Google Professional Cloud Network Engineer Question 664
Select 2Google Cloud PlatformYour organization needs to configure an HA VPN between your on-premises data center and Google Cloud. During the setup, you are required to ensure high availability and fault tolerance. Which of the following steps must you take to correctly configure HA VPN in Google Cloud?
- A
Create two Cloud VPN gateways in Google Cloud, one for each tunnel.
- B
Attach two VPN tunnels to a single Cloud VPN gateway, each using a different interface.
- C
Configure a unique BGP session for each VPN tunnel between the on-premises router and Google Cloud.
- D
Set up two external IP addresses on the Cloud VPN gateway for redundancy.
- E
Ensure the on-premises router is configured with two separate IP addresses for each VPN tunnel.
Show answer and explanation
Correct answers: B, C
Explanation
To configure HA VPN in Google Cloud, you must use a single Cloud VPN gateway with two interfaces, each supporting a separate VPN tunnel. These tunnels provide redundancy by using unique BGP sessions for routing. Google Cloud automatically assigns the required external IP addresses, and the on-premises router does not require separate IP addresses for each tunnel. This setup ensures high availability and fault tolerance for your VPN connection.
- A. Incorrect.
This is incorrect. HA VPN in Google Cloud uses a single Cloud VPN gateway with two interfaces, not two separate Cloud VPN gateways.
- B. Correct.
This is correct. HA VPN in Google Cloud requires two tunnels attached to a single Cloud VPN gateway, with each tunnel using a different interface (interface 0 and interface 1) for redundancy.
- C. Correct.
This is correct. Each VPN tunnel must have its own unique BGP session to ensure proper routing and failover functionality.
- D. Incorrect.
This is incorrect. A Cloud VPN gateway has two pre-configured external IP addresses (one for each interface) automatically assigned by Google Cloud. You do not need to manually set them up.
- E. Incorrect.
This is incorrect. The on-premises router typically uses a single IP address for communication, while the Cloud VPN gateway handles redundancy via its two interfaces.