1Z0-1151-25 Question 112
Select 2Your team is planning to deploy an Oracle Database on Google Cloud and configure an active Data Guard standby on Oracle Cloud Infrastructure (OCI) for disaster recovery. You want to ensure secure, low-latency connectivity between Google Cloud and OCI for streaming redo logs to the standby. Which two actions should you perform to achieve this goal?
- A
Implement a private tunneling solution, such as IPSec VPN or a dedicated interconnect (Google Cloud Interconnect + OCI FastConnect).
- B
Use ephemeral public IP addresses to route Data Guard traffic directly over the internet for faster transfer speeds.
- C
Deploy the active Data Guard standby database in the same physical region as the primary for higher redundancy.
- D
Enable encryption in transit when configuring the Oracle Data Guard connection between Google Cloud and OCI.
Show answer and explanation
Correct answers: A, D
Explanation
Ensuring a secure, low-latency connection for Data Guard traffic typically involves establishing private connectivity between Google Cloud and OCI (such as via IPSec VPN or Google Cloud Interconnect + OCI FastConnect) and enabling encryption in transit. Together, these measures safeguard data while minimizing latency and providing a reliable environment for active Data Guard replication. Refer to Oracle documentation on Data Guard networking and Google-OCI connectivity best practices for detailed configuration steps.
- A. Correct.
Correct. A private, dedicated/network-based connection (for example, IPSec VPN or Google Cloud Interconnect paired with OCI FastConnect) helps minimize latency, improve throughput, and enhance security by avoiding public internet routing.
- B. Incorrect.
Incorrect. Ephemeral public IP addresses are not recommended for long-running, mission-critical connections like Data Guard. Public internet routing can introduce additional latency, instability, and security risks.
- C. Incorrect.
Incorrect. Having the standby in the same physical region as the primary database defeats the purpose of geographic redundancy for disaster recovery. Typically, the standby should be in a separate region or location.
- D. Correct.
Correct. Data Guard redo transport supports Secure Sockets Layer (SSL)/encryption mechanisms. Encrypting data in transit helps protect sensitive information from interception or unauthorized access.