Google Professional Cloud Network Engineer Question 123
Single answerGoogle Cloud PlatformYour company operates multiple branch offices that need to connect securely to a central Google Cloud Virtual Private Cloud (VPC) network. The branch offices have existing on-premises routers that support IPSec VPN, and the company wants to minimize the cost of deploying additional hardware. Which solution should you implement to meet these requirements?
- A
Set up Cloud VPN using High Availability (HA) VPN to establish IPSec tunnels between the branch routers and the Google Cloud VPC.
- B
Deploy third-party SD-WAN appliances in each branch office to connect to the Google Cloud VPC.
- C
Use Cloud Interconnect to directly connect each branch office to the Google Cloud VPC.
- D
Configure a peer-to-peer connection between branch offices and the Google Cloud VPC using Direct Peering.
Show answer and explanation
Correct answer: A
Explanation
The company’s requirements include secure connectivity between branch offices and the Google Cloud VPC using the existing on-premises routers that support IPSec VPN. Cloud VPN is the ideal solution as it supports IPSec tunnels, minimizes hardware costs, and meets the security requirements. Other options either involve additional costs or do not meet the security or connectivity requirements.
- A. Correct.
This is the correct solution because Cloud VPN supports IPSec VPN connections and allows secure connectivity between on-premises branch office routers and the Google Cloud VPC. It minimizes hardware costs while meeting the requirement for secure connectivity.
- B. Incorrect.
This is incorrect because deploying SD-WAN appliances would incur additional costs for hardware and is unnecessary when the existing routers already support IPSec VPN.
- C. Incorrect.
This is incorrect because Cloud Interconnect is designed for high-bandwidth, low-latency connections, and it is more expensive than using IPSec VPN for branch office connectivity. Additionally, it does not utilize the existing branch office routers.
- D. Incorrect.
This is incorrect because Direct Peering is used for connecting on-premises networks to Google’s network without using VPN. It does not provide the secure IPSec tunnel required in this scenario.