Your organization requires that all backups of critical application data stored in OCI Object Storage from an instance within a private subnet must remain within the Oracle Cloud Infrastructure network and not traverse the public internet. Which OCI networking component should you configure to enable this secure and private access to Object Storage?

Requirement: Private access to Object Storage from a private subnet. Components: Internet Gateway: Public internet access; unsuitable. NAT Gateway: Outbound internet; unsuitable. Service Gateway: Private OCI service access; fits requirement. Network Firewall: Security, not routing; incorrect. Evaluate Options: A: Public internet; violates policy. B: Public internet; violates policy. C: Keeps traffic in OCI network; correct. D: Doesn’t enable access; incorrect. Conclusion: Service Gateway ensures private access. Service Gateway is designed for private OCI service access. The Oracle Networking Professional study guide explains, "A Service Gateway allows private subnet instances to access Object Storage without traversing the public internet, ensuring secure data transfer within OCI" (OCI Networking Documentation, Section: Service Gateway). This meets the security requirement.
Reference: Oracle Cloud Infrastructure Documentation - Service Gateway.