1Z0-1124-25 practice question 4 of 25

You are managing a Site-to-Site VPN connection between your on-premises network and OCI. You notice that the VPN tunnel is frequently dropping and…

You are managing a Site-to-Site VPN connection between your on-premises network and OCI. You notice that the VPN tunnel is frequently dropping and re-establishing. You have verified the internet connectivity at both ends and confirmed that the IKE (Internet Key Exchange) parameters are correctly configured. Which of the following is the most likely cause of the intermittent VPN tunnel disconnections?

Answer options

A: The on-premises Customer-Premises Equipment (CPE) is configured with an incorrect public IP address.

B: The OCI Dynamic Routing Gateway (DRG) is experiencing a temporary outage.

C: There is a misconfiguration in the security rules, blocking the IKE or ESP (Encapsulating Security Payload) traffic. Correct answer

D: The on-premises firewall is configured with incorrect NAT-Traversal settings.

Correct Answer:

C. There is a misconfiguration in the security rules, blocking the IKE or ESP (Encapsulating Security Payload) traffic.

Explanation

Symptoms: VPN tunnel drops intermittently despite stable internet and IKE settings. VPN Components: Requires IKE (UDP 500/4500) and ESP (IP 50) traffic. Evaluate Options: A: Incorrect CPE IP would prevent tunnel establishment, not intermittent drops; incorrect. B: DRG outage would cause full downtime, not intermittent; unlikely. C: Security rules blocking IKE/ESP intermittently (e.g., rate limiting) is common; most likely. D: NAT-Traversal issues typically prevent initial setup, not intermittent drops; less likely. Conclusion: Security rule misconfiguration is the most probable cause. VPN stability depends on unblocked IKE and ESP traffic. The Oracle Networking Professional study guide notes, "Intermittent VPN tunnel drops are often caused by security rules or firewalls blocking IKE (UDP 500/4500) or ESP (IP Protocol 50) traffic" (OCI Networking Documentation, Section: Site-to- Site VPN Troubleshooting). This aligns with the scenario’s symptoms.
Reference: Oracle Cloud Infrastructure Documentation - Site-to-Site VPN.

Keep practicing

Take the free 1Z0-1124-25 practice test

Ten exam-style questions with answers and explanations, plus the exam facts and study guides.

Start the free practice test