1Z0-1151-25 Question 84
Select 2Your organization has deployed Oracle Database@Azure to host mission-critical transactional data. You plan to replicate this data in near real-time to a newly provisioned Oracle Autonomous Data Warehouse running on Oracle Cloud Infrastructure (OCI) using Oracle GoldenGate. Which two steps must you take to ensure secure and low-latency data replication?
- A
Deploy Oracle GoldenGate on OCI and enable TLS to encrypt data in transit.
- B
Configure the Oracle Interconnect for Azure to establish a private, low-latency connection between Azure and OCI.
- C
Use the Azure Application Gateway and public endpoints for GoldenGate replication inbound to OCI.
- D
Disable Transparent Data Encryption (TDE) on Oracle Database@Azure to reduce overhead.
- E
Run Oracle GoldenGate on an Azure VM behind a NAT gateway for data replication.
Show answer and explanation
Correct answers: A, B
Explanation
For secure and performant cross-cloud replication, best practices recommend private connectivity (through the Oracle Interconnect for Azure) and encryption in transit (using TLS for Oracle GoldenGate). This architecture avoids exposing traffic to public endpoints while ensuring minimal latency and robust security. For more details, refer to the Oracle GoldenGate documentation and Oracle Database@Azure best practices in the Oracle and Microsoft documentation.
- A. Correct.
Option 1: Deploying Oracle GoldenGate on OCI and enabling TLS ensures that data is encrypted during transit. This is strongly recommended for securing replication traffic and is aligned with best practices for handling sensitive information.
- B. Correct.
Option 2: The Oracle Interconnect for Azure provides private, low-latency connectivity between Azure and OCI. Configuring this interconnect avoids sending replication traffic over the public internet, reducing latency and improving security.
- C. Incorrect.
Option 3: Relying on the Azure Application Gateway with public endpoints for replication increases exposure to the public internet and may introduce latency. This contradicts the requirement for a secure, low-latency connection.
- D. Incorrect.
Option 4: Disabling TDE is not recommended, as TDE helps ensure that data at rest remains secure. Performance overhead for TDE is usually minimal, and leaving data unencrypted is a significant security risk.
- E. Incorrect.
Option 5: Running GoldenGate on an Azure VM behind a NAT gateway does not guarantee end-to-end private connectivity to OCI, potentially introducing complexity and higher latency compared to the direct interconnect.