1Z0-1151-25 Question 82
Single answerYour organization is implementing Oracle Database@Azure for a mission-critical application running on Azure. You need to ensure secure, high-speed, and low-latency connectivity between the Azure-based application tier and the Oracle Database, without exposing the database to the public internet. Which configuration best meets these requirements?
- A
Set up a public endpoint for the Oracle Database@Azure and rely on Azure Network Security Groups (NSGs) for inbound protection.
- B
Use the Azure-OCI interconnect, leveraging Azure ExpressRoute circuits to directly connect the Azure-based application tier to Oracle Database@Azure.
- C
Create a single shared VPN tunnel from your on-premises network to both Azure and Oracle Database@Azure, routing all traffic through the on-premises data center.
- D
Deploy a host-based proxy in Azure that tunnels traffic to Oracle Database@Azure over the public internet with TLS encryption.
Show answer and explanation
Correct answer: B
Explanation
The recommended best practice for implementing Oracle Database@Azure with an Azure-based application tier is to use a private, direct interconnect. Oracle and Microsoft have partnered to provide a dedicated Azure-OCI interconnect that allows direct, secure, and low-latency connections. This setup avoids public internet traffic, enhances security, and reduces latency, aligning with Oracle's and Microsoft's documented guidelines for multicloud infrastructure connectivity.
- A. Incorrect.
Option 1 is incorrect. Simply exposing an Oracle Database@Azure public endpoint�even if restricted by NSGs�can introduce unnecessary security risks, increased latency, and potential performance bottlenecks. It also depends on internet routing, which the question specifically aims to avoid.
- B. Correct.
Option 2 is correct. Leveraging the Azure-OCI interconnect via Azure ExpressRoute establishes a private, high-performance connection between Azure resources and Oracle Database@Azure. This approach ensures traffic remains on private circuits, minimizing latency and improving security by avoiding the public internet.
- C. Incorrect.
Option 3 is incorrect. Routing cloud-to-cloud traffic through an on-premises VPN tunnel not only introduces higher latency but also complicates network architecture. This may create a single point of failure in your on-premises environment and doesn�t take full advantage of the direct interconnect capabilities.
- D. Incorrect.
Option 4 is incorrect. A host-based proxy that tunnels over the internet can encrypt traffic, but it does not resolve potential latency and throughput issues, and it still relies on public network paths. This does not align with the requirement to avoid the public internet for database communication.