Google Professional Cloud Security Engineer Question 274
Single answerGoogle Cloud PlatformYour organization needs to establish a secure and highly available private connection between its on-premises data center and a Google Cloud VPC network. The connection must ensure data encryption in transit and meet the organization's high availability requirements. Which of the following Google Cloud solutions should you implement?
- A
Cloud VPN with a single tunnel
- B
Cloud Interconnect with IPsec encryption and redundant attachments
- C
HA VPN with dual tunnels across different regions
- D
Cloud Interconnect with a single Dedicated Interconnect attachment
Show answer and explanation
Correct answer: C
Explanation
To meet the organization's requirements for secure and highly available private connectivity, HA VPN with dual tunnels is the most suitable option. HA VPN provides redundancy by creating two tunnels in separate regions, ensuring high availability. It also uses IPsec to encrypt data in transit, fulfilling the encryption requirement. While Cloud Interconnect provides high bandwidth and private connectivity, it does not natively provide encryption and requires additional configurations for redundancy.
- A. Incorrect.
Cloud VPN with a single tunnel does not meet high availability requirements, as it lacks redundancy. Additionally, using a single tunnel is not resilient to regional failures.
- B. Incorrect.
Cloud Interconnect with IPsec encryption and redundant attachments is not a valid configuration because Cloud Interconnect does not natively support IPsec encryption. You would need to pair it with a separate encryption mechanism, which adds complexity.
- C. Correct.
HA VPN with dual tunnels across different regions meets both high availability and data encryption requirements. HA VPN provides redundant tunnels for failover and ensures encryption for data in transit using IPsec.
- D. Incorrect.
Cloud Interconnect with a single Dedicated Interconnect attachment does not meet high availability requirements because a single attachment is a potential single point of failure.