Which statement is true when connecting an OCI Marketplace image to a shared Autonomous Database?

Connecting an OCI Marketplace image (e.g., a compute instance running a preconfigured application) to a shared Autonomous Database (ADB) involves network configuration. The correct statement is:

Compute Image and Shared ADB must be in the same VCN and Subnet (A):For a compute instance from the OCI Marketplace to communicate with a shared Autonomous Database, both must reside in the same Virtual Cloud Network (VCN) and subnet. This ensures direct network connectivity without requiring complex routing or public internet traversal. By default, shared ADB instances use private endpoints within a VCN, and placing the compute instance in the same subnet allows seamless access using the database’s private IP address. For example, if the ADB is in subnet 10.0.1.0/24, the compute instance must also be in that subnet to connect via Oracle Net Services (e.g., using a wallet and tnsnames.ora).

The incorrect options are:

ADB must be configured with Private endpoints (B):While shared ADB instances are configured with private endpoints by default (not publicly accessible), this is not a configurable option you “must” set—it’s inherent to shared infrastructure. Thus, it’s not a requirement you actively enforce for this scenario; it’s already true.

ADB must be configured with NSG (C):Network Security Groups (NSGs) are optionalfor controlling traffic to an ADB. You can use NSGs for finer-grained security, but they are not mandatory; Security Lists at the subnet level can suffice. Hence, this is not a universal requirement for connectivity.

Cannot connect OCI Marketplace image to shared ADB (D):This is false. OCI Marketplace images (e.g., a web server or analytics tool) can connect to a shared ADB, provided network and authentication prerequisites (like same VCN/subnet and client credentials) are met.

This requirement simplifies network setup and enhances security by keeping communication internal to the VCN. For instance, a Marketplace image like a web application could query an ADB in the same subnet using JDBC or ODBC, leveraging the private endpoint.