Oracle 1Z0-1115-23 Online Practice Questions and Exam Preparation

Oracle 1Z0-1115-23 Online Questions & Answers

• Question 41:

  Which components are required to establish a Site-to-Site VPN connection in Oracle Cloud Infra-structure?

  A. Internet Gateway, Customer Premises Equipment (CPE), and IPsec tunnel
  B. Internet Gateway (IG), Network Address Translation (NAT) Gateway, and IPsec tun-nel
  C. Dynamic Routing Gateway (DRG), Customer Premises Equipment (CPE), and IPsec tunnel
  D. Dynamic Routing Gateway (DRG), NAT Gateway, and IPsec tunnel
  C. Dynamic Routing Gateway (DRG), Customer Premises Equipment (CPE), and IPsec tunnel

  ---

  Explanation/Reference:

  Site-to-Site VPN Components:

  CPE OBJECT: At your end of Site-to-Site VPN is the actual device in your on-premises network (whether hardware or software). The term customer-premises equipment (CPE) is commonly used in some industries to refer to this type of on-

  premises equipment. DYNAMIC ROUTING GATEWAY (DRG): At Oracle's end of Site-to-Site VPN is a virtual router called a dynamic routing gateway, which is the gateway into your VCN from your on- premises network.

  IPSEC CONNECTION: After creating the CPE object and DRG, you connect them by creating an IPSec connection, which you can think of as a parent object that represents the Site-to-Site VPN.

  TUNNEL: An IPSec tunnel is used to encrypt traffic between secure IPSec endpoints. Oracle cre-ates two tunnels in each IPSec connection for redundancy. So, Internet Gateway, NAT Gateway are NOT valid Site-to-Site VPN Components.

  Hence, Dynamic Routing Gateway (DRG), Customer Premises Equipment (CPE), and IPsec tunnel is the CORRECT answer.