1Z0-1151-25 Question 58
Select 2Your company needs to establish a reliable multicloud connection between an OCI Virtual Cloud Network (VCN) and a remote AWS VPC. The primary requirement is high-bandwidth, low-latency connectivity for production workloads, supplemented by a cost-effective failover solution. Which TWO of the following steps are recommended to meet these requirements?
- A
Peer the OCI VCN and the AWS VPC over a private IPsec tunnel without implementing any routing or BGP configuration
- B
Establish FastConnect with an Oracle partner for dedicated connectivity and configure dynamic routing with BGP
- C
Use Site-to-Site VPN as a secondary connection to automatically fail over when FastConnect experiences downtime
- D
Bridge the AWS VPC and the OCI VCN on the same subnet range to ensure a simplified configuration
Show answer and explanation
Correct answers: B, C
Explanation
In a multicloud environment, best practice is to combine dedicated connections (such as FastConnect) for high bandwidth and low latency with a Site-to-Site VPN as a cost-effective fallback. Using BGP for dynamic routing with both connections allows seamless failover in case the primary dedicated link fails. For further details, refer to Oracle Cloud Infrastructure documentation on FastConnect and Site-to-Site VPN configuration and recommended network design patterns.
- A. Incorrect.
Option 1 is incorrect. A simple IPsec tunnel with no dynamic routing or BGP does not provide robust, high-bandwidth connectivity. Without BGP, failover and dynamic routing adjustments become cumbersome, and performance is limited by the inherent constraints of IPsec VPN bandwidth.
- B. Correct.
Option 2 is correct. Using Oracle FastConnect through an approved partner offers a dedicated, high-throughput link that supports dynamic routing over BGP. This setup ensures strong performance and predictable latency, fulfilling the requirement for production workloads.
- C. Correct.
Option 3 is correct. Leveraging a Site-to-Site VPN as a backup ensures a resilient configuration. If FastConnect experiences an outage, the IPsec tunnel automatically provides connectivity at a lower bandwidth, fulfilling the cost-effective failover requirement.
- D. Incorrect.
Option 4 is incorrect. You should never bridge networks using the same subnet range in a multicloud setup. Overlapping CIDRs cause routing conflicts and break connectivity, making this approach infeasible.