Google Professional Cloud Security Engineer Question 272
Select 3Google Cloud PlatformYou are designing a hybrid cloud solution for your company to securely connect their on-premises data center to a Virtual Private Cloud (VPC) network in Google Cloud. The company requires high availability, low latency, and encrypted traffic for the connection. Which of the following options should you implement to meet these requirements?
- A
Use HA VPN with two tunnels in active/passive mode and configure IKEv2 for encryption.
- B
Deploy Dedicated Interconnect and use a customer-managed encryption solution to encrypt traffic.
- C
Use Partner Interconnect with a single VLAN attachment and rely on the default encryption provided by the connection.
- D
Implement HA VPN with BGP routing and two tunnels in active/active mode for redundancy and encrypted traffic.
- E
Leverage Dedicated Interconnect paired with IPsec VPN for encryption and redundancy.
Show answer and explanation
Correct answers: A, D, E
Explanation
To meet the requirements of high availability, low latency, and encrypted traffic, the best solutions are HA VPN in active/active mode, Dedicated Interconnect with customer-managed encryption (e.g., IPsec VPN), or combining Dedicated Interconnect with IPsec VPN for both encryption and redundancy. Partner Interconnect with a single VLAN attachment lacks sufficient redundancy and does not meet the encryption requirements out of the box.
- A. Correct.
This option is correct as HA VPN provides encrypted traffic using IPsec, and active/passive mode can be configured for availability. However, active/active is generally preferred for better redundancy.
- B. Incorrect.
This option is partially correct. Dedicated Interconnect provides low latency and high availability, but encryption is not provided by default. You would need to use a customer-managed encryption solution like IPsec VPN to ensure traffic is encrypted.
- C. Incorrect.
This option is incorrect because Partner Interconnect with a single VLAN attachment does not provide sufficient redundancy. Additionally, encryption is not enabled by default for Interconnect connections.
- D. Correct.
This option is correct because HA VPN in active/active mode with BGP routing provides redundancy and ensures traffic is encrypted using IPsec.
- E. Correct.
This option is correct because Dedicated Interconnect provides low latency and high availability, while pairing it with IPsec VPN ensures encrypted traffic and redundancy.