Google Professional Cloud Network Engineer Question 650
Select 3Google Cloud PlatformYou are tasked with configuring a highly available VPN (HA VPN) over Cloud Interconnect for a hybrid topology. Your organization requires a reliable, redundant connection between your on-premises data center and Google Cloud. Which actions should you take to ensure proper configuration of HA VPN with Cloud Interconnect?
- A
Create two HA VPN gateways in Google Cloud, each with two interfaces, and attach them to different VLAN attachments on Cloud Interconnect.
- B
Establish two VLAN attachments on Cloud Interconnect, each associated with a unique Cloud Router.
- C
Configure BGP sessions on each Cloud Router to advertise the same set of prefixes to the on-premises router.
- D
Deploy a single HA VPN gateway and connect it to a single VLAN attachment for simplicity.
- E
Ensure that on-premises routers are configured with multiple BGP peers to establish redundancy with Google Cloud.
Show answer and explanation
Correct answers: B, C, E
Explanation
To configure an HA VPN over Cloud Interconnect, you need to ensure redundancy at every layer. This includes using two VLAN attachments on Cloud Interconnect, each with a unique Cloud Router, to provide physical and logical failover. Configuring BGP sessions to advertise consistent prefixes and ensuring on-premises routers have multiple BGP peers further enhances redundancy and reliability. These steps collectively ensure a highly available hybrid connectivity solution.
- A. Incorrect.
This option is incorrect because only one HA VPN gateway is required for redundancy, and each gateway can have two interfaces for failover. You do not need two separate HA VPN gateways.
- B. Correct.
This is correct because using two VLAN attachments on Cloud Interconnect, each associated with a unique Cloud Router, ensures physical and logical redundancy for HA VPN.
- C. Correct.
This is correct because configuring BGP sessions on each Cloud Router to advertise the same prefixes ensures that failover between connections works seamlessly, maintaining route consistency.
- D. Incorrect.
This option is incorrect because deploying a single HA VPN gateway and VLAN attachment does not provide sufficient redundancy for a highly available solution.
- E. Correct.
This is correct because on-premises routers need to be configured with multiple BGP peers to establish redundancy with Google Cloud, ensuring the connection remains active during a failure.