1Z0-997-25 Question 107
Single answerA financial services company is migrating a multi-tier application that resides partially in Microsoft Azure and partially within Oracle Database@Azure. They have configured the Oracle Interconnect for Azure to provide a private, low-latency network connection between their Azure Virtual Network and OCI. However, the application hosted in Azure is unable to connect to the Oracle Database using private IP addresses, indicating a possible routing issue. Which step is most critical to ensure that database traffic travels privately over the Interconnect?
- A
Create an Internet Gateway in Oracle Cloud Infrastructure and direct all Azure traffic through it.
- B
Enable Azure NAT Gateway to handle all outbound traffic to the Oracle database subnets.
- C
Define user-defined routes in Azure to forward Oracle Database traffic to the private peering over the Interconnect.
- D
Set up a separate ExpressRoute circuit for each subnet in Oracle Database@Azure.
Show answer and explanation
Correct answer: C
Explanation
Oracle Interconnect for Azure enables secure and private connectivity between Azure and Oracle Cloud Infrastructure. However, you must configure routing correctly on the Azure side to direct traffic through the private link rather than defaulting to the public internet. Defining user-defined routes in Azure ensures that requests to the Oracle Database in Oracle Database@Azure traverse the Interconnect. Refer to Oracle and Microsoft documentation on 'Configuring Azure User-Defined Routes for Oracle Interconnect' to align with best practices for hybrid connectivity.
- A. Incorrect.
Incorrect: An Internet Gateway sends traffic through the public internet, defeating the purpose of the private interconnect. Using this would not provide a private path or low latency.
- B. Incorrect.
Incorrect: Enabling a NAT Gateway in Azure translates private IP addresses to public IP addresses and routes them out to the internet, which is not the objective here. This would not ensure traffic flows privately over the Interconnect.
- C. Correct.
Correct: In Azure, you must define user-defined routes (UDR) so that traffic destined for the Oracle Database subnets (hosted in Oracle Database@Azure) goes through the private peering enabled by the Interconnect. This ensures private, low-latency connectivity without using the public internet.
- D. Incorrect.
Incorrect: Separate ExpressRoute circuits for every subnet would be both impractical and excessive. A single Interconnect typically suffices for multiple subnets, as long as your routing is properly configured.