Google Professional Cloud Network Engineer Question 143
Single answerGoogle Cloud PlatformYour company has an on-premises data center connected to Google Cloud through a Cloud VPN. The company operates multiple VPCs, including a Shared VPC and several standalone VPCs. The requirement is to access all the VPCs from the on-premises environment with minimal management overhead and without deploying multiple VPN tunnels. Which solution is the most appropriate to meet this requirement?
- A
Use Network Connectivity Center (NCC) to establish a hub-and-spoke topology connecting the on-premises environment and all the VPCs.
- B
Create a Cloud VPN tunnel to each individual VPC from the on-premises environment.
- C
Use VPC peering between all the VPCs and the on-premises network.
- D
Configure the on-premises environment to connect to the Shared VPC and use VPC Network Peering to connect the Shared VPC to other standalone VPCs.
Show answer and explanation
Correct answer: A
Explanation
Network Connectivity Center (NCC) is designed to simplify hybrid connectivity by creating a centralized hub-and-spoke architecture. This approach eliminates the need to set up and manage individual VPN tunnels for each VPC. In this scenario, NCC provides a scalable and efficient solution to access multiple VPCs from the on-premises data center, meeting the requirements with minimal management effort.
- A. Correct.
This is the correct solution. Network Connectivity Center (NCC) allows you to create a scalable hub-and-spoke topology that connects the on-premises environment to multiple VPCs, reducing management overhead and avoiding the need for multiple VPN tunnels.
- B. Incorrect.
This solution is not optimal as it requires creating and managing multiple VPN tunnels, one for each VPC, which increases complexity and management overhead.
- C. Incorrect.
VPC peering is not directly applicable for connecting an on-premises network to multiple VPCs. It is designed for peering VPCs within Google Cloud, not for on-premises connectivity.
- D. Incorrect.
While connecting the on-premises environment to the Shared VPC and using VPC Network Peering with standalone VPCs could work, it adds unnecessary complexity compared to NCC and is less scalable for large environments.