1Z0-997-25 Question 105
Single answerYour organization wants to design a hybrid and multicloud architecture spanning an on-premises data center, AWS, and Oracle Cloud Infrastructure (OCI). The goal is to achieve high-bandwidth connectivity, reduce egress costs, and maintain private network paths between all environments. Which approach should you take to meet these requirements?
- A
Set up a single IPSec VPN from your on-premises data center to both AWS and OCI, and route cross-cloud traffic over the public internet.
- B
Provision dedicated network connections for each cloud (OCI FastConnect for OCI, AWS Direct Connect for AWS) via a co-located facility, and peer them together for private inter-cloud communication.
- C
Use Oracle Cloud Interconnect with Microsoft Azure to bridge network traffic between your on-premises data center, AWS, and OCI.
- D
Deploy multiple NAT Gateways in both AWS and OCI, and manage routing between them using internet-based VPN tunnels.
Show answer and explanation
Correct answer: B
Explanation
When designing a hybrid and multicloud solution involving Oracle Cloud Infrastructure, AWS, and an on-premises data center, you typically want to leverage dedicated, private connections to ensure optimal performance and cost efficiency. In this scenario, OCI FastConnect and AWS Direct Connect can both be terminated in a co-located facility or with a network partner, allowing private peering among the environments and significantly reducing latency and egress charges. For more details, refer to Oracle� documentation on FastConnect (https://docs.oracle.com/en-us/iaas/Content/Network/Concepts/fastconnect.htm) and AWS� Direct Connect documentation (https://docs.aws.amazon.com/directconnect/latest/UserGuide/what-is.html).
- A. Incorrect.
Option 1 is incorrect. While IPSec VPN is straightforward to set up, it relies on the public internet for cross-cloud traffic. This can introduce higher latency, potential bandwidth constraints, and may not reduce egress costs effectively.
- B. Correct.
Option 2 is correct. Using OCI FastConnect for Oracle Cloud and AWS Direct Connect for AWS, then peering them in a co-located facility, provides dedicated, private, high-bandwidth connections. This approach minimizes latency, offers predictable performance, and helps optimize egress costs by avoiding public internet routing.
- C. Incorrect.
Option 3 is incorrect. Oracle Cloud Interconnect with Microsoft Azure does not provide a direct network path to AWS. It is a dedicated integration between OCI and Azure, so it would not fulfill the requirement to connect AWS, OCI, and on-premises in a single, cohesive network layer.
- D. Incorrect.
Option 4 is incorrect. Although NAT Gateways can facilitate secure outbound connections, depending on them for cross-cloud traffic over the public internet does not ensure low latency or guaranteed bandwidth and does not address egress cost optimization.