Google Professional Cloud Network Engineer exam dumps

Google Professional Cloud Network Engineer practice question 237 of 790

Professional Cloud Network Engineer. Professional level, Google Cloud. Free question with the correct answer and a full explanation.

Google Professional Cloud Network Engineer Question 237

Select 2Google Cloud Platform

Your organization has a Google Cloud environment with multiple VPCs. One of the VPCs, 'vpc-primary', hosts a critical application. To improve connectivity, you need to configure custom routes to direct traffic from a secondary VPC, 'vpc-secondary', to 'vpc-primary' through a shared services VPC, 'vpc-shared'. Which of the following steps should you implement to ensure the routing works as expected?

  1. A

    Set up a VPC peering connection between 'vpc-secondary' and 'vpc-shared'.

  2. B

    Create a custom route in 'vpc-secondary' to forward traffic to 'vpc-primary' via the next hop in 'vpc-shared'.

  3. C

    Configure a VPC Network Peering export/import route policy for 'vpc-shared' to share routes with 'vpc-secondary' and 'vpc-primary'.

  4. D

    Enable the 'Global dynamic routing mode' in all VPCs to ensure route propagation across regions.

  5. E

    Use a Cloud Router in 'vpc-shared' to enable dynamic routing between 'vpc-primary' and 'vpc-secondary'.

Show answer and explanation

Correct answers: A, C

Explanation

To enable connectivity between 'vpc-secondary' and 'vpc-primary' via 'vpc-shared', a VPC peering connection must be established between 'vpc-secondary' and 'vpc-shared'. Additionally, route exchange must be configured using VPC Network Peering export/import route policies. Custom routes directly referencing next hops in another VPC, dynamic routing mode, and Cloud Routers do not apply in this scenario.

  • A. Correct.

    Correct: A VPC peering connection between 'vpc-secondary' and 'vpc-shared' is necessary to establish connectivity between the two VPCs since they do not have direct routes to each other by default.

  • B. Incorrect.

    Incorrect: Custom routes cannot directly reference a next hop in another VPC, even when peering is configured. Instead, route exchange must be handled using VPC Peering route sharing.

  • C. Correct.

    Correct: VPC Network Peering export/import route policies allow shared routes to be exchanged between VPCs. This is required to ensure 'vpc-secondary' can access 'vpc-primary' via 'vpc-shared'.

  • D. Incorrect.

    Incorrect: Enabling 'Global dynamic routing mode' is not directly relevant to this scenario since the VPCs are connected through peering, and dynamic routing is not supported over VPC peering.

  • E. Incorrect.

    Incorrect: Cloud Routers are not used in VPC peering scenarios. They are typically used in hybrid connectivity setups or with VPNs and Interconnects.

Timed practice exam

Take a Google Professional Cloud Network Engineer practice test under exam conditions

60 questions in 120 minutes, drawn from this bank, with a score report and a per-question review when you finish.

Start timed exam