Google Professional Cloud Network Engineer Question 141
Single answerGoogle Cloud PlatformYour organization has an on-premises data center connected to Google Cloud through a Cloud VPN. You need to access multiple VPCs in your Google Cloud environment from your on-premises network. The VPCs belong to different projects but are managed under a single Google Cloud organization. What is the most scalable and efficient way to achieve this connectivity, while minimizing administrative overhead?
- A
Set up individual Cloud VPN tunnels between the on-premises network and each VPC.
- B
Enable VPC peering between all the VPCs and connect the on-premises network to one of the VPCs.
- C
Use Shared VPC to centralize connectivity and connect the on-premises network to the Shared VPC host project.
- D
Deploy Network Connectivity Center with a hub-and-spoke topology to connect the on-premises network and all VPCs.
Show answer and explanation
Correct answer: C
Explanation
The Shared VPC model is the most efficient and scalable solution for connecting an on-premises network to multiple VPCs in Google Cloud, especially when the VPCs are part of a single Google Cloud organization. It centralizes network management, reduces the number of connections needed, and minimizes administrative overhead. Other options either lack scalability, do not support transitive routing, or are unnecessarily complex for this specific scenario.
- A. Incorrect.
Setting up individual Cloud VPN tunnels for each VPC increases operational complexity and does not scale well as the number of VPCs increases.
- B. Incorrect.
VPC peering does not allow transitive routing, so the on-premises network would not have direct access to all VPCs. You would also need to configure multiple peering connections, which increases complexity.
- C. Correct.
Using Shared VPC allows you to centralize network connectivity and manage access to multiple VPCs efficiently. The on-premises network only needs to connect to the Shared VPC host project, simplifying the setup.
- D. Incorrect.
While Network Connectivity Center can achieve this, it is more suitable for complex hybrid and multi-cloud environments. For this scenario, Shared VPC is a simpler and more cost-effective solution.