Google Professional Cloud Network Engineer Question 651
Select 3Google Cloud PlatformYou are tasked with creating a highly available VPN connection between your on-premises network and Google Cloud using HA VPN over Cloud Interconnect. Which of the following steps must you include to configure this setup correctly?
- A
Configure two VPN gateways on Google Cloud, each with at least one external IP address.
- B
Set up two BGP sessions per tunnel, with one session for each direction of traffic.
- C
Deploy two separate VLAN attachments (interconnect attachments) for redundancy.
- D
Ensure that the Cloud Interconnect is provisioned with a Dedicated Interconnect or Partner Interconnect.
- E
Enable dynamic routing on the Cloud Router for automatic route advertisement.
Show answer and explanation
Correct answers: C, D, E
Explanation
To configure HA VPN over Cloud Interconnect, redundancy and dynamic routing are critical. Two separate VLAN attachments ensure that there is no single point of failure in the physical connection. Cloud Interconnect (Dedicated or Partner) is necessary to establish connectivity to Google Cloud, and a Cloud Router with dynamic routing ensures that routes are exchanged correctly. The other options are either unnecessary for this specific configuration or do not align with best practices for HA VPN setups.
- A. Incorrect.
Incorrect. With HA VPN, Google Cloud automatically provides two IP addresses for each gateway. You don't need to manually configure two VPN gateways.
- B. Incorrect.
Incorrect. BGP sessions are configured at the Cloud Router level, but you only need one BGP session per direction per tunnel, not two.
- C. Correct.
Correct. Using two VLAN attachments ensures redundancy, which is a key requirement for a highly available setup.
- D. Correct.
Correct. Cloud Interconnect (Dedicated or Partner) is required to establish a physical connection to Google's network for HA VPN over Cloud Interconnect.
- E. Correct.
Correct. Enabling dynamic routing allows the Cloud Router to advertise routes to your on-premises network, ensuring proper traffic flow and failover.