1Z0-1072-25 Question 81
Select 2Your company wants to enable private communication between two Virtual Cloud Networks (VCNs) in the same region while also allowing workloads in the first VCN to reach an on-premises data center through a Dynamic Routing Gateway (DRG). Which two statements about implementing this connectivity are correct? (Choose two.)
- A
You must create a Local Peering Gateway in each VCN to establish private connectivity within the same region.
- B
Only one DRG attachment is required on the first VCN, provided the second VCN is locally peered with the first.
- C
Each VCN must have its own DRG attachment to route traffic to the on-premises data center.
- D
An Internet Gateway is mandatory in each VCN for private connectivity with on-premises resources.
- E
Remote Peering Gateways are required for any form of VCN peering within the same region.
Show answer and explanation
Correct answers: A, B
Explanation
When two VCNs in the same region need private connectivity, Local Peering Gateways are the recommended approach. You attach a DRG only to the VCN that directly requires on-premises connectivity, while the peered VCN routes on-premises traffic through the LPG to the DRG. Refer to the Oracle Cloud Infrastructure documentation on 'VCN Peering' and 'Dynamic Routing Gateways' for configuration details and best practices.
- A. Correct.
Correct. Local Peering Gateways (LPGs) are used to connect VCNs within the same region without routing traffic over the public internet. Each VCN needs its own LPG.
- B. Correct.
Correct. To route on-premises traffic from both VCNs, attach a DRG to just the first VCN. The second VCN can reach the on-premises network through the local peering connection to the first VCN.
- C. Incorrect.
Incorrect. You do not need an attachment for each VCN if the second VCN is peered to the first VCN, which already has a DRG attached. Traffic can be routed through the LPG to the DRG.
- D. Incorrect.
Incorrect. An Internet Gateway is used to give resources within the VCN public internet access. It is not required for local VCN peering or for on-premises connectivity through a DRG.
- E. Incorrect.
Incorrect. Remote Peering Gateways are only needed to connect VCNs across different regions. For VCNs in the same region, Local Peering Gateways are used.