1Z0-997-25 Question 122
Select 2An insurance firm maintains a critical on-premises VMware environment for its underwriting systems. They plan to extend capacity by deploying Oracle Cloud VMware Solution on Oracle Cloud Infrastructure (OCI) while ensuring secure, low-latency connectivity for data replication and a unified identity management approach. Which two design considerations should you recommend for this hybrid cloud architecture? (Choose two.)
- A
Deploy Oracle Cloud VMware Solution in a private subnet connected to on-premises via IPSec VPN or Oracle FastConnect, and attach a Dynamic Routing Gateway (DRG) to orchestrate secure routing.
- B
Place the Software-Defined Data Center (SDDC) cluster in a public subnet to allow direct external connectivity for on-premises replication and management.
- C
Completely replace on-premises Active Directory (AD) with Oracle Cloud Infrastructure IAM to manage all cloud and on-premises user authentication without federation.
- D
Federate the on-premises AD or LDAP with OCI, ensuring single sign-on for cloud-based vCenter and consistent identity management across both environments.
Show answer and explanation
Correct answers: A, D
Explanation
When designing hybrid cloud architectures with Oracle Cloud VMware Solution, you should typically keep the VMware SDDC on a private subnet and connect it securely to on-premises through either IPSec VPN or FastConnect using a DRG. This approach provides a secure, reliable link for data replication and workload migration. For identity management, federating on-premises AD or LDAP with Oracle Cloud maintains consistent user credentials and security policies across both environments. Refer to Oracle� official documentation on Oracle Cloud VMware Solution connectivity and identity federation best practices for more details.
- A. Correct.
Option 1 is correct. Deploying the SDDC in a private subnet is a best practice to limit exposure and maintain better security. Using an IPSec VPN or FastConnect in conjunction with a DRG provides a reliable, low-latency, and secure channel to connect your on-premises data center to OCI.
- B. Incorrect.
Option 2 is incorrect. It is generally not advisable to place critical VMware components in a public subnet, as this increases the attack surface and complicates security. Hybrid connectivity should be established through private network setups such as IPSec VPN or FastConnect.
- C. Incorrect.
Option 3 is incorrect. Replacing on-premises AD with OCI IAM for all authentication is neither a typical nor a recommended approach for hybrid deployments. Organizations typically need to preserve existing identity infrastructures for on-premises applications, so federation or integration is the more realistic solution.
- D. Correct.
Option 4 is correct. Federating the on-premises AD or LDAP solution with OCI allows users to authenticate against the same directory for both on-premises and cloud environments. This makes user management more seamless and preserves existing access policies.