Google Professional Cloud Security Engineer Question 270
Single answerGoogle Cloud PlatformYour organization requires private connectivity between their on-premises data center and a Google Cloud VPC network, with a focus on high availability and encrypted traffic. The organization also requires the solution to support dynamic routing to handle changing network routes efficiently. Which solution meets these requirements?
- A
Use HA VPN with BGP configured for dynamic routing.
- B
Set up a single Cloud VPN tunnel with static routing.
- C
Deploy Cloud Interconnect with BGP for dynamic routing.
- D
Use Cloud VPN with IKEv1 for encryption and static routing.
Show answer and explanation
Correct answer: A
Explanation
To achieve private connectivity with encryption, high availability, and dynamic routing, HA VPN with BGP is the appropriate solution. HA VPN provides redundancy through two VPN tunnels per gateway and encryption via IPsec. The use of BGP ensures that dynamic routing requirements are met. Other options fail to meet all the specified requirements, either due to lack of high availability, dynamic routing, or encryption.
- A. Correct.
Using HA VPN with BGP enables high availability through redundant VPN tunnels and supports dynamic routing using the BGP protocol, which meets the requirements.
- B. Incorrect.
A single Cloud VPN tunnel does not provide high availability and only supports static routing, which does not meet the requirements for dynamic routing.
- C. Incorrect.
Cloud Interconnect provides private connectivity and supports dynamic routing with BGP, but it does not natively encrypt traffic, so it does not fully meet the encryption requirement.
- D. Incorrect.
Cloud VPN with IKEv1 provides encryption, but static routing does not meet the requirement for dynamic routing, and IKEv1 is less preferred compared to IKEv2 for security and flexibility.