ExamTopics Logo
Mail Us[email protected]
Menu
Oracle Discussions
exam questions

Exam 1z0-1067-21 All Questions

View all questions & answers for the 1z0-1067-21 exam
Go to Exam

Exam 1z0-1067-21 topic 1 question 1 discussion

Actual exam question from Oracle's 1z0-1067-21
Question #: 1
Topic #: 1
[All 1z0-1067-21 Questions]

You have been asked to ensure that in-transit communication between an Oracle Cloud Infrastructure (OCI) compute instance and an on-premises server
(192.168.10.10/32) is encrypted. The instances communicate using HTTP. The OCI Virtual Cloud Network (VCN) is connected to the on-premises network by two separate connections: a Dynamic IPsec VPN tunnel and a FastConnect virtual circuit. No static configuration has been added.
What solution should you recommend? (Choose the best answer.)

  • A. The instances will communicate by default over IPsec VPN, which ensures data is encrypted in-transit.
  • B. Advertise a 192.168.10.10/32 route over the VPN.
  • C. Advertise a 192.168.10.10/32 router over the FastConnect.
  • D. The instances will communicate by default over the FastConnect private virtual circuit, which ensures data is encrypted in-transit.
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
by tohegajaf at Aug. 26, 2021, 3:54 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
MT_Explorer
3 years, 1 month ago
Selected Answer: B
FastConnect is not encrypted by default. Check the FAQ "Is traffic flowing over FastConnect encrypted?" https://www.oracle.com/uk/cloud/networking/fastconnect/faq/ Answer B, is the best answer I believe. The white paper below describes achieving FastConnect encryption with VPN: https://docs.oracle.com/en-us/iaas/Content/Resources/Assets/whitepapers/encrypted-fastconnect-public-peering.pdf
upvoted 1 times
...
Carlittos92
3 years, 2 months ago
Selected Answer: B
B is the right answer
upvoted 1 times
...
mboko
3 years, 2 months ago
D. The data is encrypted by default in FastConnect
upvoted 1 times
...
LeandroOsBr
3 years, 2 months ago
Selected Answer: D
If there is a FastConnect and a VPN, the preference will always be FastConnect. To create FastConnect, it is necessary to configure dynamic routing, using BGP, not requiring a static route. And YES, it is possible to implement encrypted FastConnect! Therefore, answer D is the better.
upvoted 2 times
...
IT_Thinker
3 years, 3 months ago
FastConnect ONLY encrypts traffic if MacSec is enabled. This questions asks about the DEFAULT settings. By default, MacSec is NOT enabled, so therefor no encryption by default over FastConnect Private/Public peering.
upvoted 2 times
...
bmyi78
3 years, 4 months ago
Selected Answer: B
FastConnect is not encrypted
upvoted 4 times
...
exams01
3 years, 4 months ago
B is the right answer
upvoted 2 times
...
testng
3 years, 4 months ago
Selected Answer: B
FastConnect is not encrypted
upvoted 3 times
...
SilNilanjan
3 years, 5 months ago
Selected Answer: B
Will go for B, FastConnect is not encrypted
upvoted 2 times
...
imiimran
3 years, 5 months ago
CORRECT D.
upvoted 1 times
...
akr14feb
3 years, 5 months ago
B is the right answer
upvoted 1 times
...
exam67
3 years, 5 months ago
Selected Answer: B
FastConnect is a private, but not encrypted communication. VPN is encrypted.
upvoted 1 times
...
HBarCrunch
3 years, 5 months ago
You all need to fix this... correct answer is not to have anything you expect to be encrypted in-transit going over Fastconnect unless you have something on top of the fast connect encrypting.
upvoted 1 times
...
drram
3 years, 5 months ago
This question is framed poorly in my opinion. Why should we have VPN as an answer when there is a FastConnect. FastConnect with public peering certainly provides encryption. Given the poor question, B is the answer
upvoted 1 times
...
Hemanth
3 years, 6 months ago
On FastConnect, the transit data is not encrypted...Question is that the data has to be encrypted during the transit.. Also it is said that no static routes are added. So with both the FC and the IPSec VPN being in place, the FC will overtake the IPSec VPN because there are no static routes provided. So,if you provide a static route to the IPSec connection, the traffic flows thru the IPSec VPN in which the data in transit is encrypted by default. Hence, answer is B.
upvoted 1 times
...
masudhasan33
3 years, 7 months ago
FastConnect provides dedicated, private connectivity. Traffic flowing over the connection is not encrypted.
upvoted 1 times
Ganmook
3 years, 7 months ago
And also there is mentioned 'No static configuration has been added' too.
upvoted 1 times
...
...
tohegajaf
3 years, 8 months ago
Answer is B. https://www.oracle.com/uk/cloud/networking/fastconnect-faq.html
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago