Google Professional Cloud Network Engineer Question 672
Select 3Google Cloud PlatformYou are tasked with setting up a Cloud Router to establish a dynamic VPN connection between your GCP Virtual Private Cloud (VPC) network and an on-premises network. The on-premises network administrator has requested that you configure BGP session parameters to exchange routes. Which of the following considerations must you take into account when configuring Cloud Router?
- A
The Cloud Router must be in the same region as the VPC subnets it is managing.
- B
Cloud Router requires the use of a static IP address for the BGP peer.
- C
You need to specify the ASN (Autonomous System Number) for both the Cloud Router and the on-premises BGP peer.
- D
Cloud Router advertises all subnets in the VPC by default unless custom advertisements are configured.
- E
Cloud Router is required only for static route-based VPNs.
Show answer and explanation
Correct answers: A, C, D
Explanation
To configure a Cloud Router for dynamic VPN with BGP, it is critical to place the router in the same region as the VPC subnets it manages. You also need to configure the BGP session with Autonomous System Numbers (ASNs) for both the Cloud Router and the on-premises peer. Additionally, Cloud Router advertises all subnets in the VPC by default, simplifying route sharing unless custom advertisements are needed. Static route-based VPNs do not use Cloud Router, so it is not relevant in that scenario.
- A. Correct.
Correct. A Cloud Router must be in the same region as the VPC subnets it is managing because it is region-specific.
- B. Incorrect.
Incorrect. Cloud Router does not require a static IP address for the BGP peer. It supports dynamic IP addressing as long as BGP is properly configured.
- C. Correct.
Correct. When configuring a BGP session, you must specify an ASN for both the Cloud Router and the on-premises BGP peer to establish the connection.
- D. Correct.
Correct. By default, Cloud Router advertises all subnets in the VPC. However, you can customize which routes are advertised to the peer.
- E. Incorrect.
Incorrect. Cloud Router is not required for static route-based VPNs; it is required for dynamic route-based VPNs using BGP.