1Z0-1123-25 Question 25
Select 2Your enterprise is migrating a highly available e-commerce solution to Oracle Cloud Infrastructure (OCI). The solution requires minimal downtime, guaranteed throughput, and secure (encrypted) connectivity from your on-premises data center to OCI. Which two approaches can best satisfy these requirements for establishing a robust connectivity architecture?
- A
Implement a single FastConnect circuit from on-premises to OCI and configure IPsec VPN tunnels as a fallback path if the dedicated link fails.
- B
Rely exclusively on IPsec VPN as the primary link for all traffic without deploying any dedicated circuits.
- C
Establish two distinct FastConnect circuits via separate providers and maintain IPsec VPN tunnels as a backup path.
- D
Deploy a single FastConnect connection to one OCI region, then rely on the OCI backbone to automatically handle traffic for additional regions without any fallback.
Show answer and explanation
Correct answers: A, C
Explanation
In OCI architectures, combining FastConnect (for reliable, high-throughput connections) with an IPsec VPN (as a fallback) is a standard best practice for business-critical environments. For additional redundancy and failover, using multiple FastConnect circuits from different providers further enhances reliability. Refer to Oracle� documentation on 'Connectivity to Oracle Cloud Infrastructure' and 'Designing for Resiliency' for guidelines on implementing multi-path, fault-tolerant network connectivity.
- A. Correct.
Correct. Using a single FastConnect circuit for high-performance connectivity and configuring IPsec VPN as a backup path provides a fallback if the primary circuit is unavailable. Although this involves only one FastConnect link, the addition of VPN tunnels helps ensure availability and encrypted traffic flow if primary FastConnect is disrupted.
- B. Incorrect.
Incorrect. Depending solely on IPsec VPN tunnels for mission-critical, high-throughput requirements generally leads to less predictable performance. While IPsec VPN does offer encryption and can serve as a fallback, typical architectures recommend dedicated connectivity (FastConnect) to guarantee bandwidth and reduce latency for production workloads.
- C. Correct.
Correct. Provisioning two FastConnect circuits through different edge routers or service providers ensures redundancy at the physical and network layers. Adding IPsec VPN tunnels as a third path offers an additional layer of resiliency, providing a highly available and encrypted approach to connect on-premises data centers with OCI.
- D. Incorrect.
Incorrect. Relying on a single FastConnect circuit to one region and assuming the OCI backbone alone will handle multi-region connectivity without any fallback introduces a single point of failure. If the single FastConnect link experiences an outage, there is no dedicated backup path, jeopardizing high availability requirements.