Q: 9
A financial services company is implementing a multicloud strategy, storing sensitive customer data
in OCI due to its enhanced security features, running analytics workloads in AWS, and utilizing a SaaS
application hosted in Google Cloud Platform (GCP). To comply with stringent data sovereignty
regulations, the company requires that all traffic between OCI and AWS must transit exclusively
within the United States. Which is the MOST critical consideration when choosing a connectivity
solution to ensure compliance?
Options
Discussion
A. Saw a similar question before, and B is a common trap since just using DRG/VGW or VPN setup doesn’t actually guarantee the traffic remains US-only. Only a FastConnect provider with a written assurance will meet strict data sovereignty regs. Happy to discuss if I missed something here.
Honestly Oracle exams love their FastConnect compliance scenarios, so A.
Its A, since only FastConnect partners can guarantee traffic stays within US borders. B is a trap here.
Not B. Even if the VPN endpoints are both in the US, you can't really control how public internet routes the packets. Only A gives an actual guarantee that your OCI-AWS traffic stays within US borders, which is what matters for compliance.
Its A because only a FastConnect partner can actually guarantee all traffic stays within US borders. B is a classic trap, since VPNs over public internet might still route internationally even with US endpoints. Pretty sure that's what the exam's looking for, agree?
A is the key one here. Only a FastConnect partner can actually guarantee traffic stays within US borders for compliance reasons. VPN or public internet options can't fully enforce geographic routing, even if the endpoints are in the US. Pretty sure about this but open to other views if I'm missing a nuance.
For strict data sovereignty, A is the safest bet since only FastConnect partners can actually guarantee all OCI-AWS transit stays within US borders. VPNs or internet-based options like B, C, D can't really enforce that routing. If I'm missing something let me know.
OCI always slips these compliance gotchas in, super picky about data sovereignty. A
A for sure
Maybe C, since both VPN gateways are in the US and that should restrict routing, but not totally sure.
Be respectful. No spam.
