1Z0-1124-25 practice question 18 of 25

You are setting up a Site-to-Site VPN connection between your on-premises network and OCI. You have generated the IKE pre-shared key and configured the VPN connection in OCI. You now need to configure your on-premises Customer Premises Equipment (CPE). Which information from the OCI console is ESSENTIAL for configuring your on-premises CPE to establish the VPN connection?

Full set: 120 questions
Answer options
A: The OCI region and availability domain.
B: The public IP address of the OCI Dynamic Routing Gateway (DRG) and the IKE pre-shared key. Correct answer
C: The OCID (Oracle Cloud Identifier) of the VPN connection and the compartment ID.
D: The subnet CIDR blocks within your OCI VCN.
Correct Answer:
B. The public IP address of the OCI Dynamic Routing Gateway (DRG) and the IKE pre-shared key.
Explanation

Objective: Identify essential info for CPE to establish a Site-to-Site VPN with OCI.
Option A: Region and availability domain are for OCI resource placement, not CPE config—incorrect.
Option B: The DRG’s public IP is the VPN endpoint, and the IKE pre-shared key authenticates the tunnel—essential and correct.
Option C: OCID and compartment ID are for OCI management, not CPE setup—incorrect.
Option D: Subnet CIDRs are for routing, configured later, not for tunnel establishment—incorrect. Conclusion: Option B provides the critical VPN connection details. Oracle documentation states: "To configure your CPE for Site-to-Site VPN, you need the public IP address of the DRG (VPN headend) and the IKE pre-shared key from the OCI console." This confirms Option B. Reference: Setting Up IPSec VPN - Oracle Help Center (docs.oracle.com/en- us/iaas/Content/Network/Tasks/settingupIPSec.htm).

Scroll to Top