1Z0-1072-25 Question 83
Select 2Your company has two separate Virtual Cloud Networks (VCNs) in the same Oracle Cloud Infrastructure region for production and staging. You need to enable private communication between the two VCNs without routing traffic over the public Internet. Which two steps must you perform to configure local VCN peering?
- A
Create an Internet Gateway in each VCN to allow direct traffic between them.
- B
Create a Local Peering Gateway (LPG) in each VCN and establish a peering relationship.
- C
Update each VCN� route table to send traffic for the other VCN� CIDR block to the LPG.
- D
Attach both VCNs to a single Dynamic Routing Gateway (DRG) to route traffic internally.
Show answer and explanation
Correct answers: B, C
Explanation
To configure local VCN peering within the same region, you first create a Local Peering Gateway in each VCN and then establish a peering handshake. Next, you update each VCN� route table so traffic destined for the other VCN� CIDR block is routed through the Local Peering Gateway. Internet Gateways are not involved because peering occurs privately within Oracle� backbone, and a DRG is only necessary for connecting VCNs to on-premises networks or peering between regions. For more details, refer to the official Oracle Cloud Infrastructure documentation on VCN Local Peering (https://docs.oracle.com/en-us/iaas/Content/Network/Tasks/localVCNpeering.htm).
- A. Incorrect.
Option 1: Incorrect. An Internet Gateway is not required for local VCN peering. This would route traffic over the public Internet, which does not meet the requirement for private communication.
- B. Correct.
Option 2: Correct. Local Peering Gateways must be created in each VCN to enable direct, private communication within the same region. A peering handshake must be established between the two LPGs.
- C. Correct.
Option 3: Correct. Each VCN must have a route rule that sends traffic destined for the other VCN� CIDR block to its respective Local Peering Gateway.
- D. Incorrect.
Option 4: Incorrect. Attaching both VCNs to a DRG is typically used for connecting VCNs to on-premises networks or for remote peering across regions. It is not required for local peering within the same region.