1Z0-1151-25 Question 26
Select 2Your organization is setting up a new environment on Oracle Cloud Infrastructure (OCI) and needs to connect an on-premises data center to a private subnet in OCI for a line-of-business application. The requirement is that on-premises users must access the application securely without exposing it to the public Internet. Which two steps must you perform to achieve this connectivity?
- A
Provision a Dynamic Routing Gateway (DRG) and attach it to the VCN
- B
Add a route rule in the private subnet� route table to send on-premises IP ranges to the DRG
- C
Deploy an Internet Gateway in the VCN to handle traffic from on-premises
- D
Configure a NAT Gateway for inbound traffic from on-premises
- E
Implement a Local Peering Gateway for the on-premises data center
Show answer and explanation
Correct answers: A, B
Explanation
To privately connect your on-premises network to a subnet in OCI, you must attach a Dynamic Routing Gateway (DRG) to your VCN and configure appropriate route rules pointing on-premises traffic to the DRG. An Internet Gateway, NAT Gateway, or Local Peering Gateway are not used for private on-premises connections. For more information, consult the OCI networking documentation on configuring DRGs and route tables.
- A. Correct.
Correct. A Dynamic Routing Gateway is the primary component in OCI that enables private connectivity between your on-premises network and your VCN. By attaching a DRG to your VCN, you create a path for secure traffic exchange without using the public Internet.
- B. Correct.
Correct. You need to add a route in the private subnet� route table that directs on-premises network traffic to the DRG. This ensures that packets destined for your on-premises IP ranges are correctly routed through the DRG connection.
- C. Incorrect.
Incorrect. An Internet Gateway is used for direct Internet-bound traffic. Since you want a private connection and do not want to expose the application publicly, deploying an Internet Gateway is neither necessary nor recommended in this scenario.
- D. Incorrect.
Incorrect. A NAT Gateway is primarily for allowing instances in private subnets to initiate outbound connections to the Internet (for updates, patches, etc.). It is not used for inbound traffic from an on-premises environment.
- E. Incorrect.
Incorrect. A Local Peering Gateway connects VCNs within the same region or across different regions in OCI, not to on-premises data centers. For on-premises connectivity, you need a DRG.