1Z0-1123-25 Question 18
Select 2Your organization plans to migrate an on-premises HPC cluster to Oracle Cloud Infrastructure (OCI). The cluster requires secure, private connectivity back to on-premises for continuous data ingestion, and it must also connect to OCI Object Storage for staging data without using any public IP addresses. Which two OCI networking components should you configure to meet these requirements?
- A
Internet Gateway
- B
Dynamic Routing Gateway (DRG)
- C
NAT Gateway
- D
Service Gateway
Show answer and explanation
Correct answers: B, D
Explanation
To achieve secure private connectivity from on-premises to OCI, you must use a DRG. Combined with appropriate route table configurations and an IPSec VPN or FastConnect, the DRG provides the private link needed for on-premises data ingestion. Additionally, to allow HPC nodes to access Object Storage privately (without public IPs), a Service Gateway must be configured. Refer to OCI documentation on DRGs and Service Gateways for details on setting up routing, security lists, and gateways to enable this end-to-end private connectivity.
- A. Incorrect.
Incorrect. An Internet Gateway provides outbound public internet access to resources in a VCN. It does not support private or on-premises connectivity, nor does it enable private access to OCI services like Object Storage.
- B. Correct.
Correct. A Dynamic Routing Gateway (DRG) facilitates connectivity between your on-premises data center and OCI, allowing private traffic to flow through an IPSec VPN or FastConnect. This meets the requirement for secure, private access to on-premises systems.
- C. Incorrect.
Incorrect. A NAT Gateway is used to provide outbound internet access for resources in private subnets, but it doesn�t enable direct private connectivity to on-premises networks or Oracle services without public IP addresses.
- D. Correct.
Correct. A Service Gateway allows resources in a VCN to privately access OCI services, such as Object Storage, without routing that traffic over the internet. This meets the requirement for staging data without public IP addresses.