1Z0-997-25 Question 112
Select 2Your organization has deployed Oracle Database@Azure and wants to establish secure, low-latency communication from Azure-based applications to the database using Oracle Interconnect for Azure. Which two steps must you take to configure a private connection between your Azure Virtual Network and the Oracle Database@Azure instance?
- A
Configure an ExpressRoute circuit in Azure and a corresponding FastConnect Virtual Circuit in OCI for private communication.
- B
Enable inbound traffic from the public internet in both Azure and OCI to access the Oracle Database@Azure endpoint.
- C
Create or update Azure route tables to forward traffic destined for the Oracle Database@Azure subnet via the ExpressRoute gateway.
- D
Use public DNS to resolve the Oracle Database@Azure endpoint, since private name resolution is not supported.
Show answer and explanation
Correct answers: A, C
Explanation
In this scenario, a private and dedicated network path is required to securely connect your Azure-based application to Oracle Database@Azure. To achieve this, you must first configure the cross-cloud connectivity by setting up an Azure ExpressRoute circuit and pairing it with Oracle FastConnect on OCI. Next, you need to update your route tables to forward all traffic destined for the Oracle Database@Azure subnets to the ExpressRoute gateway. Public DNS and open internet paths would bypass the security and performance benefits offered by this private interconnect. For more detail, refer to Oracle documentation on 'Set Up Oracle Interconnect for Azure' and Microsoft's guidance on 'Configure ExpressRoute for Private Connectivity.'
- A. Correct.
Configuring an ExpressRoute circuit in Azure linked to an OCI FastConnect Virtual Circuit is required for the Oracle Interconnect for Azure. This ensures a private, high-bandwidth, and low-latency link between Azure and OCI, which Oracle Database@Azure relies on for secure connectivity.
- B. Incorrect.
Enabling inbound traffic from the public internet does not provide the secure, dedicated path that Oracle Interconnect for Azure is designed for. Using the public internet would defeat the purpose of a private interconnect.
- C. Correct.
Once you have ExpressRoute and FastConnect in place, you must update Azure route tables (or user-defined routes) so that traffic to Oracle Database@Azure subnets is routed correctly via the private interconnect rather than the internet.
- D. Incorrect.
Relying on public DNS to resolve Oracle Database@Azure endpoints will direct traffic over the public internet unless additional private DNS configurations are implemented. By default, you should configure private DNS to ensure your database endpoints resolve internally via Oracle Interconnect for Azure.