1Z0-1151-25 Question 120
Single answerYour organization has deployed Oracle Database on Google Cloud and needs to integrate it securely with an application running on Oracle Cloud Infrastructure (OCI) to allow low-latency data access. You are tasked with planning the networking configuration. Which approach is recommended for establishing secure, high-bandwidth connectivity between OCI and your Oracle Database on Google Cloud?
- A
Use the public internet and rely on TLS encryption to secure traffic between OCI and Google Cloud.
- B
Configure site-to-site VPN tunnels in Google Cloud and in OCI, ensuring data travels securely over an IPSec connection.
- C
Implement a private interconnect between Google Cloud and OCI through an approved inter-provider circuit, then configure a dynamic routing gateway (DRG) on OCI to establish private routing.
- D
Rely on SSH tunneling to connect the application in OCI to the Oracle Database on Google Cloud using port forwarding.
Show answer and explanation
Correct answer: C
Explanation
Establishing a private interconnect with Oracle Cloud Infrastructure (for example, through a supported interconnection partner) and configuring a dynamic routing gateway (DRG) on the OCI side is the recommended approach for high-performance, secure connectivity to Oracle Database on Google Cloud. This aligns with best practices for multicloud designs, ensuring that large volumes of traffic can travel over a reliable, low-latency link without traversing the public internet. Refer to Oracle's documentation on multicloud networking solutions and Google Cloud's interconnect documentation for additional configuration details.
- A. Incorrect.
Incorrect. While TLS encryption does protect data in transit, relying solely on the public internet can introduce higher latency and potential bandwidth constraints, which is not ideal for mission-critical database applications.
- B. Incorrect.
Incorrect. Site-to-site VPN is typically used for smaller workloads or testing scenarios. It can introduce a performance bottleneck for large-scale database traffic, making it less suitable for a dedicated production environment demanding high throughput.
- C. Correct.
Correct. A dedicated private interconnect via an approved connectivity provider offers lower latency and higher reliability than internet-based solutions. Pairing it with a DRG on OCI ensures that private IP addresses are routed securely between OCI and Google Cloud without traversing the public internet.
- D. Incorrect.
Incorrect. SSH port forwarding is a workaround commonly used for administrative access or quick testing rather than a suitable production-ready method. It doesn't provide a robust, high-bandwidth connection for enterprise-scale data transfer.