1Z0-1151-25 Question 78
Select 2You are the lead cloud architect for a financial services company planning to deploy a mission-critical Oracle database using Oracle Database@Azure for an application that runs on Azure Virtual Machines. The CFO requires a solution that keeps traffic private (avoiding the public internet) and delivers low latency for real-time transaction processing. Which TWO actions must you take to ensure secure, high-performance connectivity between your application servers and the Oracle Database@Azure environment?
- A
Provision an Azure Private Link endpoint for Oracle Database@Azure in the same Virtual Network as the application servers.
- B
Configure an Azure public IP address for the Oracle Database@Azure instance so you can restrict inbound requests through a firewall.
- C
Set up ExpressRoute or a cross-cloud private interconnect for dedicated, low-latency network connections between your Azure region and the Oracle Database@Azure region.
- D
Enable a NAT gateway in Azure for the application subnet to forward all traffic to Oracle Database@Azure.
Show answer and explanation
Correct answers: A, C
Explanation
For mission-critical workloads requiring secure and high-performance database connectivity, using Azure Private Link (or a native Oracle Database@Azure private endpoint) combined with a dedicated interconnect (such as ExpressRoute) is a recommended best practice. This design avoids the public internet, reduces latency, and aligns with compliance requirements. For further details, consult Oracle's documentation on Oracle Database@Azure networking and Microsoft Azure� guidelines on Private Link and ExpressRoute.
- A. Correct.
CORRECT. Azure Private Link (or a comparable private endpoint solution offered through Oracle Database@Azure) ensures traffic remains within your Azure Virtual Network, providing private IP-based connectivity to your database without exposing it to the public internet.
- B. Incorrect.
INCORRECT. Assigning a public IP address and relying on firewall restrictions would not meet the requirement of fully private connectivity. It also introduces potential latency issues and security risks compared to a private endpoint approach.
- C. Correct.
CORRECT. Using a dedicated private interconnect (such as ExpressRoute) between the Azure region and the Oracle Database@Azure region reduces network hops and helps achieve low-latency, high-bandwidth connectivity.
- D. Incorrect.
INCORRECT. A NAT gateway is intended for outbound internet connectivity, not private, low-latency connections to Oracle Database@Azure. This approach would route traffic unnecessarily over the public internet.