Google Professional Cloud Network Engineer Question 700
Single answerGoogle Cloud PlatformYour company needs to establish a secure site-to-site data transfer between its on-premises environment and Google Cloud. The solution must ensure high availability and scalability, while minimizing latency and operational overhead. Which of the following options would best meet these requirements?
- A
Use a Cloud VPN with dynamic routing configured via Cloud Router.
- B
Set up a Dedicated Interconnect with redundant connections.
- C
Configure a static Cloud VPN tunnel using pre-shared keys.
- D
Use a partner Interconnect provided by a third-party network service provider.
Show answer and explanation
Correct answer: A
Explanation
The best option to establish secure, highly available, and scalable site-to-site data transfer while minimizing latency and operational overhead is to use a Cloud VPN with dynamic routing via Cloud Router. This setup enables dynamic route advertisements using BGP, ensuring smooth failover and easier management compared to static VPNs. While Dedicated Interconnect and partner Interconnect are viable for certain use cases, they are more suited to high-bandwidth requirements and come with different operational considerations.
- A. Correct.
This option is correct because a Cloud VPN with dynamic routing via Cloud Router ensures secure, highly available site-to-site connectivity with minimal operational overhead by leveraging dynamic routing protocols like BGP.
- B. Incorrect.
While a Dedicated Interconnect provides low-latency, high-bandwidth connectivity, it is more appropriate for high-volume data transfer and not necessarily the best option for general site-to-site transfer with minimal operational overhead.
- C. Incorrect.
A static Cloud VPN tunnel can establish secure connectivity but lacks scalability and requires more manual configuration, which increases operational overhead.
- D. Incorrect.
A partner Interconnect is an alternative to Dedicated Interconnect but is better suited for organizations that need high bandwidth and already have an existing relationship with a third-party provider. It does not necessarily minimize operational overhead.