1Z0-1123-25 Question 19
Single answerYou are migrating an on-premises data center to Oracle Cloud Infrastructure (OCI). One of your requirements involves configuring a private subnet to leverage OCI Object Storage for backups. You want to ensure that all traffic remains within the OCI network without traversing the public internet. Which fundamental OCI Networking service helps you achieve this goal?
- A
Use an Internet Gateway in the route table for the private subnet
- B
Use a NAT Gateway in the route table for the private subnet
- C
Use a Service Gateway in the route table for the private subnet
- D
Configure VCN Local Peering directly to the Object Storage service
Show answer and explanation
Correct answer: C
Explanation
The Service Gateway is the preferred method to route traffic internally to OCI services such as Object Storage when using private subnets. By using a route rule that directs traffic to the Service Gateway, no traffic leaves Oracle� internal network. For more details, refer to OCI Networking fundamentals and the OCI documentation on Service Gateways at: https://docs.oracle.com/en-us/iaas/Content/Network/Tasks/servicegateway.htm.
- A. Incorrect.
Option 1: Incorrect. An Internet Gateway allows outbound traffic from the VCN to the public internet. This would not meet the requirement of keeping traffic internal to OCI, as it exposes the subnet to the public internet.
- B. Incorrect.
Option 2: Incorrect. A NAT Gateway enables private subnets to initiate connections to the public internet. While it hides the private IP addresses, traffic still goes over the public network, which does not fulfill the stated requirement.
- C. Correct.
Option 3: Correct. A Service Gateway provides private access to Oracle Cloud services such as Object Storage without going through the public internet. It keeps the data transfer within Oracle� network, satisfying the security requirement.
- D. Incorrect.
Option 4: Incorrect. A Local Peering Gateway is used to enable communication between two VCNs in the same region, not for accessing Oracle services like Object Storage. Peering does not provide direct access to Object Storage.