Networking →mediumMultiple SelectObjective-mapped

1Z0-1072-26 Networking Practice Question

Which TWO networking components are required when establishing an OCI Site-to-Site VPN connection using dynamic routing (BGP)?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Dynamic Routing Gateway (DRG) configured with BGP ASN

Site-to-Site VPN with dynamic routing requires a CPE object, a DRG attached to the VCN, an IPSec connection with tunnels configured, and BGP ASN configuration on both the OCI side and CPE side.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✓
Dynamic Routing Gateway (DRG) configured with BGP ASN
Why this is correct
The DRG terminates the VPN and participates in BGP dynamic routing.
✗
Internet Gateway attached to private subnets
Why it's wrong here
VPNs route through the DRG, not Internet Gateways.
✗
Local Peering Gateway (LPG)
Why it's wrong here
LPGs are for VCN-to-VCN peering.
✓
Customer-Premises Equipment (CPE) object
Why this is correct
The CPE object defines the on-premises peer gateway IP.
✗
NAT Gateway for BGP packet translation
Why it's wrong here
NAT Gateways are not used for BGP or VPN routing.

Quick reference

VPN Protocol Comparison

Protocol	Port	Encryption	Authentication	Use Case
IKEv2 / IPsec	UDP 500 / 4500	AES-256	Certificates / PSK	Site-to-site & remote access
SSL / TLS VPN	TCP 443	TLS 1.3	Certificates / MFA	Clientless remote access
L2TP / IPsec	UDP 1701	AES (IPsec)	PSK / Certificates	Legacy remote access
WireGuard	UDP 51820	ChaCha20	Public keys	Modern high-performance VPN
PPTP	TCP 1723	MPPE (weak)	MS-CHAPv2	Legacy — avoid in production

PPTP is considered insecure. IKEv2/IPsec and SSL VPN are the current recommended options.

About these practice questions

One of 521 original 1Z0-1072-26 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

Written and reviewed by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

Last reviewed August 2026 · checked against the official Oracle exam blueprint

Ready to practise?

Turn this into a habit — start a practice session.

Start practice session

Scored practice sessions

Work through a scored set and see where your weak spots actually are.

1Z0-1072-26 Practice Exam 1 — 20 Questions→1Z0-1072-26 Practice Test 4 — 25 Questions→Free 1Z0-1072-26 Practice Test 1 — 30 Questions→

Practice by domain

Each of these maps to a scored section of the exam blueprint.

Networking Storage Database Identity And Access Management

Practice by scenario

Pick a question style and work only that format until it feels routine.

Browse scenarios

Go deeper on a topic

Target a specific weak area. Each page focuses on one exam topic with questions, explanations and a concept guide.

Networking practice questions 1Z0-1072-26 scenario practice questions Identity And Access Management practice questions Compute practice questions

Where to go next

Exam domains 1Z0-1072-26 practice test All 1Z0-1072-26 questions

This 1Z0-1072-26 practice question is part of Courseiva's free Oracle certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 1Z0-1072-26 exam.