Explanation

Oracle Cloud Infrastructure (OCI) Identity Domain is the access control plane for Oracle Cloud. An identity domain is a container for managing users and roles, federating and provisioning of users, secure application integration through Oracle Single Sign-On (SSO) configuration, and SAML and OAuth based Identity Provider administration.

Explanation

Site-to-Site VPN Components:

CPE OBJECT: At your end of Site-to-Site VPN is the actual device in your on-premises network (whether hardware or software). The term customer-premises equipment (CPE) is commonly used in some industries to refer to this type of on-premises equipment.

DYNAMIC ROUTING GATEWAY (DRG): At Oracle's end of Site-to-Site VPN is a virtual router called a dynamic routing gateway, which is the gateway into your VCN from your on-premises network.

IPSEC CONNECTION: After creating the CPE object and DRG, you connect them by creating an IPSec connection, which you can think of as a parent object that represents the Site-to-Site VPN.

TUNNEL: An IPSec tunnel is used to encrypt traffic between secure IPSec endpoints. Oracle cre-ates two tunnels in each IPSec connection for redundancy.

So, Internet Gateway, NAT Gateway are NOT valid Site-to-Site VPN Components.

Hence, Dynamic Routing Gateway (DRG), Customer Premises Equipment (CPE), and IPsec tunnel is the CORRECT answer.

Explanation

Controlling the Establishment of a Connection

With Oracle Cloud Infrastructure IAM policies, you can control:

Who in your organization has the authority to create a FastConnect virtual circuit.

Who can manage route tables, network security groups, and security lists.

Oracle and Microsoft have created a cross-cloud connection between Oracle Cloud Infrastructure and Microsoft Azure in certain regions. So, the option "To control the location of the cross-cloud connection" has nothing to do with IAM policies and hence is INCORRECT.

The option "To control the type of traffic allowed between the Azure VNet and the OCI VCN" is also INCORRECT as you use Security Lists/Network Security Group to filter traffic and not IAM policies.

IAM policies also have no role to play in determining the bandwidth of the connection.