on-premises traffic to the Service Gateway.
- C
In each VCN� route table, add a route rule that directs traffic for the on-premises CIDR to the local peering gateway.
- D
Enable an Internet Gateway in both VCNs and add route rules for on-premises CIDR via the Internet Gateway.
Show answer and explanation
Correct answers: A, C
Explanation
In Oracle Cloud Infrastructure transit routing scenarios, local peering gateways enable traffic exchange between peered VCNs, while the DRG handles on-premises connectivity. By configuring the DRG route table to forward on-premises traffic to each local peering gateway and setting route rules in each VCN to direct on-premises CIDRs to the local peering gateway, you enable traffic flow between your on-premises data center and both VCNs. Refer to the official Oracle documentation on 'Transit Routing inside Oracle Cloud Infrastructure' for detailed configuration steps and best practices.
- A. Correct.
Option 1 is correct. You need local peering gateways in both VCNs to allow the DRG to route on-premises traffic to each VCN. You must also configure the DRG� route table to forward traffic for the on-premises CIDR to each local peering gateway.
- B. Incorrect.
Option 2 is incorrect. A Service Gateway routes traffic to Oracle services (e.g., Object Storage) within the Oracle network, not to on-premises networks or other VCNs. It does not help with transit routing in this scenario.
- C. Correct.
Option 3 is correct. Each VCN needs a route rule to direct traffic for the on-premises CIDR to the local peering gateway so that traffic can transit between the VCN and the DRG via peering.
- D. Incorrect.
Option 4 is incorrect. An Internet Gateway is used for routing traffic to the public internet. It does not facilitate private transit routing between your on-premises environment and peered VCNs.