1Z0-997-25 Question 114
Single answerYour organization has an e-commerce platform with microservices currently running in AWS, and you plan to migrate your mission-critical Oracle workloads from on-premises to Oracle Cloud Infrastructure (OCI) for enhanced performance and analytics. You need a multi-cloud solution that ensures secure, low-latency connectivity between AWS and OCI, and provides consistent identity management for both environments. Which approach should you use to meet these requirements?
- A
Establish a dedicated private connection between AWS and OCI using AWS Direct Connect and OCI FastConnect through a supported third-party provider, and enable SAML-based IAM federation for consistent identity management.
- B
Configure a site-to-site VPN over the public internet for all inter-cloud traffic and rely on separate AWS IAM and OCI IAM accounts without federation.
- C
Implement Oracle Cloud VMware Solution to host both AWS instances and OCI resources on a single virtualization platform for unified admin control.
- D
Replicate data between AWS and OCI using Oracle Data Transfer Service over the public internet and integrate the two clouds by manually synchronizing IAM credentials.
Show answer and explanation
Correct answer: A
Explanation
In multi-cloud architectures involving AWS and OCI, dedicated private connectivity provides the most reliable bandwidth and lowest latency. AWS Direct Connect and OCI FastConnect, often through a third-party partner, is a recommended solution. Furthermore, implementing identity federation (e.g., SAML) ensures a consistent security posture across both clouds. For additional guidance, refer to Oracle� documentation on FastConnect and AWS Direct Connect integration as well as the Identity and Access Management (IAM) federation best practices.
- A. Correct.
Correct. Using AWS Direct Connect and OCI FastConnect through a compatible partner ensures low-latency, private connectivity between the two clouds. Additionally, configuring IAM federation (e.g., via SAML) unifies identity management across AWS and OCI, aligning with multi-cloud best practices.
- B. Incorrect.
Incorrect. While site-to-site VPN can provide connectivity, it typically suffers from higher latency and potential bandwidth constraints compared to dedicated lines. Relying on separate IAM accounts without federation complicates identity management and increases administrative overhead.
- C. Incorrect.
Incorrect. Oracle Cloud VMware Solution is not designed to host AWS workloads within OCI. It primarily supports running VMware-based workloads natively on OCI, so this approach does not address the need for direct, low-latency AWS-OCI integration or unified IAM.
- D. Incorrect.
Incorrect. Oracle Data Transfer Service is meant for bulk, offline data migration rather than ongoing low-latency connectivity. Manually synchronizing IAM credentials is error-prone and falls short of a robust identity federation strategy.