Google Professional Cloud Network Engineer Question 643
Select 4Google Cloud PlatformYour company has multiple applications hosted in Google Cloud and AWS. To ensure low-latency communication between the two clouds, you have been tasked with setting up a Cross-Cloud Interconnect connection from Google Cloud to AWS. After establishing the Dedicated Interconnect, you need to configure VLAN attachments to route traffic between the two environments. Which steps should you take to successfully configure the VLAN attachments and establish connectivity?
- A
Create a VLAN attachment in Google Cloud and associate it with the Interconnect.
- B
Set up a Cloud Router in Google Cloud to manage dynamic routing for the VLAN attachment.
- C
Create a VPN tunnel between AWS and Google Cloud to enable connectivity over the VLAN attachment.
- D
Configure BGP on the Cloud Router and AWS router to exchange routing information.
- E
Configure firewall rules to allow traffic between the Google Cloud and AWS subnets over the VLAN attachment.
- F
Enable VPC Network Peering between AWS and Google Cloud to complete the setup.
Show answer and explanation
Correct answers: A, B, D, E
Explanation
To establish a Cross-Cloud Interconnect connection between Google Cloud and AWS, you must create a VLAN attachment to bind your VPC network to the Interconnect. A Cloud Router must also be configured to manage dynamic routing using BGP. BGP enables the exchange of routing information between Google Cloud and AWS routers. Additionally, appropriate firewall rules must be created to allow traffic between the two environments. VPN tunnels or VPC Network Peering are not required or relevant in this setup, as the Interconnect itself handles the connectivity.
- A. Correct.
Correct. A VLAN attachment (also known as an interconnect attachment) is required to connect your VPC network to the Interconnect. This step is essential for setting up the connectivity.
- B. Correct.
Correct. A Cloud Router is necessary to handle dynamic routing using BGP for the VLAN attachment. This ensures that routes between Google Cloud and AWS are dynamically exchanged.
- C. Incorrect.
Incorrect. A VPN tunnel is not required when you're using a Direct Interconnect with VLAN attachments. The VLAN attachment itself provides the connectivity.
- D. Correct.
Correct. Configuring BGP (Border Gateway Protocol) is critical for exchanging routing information between Google Cloud's Cloud Router and AWS's router to establish connectivity.
- E. Correct.
Correct. Firewall rules must be configured to allow traffic between subnets in Google Cloud and AWS. Without this, communication would be blocked.
- F. Incorrect.
Incorrect. VPC Network Peering is not applicable in this context as it is used for connecting two VPC networks within Google Cloud, not for cross-cloud connections.