Google Professional Cloud Network Engineer Question 685
Select 2Google Cloud PlatformYou are managing a hybrid cloud environment with a VPN tunnel connecting your on-premises network to your Google Cloud VPC. Your organization wants the VPC to advertise a custom static route (192.168.100.0/24) to the on-premises network while also ensuring that only specific subnets from your on-premises network (10.10.0.0/16) are learned by the VPC over the VPN. How can you achieve this configuration?
- A
Create a custom static route in the VPC for 192.168.100.0/24 and configure it as an advertised route in the Cloud VPN settings.
- B
Use a route filter to allow only the 10.10.0.0/16 subnet as part of the custom learned routes in the Cloud VPN settings.
- C
Add the 192.168.100.0/24 route as a dynamic route in the VPC to be automatically advertised to the on-premises network.
- D
Disable route advertisement in the Cloud VPN settings and manually configure all routes on the on-premises router.
- E
Create a custom dynamic route advertisement for 10.10.0.0/16 to ensure it is advertised from the on-premises network to the VPC.
Show answer and explanation
Correct answers: A, B
Explanation
To achieve the desired configuration, you must create a custom advertised route for 192.168.100.0/24 in the VPC and configure it in the Cloud VPN settings. Additionally, to ensure that only specific subnets from the on-premises network (10.10.0.0/16) are learned by the VPC, you use route filters to control which routes are accepted. This ensures proper route configuration while maintaining control over the routes being advertised and learned.
- A. Correct.
Correct. To advertise a custom route like 192.168.100.0/24, you need to create a static route in the VPC and configure it as an advertised route in the Cloud VPN settings.
- B. Correct.
Correct. Route filters allow you to control which routes are learned by the VPC. In this case, you can use a filter to allow only the 10.10.0.0/16 subnet.
- C. Incorrect.
Incorrect. Dynamic routes are not automatically advertised to the on-premises network; you need to explicitly configure them as advertised routes.
- D. Incorrect.
Incorrect. Disabling route advertisement would prevent any routes from being shared, which does not meet the requirements of this scenario.
- E. Incorrect.
Incorrect. Creating a custom dynamic route advertisement for 10.10.0.0/16 is not relevant because the on-premises network is the source of this route, not the VPC.