1Z0-1072-25 Question 87
Select 1Your organization hosts two Virtual Cloud Networks (VCNs) within the same region to support departmental workloads. The departments need to communicate privately with each other� VCNs, without exposing traffic to the public Internet. Additionally, you want to connect your on-premises data center to these VCNs to sync data securely. Which two OCI services should you use to fulfill these connectivity requirements?
- A
Use a Local Peering Gateway (LPG) for inter-VCN communication and a Dynamic Routing Gateway (DRG) for on-premises connectivity
- B
Use an Internet Gateway (IG) for inter-VCN traffic and configure NAT Gateway (NG) for on-premises VPN connections
- C
Use a Service Gateway to peer the two VCNs locally and a REST API Gateway for on-premises connectivity
- D
Use a Local Peering Gateway (LPG) for inter-VCN traffic and a Service Gateway for on-premises connectivity
Show answer and explanation
Correct answer: A
Explanation
To enable secure traffic flow between two VCNs in the same region, you use a Local Peering Gateway (LPG). For secure on-premises connectivity, you attach a Dynamic Routing Gateway (DRG) and configure either IPSec VPN or FastConnect. As per Oracle Cloud Infrastructure best practices, this design meets both the private inter-VCN requirement and the on-premises data sync requirement efficiently. See 'VCN Peering Guide' and 'DRG Connection Details' in Oracle documentation for further details.
- A. Correct.
Correct: Using a Local Peering Gateway (LPG) enables private connectivity between two VCNs in the same region without traversing the public Internet. A Dynamic Routing Gateway (DRG) provides a connection point for your on-premises data center via IPSec VPN or FastConnect. Both components together fulfill the scenario� requirements for local VCN-to-VCN traffic and secure on-premises access.
- B. Incorrect.
Incorrect: An Internet Gateway sends traffic to public networks, which contradicts the requirement for private connectivity between VCNs. A NAT Gateway is for allowing instances in a private subnet to access the Internet without receiving inbound connections, not for connecting on-premises networks.
- C. Incorrect.
Incorrect: A Service Gateway is used for accessing Oracle services within OCI without routing traffic through the public Internet. It is not intended to peer two VCNs or handle on-premises connectivity. A REST API Gateway is for managing API endpoints, not for establishing private network links.
- D. Incorrect.
Incorrect: While a Local Peering Gateway would support private inter-VCN traffic, a Service Gateway does not establish on-premises connectivity. The Service Gateway is meant for accessing OCI public services such as Object Storage privately, not extending networks to data centers.