1Z0-1151-25 Question 53
Single answerYour company runs front-end web services on AWS and stores critical data in Oracle Cloud Infrastructure (OCI). They already use AWS Direct Connect to link their on-premises data center to AWS. To reduce latency and avoid routing traffic back through on-premises, they want to establish a private, high-throughput connection directly between the AWS environment and OCI. Which configuration option is most appropriate for achieving these goals?
- A
Create site-to-site IPSec tunnels from the AWS VPC to an OCI DRG and rely on the public internet for all traffic.
- B
Use Oracle FastConnect in a co-located facility that also provides AWS Direct Connect, creating an end-to-end private link.
- C
Configure public VPC peering between AWS and OCI to route traffic over a public subnet.
- D
Route all AWS traffic destined for OCI through the on-premises data center and then forward it to OCI over an MPLS network.
Show answer and explanation
Correct answer: B
Explanation
For multicloud connectivity between AWS and OCI that demands consistent performance and low latency, a privately peered connection via Oracle FastConnect and AWS Direct Connect in a shared colocation facility is the recommended approach. This setup enables direct traffic flow without backhauling through on-premises. Reference: Oracle Cloud Infrastructure FastConnect documentation (https://docs.oracle.com/en-us/iaas/Content/Network/Concepts/fastconnect.htm).
- A. Incorrect.
Option 1 is incorrect. While IPSec tunnels can link AWS to OCI, relying solely on the public internet typically provides higher latency and lower throughput than a private connection, which goes against the requirement for low-latency, high-throughput access.
- B. Correct.
Option 2 is correct. Using Oracle FastConnect in a co-located facility where AWS Direct Connect is also available enables a dedicated, private connection between the AWS environment and OCI. This approach avoids routing traffic through the on-premises data center and meets the requirement for lower latency.
- C. Incorrect.
Option 3 is incorrect. Public VPC peering does not provide a private, dedicated pathway between AWS and OCI. It would route traffic over the internet, increasing latency and reducing control over data flow.
- D. Incorrect.
Option 4 is incorrect. Sending AWS traffic back to on-premises and then to OCI conflicts with the goal of avoiding on-premises paths and lowers efficiency, adding unnecessary latency to the route.