1Z0-1151-25 Question 128
Single answerYour organization plans to deploy Oracle Database@Google Cloud and manage it entirely through the Oracle Cloud Infrastructure (OCI) Console. You also want to ensure secure connectivity between Google Cloud and OCI for database lifecycle operations. Which approach best meets these requirements?
- A
A. Configure a dedicated private interconnect between OCI and Google Cloud, create a service account in Google Cloud with appropriate IAM roles for database management, import the account credentials into OCI, and then provision Oracle Database@Google Cloud from the OCI Console.
- B
B. Deploy the Oracle Database as a standalone instance on Google Cloud, configure a VPN tunnel to Oracle Cloud Infrastructure, and manage the database exclusively through the Google Cloud Console.
- C
C. Use the default Google Cloud service account for all database provisioning tasks, grant it minimal permissions, and connect to OCI over the public internet to monitor the database from the OCI Console.
- D
D. Install Oracle Database@Google Cloud by first replicating your on-premises Oracle environment into Google Cloud, then configure the OCI Console for read-only database status updates.
Show answer and explanation
Correct answer: A
Explanation
To provision and manage Oracle Database@Google Cloud from the OCI Console, you need both proper connectivity and appropriate roles in Google Cloud. According to Oracle's multicloud best practices, setting up a secure connection (e.g., using a private interconnect, VPN, or other secure networking options) is essential. Additionally, creating and importing a Google Cloud service account with sufficient IAM privileges into OCI ensures that OCI can fully manage the database (provisioning, patches, backups, etc.) within the Google Cloud environment. Reference: Oracle documentation on 'Managing Oracle Database in a Multicloud Environment' outlines recommended secure connectivity approaches and IAM configurations for such deployments.
- A. Correct.
A. Correct. Setting up a private interconnect or secure network path between OCI and Google Cloud ensures data is not sent over the public internet. Creating a Google Cloud service account with the necessary IAM roles grants OCI the privileges to provision and manage Oracle Database@Google Cloud. Importing these credentials allows the OCI Console to handle lifecycle operations (create, update, delete) on the database resource.
- B. Incorrect.
B. Incorrect. This option relies on managing the database through the Google Cloud Console, not the OCI Console. While a VPN tunnel provides secure connectivity, it does not integrate provisioning or lifecycle management with the OCI Console.
- C. Incorrect.
C. Incorrect. Using a default service account with minimal permissions often lacks the privileges needed for provisioning Oracle Database@Google Cloud. Relying solely on the public internet for connectivity also increases security risks.
- D. Incorrect.
D. Incorrect. Replicating an on-premises environment to Google Cloud and using the OCI Console only for read-only status updates does not meet the requirement for full lifecycle management through OCI.