Google Professional Cloud Network Engineer Question 632
Select 3Google Cloud PlatformYour organization needs a high-bandwidth, low-latency connection between its on-premises data center and Google Cloud. You decide to set up a Dedicated Interconnect connection. After provisioning the interconnect, you need to configure VLAN attachments to establish connectivity. Which of the following steps are required to properly configure the VLAN attachments?
- A
Specify a Cloud Router for the VLAN attachment.
- B
Assign an IP address range for the BGP session on the VLAN attachment.
- C
Configure the VLAN attachment to use Google's public IP ranges for BGP peering.
- D
Associate the VLAN attachment with a VPC network in your Google Cloud project.
- E
Enable encryption for the interconnect link by default.
Show answer and explanation
Correct answers: A, B, D
Explanation
To configure VLAN attachments for a Dedicated Interconnect connection, you need to specify a Cloud Router, assign IP ranges for BGP sessions, and associate the VLAN attachment with a VPC network. This setup ensures proper routing and connectivity between your on-premises network and Google Cloud. Public IP ranges and encryption are not relevant in this scenario, as Dedicated Interconnect is designed for private connectivity and does not include encryption by default.
- A. Correct.
Correct: A Cloud Router is required to manage the BGP session associated with the VLAN attachment.
- B. Correct.
Correct: You must assign an IP address range for the BGP session to establish routing between your on-premises network and Google Cloud.
- C. Incorrect.
Incorrect: VLAN attachments are used for private connectivity, not for public IP peering. Public IP ranges are irrelevant in this context.
- D. Correct.
Correct: The VLAN attachment must be associated with a specific VPC network to route traffic between the on-premises network and Google Cloud.
- E. Incorrect.
Incorrect: Encryption is not enabled by default for Dedicated Interconnect. If encryption is required, you must use an additional layer, such as IPsec over Cloud VPN.