1Z0-1123-25 Question 14
Select 2Your company plans to migrate a production workload from an on-premises data center to Oracle Cloud Infrastructure (OCI). You need a dedicated private connection that provides consistent, high-throughput data transfer to your Virtual Cloud Network (VCN), while also allowing a fallback over a secure tunnel if that dedicated link fails. Which two options should you implement to ensure a reliable and secure migration path?
- A
Use OCI FastConnect for the primary connection and configure an IPsec VPN tunnel as a backup.
- B
Configure a NAT Gateway for inbound connectivity from your on-premises data center subnets.
- C
Create and attach a Dynamic Routing Gateway (DRG) to your VCN, defining route rules in the DRG route table.
- D
Rely solely on an Internet Gateway to transfer workload data and minimize overhead.
Show answer and explanation
Correct answers: A, C
Explanation
For large-scale data migration, the recommended networking approach in OCI typically includes FastConnect as a primary, high-throughput link and IPsec VPN as an encrypted backup. Attaching a DRG and properly configuring route rules in the DRG route table enables secure and manageable traffic flow between on-premises and OCI. Refer to Oracle's documentation (e.g., https://docs.oracle.com/en-us/iaas/Content/Network/Tasks/managingDRG.htm) for details on DRG setup and route distribution.
- A. Correct.
Option 1 is correct. FastConnect offers a private, direct connection with consistent performance, and an IPsec VPN tunnel can serve as a secure backup path. This approach meets both high-throughput and fallback requirements.
- B. Incorrect.
Option 2 is incorrect. A NAT Gateway primarily facilitates outbound connections from private subnets to the internet, not inbound connectivity from on-premises networks. It does not fulfill the requirement of establishing a dedicated, private, or fallback link.
- C. Correct.
Option 3 is correct. Attaching a DRG to the VCN and creating the necessary route rules in the DRG route table ensures reliable routing between your on-premises site and OCI via FastConnect or VPN. This is a best practice for hub-and-spoke connectivity in OCI.
- D. Incorrect.
Option 4 is incorrect. Relying solely on an Internet Gateway means traffic traverses the public internet, which may be subject to variable latency and bandwidth constraints. It does not meet the requirement for a dedicated, high-throughput connection or secure fallback.