Google Professional Cloud Network Engineer Question 122
Single answerGoogle Cloud PlatformYour organization has several branch offices that need to securely connect to the corporate network hosted in Google Cloud. Each branch office already has an SD-WAN appliance deployed, but the corporate network does not currently support SD-WAN. What is the most appropriate solution to enable secure connectivity between the branch offices and the corporate network in Google Cloud while minimizing changes to the existing infrastructure?
- A
Deploy Cloud VPN to establish IPSec tunnels between the SD-WAN appliances in the branch offices and the Google Cloud network.
- B
Deploy a Partner Interconnect to connect branch offices to the Google Cloud network.
- C
Use Cloud Interconnect with Direct Peering to connect the branch offices to the Google Cloud network.
- D
Migrate all branch office connections to use Google Cloud's BeyondCorp Enterprise Zero Trust model.
Show answer and explanation
Correct answer: A
Explanation
Cloud VPN is the most appropriate solution in this scenario because it provides secure IPSec tunneling between the SD-WAN appliances in the branch offices and the Google Cloud network. This approach minimizes changes to the existing SD-WAN infrastructure and ensures secure communication. Other options, such as Partner Interconnect and Cloud Interconnect, are more suitable for data center connectivity rather than branch office connectivity with SD-WAN appliances. BeyondCorp is a security model rather than a connectivity solution.
- A. Correct.
This is the correct option. Deploying Cloud VPN allows you to establish secure IPSec tunnels between the SD-WAN appliances in the branch offices and the Google Cloud network, enabling secure connectivity without requiring significant infrastructure changes.
- B. Incorrect.
This is incorrect because Partner Interconnect is designed for high-bandwidth, private connections between on-premises data centers and Google Cloud. It is not a suitable solution for branch office connectivity with SD-WAN appliances.
- C. Incorrect.
This is incorrect because Cloud Interconnect with Direct Peering is intended for low-latency, high-bandwidth connections and does not integrate directly with SD-WAN appliances in branch offices.
- D. Incorrect.
This is incorrect because adopting BeyondCorp Enterprise Zero Trust would require a significant architectural overhaul and is not a direct solution for connecting branch offices with SD-WAN appliances to the Google Cloud network.