Google Professional Cloud Network Engineer Question 267
Select 2Google Cloud PlatformYour organization has a hybrid cloud setup where on-premises systems communicate with workloads hosted in Google Cloud. Traffic from the on-premises systems is routed through a VPN to a Virtual Private Cloud (VPC) in Google Cloud. You have been tasked with ensuring that certain traffic from on-premises systems destined for a specific workload in the VPC uses a custom next-hop route to a third-party appliance for additional processing before reaching its destination. Which of the following steps are required to configure policy-based routing in Google Cloud for this scenario?
- A
Create a custom static route in the VPC with the next hop set to the third-party appliance.
- B
Define a firewall rule to block traffic that does not match the policy-based routing rules.
- C
Create a policy-based route in the VPC to match the traffic and specify the next hop.
- D
Enable the policy-based routing feature on the VPN gateway.
- E
Use a Google Cloud Load Balancer to redirect traffic to the third-party appliance.
Show answer and explanation
Correct answers: A, C
Explanation
To configure policy-based routing for this scenario, you must define a policy-based route that matches traffic from the on-premises systems destined for the workload and specify the next hop as the third-party appliance. Additionally, you need to create a custom static route so the VPC knows how to reach the next hop. Other options, such as firewall rules, VPN gateway configuration, or using a load balancer, are not relevant to the configuration of policy-based routing in this context.
- A. Correct.
Creating a custom static route with the next hop set to the third-party appliance is required to ensure traffic matching your criteria is forwarded to the appliance.
- B. Incorrect.
Firewall rules are not directly relevant to this scenario. Policy-based routing focuses on defining custom routing behavior rather than blocking or allowing traffic.
- C. Correct.
Creating a policy-based route is essential to define how traffic matching specific criteria should be forwarded to a custom next hop.
- D. Incorrect.
Policy-based routing does not require enabling a feature on the VPN gateway. It is configured at the VPC level using routes.
- E. Incorrect.
A Google Cloud Load Balancer is not used for policy-based routing. It is used for distributing traffic across multiple backend instances.