Google Professional Cloud Network Engineer Question 124
Single answerGoogle Cloud PlatformYour organization has multiple branch offices that require secure connectivity to the main office and other branch locations. The connectivity must support dynamic routing, encryption for sensitive data, and seamless integration with Google Cloud workloads. Which solution would best meet these requirements?
- A
Use Cloud VPN with dynamic (BGP-based) routing to establish secure connectivity between branch offices and the main office.
- B
Deploy SD-WAN appliances at each branch and configure them to connect directly to Google Cloud using Cloud Interconnect.
- C
Use Cloud NAT to provide secure, encrypted connectivity between the branch offices and the main office.
- D
Implement Cloud Armor for secure connectivity and dynamic routing between branch offices.
Show answer and explanation
Correct answer: A
Explanation
Cloud VPN with dynamic routing (BGP) is the ideal solution for secure branch office connectivity as it provides encrypted tunnels and supports dynamic route exchange. This ensures seamless and scalable communication between branch offices, the main office, and Google Cloud workloads.
- A. Correct.
This is the correct answer. Cloud VPN with dynamic routing (BGP) provides encrypted connectivity and allows for dynamic route exchange, ensuring secure and scalable connectivity between branch offices and the main office.
- B. Incorrect.
SD-WAN appliances can provide connectivity but do not inherently include encryption or seamless integration with Google Cloud. Additionally, Cloud Interconnect is not designed for branch-to-branch connectivity.
- C. Incorrect.
Cloud NAT is used for providing internet access to private resources in Google Cloud, but it does not support encrypted, private connectivity between offices.
- D. Incorrect.
Cloud Armor is a security service focused on protecting applications from DDoS and web exploits. It does not provide connectivity or routing features.