Google Professional Cloud Network Engineer Question 687
Select 2Google Cloud PlatformYou are designing a hybrid network setup where your on-premises network connects to Google Cloud through a Cloud VPN. Your on-premises router advertises specific routes to Google Cloud, and you want to ensure that only a subset of those routes are learned by Google Cloud. Additionally, you want to advertise a custom route for a specific subnet of your VPC back to the on-premises network. Which of the following steps are required to achieve this configuration?
- A
Create a custom route advertisement on the Cloud VPN tunnel to advertise the desired VPC subnet to the on-premises network.
- B
Use route filters to control which routes from your on-premises network are learned by the VPC.
- C
Enable dynamic routing for the VPC and allow all default routes to propagate without modification.
- D
Use a custom static route in the VPC to advertise the desired routes to your on-premises network.
- E
Configure route priority to ensure the custom advertised route has precedence over other routes.
Show answer and explanation
Correct answers: A, B
Explanation
To control the flow of routes in a hybrid network setup, you need to configure custom route advertisements on the Cloud VPN tunnel to advertise specific VPC subnets to the on-premises network. Additionally, route filters are required to control which routes from the on-premises network are learned by Google Cloud. The other options either do not address the scenario or are not relevant to custom advertised and learned routes.
- A. Correct.
Correct: To advertise a custom route from your VPC back to the on-premises network, you need to configure a custom route advertisement on the Cloud VPN tunnel.
- B. Correct.
Correct: Route filters allow you to control which routes from your on-premises network are learned by Google Cloud, ensuring that only the desired routes are accepted.
- C. Incorrect.
Incorrect: Enabling dynamic routing by itself does not provide route control or customization. Route propagation without filters would allow all routes to be learned, which does not meet the requirements.
- D. Incorrect.
Incorrect: Custom static routes in the VPC are not used for advertising routes to the on-premises network via Cloud VPN. Instead, route advertisements on the VPN tunnel handle this functionality.
- E. Incorrect.
Incorrect: Route priority is used to resolve conflicts between multiple routes in the routing table but does not apply to advertising or learning routes in this scenario.