Google Professional Cloud Network Engineer Question 275
Single answerGoogle Cloud PlatformYou are designing the network topology for a global retail company that has multiple Virtual Private Clouds (VPCs) in Google Cloud. The company requires centralized control over network security policies, efficient connectivity between VPCs, and minimal operational overhead for managing inter-VPC communication. Which VPC topology would be the most appropriate for this use case?
- A
Star topology with a central VPC acting as the hub and other VPCs as spokes
- B
Fully meshed topology where all VPCs are directly peered with each other
- C
Flat topology where all VPCs operate independently without internal connectivity
- D
Hybrid topology with a mix of direct peering and a central hub-and-spoke model
Show answer and explanation
Correct answer: A
Explanation
The hub-and-spoke (star) topology is the most suitable choice for this use case because it centralizes network security and routing policies in the hub VPC, making it easier to manage and scale. It also reduces the number of direct peering connections needed between VPCs, simplifying the network architecture and minimizing operational overhead. Other options, such as a fully meshed topology or a flat topology, introduce unnecessary complexity or fail to meet the company's requirements.
- A. Correct.
This is the correct answer. A hub-and-spoke (star) topology provides centralized control over network security policies, simplifies connectivity management, and minimizes operational overhead by routing traffic through a central hub.
- B. Incorrect.
While a fully meshed topology enables direct connectivity between all VPCs, it becomes operationally complex as the number of VPCs increases, making it less suitable for large-scale environments.
- C. Incorrect.
A flat topology is not appropriate for this use case because it does not provide inter-VPC communication, which is a requirement for the company.
- D. Incorrect.
While a hybrid topology may work in certain scenarios, it introduces complexity and is not the most efficient or manageable solution for centralized control and inter-VPC communication.