1Z0-1123-25 Question 28
Select 2Your organization is migrating mission-critical workloads to OCI and requires reliable, high-bandwidth connectivity from its on-premises data center. In addition, you need a backup solution that ensures business continuity if the primary link fails without incurring excessive costs. Which two OCI connectivity options would best satisfy these requirements?
- A
Establish an OCI FastConnect private virtual circuit for primary connectivity and configure IPsec VPN as your backup path.
- B
Use local VCN peering across subnets in the same region for high-speed on-premises connectivity.
- C
Enable remote peering across different regions to achieve predictable performance for on-premises traffic.
- D
Implement an Internet Gateway for all inbound and outbound traffic.
- E
Deploy dual FastConnect circuits from different providers for high availability and guaranteed throughput.
Show answer and explanation
Correct answers: A, E
Explanation
When designing connectivity for critical workloads on OCI, enterprises commonly implement a primary FastConnect private virtual circuit for reliable, high-bandwidth connections and use IPsec VPN as a cost-effective backup. Alternatively, deploying redundant FastConnect circuits from different network providers ensures high availability and guaranteed throughput. Local VCN peering and remote peering address connectivity between OCI VCNs within or across regions respectively, but they do not solve on-premises connectivity needs. An Internet Gateway directs traffic via the public internet, which generally lacks dedicated throughput and SLA guarantees. Refer to OCI documentation on FastConnect and IPsec VPN for best practices regarding design, redundancy, and bandwidth requirements.
- A. Correct.
Correct. FastConnect provides dedicated connectivity with predictable performance, and IPsec VPN is a cost-efficient failover option in case the FastConnect link becomes unavailable.
- B. Incorrect.
Incorrect. Local VCN peering connects two VCNs within the same region and does not provide a direct on-premises connection. It� not a suitable method to link your on-premises environment to OCI.
- C. Incorrect.
Incorrect. Remote peering is used to connect VCNs in different OCI regions. This does not address on-premises connectivity requirements directly or guarantee dedicated bandwidth from on premises.
- D. Incorrect.
Incorrect. An Internet Gateway routes traffic over the public internet, which does not provide dedicated bandwidth or minimal latency for mission-critical workloads.
- E. Correct.
Correct. Using dual FastConnect circuits from separate providers or physically diverse cross-connects offers dedicated, high-bandwidth connectivity with built-in redundancy, ensuring minimal downtime if one circuit fails.