1Z0-997-25 Question 118
Select 2Your organization stores large volumes of confidential customer data in Oracle Cloud Infrastructure (OCI) and plans to use Microsoft Azure� specialized machine learning services to train and deploy predictive models. To satisfy data residency requirements, the data must remain in OCI, but inference calls should be made by Azure services with minimal latency and secure connectivity. Which two actions should you prioritize when designing this multi-cloud architecture to meet these requirements? (Choose two.)
- A
Establish a secure private connection using Oracle-Azure Interconnect to minimize data transfer latency and protect data in transit.
- B
Migrate all customer data to Azure Blob Storage to streamline access for Azure ML services.
- C
Implement OCI IAM federation with Azure Active Directory to manage cross-cloud identities and simplify access control.
- D
Enable public internet endpoints for data retrieval from OCI to Azure, ensuring a readily available transport mechanism.
- E
Deploy an OCI Data Flow job that pulls the trained models from Azure and performs inference locally in OCI.
Show answer and explanation
Correct answers: A, C
Explanation
When designing a multi-cloud solution involving OCI and Azure, two critical factors are secure connectivity and integrated identity management. The Oracle-Azure Interconnect securely bridges the gap between OCI and Azure ML services, ensuring compliance and performance. Federating OCI IAM with Azure Active Directory simplifies user management and reduces the risk of misconfigurations. For additional information, refer to Oracle� documentation on the Oracle Interconnect for Microsoft Azure and best practices for OCI IAM federation.
- A. Correct.
Correct. The Oracle-Azure Interconnect provides a low-latency, private, and secure networking path between OCI and Azure. This approach eliminates the need to traverse the public internet and helps maintain compliance and performance requirements.
- B. Incorrect.
Incorrect. Migrating all customer data to Azure Blob Storage would violate the requirement that data must remain in OCI for data residency, and might also introduce higher egress costs from OCI.
- C. Correct.
Correct. Federating OCI IAM with Azure Active Directory is an industry best practice for multi-cloud architectures. It enables seamless identity management across both platforms, reducing administrative overhead and potential security gaps.
- D. Incorrect.
Incorrect. Relaying sensitive data over public endpoints without encryption or private connectivity is a common misconception. This approach increases security risks and adds latency. Private interconnections are recommended for sensitive or regulated data.
- E. Incorrect.
Incorrect. Pulling models from Azure for local inference may reduce latency to the data, but it complicates the architecture and may limit the use of Azure's specialized ML capabilities. The question specifically asks for minimal latency and secure cross-cloud connectivity, which is better served by established private interconnects.