1Z0-997-25 Question 129
Single answerYou are a lead architect for a large retail enterprise migrating an existing Oracle Database to Oracle Database@Google Cloud. Your application tier runs in Oracle Cloud Infrastructure (OCI), and you have set up Oracle Interconnect for Google Cloud to securely connect both environments. You need to ensure that your OCI-hosted application can privately access the Oracle Database@Google Cloud instance with minimal latency and no additional data egress charges. Which configuration step is essential to achieve this goal?
- A
Configure a NAT gateway in OCI to route traffic to the public IP address of the Oracle Database@Google Cloud instance.
- B
Ensure dynamic routing is enabled, advertise private CIDR blocks to the OCI Dynamic Routing Gateway (DRG), and configure a Cloud Router in Google Cloud to establish private routes.
- C
Attach an Internet Gateway in both OCI and Google Cloud, and route all traffic over the public internet for simplicity.
- D
Implement local VCN peering in OCI and VPC peering in Google Cloud, expecting both peers to communicate over the private interconnect automatically.
Show answer and explanation
Correct answer: B
Explanation
When leveraging Oracle Interconnect for Google Cloud and Oracle Database@Google Cloud, you must use private IP routing between OCI and Google Cloud. The key step is to configure dynamic routing on both sides, using the OCI Dynamic Routing Gateway (DRG) and Google Cloud� Cloud Router to exchange private route advertisements. This ensures traffic uses the private interconnect path rather than the public internet, thereby reducing latency and avoiding additional egress costs. Refer to Oracle� documentation ("Using Oracle Interconnect for Google Cloud") and Google Cloud� documentation ("Configuring Cloud Router with On-Premises Networks") for detailed steps and best practices.
- A. Incorrect.
Option 1 is incorrect because configuring a NAT gateway to route to a public IP causes traffic to traverse the internet, incurring egress charges and increasing security risks. The goal is to keep traffic private via the Interconnect.
- B. Correct.
Option 2 is correct. By enabling dynamic routing and advertising your private CIDR blocks to the OCI Dynamic Routing Gateway, and configuring Google Cloud� Cloud Router to establish routes back to those same private ranges, traffic remains within the private Interconnect. This design minimizes latency and avoids internet egress.
- C. Incorrect.
Option 3 is incorrect. Using internet gateways in both clouds routes your traffic across the public internet rather than the private Interconnect, which goes against the requirement for private, low-latency connections and increases egress costs.
- D. Incorrect.
Option 4 is incorrect because local VCN peering (OCI) and VPC peering (Google Cloud) work only within their respective ecosystems. They do not inherently propagate routes across the Oracle Interconnect for Google Cloud. You must explicitly configure dynamic routing and Cloud Router for a true private connection.