Google Professional Cloud Network Engineer Question 670
Select 2Google Cloud PlatformYou are configuring a Cloud Router to establish a BGP session with an on-premises router using a VPN tunnel. The on-premises router requires a specific advertisement of only certain subnetworks. How should you configure the Cloud Router to meet this requirement?
- A
Use custom route advertisements on the Cloud Router to specify the subnetworks to advertise.
- B
Enable the 'Export Custom Routes' option in the Cloud Router settings.
- C
Configure a specific set of routes using a route map and associate it with the BGP session.
- D
Set up a firewall rule to limit the IP ranges advertised by the Cloud Router.
- E
Use a policy-based VPN to enforce route advertisement restrictions.
Show answer and explanation
Correct answers: A, C
Explanation
To control which subnetworks are advertised to an on-premises router via BGP, you can use custom route advertisements or configure route maps on the Cloud Router. These methods offer precise control over which routes are shared. Other options, such as enabling 'Export Custom Routes' or using a policy-based VPN, do not address the requirement to restrict advertisement of specific subnetworks.
- A. Correct.
Correct. Custom route advertisements allow you to specify which subnetworks are advertised to the on-premises router via BGP.
- B. Incorrect.
Incorrect. The 'Export Custom Routes' option is used to export custom static routes to the Cloud Router, but it does not control which subnetworks are advertised.
- C. Correct.
Correct. A route map can be configured to filter or modify the routes advertised via BGP, ensuring only specific subnetworks are shared.
- D. Incorrect.
Incorrect. Firewall rules control traffic to and from resources but do not impact routes advertised by the Cloud Router.
- E. Incorrect.
Incorrect. Policy-based VPN is not used for controlling BGP route advertisements. Instead, it is used for routing traffic through a VPN tunnel based on policies.