Google Professional Cloud Network Engineer Question 648
Select 3Google Cloud PlatformYou are a network engineer responsible for securing communication between two on-premises locations connected through a Dedicated Interconnect. Your organization has mandated the use of MACsec to ensure encrypted communication at Layer 2. What prerequisites must be met to set up and enable MACsec for the Dedicated Interconnect?
- A
The Dedicated Interconnect connection must use a 10 Gbps or 100 Gbps link.
- B
The MACsec feature must be enabled on the Cloud Interconnect VLAN attachments.
- C
The on-premises devices must support IEEE 802.1AE (MACsec) standards.
- D
The connection must use Partner Interconnect instead of Dedicated Interconnect.
- E
The Cloud Interconnect location must support MACsec.
Show answer and explanation
Correct answers: A, C, E
Explanation
To enable MACsec for a Dedicated Interconnect, there are specific prerequisites that must be satisfied: the connection must use 10 Gbps or 100 Gbps links, the on-premises devices must support the MACsec standard (IEEE 802.1AE), and the Cloud Interconnect location must support MACsec. MACsec is only available for Dedicated Interconnect and not for Partner Interconnect. Configuring MACsec ensures secure communication by encrypting traffic at Layer 2.
- A. Correct.
Correct: MACsec can only be enabled on Dedicated Interconnect connections using 10 Gbps or 100 Gbps links. Lower bandwidth connections do not support MACsec.
- B. Incorrect.
Incorrect: MACsec is not configured on VLAN attachments. Instead, it is configured at the physical layer between the devices connected by the Dedicated Interconnect.
- C. Correct.
Correct: The on-premises devices must support the IEEE 802.1AE MACsec standard to establish secure encrypted communication.
- D. Incorrect.
Incorrect: Partner Interconnect does not support MACsec. MACsec is only available for Dedicated Interconnect.
- E. Correct.
Correct: The Cloud Interconnect location used for the connection must explicitly support MACsec. Not all locations are compatible.