Google Professional Cloud Network Engineer Question 237
Select 2Google Cloud PlatformYour organization has a Google Cloud environment with multiple VPCs. One of the VPCs, 'vpc-primary', hosts a critical application. To improve connectivity, you need to configure custom routes to direct traffic from a secondary VPC, 'vpc-secondary', to 'vpc-primary' through a shared services VPC, 'vpc-shared'. Which of the following steps should you implement to ensure the routing works as expected?
- A
Set up a VPC peering connection between 'vpc-secondary' and 'vpc-shared'.
- B
Create a custom route in 'vpc-secondary' to forward traffic to 'vpc-primary' via the next hop in 'vpc-shared'.
- C
Configure a VPC Network Peering export/import route policy for 'vpc-shared' to share routes with 'vpc-secondary' and 'vpc-primary'.
- D
Enable the 'Global dynamic routing mode' in all VPCs to ensure route propagation across regions.
- E
Use a Cloud Router in 'vpc-shared' to enable dynamic routing between 'vpc-primary' and 'vpc-secondary'.
Show answer and explanation
Correct answers: A, C
Explanation
To enable connectivity between 'vpc-secondary' and 'vpc-primary' via 'vpc-shared', a VPC peering connection must be established between 'vpc-secondary' and 'vpc-shared'. Additionally, route exchange must be configured using VPC Network Peering export/import route policies. Custom routes directly referencing next hops in another VPC, dynamic routing mode, and Cloud Routers do not apply in this scenario.
- A. Correct.
Correct: A VPC peering connection between 'vpc-secondary' and 'vpc-shared' is necessary to establish connectivity between the two VPCs since they do not have direct routes to each other by default.
- B. Incorrect.
Incorrect: Custom routes cannot directly reference a next hop in another VPC, even when peering is configured. Instead, route exchange must be handled using VPC Peering route sharing.
- C. Correct.
Correct: VPC Network Peering export/import route policies allow shared routes to be exchanged between VPCs. This is required to ensure 'vpc-secondary' can access 'vpc-primary' via 'vpc-shared'.
- D. Incorrect.
Incorrect: Enabling 'Global dynamic routing mode' is not directly relevant to this scenario since the VPCs are connected through peering, and dynamic routing is not supported over VPC peering.
- E. Incorrect.
Incorrect: Cloud Routers are not used in VPC peering scenarios. They are typically used in hybrid connectivity setups or with VPNs and Interconnects.