1Z0-1151-25 Question 111
Select 2Your company is running Oracle Database on Google Cloud Bare Metal Solution and needs to integrate it with an application in Oracle Cloud Infrastructure (OCI). The goal is to achieve secure, low-latency connectivity and protect sensitive data in transit. Which two actions should you take to meet these requirements?
- A
Provision a combined Google Cloud Interconnect and Oracle FastConnect solution, then configure BGP peering for private routing.
- B
Enable Oracle Transparent Data Encryption (TDE) on the Oracle Database@Google Cloud instance to secure data at rest and in transit between tiers.
- C
Expose the Oracle Database via a public IP address on Google Cloud and rely on NAT gateways in OCI for secure traffic redirection.
- D
Deploy a standard site-to-site VPN tunnel over the public Internet for direct database access and reduce latency without additional setup.
Show answer and explanation
Correct answers: A, B
Explanation
When implementing Oracle Database@Google Cloud integrated with OCI applications, best practice is to use private dedicated connectivity to achieve predictable performance and minimal latency. Google Cloud Interconnect peers with OCI FastConnect through a direct or partner model, enabling a secure, high-throughput link. Additionally, enabling Oracle TDE is a recommended practice to protect sensitive data, both at rest in the database and throughout critical operations, aligning with Oracle� security guidelines.
- A. Correct.
Option 1 is correct. Setting up a private connection using Google Cloud Interconnect and Oracle FastConnect provides dedicated bandwidth and low-latency connectivity. Configuring BGP peering ensures private end-to-end routing between GCP and OCI, which is essential for production-grade performance and control.
- B. Correct.
Option 2 is correct. Enabling Oracle Transparent Data Encryption (TDE) protects data at rest in the Oracle Database. Although TDE primarily secures stored data, it also encrypts certain inter-tier communications (e.g., redo logs or backups). Combined with a private interconnect, this helps ensure overall data security.
- C. Incorrect.
Option 3 is incorrect. Exposing the Oracle Database publicly and relying on NAT gateways in OCI increases the attack surface and does not guarantee consistent throughput or the same level of security as a private interconnect.
- D. Incorrect.
Option 4 is incorrect. A standard VPN over the Internet provides encryption but does not consistently offer the low-latency and dedicated bandwidth needed for enterprise workloads requiring minimal round-trip times.