1Z0-1072-25 Question 46
Select 3Your organization has two separate Virtual Cloud Networks (VCNs) in the same Oracle Cloud Infrastructure region. You need to configure private connectivity between subnets in both VCNs so that applications in each VCN can communicate with each other internally. No Internet or on-premises connectivity is required. Which three tasks must you complete to achieve this goal?
- A
Create a Local Peering Gateway in each VCN
- B
Create a Remote Peering Gateway in each VCN
- C
Add a route rule in each VCN� route table that directs traffic for the other VCN� CIDR to the Local Peering Gateway
- D
Move all subnets into the same compartment
- E
Update security lists or NSG rules to allow traffic from the other VCN� CIDR block
Show answer and explanation
Correct answers: A, C, E
Explanation
To connect two VCNs privately within the same region, you must create a Local Peering Gateway in each VCN, update route tables in both VCNs to direct relevant traffic to the Local Peering Gateway, and configure security lists or NSG rules to allow traffic between the two CIDR blocks. Refer to the official Oracle documentation on VCN local peering (https://docs.oracle.com/en-us/iaas/Content/Network/Tasks/localVCNpeering.htm) for detailed setup steps and best practices.
- A. Correct.
Correct. For VCNs in the same region, you must create a Local Peering Gateway in each VCN to enable private, region-local communication between them.
- B. Incorrect.
Incorrect. Remote Peering Gateways are used for cross-region VCN peering. Since both VCNs are in the same region, a Local Peering Gateway is appropriate.
- C. Correct.
Correct. After creating the Local Peering Gateways, you need to add a route rule in each VCN� route table. This rule directs traffic destined for the other VCN� CIDR range to the Local Peering Gateway, ensuring the packets are forwarded correctly.
- D. Incorrect.
Incorrect. Compartments primarily provide logical separation of resources and do not affect direct VCN-to-VCN connectivity. Simply moving subnets into the same compartment does not enable private communication between separate VCNs.
- E. Correct.
Correct. Even if peering is configured and route rules are in place, traffic will be blocked unless the security lists or Network Security Group (NSG) rules allow ingress and egress for the other VCN� CIDR range.