1Z0-1123-25 Question 13
Single answerYour organization is migrating a large dataset from an on-premises data center to Oracle Cloud Infrastructure (OCI). You have provisioned a Virtual Cloud Network (VCN) and established a FastConnect link to ensure high-bandwidth, dedicated connectivity. Due to compliance requirements, data sent to OCI Object Storage must traverse only private IP networks without using the public internet. Which OCI networking component must you configure to enable this secure, private routing to Object Storage within the same region?
- A
NAT Gateway
- B
Service Gateway
- C
Internet Gateway
- D
Local Peering Gateway
Show answer and explanation
Correct answer: B
Explanation
When migrating data to OCI Object Storage over a FastConnect connection, the Service Gateway is the critical component for private networking. It allows traffic from the on-premises environment to reach OCI Object Storage without traversing the public internet, using only private IP addresses within the OCI backbone. For more details, refer to the official OCI documentation on 'Using a Service Gateway' for secure, private access to Oracle services.
- A. Incorrect.
Incorrect. NAT Gateway provides a way for resources in a private subnet to access the internet without exposing their private IP addresses, but it still routes over public IP addresses. This does not meet the requirement for private, internal routing to Object Storage.
- B. Correct.
Correct. The Service Gateway allows traffic from your VCN to access OCI public services (such as Object Storage) without requiring a public IP address or internet access. This ensures data flows entirely within OCI� internal network, satisfying the compliance requirement.
- C. Incorrect.
Incorrect. An Internet Gateway routes traffic between the VCN and the public internet. This contradicts the requirement to keep data transfers private and off the public internet.
- D. Incorrect.
Incorrect. Local Peering Gateway is used to connect two VCNs within the same region without traversing the internet, but it does not facilitate access to OCI public services like Object Storage. It only supports communication between peered VCNs.