1Z0-1072-25 Question 97
Select 2Your organization needs to establish a dedicated connection from its on-premises data center in Dallas to an Oracle Cloud Infrastructure (OCI) Virtual Cloud Network (VCN) in the US West region for consistent performance. They want the connection to be private, avoiding the public internet. Which TWO steps must you take to configure FastConnect for this scenario?
- A
Create a private virtual circuit in OCI and attach it to a Dynamic Routing Gateway (DRG).
- B
Configure dynamic routing using BGP to exchange routes through the private virtual circuit.
- C
Establish an IPsec VPN as the primary method to tunnel traffic to the OCI VCN.
- D
Set up a local peering gateway in your on-premises environment to connect to the OCI VCN.
Show answer and explanation
Correct answers: A, B
Explanation
To configure FastConnect for a dedicated, private connection from your on-premises data center to OCI, you need to create a private virtual circuit and attach it to a Dynamic Routing Gateway inside your tenancy. BGP must be configured to dynamically exchange routes between your data center and your VCN. Refer to official OCI documentation on FastConnect for more details on provisioning virtual circuits, setting up BGP, and dedicated connectivity best practices.
- A. Correct.
Option 1 is correct. When setting up a private FastConnect link, you must create a private virtual circuit in OCI. A virtual circuit is the logical connection that maps traffic between your on-premises data center and your OCI environment. It connects to a Dynamic Routing Gateway (DRG) so that you can route traffic securely to resources in your VCN.
- B. Correct.
Option 2 is correct. FastConnect relies on BGP (Border Gateway Protocol) to dynamically exchange routing information. Configuring BGP ensures that on-premises resources can learn routes to the OCI VCN and vice versa, enabling seamless connectivity.
- C. Incorrect.
Option 3 is incorrect. While IPsec VPN is a valid option for encrypting traffic and provides a secure tunnel, it does not constitute a dedicated connection. FastConnect is a separate service specifically designed for dedicated, predictable performance, making IPsec VPN unnecessary as the primary method in this scenario.
- D. Incorrect.
Option 4 is incorrect. A local peering gateway is typically used to enable connectivity between two VCNs in the same region without traversing the internet. It is not used to connect an on-premises data center to OCI.