1Z0-1151-25 Question 70
Select 2You are a cloud architect for a logistics company building a multi-tier application. The front-end services run in Azure Virtual Machines, while the back-end Oracle Autonomous Database resides in Oracle Cloud Infrastructure (OCI). To achieve secure, low-latency private connectivity between OCI and Azure using Oracle Interconnect for Azure, which two steps must you perform to ensure successful end-to-end communication without exposing application traffic to the public internet?
- A
Create a Virtual Cloud Network (VCN) in OCI, attach a Dynamic Routing Gateway (DRG), and configure FastConnect in the same region used by Azure.
- B
Provision a Virtual Network (VNet) in Azure and set up an ExpressRoute Gateway with private peering enabled for the same interconnect region.
- C
Use a standalone IPsec site-to-site VPN between OCI and Azure to route traffic through the public internet, bypassing the ExpressRoute Gateway configuration.
- D
Open all inbound traffic (0.0.0.0/0) in the OCI security lists to ensure there are no access restrictions from the Azure side.
Show answer and explanation
Correct answers: A, B
Explanation
When implementing Oracle Interconnect for Azure, you must set up FastConnect on the OCI side (via a VCN and DRG) and ExpressRoute on the Azure side (via a VNet and ExpressRoute Gateway). These services operate together to establish a dedicated, private connection between the two clouds. For more details, refer to Oracle Cloud Infrastructure and Microsoft Azure Interconnect documentation and best practices around configuring OCI Networking (VCN, DRG, FastConnect) and Azure Networking (VNet, ExpressRoute).
- A. Correct.
Option 1 is correct. For Oracle Interconnect for Azure, you must have a VCN in OCI with a DRG attached, and FastConnect will interface with Azure ExpressRoute for private, low-latency connectivity.
- B. Correct.
Option 2 is correct. On the Azure side, you provision a VNet and configure an ExpressRoute Gateway with private peering to link it to OCI via the interconnect.
- C. Incorrect.
Option 3 is incorrect. While IPsec VPN tunnels can provide secure connectivity, they do not leverage Oracle Interconnect for Azure and do not typically offer the same performance or high-bandwidth, low-latency connection as FastConnect and ExpressRoute.
- D. Incorrect.
Option 4 is incorrect. Opening all inbound traffic from 0.0.0.0/0 is neither necessary nor secure. Proper configuration of network security groups (NSGs) and route tables is recommended over broad firewall openings.