1Z0-1072-25 Question 80
Single answerYou are designing a microservices architecture on Oracle Cloud Infrastructure (OCI) with two Virtual Cloud Networks (VCNs) named AppVCN and DataVCN. Both VCNs reside in the same region but are in different compartments. You need to enable private communication between these two VCNs without exposing traffic to the public internet. Which configuration should you implement?
- A
Create a Local Peering Gateway (LPG) in each VCN and establish a local peering connection between them.
- B
Attach a Dynamic Routing Gateway (DRG) to each VCN and configure route rules for on-premises connectivity.
- C
Deploy a Remote Peering Gateway (RPG) in each VCN to peer the networks in the same region.
- D
Set up an Internet Gateway (IGW) in each VCN and configure traffic to route through the public internet.
Show answer and explanation
Correct answer: A
Explanation
When connecting two VCNs within the same region on OCI, you should use Local Peering Gateways. Each VCN must have its own LPG, and you then establish a local peering connection between the LPGs. You also configure the route tables appropriately so that packets destined for the other VCN are routed to the LPG. This design keeps traffic private and avoids the public internet. For more details, refer to OCI documentation on 'VCN Local Peering Gateways.'
- A. Correct.
Correct: Local peering allows two VCNs in the same region to communicate privately. You create an LPG in each VCN, add appropriate route rules, and then peer them to achieve private communication without using the public internet.
- B. Incorrect.
Incorrect: A DRG is used primarily for on-premises connectivity or inter-region communication, not for peering two VCNs in the same region. While you can connect VCNs through a DRG, the standard local peering mechanism is simpler and more direct for same-region communication.
- C. Incorrect.
Incorrect: Remote Peering Gateways are specifically for VCNs peering across different OCI regions. For VCNs in the same region, Local Peering Gateways are more appropriate.
- D. Incorrect.
Incorrect: Using an Internet Gateway would route traffic over the public internet, which contradicts the requirement for private communication. This would also expose your data to additional security risks and costs.