1Z0-1072-25 Question 47
Select 2Your company has two Virtual Cloud Networks (VCNs) in the same OCI region with non-overlapping CIDR blocks. You need to enable direct private communication between resources in these two VCNs for an internal microservices application while preventing traffic from the public internet. Which two steps must you take to set up local VCN peering?
- A
Create a Local Peering Gateway (LPG) in each VCN and establish a peering relationship between them
- B
Create and configure route rules that direct traffic from each VCN to the LPG
- C
Modify the subnets in both VCNs to use the same route table
- D
Create a NAT Gateway in each VCN for outbound connections
- E
Attach a Dynamic Routing Gateway (DRG) to each VCN
Show answer and explanation
Correct answers: A, B
Explanation
Local VCN peering enables direct private communication between two VCNs in the same region without routing traffic over the public internet. To configure it, create Local Peering Gateways in both VCNs, establish peering between them, and add route rules pointing to the LPG. For more details, refer to the Oracle Cloud Infrastructure documentation on 'VCN Local Peering' which explains the prerequisites (non-overlapping CIDR blocks) and the steps to set up the peering relationship and update your route tables.
- A. Correct.
Correct. For local VCN peering, you must create a Local Peering Gateway (LPG) in each of the two VCNs and then establish a peering relationship between those gateways.
- B. Correct.
Correct. You need to update the route tables in each VCN to direct traffic to the Local Peering Gateway so that packets can traverse between the two VCNs.
- C. Incorrect.
Incorrect. Each subnet can maintain its own route table, and it is not required for both VCNs to share a single route table for local peering. Only the relevant route entries pointing to the LPG are needed.
- D. Incorrect.
Incorrect. A NAT Gateway is not necessary for local peering. NAT Gateways provide outbound internet access for private subnets, which is not required for traffic restricted to private communication between the two VCNs.
- E. Incorrect.
Incorrect. A DRG attaches your on-premises network to your VCN, typically used for VPN or dedicated connections. It is not used for local peering within the same region.