1Z0-1151-25 Question 60
Select 2Your company is deploying a mission-critical application on Oracle Cloud Infrastructure (OCI) that must exchange data with services running on Microsoft Azure. The application requires consistently high throughput, minimal latency, and encrypted traffic between both clouds. Which two solutions should you implement to meet these requirements with minimal overhead?
- A
Use an OCI Site-to-Site VPN through the public Internet for cost efficiency and rely on built-in encryption
- B
Implement OCI-Azure Interconnect by provisioning OCI FastConnect and Azure ExpressRoute for dedicated, high-bandwidth connectivity
- C
Configure a public load balancer in OCI and route traffic to Azure through the Internet Gateway to minimize setup complexity
- D
Overlay an IPsec tunnel on the OCI-Azure Interconnect to ensure end-to-end encryption for all data in transit
Show answer and explanation
Correct answers: B, D
Explanation
In a realistic multicloud deployment, combining a dedicated connection (FastConnect and ExpressRoute) with an IPsec overlay is a common practice to achieve high performance, low latency, and strong encryption between OCI and Azure. FastConnect and ExpressRoute bypass the public Internet, delivering predictable bandwidth and latency, while the IPsec tunnel encrypts traffic end-to-end. For more details, consult Oracle documentation on 'OCI FastConnect' and �Azure ExpressRoute� best practices.
- A. Incorrect.
Option 1: Although a Site-to-Site VPN provides encryption, relying on the public Internet alone can introduce latency, inconsistent performance, and potential congestion. This solution would not meet the requirement for consistently high throughput and minimal latency, especially for a mission-critical application.
- B. Correct.
Option 2: OCI FastConnect and Azure ExpressRoute enable private, dedicated network connections between the two clouds. This approach delivers consistent performance, high throughput, and minimal latency by bypassing the public Internet. It is a core building block for multicloud connectivity in production environments.
- C. Incorrect.
Option 3: Using a public load balancer and the Internet Gateway would be simpler, but it would not guarantee the required performance or minimal latency. Internet-based routes can fluctuate in available bandwidth, and this approach may not align with the application� mission-critical requirements.
- D. Correct.
Option 4: Overlaying an IPsec tunnel on top of the dedicated interconnect (FastConnect and ExpressRoute) ensures that all traffic is encrypted while retaining the benefits of high-bandwidth and low-latency connectivity. This meets the data encryption requirements without significant overhead compared to a purely Internet-based VPN connection.