1Z0-1151-25 Question 126
Select 2Your organization needs to deploy an Oracle Database instance on Google Cloud and integrate it securely with existing workloads in Oracle Cloud Infrastructure (OCI). You must ensure low-latency network connectivity between OCI and Google Cloud and configure database access with minimal exposure to the public internet. Which two steps should you take to meet these requirements?
- A
Use Google Cloud Interconnect or a secure VPN connection to establish a private network path between OCI and Google Cloud
- B
Assign a public IP address to the Oracle Database instance on Google Cloud to simplify external connectivity
- C
Configure Identity and Access Management (IAM) role mappings between OCI and Google Cloud for streamlined database access control
- D
Open inbound traffic on default web ports (HTTP/HTTPS) to allow direct database connections over port 80 or port 443
Show answer and explanation
Correct answers: A, C
Explanation
For onboarding Oracle Database@Google Cloud while integrating with OCI, leveraging a secure, low-latency connection such as VPN or Google Cloud Interconnect is crucial. Additionally, establishing robust access controls by mapping IAM roles across both clouds ensures consistent security policies. Granting a public IP for the database or exposing it over common web ports is not aligned with best practices and can introduce unnecessary risk. Refer to Oracle Database documentation and the OCI-Google Cloud connectivity guides for setup details and validated configurations.
- A. Correct.
Using Google Cloud Interconnect or a secure VPN provides a dedicated and encrypted path between OCI and Google Cloud. This helps ensure low latency and secure communication for database traffic, aligning with best practices for multicloud architectures.
- B. Incorrect.
Assigning a public IP to your Oracle Database instance exposes it directly to the internet. While easier to set up, it is generally discouraged for production databases due to potential security risks and the need for controlling inbound connections more rigorously.
- C. Correct.
Configuring IAM role mappings between OCI and Google Cloud helps you avoid cumbersome access management and ensures a consistent approach to defining who can access the database and under what conditions. This is a key multicloud best practice.
- D. Incorrect.
Opening inbound traffic on standard web ports (80 or 443) for database connections is not recommended. Database protocols typically use dedicated ports (such as 1521 for Oracle Database), and exposing them over HTTP/HTTPS ports is both unconventional and potentially insecure.