Google Professional Cloud Network Engineer Question 702
Single answerGoogle Cloud PlatformYour organization needs to establish a secure and reliable site-to-site data transfer between its on-premises data center and Google Cloud. The data transfer must use encryption, support dynamic routing, and avoid public internet exposure. Which solution should you implement?
- A
Set up a Cloud VPN with dynamic routing enabled via BGP
- B
Use Cloud Interconnect with a private VIF for direct connectivity
- C
Configure a public Cloud NAT gateway to route the traffic securely
- D
Deploy a Cloud CDN instance to facilitate data transfer
Show answer and explanation
Correct answer: A
Explanation
To establish a secure and reliable site-to-site data transfer that avoids public internet exposure, supports dynamic routing, and provides encryption, Cloud VPN with dynamic routing enabled via BGP is the most appropriate choice. Cloud VPN ensures data is encrypted in transit, uses BGP for dynamic routing, and operates over a secure tunnel, meeting the requirements of the scenario. Other options either do not provide encryption, are not designed for site-to-site transfers, or do not meet the dynamic routing requirement.
- A. Correct.
This is the correct choice. Cloud VPN with dynamic routing enabled via BGP provides encrypted communication, supports dynamic routing, and avoids public internet exposure, fulfilling all requirements.
- B. Incorrect.
While Cloud Interconnect provides direct connectivity and avoids public internet, it does not inherently provide encryption. Additional mechanisms would be necessary to encrypt the data transfer.
- C. Incorrect.
Cloud NAT is used for enabling private instances to access the internet securely, but it does not establish secure, site-to-site communication or support encryption for such transfers.
- D. Incorrect.
Cloud CDN is designed to cache and deliver web content to users and is not suitable for secure site-to-site data transfers.