Google Professional Cloud Network Engineer Question 704
Single answerGoogle Cloud PlatformYour organization needs to establish a secure and reliable site-to-site data transfer between its on-premises data center and Google Cloud. The requirements include encryption for data in transit, low-latency communication, and support for dynamic routing. Which solution should you implement?
- A
Create a VPN tunnel using Cloud VPN (High Availability) and BGP for dynamic routing.
- B
Set up a Dedicated Interconnect and configure static routes.
- C
Use Cloud VPN (Classic) with static routing.
- D
Deploy a Partner Interconnect with encryption configured at the application level.
Show answer and explanation
Correct answer: A
Explanation
To meet the requirements of encryption for data in transit, low latency, and dynamic routing, Cloud VPN (High Availability) is the best solution. It provides secure communication via encrypted VPN tunnels and supports dynamic routing using BGP, making it suitable for site-to-site data transfer scenarios that require flexibility and reliability. Other options, such as Dedicated Interconnect or Partner Interconnect, do not inherently provide encryption, while Cloud VPN (Classic) lacks support for dynamic routing.
- A. Correct.
This is the correct option. Cloud VPN (High Availability) supports encryption for data in transit, dynamic routing through BGP, and provides a reliable solution for site-to-site connectivity.
- B. Incorrect.
While Dedicated Interconnect provides low latency and high bandwidth, it does not inherently provide encryption for data in transit. You would need to implement encryption at the application layer.
- C. Incorrect.
Cloud VPN (Classic) supports static routing but does not meet the requirement for dynamic routing using BGP. Additionally, it is considered less reliable compared to the High Availability option.
- D. Incorrect.
Partner Interconnect provides a connection via a service provider, but it does not provide encryption for data in transit. You would need to handle encryption separately, which may not meet the organization's requirements.