You are a network architect and have designed the network infrastructure of a three-tier application on Oracle Cloud Infrastructure (OCI). In the architecture, back-end DB servers are in a private…

Question

Options

• AAdd a new route rule to the private subnet route table to route default traffic to the internet
• BAttach a public IP address to the instances in the private subnet, and then add a new route rule to
• CCreate a dynamic routing gateway (DRG) and attach it to your virtual cloud network (VCN). Add a
• DCreate a service gateway, add a new route rule to the private subnet route table that uses object

• A
  11% (4)
• B
  3% (1)
• C
  3% (1)
• D
  83% (30)

Explanation

A service gateway lets resources in your VCN privately access specific Oracle services, without exposing the data to an internet gateway or NAT. The resources in the VCN can be in a private subnet and use only private IP addresses. The traffic from the VCN to the service of interest travels over the Oracle network fabric and never traverses the internet. To give your VCN access to a given service CIDR label, you must enable that service CIDR label for the VCN's service gateway. You can do that when you create the service gateway, or later after it's created. You can also disable a service CIDR label for the service gateway at any time. For traffic to be routed from a subnet in your VCN to a service gateway, you must add a rule accordingly to the subnet's route table. The rule must use the service gateway as the target. https://blogs.oracle.com/cloud-infrastructure/connect-private-instances-with-oracle- servicesthrough-an-oracle-cloud-infrastructure-service-gateway

No community discussion yet for this question.