1Z0-1151-25 Question 122
Select 2Your organization is deploying a mission-critical Oracle Database in Google Cloud as part of a cross-cloud architecture with Oracle Cloud Infrastructure (OCI). You need to ensure the database can communicate securely with on-premises applications via OCI and set up consistent monitoring and data protection processes. Which two tasks must you perform to properly onboard and configure Oracle Database@Google Cloud for production use?
- A
Configure Google Cloud Interconnect or VPN to securely connect the Oracle Database subnet in Google Cloud to your OCI environment.
- B
Leverage Oracle Data Safe in OCI to monitor database activity and perform sensitive data discovery over a private endpoint.
- C
Store regular database backups exclusively on local disks in Google Cloud Compute Engine to optimize performance.
- D
Import GCP Identity and Access Management (IAM) roles directly into OCI IAM to unify user permissions for the database.
Show answer and explanation
Correct answers: A, B
Explanation
To onboard and configure Oracle Database@Google Cloud successfully in a multicloud setup with OCI, you must ensure secure connectivity and proper monitoring. A private link or VPN/Interconnect between Google Cloud and OCI provides the required secure channel. Additionally, Oracle Data Safe allows you to monitor, identify, and secure sensitive data across clouds. Storing backups only on local disks is not a recommended practice, and IAM roles cannot be transferred directly between GCP and OCI. For more details, see Oracle documentation on deploying Oracle Database in Google Cloud and configuring Oracle Data Safe for multicloud environments.
- A. Correct.
Option 1 is correct. Setting up a private connection (Interconnect or VPN) between Google Cloud and OCI is essential for secure, low-latency connectivity. This is a key step in a multicloud strategy where Oracle services in OCI need to communicate with the database in Google Cloud securely.
- B. Correct.
Option 2 is correct. Oracle Data Safe can be configured with the database in Google Cloud using a private endpoint for security monitoring, data discovery, and compliance checks. This ensures visibility and governance of sensitive data, aligning with best practices for cross-cloud database operations.
- C. Incorrect.
Option 3 is incorrect. Relying exclusively on local disks in Google Cloud for backups introduces risks such as single-region dependency and limited durability. Oracle recommends leveraging cloud object storage (e.g., OCI Object Storage or Google Cloud Storage) for more resilient backup and recovery strategies.
- D. Incorrect.
Option 4 is incorrect. You cannot simply import GCP IAM roles into OCI IAM. Instead, you should configure a trust or federation mechanism and manage access control policies appropriately in each environment. Directly importing roles is not a supported approach.