1Z0-1151-25 Question 94
Select 2Your company is designing a new financial application that must run in Microsoft Azure while storing and analyzing all critical transactional data in a high-performance Oracle Database. You plan to use Oracle Database Service for Microsoft Azure (ODSA) to provision and manage the Oracle Database directly from the Azure portal. Which two actions must you take to successfully set up a secure, low-latency connection for Oracle Database@Azure in this multicloud environment?
- A
Create a new Oracle Autonomous Database through ODSA and configure a private endpoint in your Azure Virtual Network for secure connectivity.
- B
Install an on-premises Data Guard setup first, then migrate the database into Azure using Oracle Recovery Manager (RMAN) for secure connectivity.
- C
Assign the required roles in Azure Active Directory to allow the Azure portal to manage lifecycle operations (e.g., start/stop) on the Oracle Database instance.
- D
Generate a public IP address on the Oracle Database and open firewall ports in Azure Network Security Groups for application access.
Show answer and explanation
Correct answers: A, C
Explanation
To provision Oracle Database@Azure through Oracle Database Service for Microsoft Azure (ODSA), you must establish a private endpoint in your Azure Virtual Network for secure communication and assign proper Azure IAM roles to manage the database instance from the Azure portal. These steps adhere to the recommended guidance in the official product documentation for Oracle Database Service for Microsoft Azure, ensuring both security and low-latency connectivity.
- A. Correct.
Correct. When provisioning an Oracle Database through ODSA, you typically create a private endpoint in your Azure Virtual Network to ensure secured, low-latency connections between Azure services and the Oracle Database. This avoids exposing the database to the public internet.
- B. Incorrect.
Incorrect. Using an on-premises Data Guard setup is unrelated to ODSA provisioning and is unnecessary for secure connectivity in a cloud-only deployment. While RMAN can be used for other migration scenarios, it is not a required step for initial provisioning with ODSA.
- C. Correct.
Correct. Proper role assignment in Azure Active Directory allows the Azure portal to manage actions like starting, stopping, and monitoring the Oracle Database instance through ODSA. Without these roles, you cannot effectively administer the database from Azure.
- D. Incorrect.
Incorrect. Exposing the database via a public IP address and opening firewall ports goes against best practices for a secure deployment. ODSA provisions private connections to minimize the attack surface and ensure higher security.