1Z0-997-25 Question 124
Select 2You are an infrastructure architect at a financial services firm that wants to extend its on-premises VMware vSphere environment to Oracle Cloud Infrastructure using Oracle Cloud VMware Solution for disaster recovery. The institution requires dedicated, high-bandwidth connectivity for replicating critical data and running vMotion traffic between the on-premises site and OCI. Which two considerations should you incorporate into your hybrid cloud design to ensure minimal latency and secure data transfer?
- A
Implement an IPSec VPN tunnel over the public internet for vMotion traffic.
- B
Use Oracle Cloud Infrastructure FastConnect with a private virtual circuit to achieve consistent high bandwidth and reliability.
- C
Disable vMotion encryption to reduce overhead on the OCI link.
- D
Configure distinct OCI subnets for management, vMotion, and vSAN traffic to align with existing VLAN segmentation.
Show answer and explanation
Correct answers: B, D
Explanation
Using Oracle Cloud Infrastructure FastConnect with a private virtual circuit allows for reliable, dedicated connectivity that supports higher bandwidth and lower latency than a VPN tunnel. This is key for operations such as vMotion and real-time data replication. Maintaining distinct subnet segments for management, vMotion, and vSAN within OCI mirrors on-premises VLAN segmentation and follows VMware best practices, ensuring traffic flows correctly and securely. Refer to Oracle� official documentation on Oracle Cloud VMware Solution and FastConnect for detailed design and configuration guidelines.
- A. Incorrect.
Option 1: Incorrect. An IPSec VPN typically runs over the public internet, which introduces higher latency and potential bandwidth constraints, making it less optimal for latency-sensitive operations like vMotion.
- B. Correct.
Option 2: Correct. FastConnect provides dedicated, private, and high-bandwidth connectivity between on-premises and OCI. This helps ensure minimal latency and stable throughput for critical traffic, such as data replication and vMotion.
- C. Incorrect.
Option 3: Incorrect. It is not recommended to disable vMotion encryption. Encryption ensures data integrity and security, especially when extending workloads to the cloud.
- D. Correct.
Option 4: Correct. Following the same VLAN segmentation strategy in OCI helps keep management, vMotion, and vSAN traffic separate and provides consistent performance and security configurations across on-premises and cloud environments.