1Z0-1151-25 Question 54
Select 2Your company wants to set up a secure, low-latency connection between Oracle Cloud Infrastructure (OCI) and Amazon Web Services (AWS) to support real-time data replication. The solution must use private connectivity instead of public endpoints, and it should also allow dynamic routing to accommodate growing workloads. Which two connection strategies should you implement to meet these requirements?
- A
Establish an OCI FastConnect private virtual circuit to a Dynamic Routing Gateway (DRG), and use an AWS Direct Connect in the same colocation facility with BGP peering between the DRG and AWS VPC
- B
Use only an IPsec VPN through the public internet and rely on local route-based VPN policies for dynamic routing
- C
Deploy an OCI NAT Gateway and configure public IP whitelisting in AWS to allow inbound data replication
- D
Create a partner-enabled interconnect that supports both OCI FastConnect and AWS Direct Connect in a single colocation facility, then configure BGP routes between OCI and AWS
- E
Disable encryption on all connections to reduce latency and streamline traffic flow
Show answer and explanation
Correct answers: A, D
Explanation
For secure, low-latency multicloud connections between OCI and AWS, leveraging private dedicated circuits (OCI FastConnect and AWS Direct Connect) with BGP routing is the recommended approach. Optionally, a partner interconnect that supports both providers can streamline configuration. Configurations relying solely on the internet or public endpoints introduce latency and security risks. For details, refer to the Oracle documentation on FastConnect and AWS Direct Connect integration best practices.
- A. Correct.
Option 1 is correct. Establishing a private virtual circuit using OCI FastConnect and AWS Direct Connect in the same colocation facility, then configuring BGP peering, is a best practice for achieving low-latency, dedicated connectivity. The DRG on OCI side and the AWS VPC can exchange routes dynamically over BGP.
- B. Incorrect.
Option 2 is incorrect. While an IPsec VPN can provide secure connectivity, it uses the public internet, potentially causing latency and bandwidth constraints. It also doesn't offer the same level of predictable performance as dedicated connections.
- C. Incorrect.
Option 3 is incorrect. A NAT Gateway and public endpoint access do not meet the requirement for private connectivity. Relying on public endpoints introduces additional security and latency concerns.
- D. Correct.
Option 4 is correct. A partner-enabled interconnect that supports both OCI FastConnect and AWS Direct Connect can simplify your multicloud architecture. By using BGP, you can achieve dynamic routing and reliable end-to-end connectivity between OCI and AWS.
- E. Incorrect.
Option 5 is incorrect. Disabling encryption is not recommended from a security or best-practices standpoint. Even though it might reduce overhead, it compromises data security�which is a top priority in enterprise environments.