1Z0-1151-25 Question 19
Select 2Your organization runs a high-traffic e-commerce platform and wants to deploy the front-end web services on Microsoft Azure while hosting the transaction database on Oracle Autonomous Database in OCI. Management requires secure, low-latency connectivity between Azure and OCI, along with centralized identity and access management across both clouds. Which two approaches should you implement to meet these requirements?
- A
Use the Oracle-Azure Interconnect for a direct, low-latency cross-cloud connection
- B
Federate Azure AD with Oracle Cloud Infrastructure IAM to enable a single sign-on experience
- C
Implement a standalone IPsec VPN tunnel for cross-cloud communication without using any dedicated interconnect
- D
Store all user credentials in an on-premises directory and manually synchronize them with each cloud environment
- E
Use the same CIDR block for both the OCI Virtual Cloud Network (VCN) and the Azure Virtual Network (VNet)
Show answer and explanation
Correct answers: A, B
Explanation
In a multi-cloud architecture involving OCI and Azure, leveraging services like the Oracle-Azure Interconnect ensures a secure and reliable link that handles production-level traffic, while federating OCI IAM with Azure AD centralizes access management. This approach aligns with Oracle� recommended best practices and supports scalable, fault-tolerant solutions. See the Oracle documentation on the OCI-Azure Interconnect (https://docs.oracle.com/en/solutions/learn-azure-oci-interconnect/index.html) and identity provider federation in OCI (https://docs.oracle.com/en-us/iaas/Content/Identity/Tasks/managingidp.htm) for more details.
- A. Correct.
Using the Oracle-Azure Interconnect is a recommended approach for providing a high-bandwidth, low-latency link between Azure and OCI. This setup simplifies network configuration and typically offers better performance and reliability than a purely internet-based or VPN-only solution.
- B. Correct.
Federating Azure AD with OCI IAM allows single sign-on (SSO) and centralized identity management. By doing this, you can enforce consistent security policies and streamline user provisioning across both environments.
- C. Incorrect.
While an IPsec VPN can enable connectivity, it generally introduces higher latency and overhead compared to a dedicated interconnect. If a high-performance solution is available (such as the Oracle-Azure Interconnect), relying solely on VPN is not optimal.
- D. Incorrect.
Storing credentials on-premises and manually replicating them to each cloud is cumbersome and error-prone. Modern best practices favor using native cloud identity federation or a standardized identity provider for a more secure and efficient approach.
- E. Incorrect.
Using the same CIDR block in both clouds is not feasible because it causes overlapping IP addresses, making routing and connectivity extremely difficult to manage without custom NAT solutions or complex workarounds.