1Z0-1151-25 Question 63
Single answerYour company hosts critical workloads in both Oracle Cloud Infrastructure (OCI) and another public cloud. These workloads transfer large volumes of data and must maintain secure, high-throughput communication. Which approach is most appropriate to meet both the performance and encryption requirements for this cross-cloud setup?
- A
Use only a Site-to-Site VPN tunnel across the public Internet to ensure end-to-end encryption
- B
Implement an OCI FastConnect connection with the other cloud� dedicated link and overlay IPsec tunnels for encryption
- C
Adopt public-facing endpoints on both clouds and rely on SSL/TLS for secure data transfer
- D
Configure a single private link from the other cloud to OCI assuming it automatically provides encryption at all network layers
Show answer and explanation
Correct answer: B
Explanation
OCI FastConnect offers a dedicated, high-bandwidth connection for consistent performance, which is key when large volumes of data move between clouds. However, it does not natively encrypt traffic. Combining FastConnect with an IPsec tunnel overlay�or equivalent encryption mechanism�fulfills both the performance and strict security requirements. For more details, refer to Oracle� documentation on multicloud connectivity best practices (e.g., 'FastConnect Overview' and 'Setting Up a Multicloud Interconnect').
- A. Incorrect.
Option 1: Although a Site-to-Site VPN provides encryption, it runs over the public Internet and may not guarantee the high throughput and low latency needed for large-scale data transfers. This is suitable for smaller workloads or backup traffic but may underperform for mission-critical, heavy-data use cases.
- B. Correct.
Option 2: Correct. FastConnect in OCI paired with the other cloud� dedicated connectivity (e.g., AWS Direct Connect) provides stable, high-bandwidth connectivity. Since dedicated circuits do not inherently offer encryption, overlaying IPsec tunnels meets both the performance and security (encryption) requirements efficiently.
- C. Incorrect.
Option 3: While SSL/TLS can encrypt traffic, relying on public endpoints does not guarantee consistent throughput and may introduce higher latency. This can be viable for lower-volume applications but does not match the requirement for large data flows with guaranteed performance.
- D. Incorrect.
Option 4: A single private link from the other cloud to OCI does not automatically provide full encryption at all network layers. You might achieve better performance, but the encryption requirement would not be met unless an additional secure overlay is configured.