Google Professional Cloud Network Engineer Question 654
Select 2Google Cloud PlatformYou are designing a hybrid connectivity solution for your company that requires high availability for VPN tunnels while leveraging Cloud Interconnect for low-latency, high-bandwidth communication to Google Cloud. Which of the following steps are required to configure an HA VPN over Cloud Interconnect?
- A
Configure two Cloud Router instances in the same region and attach them to the HA VPN gateway.
- B
Create an HA VPN gateway with two interfaces and configure BGP sessions on each interface.
- C
Establish VLAN attachments for Dedicated Interconnect or Partner Interconnect to connect your on-premises network to Google Cloud.
- D
Use static routing for the VPN tunnels to ensure consistent routing paths.
- E
Configure a failover mechanism between the primary and secondary tunnels manually.
Show answer and explanation
Correct answers: B, C
Explanation
To configure HA VPN over Cloud Interconnect, you need to create an HA VPN gateway with two interfaces, each configured with BGP sessions to enable dynamic routing. This ensures high availability and failover. Additionally, VLAN attachments are required to establish the connection between Cloud Interconnect and your on-premises network. Static routing and manual failover mechanisms are not needed since HA VPN and BGP handle these automatically.
- A. Incorrect.
Incorrect: You only need one Cloud Router per region to manage dynamic routing for an HA VPN gateway. Using two Cloud Routers in the same region is unnecessary and not a required step.
- B. Correct.
Correct: HA VPN requires two interfaces to achieve high availability, and each interface should have a BGP session configured for dynamic routing.
- C. Correct.
Correct: VLAN attachments are necessary to connect Cloud Interconnect to your on-premises network, allowing traffic to flow between them.
- D. Incorrect.
Incorrect: HA VPN relies on dynamic routing (BGP), not static routing, to provide failover and high availability across tunnels.
- E. Incorrect.
Incorrect: HA VPN automatically manages failover between the primary and secondary tunnels. Manual configuration of failover mechanisms is not required.