Google Professional Cloud Network Engineer Question 62
Select 3Google Cloud PlatformYou are designing a Virtual Private Cloud (VPC) for a new application in Google Cloud. The application requires high availability across multiple regions, private connectivity to on-premises resources, and the ability to isolate resources by environment (e.g., dev, staging, prod). Which of the following design decisions should you make for this VPC?
- A
Create a single VPC with multiple subnets, each in a different region, and use private IP ranges for the subnets.
- B
Set up multiple VPCs, one for each environment, and use VPC peering to connect them.
- C
Use Shared VPC to centralize network management and enable resource sharing across projects.
- D
Deploy a Cloud VPN or Cloud Interconnect to establish private connectivity with on-premises resources.
- E
Create a single global VPC with public IP ranges to simplify routing.
Show answer and explanation
Correct answers: A, C, D
Explanation
The correct answers address the key requirements of the scenario: high availability, private connectivity, and resource isolation. A single VPC with multiple subnets in different regions provides global high availability. Shared VPC is ideal for managing environments while maintaining isolation. Additionally, Cloud VPN or Cloud Interconnect ensures secure, private connectivity to on-premises networks. Public IP ranges do not meet the private connectivity requirement, and VPC peering is less scalable compared to Shared VPC for this use case.
- A. Correct.
Correct: Creating a single VPC with multiple subnets in different regions aligns with requirements for high availability and leveraging Google Cloud's global VPC architecture. Using private IP ranges ensures secure communication.
- B. Incorrect.
Incorrect: While multiple VPCs may help isolate resources, VPC peering is not the best solution for large-scale network design due to scalability limitations. Instead, Shared VPC is a better approach for central management.
- C. Correct.
Correct: Shared VPC allows centralized network management and resource sharing across multiple projects while maintaining isolation for different environments, which is ideal for managing dev, staging, and prod environments.
- D. Correct.
Correct: Cloud VPN or Cloud Interconnect is necessary to establish private connectivity to on-premises resources, as required by the scenario.
- E. Incorrect.
Incorrect: Using public IP ranges for a global VPC is not secure and does not meet the requirement for private connectivity.