Google Professional Cloud Network Engineer Question 142
Single answerGoogle Cloud PlatformYour organization has on-premises workloads that need to securely access multiple VPCs in Google Cloud. The network topology consists of a Shared VPC with several service projects, a standalone VPC, and a requirement for centralized management of interconnects and VPN tunnels. Which solution would best meet these requirements?
- A
Use Network Connectivity Center to establish a hub-and-spoke topology connecting the on-premises network to all VPCs.
- B
Set up a VPN tunnel for each individual VPC and manage them separately.
- C
Use VPC Peering to connect the Shared VPC and standalone VPC, and then establish a single VPN tunnel to the Shared VPC.
- D
Use a single Cloud Router to manage connectivity between on-premises, the Shared VPC, and the standalone VPC.
Show answer and explanation
Correct answer: A
Explanation
Network Connectivity Center is the optimal choice for scenarios requiring centralized management of on-premises connectivity to multiple VPCs, including Shared VPCs and standalone VPCs. It simplifies the architecture by using a hub-and-spoke model, allowing all spokes (VPCs and on-premises locations) to communicate efficiently and securely.
- A. Correct.
This option is correct because Network Connectivity Center enables a hub-and-spoke topology, allowing centralized management of connectivity between on-premises networks and multiple VPCs, including Shared VPCs and standalone VPCs.
- B. Incorrect.
This option is incorrect because managing individual VPN tunnels for each VPC is cumbersome and does not scale well as the number of VPCs grows.
- C. Incorrect.
This option is incorrect because VPC Peering does not support transitive routing, meaning the standalone VPC would not be able to access the on-premises network through the Shared VPC.
- D. Incorrect.
This option is incorrect because a single Cloud Router cannot manage connectivity across multiple VPCs in different network configurations like Shared VPC and standalone VPC setups.