Google Professional Cloud Network Engineer Question 251
Select 2Google Cloud PlatformYou are managing a Google Cloud network where multiple Virtual Machine (VM) instances are hosted in different subnets. You need to ensure that HTTP traffic (port 80) from a specific set of VMs is routed through a custom next-hop instance for inspection, while all other traffic follows the default internet route. You decide to use network tags and route priorities to achieve this. How would you configure the routing rules?
- A
Create a custom route with the network tag applied to the target VMs, set the destination IP range to 0.0.0.0/0, define the next hop as the custom instance, and assign it a higher priority (e.g., 800).
- B
Create a custom route with the network tag applied to the target VMs, set the destination IP range to 0.0.0.0/0, define the next hop as the custom instance, and assign it a lower priority (e.g., 1000).
- C
Create a custom route with the network tag applied to the target VMs, set the destination IP range to 0.0.0.0/0, define the next hop as the default internet gateway, and assign it a lower priority (e.g., 1000).
- D
Ensure the default route to the internet (0.0.0.0/0) has a higher priority (e.g., 800) than the custom route.
- E
Create a custom route with the network tag applied to the target VMs, set the destination IP range to 0.0.0.0/0, define the next hop as the custom instance, and assign it a higher priority (e.g., 100).
Show answer and explanation
Correct answers: A, E
Explanation
To route traffic from specific VMs through a custom next-hop instance, you must create a custom route with a network tag applied to the target VMs. The route must specify the destination IP range (e.g., 0.0.0.0/0 for all traffic), the custom next-hop instance, and a priority that is higher (lower numerical value) than the default route's priority. This ensures that the custom route takes precedence for the VMs with the specified network tag, while all other traffic continues to follow the default route.
- A. Correct.
This is correct because the route with a higher priority (lower numerical value) will take precedence for the VMs with the specified network tag, ensuring the traffic is routed through the custom next-hop instance.
- B. Incorrect.
This is incorrect because a lower priority (higher numerical value) would not take precedence over the default route, so the traffic from the tagged VMs would not be routed through the custom next-hop instance.
- C. Incorrect.
This is incorrect because directing traffic through the default internet gateway does not meet the requirement of routing HTTP traffic through the custom next-hop instance.
- D. Incorrect.
This is incorrect because the default route must have a lower priority (higher numerical value) than the custom route to ensure the custom route is used for the VMs with the network tag.
- E. Correct.
This is correct because assigning a higher priority (lower numerical value) ensures the custom route is used for the HTTP traffic from the VMs with the specified network tag.