Google Professional Cloud Network Engineer exam dumps

Google Professional Cloud Network Engineer practice question 669 of 790

Professional Cloud Network Engineer. Professional level, Google Cloud. Free question with the correct answer and a full explanation.

Google Professional Cloud Network Engineer Question 669

Select 3Google Cloud Platform

Your organization has a legacy on-premises data center that requires a VPN connection to Google Cloud for secure communication. The organization wants to use Classic VPN with a policy-based configuration. Which of the following steps are required to properly configure a policy-based VPN on Google Cloud?

  1. A

    Define a custom static route to specify the traffic selector.

  2. B

    Create a VPN gateway and configure a tunnel using a shared secret for authentication.

  3. C

    Set up BGP peering to enable dynamic routing between the VPN endpoints.

  4. D

    Specify IP ranges for the on-premises and Google Cloud subnets in the traffic selectors.

  5. E

    Enable the policy-based option in the VPN tunnel configuration.

Show answer and explanation

Correct answers: B, D, E

Explanation

Policy-based VPNs on Google Cloud require configuring a VPN gateway, defining traffic selectors for the source and destination IP ranges, and enabling the policy-based option in the tunnel configuration. These steps ensure that the VPN only processes traffic matching the specified selectors, making it suitable for environments with static traffic patterns.

  • A. Incorrect.

    Static routes are not required for policy-based VPNs because traffic selectors define the traffic to be encrypted and sent through the VPN.

  • B. Correct.

    Creating a VPN gateway and configuring a tunnel with a shared secret is a mandatory step for setting up any Classic VPN connection on Google Cloud.

  • C. Incorrect.

    BGP peering is used in route-based VPNs to exchange routing information dynamically. Policy-based VPNs, however, rely on predefined traffic selectors.

  • D. Correct.

    Traffic selectors specify the source and destination IP ranges for the traffic that should traverse the VPN tunnel. This is a critical step in policy-based VPN configuration.

  • E. Correct.

    Policy-based VPN requires enabling the policy-based option in the tunnel configuration to ensure that traffic selectors, rather than routing protocols, control the traffic flow.

Timed practice exam

Take a Google Professional Cloud Network Engineer practice test under exam conditions

60 questions in 120 minutes, drawn from this bank, with a score report and a per-question review when you finish.

Start timed exam

More Google Professional Cloud Network Engineer practice questions

  1. 670.You are configuring a Cloud Router to establish a BGP session with an on-premises router using a...
  2. 671.Your organization is setting up a hybrid cloud architecture and needs to establish a BGP (Border...
  3. 672.You are tasked with setting up a Cloud Router to establish a dynamic VPN connection between your...
  4. 673.Your organization has a hybrid cloud setup with an on-premises data center connected to Google...
  5. 674.You are configuring a Cloud Router to establish a BGP session with your on-premises router. During...
Back to the Google Professional Cloud Network Engineer exam dumps