1Z0-997-25 Question 106
Select 2Your organization is deploying Oracle Database@Azure for critical transactional workloads and needs to integrate it with an existing application running on Oracle Cloud Infrastructure (OCI). You have set up Oracle Interconnect for Azure to provide low-latency, private connectivity. Which two actions must you take to ensure the application� traffic to Oracle Database@Azure is routed solely through the private interconnect and never traverses the public internet?
- A
Enable BGP dynamic routing on both the Azure ExpressRoute and the OCI FastConnect, ensuring route advertisement for the application and database subnets.
- B
Use public IP addresses on the Oracle Database@Azure host to simplify DNS resolution across both Azure and OCI.
- C
Create and associate custom route tables in Azure that direct traffic for the Oracle Database@Azure private subnet to the ExpressRoute gateway.
- D
Configure IPsec VPN tunnels between the application running on OCI and the Oracle Database@Azure instance to add an extra layer of encryption.
Show answer and explanation
Correct answers: A, C
Explanation
To ensure that Oracle Database@Azure traffic flows privately between Azure and OCI, dynamic routing via BGP must be enabled on both ends, and custom route tables should be configured to explicitly direct traffic over the Interconnect. This approach aligns with Oracle� and Microsoft� best practices for Oracle Interconnect for Azure. Refer to Oracle� and Microsoft� official documentation for the detailed configuration steps, including route advertisement and VNet-to-VCN peering requirements.
- A. Correct.
Option 1 is correct. BGP (Border Gateway Protocol) is required for dynamic route propagation across Oracle Interconnect for Azure. This ensures that both Azure and OCI exchange routing information for private subnets, allowing traffic to stay within the private connection rather than going over the public internet.
- B. Incorrect.
Option 2 is incorrect. Using public IP addresses for the database in Azure would route traffic over the public network (unless complicated NAT or routing rules are introduced). Oracle Interconnect for Azure is meant for private connectivity, so private addresses should be used.
- C. Correct.
Option 3 is correct. In Azure, you must configure custom routing in your virtual network route tables to ensure that traffic destined for the database� private subnet is forwarded via the ExpressRoute gateway. This prevents traffic from defaulting to a public route.
- D. Incorrect.
Option 4 is incorrect. While IPsec VPN tunnels can provide encryption, they are not a requirement for the Oracle Interconnect for Azure solution and do not guarantee traffic routing stays on private paths without proper route configurations. Often, the Interconnect itself provides a private, secure path without an additional VPN tunnel.