1Z0-1151-25 Question 130
Select 2Your organization is running an Oracle Database on Google Cloud� Bare Metal Solution for Oracle workloads, while other enterprise services, including identity management, reside in Oracle Cloud Infrastructure (OCI). You need to set up secure, low-latency connectivity and unified access control between the database in Google Cloud and OCI. Which two actions should you take to meet these requirements?
- A
A. Configure a custom NAT gateway in Google Cloud to route all private traffic to OCI endpoints over the internet
- B
B. Provision a dedicated or partner interconnect between Google Cloud and OCI to establish a private, high-speed connection
- C
C. Federate OCI IAM and Google Cloud IAM using SAML to unify user and role-based access management
- D
D. Open public firewall ports on the Bare Metal Solution servers in Google Cloud to allow direct connections from OCI
- E
E. Configure Data Guard on the Oracle Database in Google Cloud to replicate the data to an OCI Autonomous Database
Show answer and explanation
Correct answers: B, C
Explanation
To provision and manage Oracle Database resources across Google Cloud and OCI effectively, you need both secure connectivity and a unified identity management strategy. A dedicated or partner interconnect (Option B) ensures low-latency, private communication between the two clouds. Federating identities (Option C) via protocols like SAML allows administrators to manage access in one place, streamlining security and operations. Refer to the Google Cloud Bare Metal Solution documentation and Oracle Cloud Infrastructure Identity and Access Management best practices for detailed configurations.
- A. Incorrect.
A. Incorrect. Routing all private traffic through a NAT gateway over the public internet introduces latency and security risks. This does not establish a scalable, low-latency connection for enterprise workloads.
- B. Correct.
B. Correct. A dedicated or partner interconnect between Google Cloud and OCI provides a secure, private, and high-speed link, ensuring low latency for database management and data transfer.
- C. Correct.
C. Correct. Federating identities between OCI IAM and Google Cloud IAM addresses unified access control and management, allowing a single set of credentials for resource provisioning and database administration.
- D. Incorrect.
D. Incorrect. Opening public firewall ports on the Bare Metal nodes represents a security vulnerability and does not constitute a best practice for enterprise environments.
- E. Incorrect.
E. Incorrect. Data Guard replication to an OCI Autonomous Database is not a typical configuration. Even if Data Guard were used, it primarily addresses high availability and disaster recovery, not unified access or connectivity requirements.