Google Professional Cloud Network Engineer Question 61
Single answerGoogle Cloud PlatformYour company is designing a multi-region application in Google Cloud that requires secure communication between services in different regions. The application consists of several VMs, managed instance groups, and Cloud SQL instances. How should you design the Virtual Private Cloud (VPC) networks to ensure minimal latency, high availability, and secure communication across regions?
- A
Create a single VPC network spanning all regions and use subnets for each region to organize resources.
- B
Create separate VPC networks for each region and use VPC Network Peering to enable communication between them.
- C
Use Shared VPC to host the resources in different regions under a single host project.
- D
Create individual VPC networks for each region and use Cloud VPN to connect them.
Show answer and explanation
Correct answer: A
Explanation
For a multi-region application, using a single VPC network with subnets for each region ensures minimal latency, high availability, and secure communication. Subnets within the same VPC network automatically communicate over Google's global backbone without requiring external configurations like VPC Network Peering or Cloud VPN. This approach simplifies management and maintains performance.
- A. Correct.
Using a single VPC network with subnets for each region is the best option for minimal latency and high availability. Subnets in a single VPC network can communicate securely without additional configuration, and traffic stays on Google's high-performance global network.
- B. Incorrect.
While VPC Network Peering can enable communication between separate VPC networks, it introduces additional complexity and is unnecessary in this scenario since all resources can be hosted in a single VPC network.
- C. Incorrect.
Shared VPC is useful for centralizing network management across projects but is not required in this scenario because the question does not specify a multi-project setup.
- D. Incorrect.
Using Cloud VPN to connect individual VPC networks across regions would introduce higher latency and additional costs, making it a less efficient option for this use case.