1Z0-1123-25 Question 16
Select 2A financial services company plans to migrate a large suite of on-premises database workloads to Oracle Cloud Infrastructure (OCI). They require a private, high-bandwidth connection that does not traverse the public internet and must be able to route traffic from on-premises to multiple subnets within a Virtual Cloud Network (VCN). Which TWO of the following configuration steps are required to correctly set up OCI networking for this migration scenario?
- A
- Attach a Dynamic Routing Gateway (DRG) to the VCN and configure routing rules for on-premises traffic.
- B
- Configure a private virtual circuit using Oracle FastConnect and establish BGP sessions with the on-premises routers.
- C
- Set up a Public Load Balancer to front-end all migration traffic and route traffic to private subnets.
- D
- Create an Internet Gateway and route all VCN traffic through it to provide a dedicated connection.
Show answer and explanation
Correct answers: A, B
Explanation
In OCI migrations that require secure, dedicated connections, you typically use a combination of a Dynamic Routing Gateway (DRG) attached to your VCN and a private virtual circuit via Oracle FastConnect. This arrangement bypasses the public internet and allows for controlled routing of on-premises traffic into specific private subnets. For further details, consult Oracle's documentation on networking and FastConnect setup to ensure correct configuration and routing (https://docs.oracle.com/en-us/iaas/Content/Network/Concepts/overview.htm).
- A. Correct.
Attaching a DRG to the VCN is essential for private connectivity from on-premises to Oracle Cloud Infrastructure. You must configure routing rules so that on-premises traffic can reach the subnets in your VCN. This is correct and aligns with OCI best practices.
- B. Correct.
To achieve dedicated private connectivity, you need to configure a private virtual circuit with Oracle FastConnect. BGP sessions are then established between the on-premises routers and OCI's edge, ensuring dynamic routing. This step is required for the high-bandwidth, non-internet-based connection.
- C. Incorrect.
While a Public Load Balancer is useful for distributing incoming internet-facing requests, it is not the correct choice for private migrations that avoid the internet. It does not establish the dedicated private connection needed in this scenario.
- D. Incorrect.
An Internet Gateway provides external internet access for your VCN but does not create a private dedicated connection. Using an Internet Gateway would route traffic over the public internet, which contradicts the requirement for private connectivity.