Google Professional Cloud Network Engineer Question 269
Select 2Google Cloud PlatformYour organization has a hybrid cloud architecture with on-premises data centers connected to Google Cloud through a Cloud VPN. You need to configure Policy-Based Routing (PBR) to ensure that traffic from specific Virtual Machine (VM) instances in Google Cloud is routed through a secondary Cloud VPN tunnel, while all other traffic uses the default route. Which of the following steps are required to implement this setup?
- A
Create a route table entry in the VPC network with the desired next hop as the secondary Cloud VPN tunnel.
- B
Create and apply a firewall rule to allow egress traffic from the specific VM instances.
- C
Configure a Policy-Based Routing rule that matches the traffic from the specific VM instances and sets the next hop to the secondary Cloud VPN tunnel.
- D
Enable packet mirroring on the VPC network to verify the routing behavior.
- E
Associate the Policy-Based Routing rule with the VPC network.
Show answer and explanation
Correct answers: A, C
Explanation
To implement Policy-Based Routing to direct specific traffic through a secondary Cloud VPN tunnel, you need both a route table entry to define the next hop and a Policy-Based Routing rule to match the traffic and apply the routing decision. Firewall rules and packet mirroring are unrelated to this configuration, and Policy-Based Routing rules are not associated with the entire VPC network.
- A. Correct.
Correct: To direct traffic through the secondary Cloud VPN tunnel, you need to create a route table entry that specifies the next hop as the desired secondary VPN tunnel.
- B. Incorrect.
Incorrect: Firewall rules control traffic permissions but are not directly involved in routing or Policy-Based Routing configuration.
- C. Correct.
Correct: Policy-Based Routing rules match specific traffic and determine its next hop. This is essential for implementing the desired routing behavior.
- D. Incorrect.
Incorrect: Packet mirroring is used for traffic analysis and debugging, not for routing configuration.
- E. Incorrect.
Incorrect: Policy-Based Routing rules are applied to individual VMs or subnets, not the entire VPC network.