Google Professional Cloud Network Engineer exam dumps

Google Professional Cloud Network Engineer practice question 665 of 790

Professional Cloud Network Engineer. Professional level, Google Cloud. Free question with the correct answer and a full explanation.

Google Professional Cloud Network Engineer Question 665

Select 3Google Cloud Platform

You are tasked with setting up a Classic VPN between your Google Cloud Virtual Private Cloud (VPC) and an on-premises network. The on-premises network administrator has provided you with the necessary IP ranges and a shared key. The requirement is to ensure that the VPN connection is route-based. Which of the following steps should you take to configure the Classic VPN correctly?

  1. A

    Create a Cloud VPN gateway in your VPC and specify a target VPN gateway on the on-premises side.

  2. B

    Use static routes to manually define the IP ranges reachable through the VPN tunnel.

  3. C

    Set up a VPN tunnel and select 'Policy-based routing' as the routing option.

  4. D

    Set up a VPN tunnel and select 'Dynamic (BGP)' as the routing option.

  5. E

    Configure Cloud Router for the VPN gateway to dynamically exchange routes with the on-premises network using BGP.

Show answer and explanation

Correct answers: A, D, E

Explanation

To configure a Classic VPN with a route-based setup, you must create a Cloud VPN gateway, configure the VPN tunnel with dynamic routing using BGP, and set up a Cloud Router to exchange routes dynamically between your Google Cloud VPC and the on-premises network. Policy-based routing is not applicable to route-based VPNs, and static routes are not necessary when using BGP for dynamic routing.

  • A. Correct.

    Correct: Creating a Cloud VPN gateway is a required initial step to establish the Classic VPN connection.

  • B. Incorrect.

    Incorrect: Static routes are not required for a route-based VPN connection, as dynamic routing using BGP is preferred for this configuration.

  • C. Incorrect.

    Incorrect: Policy-based routing is not used for route-based VPN connections. Route-based VPN connections require either static or dynamic routing, typically using BGP.

  • D. Correct.

    Correct: For a route-based VPN, you must configure the tunnel and select 'Dynamic (BGP)' as the routing option.

  • E. Correct.

    Correct: A Cloud Router is required to enable dynamic route exchange using BGP, which is essential for route-based VPN configurations.

Timed practice exam

Take a Google Professional Cloud Network Engineer practice test under exam conditions

60 questions in 120 minutes, drawn from this bank, with a score report and a per-question review when you finish.

Start timed exam