1Z0-1151-25 Question 110
Single answerYou have deployed an Oracle Database on Oracle Cloud Infrastructure (OCI) and need to connect it securely to a mission-critical application running on Google Cloud. The CIO wants to avoid sending database traffic over the public internet for performance and security reasons. Which solution best meets this requirement?
- A
Use an IPsec VPN tunnel over the public internet to connect the OCI VCN to the Google Cloud VPC
- B
Implement OCI FastConnect and Google Cloud Interconnect for private, dedicated connectivity between the two clouds
- C
Configure a NAT instance in Google Cloud to route traffic from the database to the application over the public internet
- D
Create an SSH tunnel from a bastion host on Google Cloud directly to the database running on OCI
Show answer and explanation
Correct answer: B
Explanation
When connecting Oracle Database on OCI and an application in Google Cloud for critical workloads, the main priority is to establish a high-bandwidth, low-latency network path that avoids the public internet. OCI FastConnect and Google Cloud Interconnect provide a dedicated private connection between the two clouds, improving performance and security. For more details, refer to OCI documentation on FastConnect and Google Cloud documentation on Interconnect for configuring multicloud network architecture.
- A. Incorrect.
Option A is incorrect. While an IPsec VPN can provide secure connectivity, it still traverses the public internet and may introduce higher latency and variability in performance. This does not fully satisfy the requirement to avoid the public internet for critical traffic.
- B. Correct.
Option B is correct. OCI FastConnect and Google Cloud Interconnect together offer a dedicated, private link between OCI and Google Cloud. This solution significantly reduces latency, improves throughput, and avoids sending traffic over the public internet, satisfying both performance and security requirements.
- C. Incorrect.
Option C is incorrect. A NAT instance is typically used for outbound internet traffic. Relying on the public internet for database access defeats the purpose of private connectivity and exposes the traffic to higher latency and potential security risks.
- D. Incorrect.
Option D is incorrect. An SSH tunnel from a bastion host would still involve routing traffic through the public internet at some point, and is not a scalable solution for mission-critical applications needing consistent low latency.