Google Professional Cloud Network Engineer Question 235
Select 3Google Cloud PlatformYour organization has set up a custom VPC in Google Cloud with multiple subnets across different regions. You want to ensure that traffic between subnets in the same VPC travels over Google's internal network instead of the public internet. Additionally, you need to configure routing to allow traffic to a specific on-premises network over a dedicated interconnect. Which of the following steps should you take to achieve this?
- A
Enable Private Google Access for all subnets in the VPC.
- B
Set up custom static routes directing traffic to the on-premises network.
- C
Verify that subnet-level routing is automatically handled by Google Cloud's default VPC routing.
- D
Configure a Cloud Router and a dynamic route advertisement for the on-premises network.
- E
Enable global dynamic routing for the VPC.
Show answer and explanation
Correct answers: B, D, E
Explanation
To ensure intra-VPC traffic uses Google's internal network, no special configuration is required as Google Cloud automatically handles it. However, to enable traffic routing to an on-premises network via a dedicated interconnect, you need to configure custom static routes, use a Cloud Router for dynamic route advertisement, and enable global dynamic routing for the VPC. These configurations ensure that routes are properly propagated and available across regions.
- A. Incorrect.
Private Google Access allows resources in a subnet to access Google APIs and services privately but is not related to controlling VPC routing or internal traffic.
- B. Correct.
Custom static routes are required to direct traffic from the VPC to specific external destinations, such as an on-premises network, where no dynamic routing is set up.
- C. Incorrect.
While Google Cloud's default VPC routing handles intra-subnet routing, it does not ensure routing to on-premises networks or handle advanced routing configurations.
- D. Correct.
Cloud Router is necessary to dynamically exchange routes between the on-premises network and the VPC, ensuring efficient routing for hybrid cloud setups.
- E. Correct.
Global dynamic routing allows routes learned from the on-premises network to be available across all regions, ensuring seamless connectivity and avoiding regional limitations.