Google Professional Cloud Network Engineer Question 200
Single answerGoogle Cloud PlatformYou are designing a hybrid cloud network for your organization. Your on-premises network is using the 10.0.0.0/8 space for internal IP addresses. You need to design a Google Cloud VPC that will connect to your on-premises environment using Cloud VPN without causing IP address conflicts. Which IP address range should you assign to your VPC subnets to ensure a successful hybrid connection?
- A
192.168.0.0/16
- B
172.16.0.0/12
- C
100.64.0.0/10
- D
203.0.113.0/24
Show answer and explanation
Correct answer: D
Explanation
In a hybrid cloud network, it is crucial to avoid overlapping IP ranges between on-premises and cloud environments. Since the on-premises network already uses 10.0.0.0/8, using another RFC 1918 range like 192.168.0.0/16 or 172.16.0.0/12 could lead to IP conflicts. Public IP address ranges, like 203.0.113.0/24, can be used privately (PUPI) within a VPC to avoid such conflicts and ensure a seamless hybrid connection.
- A. Incorrect.
192.168.0.0/16 is part of the RFC 1918 private IP space, but it overlaps with many common private network configurations and could still pose a conflict in some hybrid environments.
- B. Incorrect.
172.16.0.0/12 is also part of the RFC 1918 private IP space, and using this range could similarly lead to conflicts with other private networks.
- C. Incorrect.
100.64.0.0/10 is reserved for Carrier-Grade NAT (CGNAT) and should not be used for internal private networks in a hybrid setup.
- D. Correct.
203.0.113.0/24 is part of the publicly routable IP space reserved for documentation and examples, making it a valid choice for privately used public IP (PUPI) addressing in this scenario to avoid conflicts.