Google Professional Cloud Security Engineer Question 275
Select 3Google Cloud PlatformYour organization is planning to establish a highly available and secure private connection between its on-premises data center and a Virtual Private Cloud (VPC) network in Google Cloud. The setup requires encrypted traffic and redundancy to ensure minimal downtime. Which combination of services should you configure to meet these requirements?
- A
Configure HA VPN with two tunnels between the on-premises data center and the VPC network
- B
Use a single Cloud VPN tunnel with encryption enabled
- C
Implement Dedicated Interconnect with VPN encryption configured on top
- D
Deploy Partner Interconnect without additional encryption as it inherently provides encryption
- E
Configure two Cloud VPN tunnels and use the BGP protocol for automatic failover
Show answer and explanation
Correct answers: A, C, E
Explanation
To establish highly available and secure private connectivity, redundancy and encryption are crucial. HA VPN provides encrypted traffic and high availability with two tunnels. Dedicated Interconnect offers high performance, and combining it with VPN adds encryption. Configuring two Cloud VPN tunnels with BGP ensures automatic failover in case of outages. These options meet the requirements, while using only a single VPN tunnel or relying on unencrypted Partner Interconnect does not fulfill the criteria for both redundancy and encryption.
- A. Correct.
Correct: HA VPN ensures high availability by establishing two tunnels for redundancy and encrypting traffic. This meets the requirements for encryption and minimal downtime.
- B. Incorrect.
Incorrect: A single Cloud VPN tunnel does not provide sufficient redundancy for high availability and could lead to downtime during outages.
- C. Correct.
Correct: Dedicated Interconnect can be combined with an additional VPN layer for encryption, providing a high-performance and secure setup with redundancy.
- D. Incorrect.
Incorrect: Partner Interconnect does not inherently provide encryption. Additional encryption mechanisms, such as VPN, are required for secure traffic.
- E. Correct.
Correct: Configuring two Cloud VPN tunnels with BGP enables automatic failover, ensuring high availability and encrypted traffic.