Google Professional Cloud Network Engineer Question 236
Select 2Google Cloud PlatformYou are designing a multi-VPC architecture for a company's hybrid cloud deployment. The company requires that traffic destined for on-premises systems follow a specific route through a dedicated interconnect, while traffic between VPCs should use private peering. Additionally, internet-bound traffic from the VPCs must use a shared Cloud NAT gateway. Which of the following steps should you take to configure the VPC routing correctly?
- A
Create a custom static route in each VPC to direct traffic to the on-premises systems via the dedicated interconnect.
- B
Configure VPC peering between the VPCs and ensure that the
import and export of custom routesare enabled. - C
Set up a Cloud Router to dynamically advertise on-premises routes to the VPCs via the dedicated interconnect.
- D
Configure a default route (0.0.0.0/0) in each VPC to point to the Cloud NAT gateway.
- E
Enable route priority adjustments to ensure that the on-premises traffic takes precedence over internet-bound traffic.
Show answer and explanation
Correct answers: B, C
Explanation
To meet the requirements, you must configure VPC peering with custom route import/export to enable private communication between the VPCs. Additionally, Cloud Router is needed to dynamically advertise and learn on-premises routes through the dedicated interconnect, ensuring scalability and failover. Static routes and manual route priorities are less efficient for dynamic hybrid cloud environments, and Cloud NAT does not use default routes for outbound traffic configuration.
- A. Incorrect.
Incorrect: Static routes are not scalable for hybrid deployments where dynamic routing is required to handle failover and route updates.
- B. Correct.
Correct: VPC peering with custom route import/export allows the VPCs to communicate over private IPs while sharing custom routes.
- C. Correct.
Correct: Cloud Router is necessary to dynamically exchange routes between the on-premises network and Google Cloud over the dedicated interconnect.
- D. Incorrect.
Incorrect: Cloud NAT does not use a default route (0.0.0.0/0) in the VPC for internet-bound traffic. Instead, it uses private IPs for outbound traffic.
- E. Incorrect.
Incorrect: Route priority adjustments are not required in this scenario because VPC routing uses the longest prefix match to determine the best route, and the scenarios described already specify distinct routing needs.