Google Professional Cloud Network Engineer Question 171
Single answerGoogle Cloud PlatformYou are a network engineer responsible for designing a hybrid networking solution between your on-premises data center and Google Cloud. The solution requires using a Google Cloud VPN to establish a secure connection. You plan to use include to specify which on-premises subnets should be advertised to Google Cloud. Which of the following statements about the use of include in the VPN route advertisement configuration is correct?
- A
The
includeparameter specifies the exact IP ranges to advertise to Google Cloud. - B
The
includeparameter excludes specific IP ranges from being advertised to Google Cloud. - C
The
includeparameter supports CIDR ranges and determines which subnets are allowed to establish the VPN connection. - D
The
includeparameter works only with policy-based VPNs and not with route-based VPNs.
Show answer and explanation
Correct answer: A
Explanation
The include parameter in the VPN configuration is used to define the specific on-premises IP ranges (in CIDR notation) that are advertised to Google Cloud over the VPN. This ensures that only the subnets explicitly listed in the include parameter are visible and routable in the Google Cloud environment. It is an important feature for controlling route advertisements in hybrid networking setups.
- A. Correct.
Correct. The
includeparameter is used to specify the exact IP ranges (in CIDR notation) that should be advertised from the on-premises network to Google Cloud. - B. Incorrect.
Incorrect. The
includeparameter does not exclude IP ranges; it explicitly defines which subnets are advertised. - C. Incorrect.
Incorrect. While
includeuses CIDR ranges, it is not related to determining which subnets are allowed to establish the VPN connection. It is used for route advertisement. - D. Incorrect.
Incorrect. The
includeparameter is applicable to both policy-based and route-based VPNs and is not restricted to one type.