Google Professional Cloud Network Engineer Question 102
Select 2Google Cloud PlatformYour organization has deployed a third-party network virtual appliance (NVA) in a Google Cloud VPC to inspect and filter traffic between two subnets. You need to ensure that traffic between Subnet A and Subnet B is routed through the NVA. Which steps should you take to implement this design?
- A
Create a static route with the destination range matching Subnet B and set the next hop to the NVA.
- B
Enable VPC Flow Logs to monitor traffic between Subnet A and Subnet B.
- C
Create a static route with the destination range matching Subnet A and set the next hop to the NVA.
- D
Create an ingress firewall rule to allow traffic from Subnet A to Subnet B.
- E
Update the subnet route priority to ensure custom static routes take precedence over the default routes.
Show answer and explanation
Correct answers: A, C
Explanation
To ensure traffic between Subnet A and Subnet B passes through a third-party network virtual appliance, you must define static routes for both directions. Each route should specify the destination range (Subnet B for traffic from Subnet A, and Subnet A for traffic from Subnet B) and use the NVA as the next hop. This ensures that all traffic between the subnets is inspected and filtered by the NVA.
- A. Correct.
Correct: To redirect traffic from Subnet A to Subnet B via the NVA, you need a static route with the destination range of Subnet B and the next hop set to the NVA.
- B. Incorrect.
Incorrect: While enabling VPC Flow Logs is useful for monitoring, it does not influence how traffic is routed or enable the use of the NVA.
- C. Correct.
Correct: To ensure return traffic from Subnet B to Subnet A also passes through the NVA, you must define a static route with the destination range of Subnet A and the next hop set to the NVA.
- D. Incorrect.
Incorrect: Firewall rules control the permissions for traffic but do not determine how traffic is routed through the NVA.
- E. Incorrect.
Incorrect: Subnet route priority is not a configurable parameter in Google Cloud. Static and custom routes automatically override default routes.