1Z0-1151-25 Question 132
Single answerYou have provisioned an Oracle Database@Google Cloud instance within a custom Google Virtual Private Cloud (VPC). You now want to allow connectivity from an Oracle Cloud Infrastructure (OCI) compute instance to your new database over the public internet. Which additional step must you take to enable traffic from OCI to your Oracle Database@Google Cloud instance?
- A
Configure an automatic multi-cloud routing rule in Oracle Cloud Infrastructure�no changes on Google Cloud are required.
- B
Create firewall rules in Google Cloud to allow incoming traffic from the external IP address or range associated with your Oracle compute instance.
- C
Select the 'Enable Public Access' checkbox on the Oracle Database@Google Cloud instance, which automatically opens the correct ports to OCI networks.
- D
Migrate the Oracle Database@Google Cloud instance into the same region as your OCI compute instance to ensure default routing applies.
Show answer and explanation
Correct answer: B
Explanation
In a multicloud setup, both OCI and Google Cloud enforce default deny policies on inbound traffic. Provisioning Oracle Database@Google Cloud is only part of the process�network access controls in GCP must be configured to permit traffic from specific sources (in this case, the public IP or range of the OCI compute instance). Refer to Google Cloud documentation on VPC firewall rules and Oracle� multicloud networking best practices for guidance on properly configuring firewall and VPC settings in hybrid or multicloud environments.
- A. Incorrect.
Option 1 is incorrect. There is no automatic multi-cloud routing rule in OCI that removes the need for Google Cloud firewall configuration. You must explicitly configure network rules in GCP to allow external traffic.
- B. Correct.
Option 2 is correct. On Google Cloud, you need to explicitly create or update firewall rules and ensure the relevant ports (e.g., 1521 for Oracle Database) are open for the public IP or range of your OCI compute instance. Without these firewall rules, inbound requests from OCI will be blocked by default.
- C. Incorrect.
Option 3 is incorrect because simply checking 'Enable Public Access' does not automatically configure firewall rules or address ranges for external services. You still need to manage GCP firewall rules explicitly.
- D. Incorrect.
Option 4 is incorrect. While having both resources in the same region may reduce latency, it does not bypass the need for proper firewall rules in Google Cloud.