Google Professional Cloud Network Engineer Question 665
Select 3Google Cloud PlatformYou are tasked with setting up a Classic VPN between your Google Cloud Virtual Private Cloud (VPC) and an on-premises network. The on-premises network administrator has provided you with the necessary IP ranges and a shared key. The requirement is to ensure that the VPN connection is route-based. Which of the following steps should you take to configure the Classic VPN correctly?
- A
Create a Cloud VPN gateway in your VPC and specify a target VPN gateway on the on-premises side.
- B
Use static routes to manually define the IP ranges reachable through the VPN tunnel.
- C
Set up a VPN tunnel and select 'Policy-based routing' as the routing option.
- D
Set up a VPN tunnel and select 'Dynamic (BGP)' as the routing option.
- E
Configure Cloud Router for the VPN gateway to dynamically exchange routes with the on-premises network using BGP.
Show answer and explanation
Correct answers: A, D, E
Explanation
To configure a Classic VPN with a route-based setup, you must create a Cloud VPN gateway, configure the VPN tunnel with dynamic routing using BGP, and set up a Cloud Router to exchange routes dynamically between your Google Cloud VPC and the on-premises network. Policy-based routing is not applicable to route-based VPNs, and static routes are not necessary when using BGP for dynamic routing.
- A. Correct.
Correct: Creating a Cloud VPN gateway is a required initial step to establish the Classic VPN connection.
- B. Incorrect.
Incorrect: Static routes are not required for a route-based VPN connection, as dynamic routing using BGP is preferred for this configuration.
- C. Incorrect.
Incorrect: Policy-based routing is not used for route-based VPN connections. Route-based VPN connections require either static or dynamic routing, typically using BGP.
- D. Correct.
Correct: For a route-based VPN, you must configure the tunnel and select 'Dynamic (BGP)' as the routing option.
- E. Correct.
Correct: A Cloud Router is required to enable dynamic route exchange using BGP, which is essential for route-based VPN configurations.