Google Professional Cloud Network Engineer Question 689
Select 2Google Cloud PlatformYour organization has a hybrid cloud setup with an on-premises data center connected to Google Cloud through a Cloud VPN. The on-premises network uses the IP range 192.168.10.0/24. You have a requirement to advertise only a specific subset (192.168.10.128/25) of the on-premises IP range to a specific VPC network in Google Cloud. Additionally, you want to ensure that the VPC network learns only the 10.0.0.0/16 range from the on-premises network. How can you achieve this?
- A
Configure a custom advertised route in the on-premises router to advertise 192.168.10.128/25 to Google Cloud.
- B
Set a custom route advertisement in the Cloud VPN on Google Cloud to advertise 192.168.10.128/25 to the VPC network.
- C
Configure a custom learned route in the Cloud VPN to allow only the 10.0.0.0/16 range to be learned by the VPC network.
- D
Update the on-premises router to advertise only the 10.0.0.0/16 range to the Cloud VPN.
- E
Enable route filtering on the VPC network to accept only the 192.168.10.128/25 range.
Show answer and explanation
Correct answers: A, C
Explanation
To meet the requirements, you need to configure a custom advertised route in the on-premises router to control what is advertised to Google Cloud. Additionally, you must configure custom learned routes on the Cloud VPN to filter what the VPC network learns. This ensures the VPC network only learns the 10.0.0.0/16 range and the advertised route includes only the 192.168.10.128/25 subnet.
- A. Correct.
Correct. Configuring a custom advertised route on the on-premises router ensures that only the specific subset (192.168.10.128/25) is advertised to Google Cloud.
- B. Incorrect.
Incorrect. Route advertisement settings on Cloud VPN are not used to control what is advertised to Google Cloud; they must be configured on the on-premises router.
- C. Correct.
Correct. Configuring a custom learned route on the Cloud VPN ensures that only the 10.0.0.0/16 range is learned by the VPC network.
- D. Incorrect.
Incorrect. The on-premises router should not advertise the 10.0.0.0/16 range to Cloud VPN because the requirement is to filter learned routes on the Google Cloud side.
- E. Incorrect.
Incorrect. Enabling route filtering on the VPC network is not a valid approach in this scenario, as route filtering needs to be configured on the Cloud VPN or the on-premises router.