1Z0-1072 · Question #202
Which resource is required when connecting to your on-premise network from your Virtual Cloud Network (VCN) via IPSec VPN or FastConnect?
The correct answer is B. Dynamic Routing Gateway (DRG). https://cloud.oracle.com/networking/vcn/faq
Question
Which resource is required when connecting to your on-premise network from your Virtual Cloud Network (VCN) via IPSec VPN or FastConnect?
Options
- AInternet Gateway (IGW)
- BDynamic Routing Gateway (DRG)
- Clocal peering gateway
- DNAT
How the community answered
(30 responses)- A10% (3)
- B83% (25)
- C3% (1)
- D3% (1)
Explanation
Topics
Community Discussion
6
Carlos M.Jun 27, 2026B is correct. Both IPSec VPN and FastConnect attach to a Dynamic Routing Gateway, which is the component that sits at the edge of your VCN and handles routing between your VCN and your on-prem network, no DRG means no connection point for either service.
Viktor S.Jun 27, 2026The DRG is the anchor point that sits at the edge of your VCN and gives your routing tables somewhere to send traffic destined for your on-prem CIDR blocks, whether that traffic rides over an IPSec tunnel or a FastConnect circuit. Do you actually understand why none of the other three options can fulfill that role, or are you just memorizing that B is the answer?
Ingrid P.Jun 25, 2026I have this one on a card with a 2-day interval because I kept second-guessing myself, and every time I review it I land back on C, because peering is exactly the mechanism OCI uses to bridge two separate network spaces, and an on-premise network is just another network space that needs to be joined to your VCN through a gateway designed for that cross-boundary traffic. The local peering gateway slots into that role cleanly, and none of the other options describe a component that is architecturally positioned between your VCN and an external network segment the way a peering gateway is.
Viktor S.Jun 27, 2026Ingrid, the local peering gateway is specifically for connecting two VCNs within OCI to each other, not for bridging to an on-premises network, and that distinction is exactly what the question is testing. Option B, the dynamic routing gateway, is the component OCI uses to terminate VPN or FastConnect links from your data center into your VCN.
Ola B.Jun 27, 2026Spun up a lab last night, IGW was the piece that made it click for me, go with A.
Viktor S.Jun 28, 2026Ola, the lab intuition is good but it led you one step short, because what the question is actually testing is what controls traffic at the subnet level, and that points to B, not A. The IGW being present does not mean traffic flows how you want unless the route table is configured to direct it there.