Google Professional Cloud Network Engineer Question 708
Select 4Google Cloud PlatformYou are designing a hybrid cloud network for your organization and need to deploy Router Appliances (RAs) in Google Cloud to enable VPN connectivity with your on-premises network. Which of the following steps must you take to correctly deploy the RAs and ensure traffic routing works as expected?
- A
Create instances for the Router Appliances and attach a network interface to each of them in the appropriate subnet.
- B
Configure static routes in the VPC network to forward specific traffic to the Router Appliances.
- C
Enable IP forwarding on the Router Appliance instances to allow proper packet processing.
- D
Configure firewall rules to allow incoming and outgoing traffic to and from the Router Appliance instances.
- E
Assign external IP addresses to the Router Appliances to ensure they can communicate with on-premises devices.
Show answer and explanation
Correct answers: A, B, C, D
Explanation
Router Appliances in Google Cloud act as virtual devices to handle network traffic, often used in hybrid cloud scenarios. Proper deployment requires creating instances with network interfaces in the correct subnet, configuring static routes to direct traffic, enabling IP forwarding for packet processing, and setting up firewall rules to allow communication. External IPs are not required unless external connectivity is needed.
- A. Correct.
Correct. Each Router Appliance requires an instance with a network interface in the appropriate subnet for the VPC network.
- B. Correct.
Correct. Static routes are necessary to direct traffic from the VPC to the Router Appliance instances for processing.
- C. Correct.
Correct. IP forwarding must be enabled on the Router Appliance instances to allow them to handle and forward packets properly.
- D. Correct.
Correct. Firewall rules are required to permit traffic to and from the Router Appliances, ensuring communication is not blocked.
- E. Incorrect.
Incorrect. Assigning external IP addresses is not mandatory unless external access is required. Internal IPs are sufficient for VPN connectivity.