Google Professional Cloud Network Engineer Question 663
Select 2Google Cloud PlatformYou are tasked with establishing a high-availability connection between your on-premises data center and Google Cloud using HA VPN. Which of the following steps must you take to ensure proper configuration of HA VPN?
- A
Create two Cloud VPN gateways in separate Google Cloud regions to ensure redundancy.
- B
Configure two VPN tunnels from the same Cloud VPN gateway to two different on-premises VPN devices.
- C
Assign a unique external IP address to each interface of the HA VPN gateway.
- D
Ensure the on-premises VPN devices support dynamic routing with BGP.
- E
Use a shared VPC network to host the HA VPN gateway.
Show answer and explanation
Correct answers: C, D
Explanation
To properly configure HA VPN, you need to ensure that each interface of the HA VPN gateway has a unique external IP address and that the on-premises devices support dynamic routing with BGP. This ensures redundancy and automatic failover between the two tunnels, which is a core feature of HA VPN. Other options either describe configurations that are not aligned with HA VPN design or are not mandatory for HA VPN setup.
- A. Incorrect.
Creating two Cloud VPN gateways in separate regions is not required for HA VPN. HA VPN achieves redundancy using two interfaces on a single gateway within the same region.
- B. Incorrect.
Configuring two tunnels from the same gateway does not align with the HA VPN architecture. HA VPN requires two tunnels, each associated with a different interface of the same gateway.
- C. Correct.
Each interface of the HA VPN gateway must have a unique external IP address to enable redundant and independent connections.
- D. Correct.
Dynamic routing with BGP is recommended and often required for HA VPN to automatically route traffic through the available tunnel.
- E. Incorrect.
While a shared VPC can be used with HA VPN, it is not a mandatory requirement for configuring HA VPN.