1Z0-1072-25 Question 98
Select 2Your organization already has a private FastConnect connection from its on-premises data center to Oracle Cloud Infrastructure (OCI), allowing direct access to resources in a Virtual Cloud Network (VCN). You also want to reach Oracle Cloud public services (for example, Object Storage) over this dedicated link without sending any traffic across the public internet. Which two approaches satisfy this requirement? (Choose two.)
- A
Create a service gateway in your VCN and update your route tables to send traffic for Oracle public endpoints through that service gateway.
- B
Add an internet gateway to your VCN and configure routing for public OCI services through it, relying on your private FastConnect path.
- C
Establish a public virtual circuit in addition to your existing private virtual circuit, advertising the public IP ranges for Oracle services so the traffic stays on the dedicated link.
- D
Configure a NAT gateway in your VCN and use it to forward traffic to Oracle public endpoints over your FastConnect.
Show answer and explanation
Correct answers: A, C
Explanation
To privately access both your own VCN resources and Oracle public services over FastConnect, you can use one of two primary methods: (1) Use a private virtual circuit with a service gateway to forward traffic to Oracle public endpoints internally, or (2) provision a separate public virtual circuit that advertises the relevant public IP ranges for your desired Oracle services. Either approach ensures that traffic to these services remains on the dedicated FastConnect path rather than traversing the public internet. For more details, refer to the Oracle Cloud Infrastructure FastConnect documentation, which outlines public and private virtual circuit configurations and how service gateways enable private access to public OCI services.
- A. Correct.
Option 1 is correct. A service gateway allows private access to Oracle public services via your existing private FastConnect virtual circuit. By updating the route table in the VCN to direct traffic for services such as Object Storage through the service gateway, traffic remains on the dedicated connection without traversing the public internet.
- B. Incorrect.
Option 2 is incorrect. While an internet gateway provides access to the public internet, it does not prevent traffic from traveling over the public internet. This option does not guarantee that public service traffic stays on the private FastConnect link.
- C. Correct.
Option 3 is correct. You can configure a separate public virtual circuit to advertise the public IP ranges for Oracle services. This option ensures your organization� traffic to Oracle public endpoints flows entirely over the dedicated circuit rather than the public internet.
- D. Incorrect.
Option 4 is incorrect. NAT gateways allow resources in a private subnet to initiate connections to public destinations, but they still rely on internet-based routes when reaching external endpoints. NAT gateways do not reroute traffic onto your private FastConnect link for public services by default.