Google Professional Cloud Network Engineer Question 144
Single answerGoogle Cloud PlatformYour organization has an on-premises data center that needs to access multiple VPCs in Google Cloud. These VPCs are managed by different teams within your organization and are located in the same region. You want to design a scalable and cost-effective solution to enable connectivity between the on-premises data center and all the VPCs without requiring extensive manual configuration or redundant connections. Which solution should you choose?
- A
Use a Shared VPC where the on-premises data center connects to the host project, and all service projects automatically gain access to on-premises resources.
- B
Set up individual VPN tunnels between the on-premises data center and each VPC.
- C
Implement Network Connectivity Center to establish a hub-and-spoke topology, connecting the on-premises data center to a central hub and linking all VPCs as spokes.
- D
Use VPC Network Peering between all the VPCs and establish a single VPN tunnel from the on-premises data center to one VPC.
Show answer and explanation
Correct answer: C
Explanation
Network Connectivity Center is designed to simplify hybrid network connectivity by enabling a hub-and-spoke topology. In this scenario, the on-premises data center connects to a central hub, and all the VPCs are connected as spokes, allowing seamless communication between on-premises resources and multiple VPCs. This approach is scalable, cost-effective, and avoids the complexity of setting up and maintaining individual VPN tunnels or relying on VPC Peering, which does not support transitive routing.
- A. Incorrect.
This is the correct solution when multiple teams share a single host project and service projects, but it does not apply when VPCs are managed independently. Shared VPC is not suitable for this scenario.
- B. Incorrect.
This approach creates operational overhead and redundancy because you would need to configure and maintain multiple VPN tunnels. It is not scalable or cost-effective.
- C. Correct.
This is the best solution for the given scenario. Network Connectivity Center allows you to create a hub-and-spoke topology that simplifies connectivity between the on-premises data center and multiple VPCs in a scalable and cost-effective manner.
- D. Incorrect.
While VPC Network Peering allows VPCs to communicate with each other, it does not support transitive routing, meaning the on-premises data center cannot access all VPCs through a single VPN tunnel. This solution is not feasible for the given requirements.