1Z0-1072-25 Question 90
Select 2Your company has set up two Virtual Cloud Networks (VCNs) in the same Oracle Cloud Infrastructure region to isolate different applications. These applications need to communicate securely and efficiently across the two VCNs. Additionally, you must connect your on-premises data center to the same environment, ensuring a secure path for traffic with minimal latency. Which two connectivity options must you configure in Oracle Cloud Infrastructure to achieve these goals?
- A
Use a Local Peering Gateway to establish connectivity between the two VCNs in the same region
- B
Use a Remote Peering Gateway to establish connectivity between the two VCNs in the same region
- C
Use an IPsec VPN or FastConnect with a Dynamic Routing Gateway (DRG) for on-premises connectivity
- D
Use a Service Gateway for on-premises connectivity
Show answer and explanation
Correct answers: A, C
Explanation
In this scenario, you need both intra-region VCN peering and secure on-premises connectivity. A Local Peering Gateway is the correct choice for communication between two VCNs in the same region, while an IPsec VPN or FastConnect set up through a Dynamic Routing Gateway serves as the best practice for connecting your on-premises environment to Oracle Cloud Infrastructure. Refer to Oracle's official networking documentation (https://docs.oracle.com/en-us/iaas/Content/Network/Concepts/overview.htm) for best practices and implementation details.
- A. Correct.
Correct. A Local Peering Gateway (LPG) is designed to allow traffic between VCNs within the same region. This can be set up without routing traffic over the internet, which helps reduce latency and ensures secure communication between services residing in different VCNs in the same region.
- B. Incorrect.
Incorrect. A Remote Peering Gateway (RPG) is specifically used to facilitate peering between VCNs located in different regions. Since the VCNs in the scenario are in the same region, an RPG is neither necessary nor appropriate.
- C. Correct.
Correct. A Dynamic Routing Gateway (DRG) can establish connectivity to on-premises via either IPsec VPN or FastConnect. This provides a secure site-to-site tunnel or private dedicated connection for on-premises traffic, enabling low-latency and encrypted communication as required.
- D. Incorrect.
Incorrect. A Service Gateway is used to provide private access from a VCN to Oracle services, such as Object Storage, without traversing the public internet. It is not intended for connecting on-premises networks to VCNs.